$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6ffe2313-74bf-345a-930e-f6ff8c36bac7.roa File: 6ffe2313-74bf-345a-930e-f6ff8c36bac7.roa (raw, json) Hash identifier: K1vPAclFBmsJeDmjDPq6kfUCvBmoswB1VfFXGBpj1kc= Subject key identifier: 07:6C:22:39:E4:43:F7:0D:27:EC:04:CC:5A:D1:B0:09:F9:E4:E6:31 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C220247B24D256AE482FF0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6ffe2313-74bf-345a-930e-f6ff8c36bac7.roa Signing time: Tue 15 Apr 2025 12:34:54 +0000 ROA not before: Tue 15 Apr 2025 12:34:54 +0000 ROA not after: Mon 14 Jul 2025 12:34:54 +0000 asID: 397196 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:20:24:7b:24:d2:56:ae:48:2f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:54 2025 GMT Not After : Jul 14 12:34:54 2025 GMT Subject: CN=6b199b8a-fab5-41e3-be26-9bbff8b63b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:20:19:c8:49:42:cd:c8:c3:55:da:9b:a5:30: 4a:50:0d:b8:6c:3d:0f:b0:04:f6:6b:e7:2e:c6:60: 73:a7:cc:eb:bc:6b:65:fb:48:dd:53:36:64:c4:51: 8b:59:ec:ab:a0:d3:21:dd:ef:bd:b9:13:98:c9:c9: 87:28:0b:27:91:fb:62:45:ed:15:7b:e5:35:91:4e: 3b:41:d0:1d:4d:18:fb:16:b2:60:94:15:4c:5c:24: 5c:cb:81:93:ba:52:32:6b:8b:e8:d7:7d:88:1b:96: 7b:92:28:c2:da:a1:95:09:29:ef:50:89:3d:81:d5: 80:6c:72:63:4e:8c:a7:c5:98:2a:2d:5c:4f:41:48: a6:c0:f6:1b:bd:f7:6b:49:cf:7a:39:6e:74:4e:e9: 21:db:37:8c:c4:96:46:96:2c:02:d3:8c:05:93:e3: 97:e4:b5:b4:fe:2d:40:cb:d6:15:c4:75:fa:9c:a1: 32:40:39:e2:70:ad:9c:17:fd:4e:1c:1c:cc:92:53: 66:40:39:39:4f:7d:04:f1:da:e8:ac:e5:80:6b:22: 44:80:c3:76:b2:7d:72:d5:5b:e0:bf:62:c5:53:e9: c6:60:4e:b5:e3:f1:2a:02:e6:56:a1:9d:83:d3:2c: 3f:4a:68:0b:2c:0f:60:03:0e:99:ad:11:7c:74:45: af:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:6C:22:39:E4:43:F7:0D:27:EC:04:CC:5A:D1:B0:09:F9:E4:E6:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6ffe2313-74bf-345a-930e-f6ff8c36bac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:1d:6e:47:ee:5a:4c:36:69:84:02:d0:bd:ad:ca:68:f1:f3: 5e:6b:63:7f:19:83:4c:f2:df:80:96:77:d8:88:72:68:c3:ab: b9:0d:85:4c:bf:30:b4:b9:21:78:2b:5b:52:53:93:39:f7:5f: 56:3e:85:5b:d3:8f:64:60:f2:e0:d0:6c:b7:82:cd:60:8e:d4: 60:26:8d:e2:e2:39:09:90:20:cf:2b:dd:a9:62:1d:ae:83:07: 69:f0:c0:10:b6:83:7e:11:7a:09:d9:14:47:26:ac:d7:20:9f: a3:27:6b:d7:73:03:af:97:d0:3a:e7:66:69:63:fd:69:7b:70: cc:cf:8f:82:7b:2c:2b:07:95:28:d1:42:50:bf:1f:24:d8:2f: 85:fd:30:6e:27:6c:d3:b9:19:3d:01:bb:cc:95:3a:a1:40:bd: 81:a1:b0:06:47:29:36:02:08:14:a1:f5:c4:fc:d1:d5:71:f5: bc:79:30:51:e7:b5:77:f4:08:71:c7:52:21:17:8c:8d:97:5d: e0:1e:61:61:b5:8c:a0:dc:e6:21:60:9f:25:33:14:32:11:78: d7:64:43:08:b3:ce:87:02:94:65:b3:86:6b:3e:67:ad:ef:51: 7c:62:1a:1a:92:b5:fc:dd:a4:60:6b:eb:ea:e8:df:75:20:60: c9:39:77:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwiAkeyTSVq5IL/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NFoXDTI1MDcxNDEyMzQ1NFowLzEtMCsGA1UEAxMk NmIxOTliOGEtZmFiNS00MWUzLWJlMjYtOWJiZmY4YjYzYjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSAZyElCzcjDVdqbpTBKUA24bD0PsAT2a+cu xmBzp8zrvGtl+0jdUzZkxFGLWeyroNMh3e+9uROYycmHKAsnkftiRe0Ve+U1kU47 QdAdTRj7FrJglBVMXCRcy4GTulIya4vo132IG5Z7kijC2qGVCSnvUIk9gdWAbHJj ToynxZgqLVxPQUimwPYbvfdrSc96OW50Tukh2zeMxJZGliwC04wFk+OX5LW0/i1A y9YVxHX6nKEyQDnicK2cF/1OHBzMklNmQDk5T30E8drorOWAayJEgMN2sn1y1Vvg v2LFU+nGYE614/EqAuZWoZ2D0yw/SmgLLA9gAw6ZrRF8dEWvbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAdsIjnkQ/cNJ+wEzFrRsAn55OYxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmZmZTIzMTMtNzRiZi0z NDVhLTkzMGUtZjZmZjhjMzZiYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAodbkfuWkw2aYQC0L2tymjx815rY38Zg0zy34CWd9iIcmjDq7kN hUy/MLS5IXgrW1JTkzn3X1Y+hVvTj2Rg8uDQbLeCzWCO1GAmjeLiOQmQIM8r3ali Ha6DB2nwwBC2g34RegnZFEcmrNcgn6Mna9dzA6+X0DrnZmlj/Wl7cMzPj4J7LCsH lSjRQlC/HyTYL4X9MG4nbNO5GT0Bu8yVOqFAvYGhsAZHKTYCCBSh9cT80dVx9bx5 MFHntXf0CHHHUiEXjI2XXeAeYWG1jKDc5iFgnyUzFDIReNdkQwizzocClGWzhms+ Z63vUXxiGhqStfzdpGBr6+ro33UgYMk5d50= -----END CERTIFICATE-----Generated at Sun Apr 27 17:44:04 2025 by rpki-client