$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8a471311-857d-3cf9-8b32-779e318296f8.roa File: 8a471311-857d-3cf9-8b32-779e318296f8.roa (raw, json) Hash identifier: 8CccBnJ8MKa7aUCUT//SEJ7bNILEC3jBT/m8dt+9tos= Subject key identifier: E2:D0:37:C3:2D:30:E6:86:1C:3E:09:E6:DF:A6:79:A8:B9:6C:EB:5D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C220F42165E10DAD3F3000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8a471311-857d-3cf9-8b32-779e318296f8.roa Signing time: Tue 15 Apr 2025 12:34:54 +0000 ROA not before: Tue 15 Apr 2025 12:34:54 +0000 ROA not after: Mon 14 Jul 2025 12:34:54 +0000 asID: 36632 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:20:f4:21:65:e1:0d:ad:3f:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:54 2025 GMT Not After : Jul 14 12:34:54 2025 GMT Subject: CN=88974d18-7265-4f13-9e15-d58c5f0d495c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ac:bf:59:4b:85:c3:e9:dc:75:e2:f3:4d:4e: c9:d4:af:c5:16:31:a4:f0:d6:09:4b:10:58:66:38: 5e:5c:fc:89:5f:7e:81:13:b6:c8:14:23:1e:55:dc: 3e:77:cb:22:90:8d:0e:2a:c0:af:16:2d:b0:58:e7: cc:dd:fe:c0:08:e0:7d:89:a1:33:72:d4:ce:a9:37: c0:e1:23:56:ab:3f:b1:99:59:28:f4:e2:62:55:e0: 98:47:7a:32:99:f9:05:69:58:2f:dd:b2:fe:bf:bc: ca:4d:ce:8f:df:ac:3e:f4:2a:26:ba:75:bb:e6:e5: 40:fd:43:2a:58:2c:7b:f8:21:fc:3d:5b:df:da:67: 1e:a9:47:cb:be:90:4e:6a:90:40:92:55:51:1f:0c: d1:44:62:d8:f0:d0:de:4a:a8:78:04:0d:be:83:a4: 59:9a:53:96:af:91:90:7d:70:46:60:a5:49:9c:e1: b4:5a:0c:a7:79:8f:f1:6d:0b:13:15:c3:06:f1:1e: 7d:0e:a0:44:04:24:e7:5a:9a:87:69:5f:8a:2d:a5: 02:03:2f:f7:c9:67:12:73:2e:49:d4:55:14:ca:aa: 76:52:11:6d:cc:8e:b6:80:76:c0:43:11:96:f6:ec: f4:66:fd:db:46:f3:5f:21:0b:fe:1d:c3:99:77:00: 86:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D0:37:C3:2D:30:E6:86:1C:3E:09:E6:DF:A6:79:A8:B9:6C:EB:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8a471311-857d-3cf9-8b32-779e318296f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:a6:93:5b:74:6f:7d:d3:ca:1f:c3:c1:6f:f7:41:dc:10:f0: e2:c8:42:e8:83:34:32:61:d5:c9:0c:63:48:ca:cc:f9:f5:ee: 6e:76:d8:eb:68:2c:0a:21:f9:19:85:6e:12:99:78:7e:06:ee: 18:1d:b7:68:ae:75:e7:84:5b:35:92:98:e9:be:aa:56:6b:10: 43:c7:02:3f:75:61:a7:10:0c:4e:53:87:fa:6a:60:1d:b5:ec: 27:e7:e8:2e:de:1d:f0:f7:e9:5e:fe:e5:16:7b:e9:bb:be:9f: 01:10:af:0a:44:c0:56:4f:ba:6c:66:14:0a:e1:c6:35:88:15: da:be:12:81:58:16:ba:53:97:e9:6a:df:b2:30:89:a8:0d:63: f1:c9:36:fa:51:3a:0b:dc:6a:b1:4c:99:5b:4f:2e:c7:8b:72: 33:88:78:07:de:68:cc:c3:14:de:bb:56:2d:5c:80:2d:77:dc: 44:76:cc:b9:0d:c8:86:a5:dd:50:1f:c4:b7:af:a6:d7:1a:2c: 9f:63:4b:8a:82:6b:3c:df:59:58:62:aa:b3:bd:c0:67:07:cb: db:4b:e4:ad:11:20:e4:78:0f:fd:1b:c0:be:9a:ff:43:16:ca: 2f:e4:03:e7:a9:32:84:bd:d5:85:d2:af:72:29:a6:08:3b:3f: d0:f3:d6:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwiD0IWXhDa0/MAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NFoXDTI1MDcxNDEyMzQ1NFowLzEtMCsGA1UEAxMk ODg5NzRkMTgtNzI2NS00ZjEzLTllMTUtZDU4YzVmMGQ0OTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKy/WUuFw+ncdeLzTU7J1K/FFjGk8NYJSxBY ZjheXPyJX36BE7bIFCMeVdw+d8sikI0OKsCvFi2wWOfM3f7ACOB9iaEzctTOqTfA 4SNWqz+xmVko9OJiVeCYR3oymfkFaVgv3bL+v7zKTc6P36w+9ComunW75uVA/UMq WCx7+CH8PVvf2mceqUfLvpBOapBAklVRHwzRRGLY8NDeSqh4BA2+g6RZmlOWr5GQ fXBGYKVJnOG0WgyneY/xbQsTFcMG8R59DqBEBCTnWpqHaV+KLaUCAy/3yWcScy5J 1FUUyqp2UhFtzI62gHbAQxGW9uz0Zv3bRvNfIQv+HcOZdwCGbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOLQN8MtMOaGHD4J5t+meai5bOtdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGE0NzEzMTEtODU3ZC0z Y2Y5LThiMzItNzc5ZTMxODI5NmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAASmk1t0b33Tyh/DwW/3QdwQ8OLIQuiDNDJh1ckMY0jKzPn17m52 2OtoLAoh+RmFbhKZeH4G7hgdt2iudeeEWzWSmOm+qlZrEEPHAj91YacQDE5Th/pq YB217Cfn6C7eHfD36V7+5RZ76bu+nwEQrwpEwFZPumxmFArhxjWIFdq+EoFYFrpT l+lq37IwiagNY/HJNvpROgvcarFMmVtPLseLcjOIeAfeaMzDFN67Vi1cgC133ER2 zLkNyIal3VAfxLevptcaLJ9jS4qCazzfWVhiqrO9wGcHy9tL5K0RIOR4D/0bwL6a /0MWyi/kA+epMoS91YXSr3Ippgg7P9Dz1vA= -----END CERTIFICATE-----Generated at Sun Apr 27 17:57:12 2025 by rpki-client