$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66869cdf-ea3e-3d60-9d06-a0ff1e97a3fc.roa File: 66869cdf-ea3e-3d60-9d06-a0ff1e97a3fc.roa (raw, json) Hash identifier: bxrQpFzS8AZaAl/PJGlV1QAK9F6+ujgB2W364eC3daI= Subject key identifier: 84:64:3E:F7:04:D3:51:AE:6A:42:AF:6C:E8:25:01:AA:17:EC:D8:44 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858493C0934BC164EBDE4B477B700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66869cdf-ea3e-3d60-9d06-a0ff1e97a3fc.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 7342 IP address blocks: 2620:74:65::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:34:bc:16:4e:bd:e4:b4:77:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=1ec43c56-53ce-499e-aef0-436ca18818eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cd:82:c3:50:a2:9a:be:2d:1a:de:ba:5e:a9: 0c:c0:48:dd:29:e0:f3:6d:60:ac:90:10:a0:f1:80: 5c:ff:76:e1:e9:a9:e2:1e:16:28:08:5e:2f:f4:19: 84:de:43:01:63:17:4f:81:ad:0e:48:83:21:1a:bb: b3:cc:d0:94:a4:76:ec:0d:6f:78:f7:05:83:4f:a2: e8:70:8a:24:08:05:54:ae:9c:fe:7a:a8:86:33:bc: 48:f9:00:0c:88:80:ae:b1:f9:33:0b:fd:51:bb:14: 75:65:2d:47:b9:aa:1b:19:9d:13:73:d8:9c:d4:e8: e1:ad:2c:15:13:c8:09:79:0f:45:10:4f:91:5b:e1: e2:bd:a0:c5:87:45:ca:b1:0e:5e:99:e2:75:0c:57: 22:bd:2e:f0:db:61:d4:b6:08:ac:b2:08:40:f5:5e: 74:71:1b:8c:ed:43:d4:c4:99:80:4f:0c:d0:e8:e7: a6:cb:83:aa:fe:39:3f:85:d7:e4:9c:33:0f:22:e8: fc:c5:36:71:73:b4:63:07:e5:51:2c:a9:5c:bf:40: 7d:71:cf:30:3a:9c:40:b8:e6:eb:d3:c5:00:6c:a9: 22:31:b1:66:50:04:e8:59:77:7d:2e:ab:9b:c8:da: 67:08:f0:8e:e5:c5:3f:37:f5:06:30:79:46:3e:bd: 9f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:64:3E:F7:04:D3:51:AE:6A:42:AF:6C:E8:25:01:AA:17:EC:D8:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66869cdf-ea3e-3d60-9d06-a0ff1e97a3fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:65::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:f9:c8:62:72:29:b5:a2:01:d3:1d:be:10:5c:b6:cc:3a:81: c2:7d:1a:7e:08:a8:c4:95:a8:6e:7c:75:9e:fe:96:e2:67:79: e5:bb:69:e7:45:29:13:bc:69:e0:ce:9d:bd:4d:a7:03:22:11: b3:26:b0:85:75:a9:8d:17:7c:c2:0f:97:d7:3f:2d:87:6e:77: 5f:14:4e:b4:49:92:09:87:db:13:3a:02:cf:e3:30:30:33:4e: b2:be:0a:94:56:e3:5e:9b:5d:2a:71:ff:bd:53:16:d1:a2:22: 3a:a8:ef:9b:db:fe:83:77:30:92:0b:de:7d:d5:b4:f8:24:b0: 28:a1:77:86:32:7d:b7:20:54:80:35:74:df:4a:24:d4:fc:7e: 4c:af:ec:18:3e:71:c7:29:9f:ce:ed:82:53:85:10:57:0d:f4: 1f:86:d3:af:cc:23:4e:17:bb:50:72:0b:61:5c:31:ef:3f:e5: 9b:c4:58:5f:37:b1:36:97:c1:94:3c:56:cf:6d:58:1c:67:29: 51:c5:5e:c8:d5:9d:b8:63:03:fe:1f:39:ac:8b:23:c1:84:88: 4f:7f:3f:72:5f:e7:98:90:b8:b6:d2:ca:90:02:aa:67:8d:7e: 35:6f:e9:47:b0:dc:77:11:bc:89:be:06:1f:4c:21:bf:80:be: 8b:83:7c:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk8CTS8Fk695LR3twAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk MWVjNDNjNTYtNTNjZS00OTllLWFlZjAtNDM2Y2ExODgxOGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM2Cw1Cimr4tGt66XqkMwEjdKeDzbWCskBCg 8YBc/3bh6aniHhYoCF4v9BmE3kMBYxdPga0OSIMhGruzzNCUpHbsDW949wWDT6Lo cIokCAVUrpz+eqiGM7xI+QAMiICusfkzC/1RuxR1ZS1HuaobGZ0Tc9ic1OjhrSwV E8gJeQ9FEE+RW+HivaDFh0XKsQ5emeJ1DFcivS7w22HUtgissghA9V50cRuM7UPU xJmATwzQ6Oemy4Oq/jk/hdfknDMPIuj8xTZxc7RjB+VRLKlcv0B9cc8wOpxAuObr 08UAbKkiMbFmUAToWXd9LqubyNpnCPCO5cU/N/UGMHlGPr2fswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIRkPvcE01GuakKvbOglAaoX7NhEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjY4NjljZGYtZWEzZS0z ZDYwLTlkMDYtYTBmZjFlOTdhM2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFb5yGJyKbWiAdMdvhBctsw6gcJ9Gn4IqMSVqG58dZ7+luJneeW7 aedFKRO8aeDOnb1NpwMiEbMmsIV1qY0XfMIPl9c/LYdud18UTrRJkgmH2xM6As/j MDAzTrK+CpRW416bXSpx/71TFtGiIjqo75vb/oN3MJIL3n3VtPgksCihd4Yyfbcg VIA1dN9KJNT8fkyv7Bg+cccpn87tglOFEFcN9B+G06/MI04Xu1ByC2FcMe8/5ZvE WF83sTaXwZQ8Vs9tWBxnKVHFXsjVnbhjA/4fOayLI8GEiE9/P3Jf55iQuLbSypAC qmeNfjVv6Uew3HcRvIm+Bh9MIb+AvouDfEA= -----END CERTIFICATE-----Generated at Mon Apr 28 06:12:59 2025 by rpki-client