$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/978d80ba-d0dd-33c0-96c4-9e60fa61ec3c.roa File: 978d80ba-d0dd-33c0-96c4-9e60fa61ec3c.roa (raw, json) Hash identifier: w1OHk/p2s4+5ojZ5qyj8COhZqIvvPO/OpFOozYQrXHg= Subject key identifier: FD:B3:BB:98:59:9E:E9:8E:3F:F4:F0:D8:23:77:63:0E:A3:B2:40:76 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C21DA3C324FDB2AAAD8780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/978d80ba-d0dd-33c0-96c4-9e60fa61ec3c.roa Signing time: Tue 15 Apr 2025 12:34:53 +0000 ROA not before: Tue 15 Apr 2025 12:34:53 +0000 ROA not after: Mon 14 Jul 2025 12:34:53 +0000 asID: 396579 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:1d:a3:c3:24:fd:b2:aa:ad:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:53 2025 GMT Not After : Jul 14 12:34:53 2025 GMT Subject: CN=22bcd023-a97e-4cbd-bd64-069ac1638aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:c6:17:6b:cf:8d:9c:87:f8:b4:a3:d3:23:c9: e9:00:66:16:f2:ec:5a:09:db:85:98:08:5e:5d:c6: 66:1d:46:d8:fb:ac:1e:07:98:cf:4f:b4:52:62:da: fe:17:66:43:bf:61:69:8a:51:d2:bd:12:ad:85:dd: 62:07:9e:b7:a2:6c:8f:77:2d:fe:92:28:01:38:37: d7:0c:f0:4d:6c:03:6f:db:1d:a3:dc:4c:fe:8a:03: aa:5e:ab:3a:87:ae:b0:e8:50:59:7f:ab:91:25:ac: b0:f2:be:4e:d8:2f:8d:46:40:a4:31:eb:5d:56:59: e5:96:74:ea:3b:84:3c:96:f2:bb:20:cd:16:95:d3: d3:2c:40:bd:2c:8c:cc:42:ec:85:70:64:87:3b:67: bc:75:88:4c:16:91:7e:26:d4:6b:dd:4b:bc:5a:fb: 27:e0:54:17:a0:8f:0d:0a:83:80:5f:9e:4d:e0:be: b6:21:80:d2:bb:66:a4:bf:5a:52:d4:98:29:50:c5: 18:bd:6c:8b:25:22:c9:21:fc:9d:f2:cd:d6:7a:53: 56:f2:ee:20:bf:15:73:e3:5b:67:e4:90:f2:d4:2f: 09:af:a6:39:91:5c:6c:c2:0f:c7:bf:f4:e1:73:29: 4d:f4:cd:b6:d8:49:aa:0d:91:20:9c:44:de:6f:57: 1e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B3:BB:98:59:9E:E9:8E:3F:F4:F0:D8:23:77:63:0E:A3:B2:40:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/978d80ba-d0dd-33c0-96c4-9e60fa61ec3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:af:4c:fa:6a:6d:33:42:f1:cf:45:34:ec:70:10:90:e9:4d: 5a:55:8c:a9:92:e4:6d:d4:44:8e:40:23:15:64:3f:9e:92:9a: 37:ed:c1:96:c7:a4:f3:88:c0:10:b7:1d:23:ea:6f:c9:36:86: f9:40:52:69:e2:6f:a1:0f:94:ad:01:d4:95:05:f3:36:34:52: c8:45:ab:5d:70:d0:8a:02:0c:8d:50:a7:59:94:40:c5:22:84: 56:33:81:28:cc:a7:ef:cc:4f:af:61:5e:3e:ef:dd:8d:03:1b: 63:6c:99:7d:ad:92:0d:1a:36:13:ce:de:1d:e8:34:ed:c7:cc: 12:1d:f4:ab:98:01:85:80:bb:83:1b:8a:fa:3e:58:15:38:d0: 89:a9:ff:99:65:bb:41:30:b3:0c:89:d1:a5:b0:b5:3a:69:e8: 64:5f:58:d8:0f:ff:78:2a:52:75:f2:df:f4:50:19:51:2c:e1: 72:0c:ce:5d:73:5f:f3:f8:87:2e:96:8a:96:2d:e7:09:34:22: 2f:9d:ea:87:99:fa:a2:ec:fd:a9:65:a8:03:ec:8b:42:f5:5a: 37:1c:e8:28:25:55:88:41:80:40:d8:38:00:36:d0:69:a4:6c: e4:7d:7e:4c:05:ae:43:2d:68:0c:4a:e5:2b:ae:dc:e5:6e:16: e1:5d:1d:90 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwh2jwyT9sqqth4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1M1oXDTI1MDcxNDEyMzQ1M1owLzEtMCsGA1UEAxMk MjJiY2QwMjMtYTk3ZS00Y2JkLWJkNjQtMDY5YWMxNjM4YWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9cYXa8+NnIf4tKPTI8npAGYW8uxaCduFmAhe XcZmHUbY+6weB5jPT7RSYtr+F2ZDv2FpilHSvRKthd1iB563omyPdy3+kigBODfX DPBNbANv2x2j3Ez+igOqXqs6h66w6FBZf6uRJayw8r5O2C+NRkCkMetdVlnllnTq O4Q8lvK7IM0WldPTLEC9LIzMQuyFcGSHO2e8dYhMFpF+JtRr3Uu8Wvsn4FQXoI8N CoOAX55N4L62IYDSu2akv1pS1JgpUMUYvWyLJSLJIfyd8s3WelNW8u4gvxVz41tn 5JDy1C8Jr6Y5kVxswg/Hv/ThcylN9M222EmqDZEgnETeb1ce1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP2zu5hZnumOP/Tw2CN3Yw6jskB2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTc4ZDgwYmEtZDBkZC0z M2MwLTk2YzQtOWU2MGZhNjFlYzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFivTPpqbTNC8c9FNOxwEJDpTVpVjKmS5G3URI5AIxVkP56Smjft wZbHpPOIwBC3HSPqb8k2hvlAUmnib6EPlK0B1JUF8zY0UshFq11w0IoCDI1Qp1mU QMUihFYzgSjMp+/MT69hXj7v3Y0DG2NsmX2tkg0aNhPO3h3oNO3HzBId9KuYAYWA u4Mbivo+WBU40Imp/5llu0EwswyJ0aWwtTpp6GRfWNgP/3gqUnXy3/RQGVEs4XIM zl1zX/P4hy6WipYt5wk0Ii+d6oeZ+qLs/allqAPsi0L1Wjcc6CglVYhBgEDYOAA2 0GmkbOR9fkwFrkMtaAxK5Suu3OVuFuFdHZA= -----END CERTIFICATE-----Generated at Sun Apr 27 15:41:46 2025 by rpki-client