$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/91e53e67-4812-3a7d-9f1a-f638ed9ed13c.roa File: 91e53e67-4812-3a7d-9f1a-f638ed9ed13c.roa (raw, json) Hash identifier: 7jefzNjQ8rHpfEfwx/Br5kmkNbI+r9M5GA/8RgldERo= Subject key identifier: CE:F6:48:E3:38:60:AC:FE:F2:50:0B:29:E2:BF:55:9E:FB:78:82:DB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C21DE77D37726B0B636D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/91e53e67-4812-3a7d-9f1a-f638ed9ed13c.roa Signing time: Tue 15 Apr 2025 12:34:53 +0000 ROA not before: Tue 15 Apr 2025 12:34:53 +0000 ROA not after: Mon 14 Jul 2025 12:34:53 +0000 asID: 20362 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:1d:e7:7d:37:72:6b:0b:63:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:53 2025 GMT Not After : Jul 14 12:34:53 2025 GMT Subject: CN=5b7ffbd2-dcce-4949-8f2d-806dfe75fc73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:64:46:b4:94:a5:82:a4:36:ca:40:0b:68:5d: 19:11:ea:08:6b:48:93:f4:cb:5c:af:14:f6:86:83: c5:75:dc:16:db:68:ed:53:3f:fd:22:5e:04:ad:e2: ba:23:0f:32:20:df:c5:d6:32:27:09:6b:d7:44:a1: 1f:fe:c8:22:55:bf:5d:c6:c9:b9:fb:23:c9:58:e1: 01:14:7b:17:cb:8b:c2:38:74:83:21:d0:ab:f5:cf: a5:45:69:24:f6:9d:20:5f:93:83:43:27:6c:ff:2d: d4:5a:0f:af:13:e6:24:85:9b:58:45:1b:76:4e:78: 94:f6:ff:5e:9b:b2:ca:95:43:38:a7:fe:74:a2:6e: 6e:28:98:88:ec:ed:5a:95:51:f1:eb:46:b4:44:df: cd:96:f4:d8:76:c9:e4:00:a5:d2:a8:47:c3:90:d6: cf:7f:73:31:ed:e3:88:20:73:0f:b7:07:a3:7e:82: 92:cc:e2:55:c9:7a:b7:44:81:5d:15:d7:90:53:ce: 7a:72:db:64:7e:f3:7b:ad:82:69:63:d9:55:e3:79: 97:a4:8e:76:db:af:79:33:00:68:77:64:2b:55:59: f3:9a:a5:6d:ca:3e:6d:e6:fd:35:fa:4f:af:3a:d8: 1a:e5:0e:3e:ac:ba:61:5e:46:7b:a0:25:b2:74:91: be:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F6:48:E3:38:60:AC:FE:F2:50:0B:29:E2:BF:55:9E:FB:78:82:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/91e53e67-4812-3a7d-9f1a-f638ed9ed13c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:f9:b2:3d:be:d1:cc:30:b6:bc:2c:eb:2d:e0:95:43:3c:73: ad:8a:1e:0f:53:0c:45:0c:bb:75:f7:e1:9c:87:ea:10:62:d6: 10:f9:b3:ee:a6:ed:80:c8:45:46:81:11:c5:25:2a:c7:16:73: 22:b9:f5:12:cb:ed:ba:82:21:b3:0d:e4:81:6c:4a:f5:1f:08: 71:7d:b6:d5:18:6d:b1:5b:a8:a1:bd:4b:03:01:73:65:da:81: 54:88:08:55:0c:58:c5:9e:89:d7:70:88:aa:9b:64:60:a9:5e: e7:46:96:76:81:ba:08:6d:69:94:6c:d7:e1:1a:a7:84:31:8a: 1c:bd:fa:88:6e:27:df:c0:0b:dc:65:4a:d2:1d:00:0d:ed:15: 58:6f:74:4d:4e:6e:df:90:6d:69:45:3e:95:06:99:36:47:2a: 8f:86:a9:66:0c:43:3b:c7:61:fa:e1:c8:79:64:13:d0:da:10: 5d:88:7f:36:36:00:a0:90:f5:aa:98:06:57:4d:a2:54:ff:3f: e9:ba:bc:22:3e:94:a8:31:d1:f7:40:0f:6c:27:77:77:69:33: ac:4c:15:b9:b2:92:af:11:3d:44:c2:1e:e8:b7:8e:d8:c2:47: 75:f1:b4:cc:66:91:ea:8f:cb:de:20:94:8e:79:10:41:52:e5: e9:d3:7b:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwh3nfTdyawtjbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1M1oXDTI1MDcxNDEyMzQ1M1owLzEtMCsGA1UEAxMk NWI3ZmZiZDItZGNjZS00OTQ5LThmMmQtODA2ZGZlNzVmYzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GRGtJSlgqQ2ykALaF0ZEeoIa0iT9MtcrxT2 hoPFddwW22jtUz/9Il4EreK6Iw8yIN/F1jInCWvXRKEf/sgiVb9dxsm5+yPJWOEB FHsXy4vCOHSDIdCr9c+lRWkk9p0gX5ODQyds/y3UWg+vE+YkhZtYRRt2TniU9v9e m7LKlUM4p/50om5uKJiI7O1alVHx60a0RN/NlvTYdsnkAKXSqEfDkNbPf3Mx7eOI IHMPtwejfoKSzOJVyXq3RIFdFdeQU856cttkfvN7rYJpY9lV43mXpI522695MwBo d2QrVVnzmqVtyj5t5v01+k+vOtga5Q4+rLphXkZ7oCWydJG+6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM72SOM4YKz+8lALKeK/VZ77eILbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTFlNTNlNjctNDgxMi0z YTdkLTlmMWEtZjYzOGVkOWVkMTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIT5sj2+0cwwtrws6y3glUM8c62KHg9TDEUMu3X34ZyH6hBi1hD5 s+6m7YDIRUaBEcUlKscWcyK59RLL7bqCIbMN5IFsSvUfCHF9ttUYbbFbqKG9SwMB c2XagVSICFUMWMWeiddwiKqbZGCpXudGlnaBughtaZRs1+Eap4Qxihy9+ohuJ9/A C9xlStIdAA3tFVhvdE1Obt+QbWlFPpUGmTZHKo+GqWYMQzvHYfrhyHlkE9DaEF2I fzY2AKCQ9aqYBldNolT/P+m6vCI+lKgx0fdAD2wnd3dpM6xMFbmykq8RPUTCHui3 jtjCR3XxtMxmkeqPy94glI55EEFS5enTe9o= -----END CERTIFICATE-----Generated at Mon Apr 28 02:14:30 2025 by rpki-client