$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/99ac6b2e-f1ff-34c0-bdb6-3b112fcaf8af.roa File: 99ac6b2e-f1ff-34c0-bdb6-3b112fcaf8af.roa (raw, json) Hash identifier: rOLLmyCDGNisrZrV31S8hVU0SfbgF6VahQ/dybTecRU= Subject key identifier: 87:1D:92:DC:D4:1E:89:D9:5F:C2:C7:41:A4:3B:43:81:E9:47:3C:93 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849287E5ACFE7F857E2BF9EAB80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/99ac6b2e-f1ff-34c0-bdb6-3b112fcaf8af.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 7342 IP address blocks: 2620:74:4c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:5a:cf:e7:f8:57:e2:bf:9e:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=d90fce98-b999-4acd-8a4b-59dc9ccae538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:92:41:38:75:13:cd:43:71:3c:a4:ed:25:4d: 6f:f4:59:61:bc:e5:20:bc:86:ba:96:f3:aa:b7:a2: 97:f3:4b:bb:fa:dc:42:8f:af:fd:73:e7:38:49:87: fe:df:18:28:04:fa:ed:4c:c5:0d:d2:aa:1f:d9:36: 5b:96:a0:1a:24:36:ef:59:25:a2:43:9d:86:58:db: 6a:70:e2:d4:67:8b:3f:e1:01:73:0f:bc:2e:df:c0: 12:e2:f1:3c:dd:51:f5:23:d6:c5:bd:c9:b6:c8:65: 8b:4d:fb:64:29:33:15:7e:b6:b2:57:09:02:b5:f3: c5:10:88:82:cd:fb:07:67:14:64:5a:a5:50:75:2b: 44:68:c9:d6:3a:7d:d4:6c:5e:f0:3d:2a:f1:70:b8: 95:83:db:bb:ff:40:ef:cc:b2:96:92:8a:01:4c:39: 72:33:fe:31:08:d2:e9:89:7c:f8:09:a4:6d:89:6d: 52:42:59:6b:04:fa:96:29:13:80:27:48:d2:2f:69: e9:c5:c7:f8:e9:c3:f7:b3:73:ad:30:d1:b7:96:54: 4c:54:16:e1:f3:89:17:58:9b:6a:4a:1a:78:67:e0: 2d:88:c4:5b:84:cb:4f:e3:fa:7d:9d:6c:f5:1a:8f: a4:17:01:32:39:04:a3:e7:6a:4a:b9:b4:ff:10:65: d2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1D:92:DC:D4:1E:89:D9:5F:C2:C7:41:A4:3B:43:81:E9:47:3C:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/99ac6b2e-f1ff-34c0-bdb6-3b112fcaf8af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:4c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:37:8a:65:25:5a:5b:86:55:44:6c:59:25:1f:00:91:54:10: bc:63:bd:38:42:63:bb:c8:8a:1b:89:c3:db:df:98:a3:42:88: ac:76:de:42:5b:9f:fb:6c:c6:66:33:ec:51:b9:fb:4b:9e:21: d5:62:48:52:a7:24:bd:d3:04:83:8f:cd:6a:6e:61:5f:7c:b1: 63:38:a8:24:78:21:ea:6c:59:87:e0:31:7a:31:e4:1f:10:2b: f4:11:c6:30:10:2b:76:3c:52:08:fa:2d:2a:42:ac:70:b3:37: 0c:eb:14:94:ad:73:c0:ed:dc:18:b4:31:7e:17:ed:13:cb:0a: e0:5f:7a:23:ec:28:02:d8:04:64:01:b6:9d:4e:6a:ca:d7:86: 0f:b4:5f:f3:3c:3f:64:7f:b1:6e:aa:ce:00:cb:59:45:39:bc: ea:90:02:68:f9:25:fe:14:af:49:27:e7:6f:91:1b:10:ca:c2: 5b:1e:5f:b9:89:2c:73:18:1b:a3:1e:1e:82:70:12:58:6b:5b: ae:82:c8:bd:71:15:0e:31:56:f5:08:69:5e:01:2c:0c:3c:26: bf:57:e4:87:e5:9f:e1:d3:ef:d3:92:49:7d:47:a0:5c:49:f8: 75:77:5b:40:a8:a2:25:e5:c8:8f:d0:5c:3b:fc:28:c9:69:03: d0:62:38:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkoflrP5/hX4r+eq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZDkwZmNlOTgtYjk5OS00YWNkLThhNGItNTlkYzljY2FlNTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZJBOHUTzUNxPKTtJU1v9FlhvOUgvIa6lvOq t6KX80u7+txCj6/9c+c4SYf+3xgoBPrtTMUN0qof2TZblqAaJDbvWSWiQ52GWNtq cOLUZ4s/4QFzD7wu38AS4vE83VH1I9bFvcm2yGWLTftkKTMVfrayVwkCtfPFEIiC zfsHZxRkWqVQdStEaMnWOn3UbF7wPSrxcLiVg9u7/0DvzLKWkooBTDlyM/4xCNLp iXz4CaRtiW1SQllrBPqWKROAJ0jSL2npxcf46cP3s3OtMNG3llRMVBbh84kXWJtq Shp4Z+AtiMRbhMtP4/p9nWz1Go+kFwEyOQSj52pKubT/EGXSzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIcdktzUHonZX8LHQaQ7Q4HpRzyTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTlhYzZiMmUtZjFmZi0z NGMwLWJkYjYtM2IxMTJmY2FmOGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEI3imUlWluGVURsWSUfAJFUELxjvThCY7vIihuJw9vfmKNCiKx2 3kJbn/tsxmYz7FG5+0ueIdViSFKnJL3TBIOPzWpuYV98sWM4qCR4IepsWYfgMXox 5B8QK/QRxjAQK3Y8Ugj6LSpCrHCzNwzrFJStc8Dt3Bi0MX4X7RPLCuBfeiPsKALY BGQBtp1OasrXhg+0X/M8P2R/sW6qzgDLWUU5vOqQAmj5Jf4Ur0kn52+RGxDKwlse X7mJLHMYG6MeHoJwElhrW66CyL1xFQ4xVvUIaV4BLAw8Jr9X5Ifln+HT79OSSX1H oFxJ+HV3W0CooiXlyI/QXDv8KMlpA9BiOBM= -----END CERTIFICATE-----Generated at Mon Apr 28 20:55:46 2025 by rpki-client