$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c5b0f990-9be9-3a74-9776-31ef0483cf3a.roa File: c5b0f990-9be9-3a74-9776-31ef0483cf3a.roa (raw, json) Hash identifier: 0+iOxrRTwk488EZYOOW37WgR1PjEoQERbX5xqIaztQ8= Subject key identifier: FB:32:92:D7:91:58:60:AE:49:F7:FE:43:FC:C3:4C:63:65:5E:AE:0D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C22101A91583839DA40D60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c5b0f990-9be9-3a74-9776-31ef0483cf3a.roa Signing time: Tue 15 Apr 2025 12:34:54 +0000 ROA not before: Tue 15 Apr 2025 12:34:54 +0000 ROA not after: Mon 14 Jul 2025 12:34:54 +0000 asID: 396547 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:21:01:a9:15:83:83:9d:a4:0d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:54 2025 GMT Not After : Jul 14 12:34:54 2025 GMT Subject: CN=7cf8a380-4f6c-4838-b9db-82b2805ec5c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f4:7d:1a:1f:27:46:35:ee:e9:ce:48:11:16: c0:fb:b9:42:bd:da:4f:5f:fa:36:24:60:19:b7:3b: 06:9e:d3:77:e6:f5:bd:f4:c7:82:89:54:d2:1c:40: 2b:5b:09:5f:04:e0:27:a9:9c:92:e0:d5:46:41:3d: 06:d4:54:c8:80:69:d3:64:eb:d1:72:16:7e:f8:50: 5e:18:b6:d5:29:db:19:1b:3d:db:8e:5a:19:04:9a: 13:82:c9:b7:28:fc:3d:d5:34:02:9d:cf:87:32:64: ef:09:58:dc:c0:ce:f8:44:ec:e1:9e:80:2b:df:d1: 4d:7b:f9:7e:61:2b:79:f5:63:dd:7d:e8:81:72:4d: 0c:21:87:96:bb:ca:a3:46:80:5c:0a:23:5b:a3:b7: 5d:fa:c3:7b:6e:d1:48:79:c0:92:94:16:fb:ba:ca: 7b:97:d7:4f:5d:bb:21:84:86:12:ca:b9:43:48:e9: c5:c8:ca:f4:6c:df:09:d9:05:53:24:4f:c8:e3:f5: f3:4f:78:6e:e0:fe:06:7d:23:25:48:a2:96:71:88: 77:9f:4d:87:62:71:af:ff:1f:bb:30:07:57:ae:3a: d5:c1:28:bb:09:70:41:ff:85:e5:5e:c2:ac:38:47: c7:ba:f9:d5:85:04:5b:f8:61:da:2a:9b:3b:5f:53: ff:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:32:92:D7:91:58:60:AE:49:F7:FE:43:FC:C3:4C:63:65:5E:AE:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c5b0f990-9be9-3a74-9776-31ef0483cf3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:07:ec:59:4a:67:7b:aa:6f:8c:2c:d7:3b:4d:0f:e6:83:80: 88:f1:2e:a2:40:aa:44:92:b0:6a:c4:cb:46:21:9a:aa:54:e5: 98:74:d3:ac:99:bf:a7:e3:dc:49:32:7f:b5:ab:f1:3b:d3:3f: dc:2b:ba:1a:36:8a:cc:65:22:04:a6:7a:9e:6a:ec:8b:52:4a: 18:9f:09:18:74:f6:28:9c:2b:77:84:dd:9f:35:bd:e8:c0:2a: 90:5c:af:c2:27:32:83:b3:2a:5c:d7:80:ec:d5:a4:50:74:62: 1d:97:53:66:4d:42:a0:24:db:a1:b3:9b:fb:25:d2:26:a0:b6: da:f5:98:fb:b6:cd:0d:b3:33:91:d1:fd:28:57:d4:dc:7e:20: 1d:40:cf:d2:e6:64:94:63:d3:1e:1a:28:d7:eb:75:03:e8:1b: 2f:1d:03:af:1b:04:59:72:46:94:46:00:0c:89:64:aa:96:0c: 26:a1:ef:c1:ff:3e:4e:5b:04:1b:92:45:87:83:5e:62:db:e0: 0b:6f:c3:67:43:51:ab:5f:59:9a:64:b0:7e:eb:7a:17:00:cc: 95:1b:37:32:eb:27:4b:25:88:16:fe:62:69:95:aa:d6:e3:c4: 0d:33:07:17:cf:1e:42:6e:6c:d8:de:07:b7:e9:5c:3c:d7:e6: 99:90:75:5e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwiEBqRWDg52kDWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NFoXDTI1MDcxNDEyMzQ1NFowLzEtMCsGA1UEAxMk N2NmOGEzODAtNGY2Yy00ODM4LWI5ZGItODJiMjgwNWVjNWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/R9Gh8nRjXu6c5IERbA+7lCvdpPX/o2JGAZ tzsGntN35vW99MeCiVTSHEArWwlfBOAnqZyS4NVGQT0G1FTIgGnTZOvRchZ++FBe GLbVKdsZGz3bjloZBJoTgsm3KPw91TQCnc+HMmTvCVjcwM74ROzhnoAr39FNe/l+ YSt59WPdfeiBck0MIYeWu8qjRoBcCiNbo7dd+sN7btFIecCSlBb7usp7l9dPXbsh hIYSyrlDSOnFyMr0bN8J2QVTJE/I4/XzT3hu4P4GfSMlSKKWcYh3n02HYnGv/x+7 MAdXrjrVwSi7CXBB/4XlXsKsOEfHuvnVhQRb+GHaKps7X1P/QwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPsykteRWGCuSff+Q/zDTGNlXq4NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzViMGY5OTAtOWJlOS0z YTc0LTk3NzYtMzFlZjA0ODNjZjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFkH7FlKZ3uqb4ws1ztND+aDgIjxLqJAqkSSsGrEy0YhmqpU5Zh0 06yZv6fj3Ekyf7Wr8TvTP9wruho2isxlIgSmep5q7ItSShifCRh09iicK3eE3Z81 vejAKpBcr8InMoOzKlzXgOzVpFB0Yh2XU2ZNQqAk26Gzm/sl0iagttr1mPu2zQ2z M5HR/ShX1Nx+IB1Az9LmZJRj0x4aKNfrdQPoGy8dA68bBFlyRpRGAAyJZKqWDCah 78H/Pk5bBBuSRYeDXmLb4Atvw2dDUatfWZpksH7rehcAzJUbNzLrJ0sliBb+YmmV qtbjxA0zBxfPHkJubNjeB7fpXDzX5pmQdV4= -----END CERTIFICATE-----Generated at Mon Apr 28 11:47:54 2025 by rpki-client