$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c68a42b1-be3f-33b5-a424-037b4328a509.roa File: c68a42b1-be3f-33b5-a424-037b4328a509.roa (raw, json) Hash identifier: 9rUIFnMfA/XIY02pCLPKJpKGkKWdZJqFyoGKCwlkeAk= Subject key identifier: A7:60:03:F0:D0:78:56:44:3F:2E:27:95:E5:1C:04:15:81:5D:E5:ED Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848EF6172B08F6F09FED92C7680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c68a42b1-be3f-33b5-a424-037b4328a509.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 0 IP address blocks: 2620:74:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:72:b0:8f:6f:09:fe:d9:2c:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=c45a8003-92d8-47cc-891e-0dfe5709108f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:af:31:5d:f1:bf:39:0b:84:6e:a7:74:dd:d5: 40:78:56:ff:b1:ec:dd:99:35:5c:44:f4:ad:0b:25: 01:78:53:66:75:7d:bc:c2:92:0e:5d:7b:a1:4a:66: 31:9f:f5:62:3e:d3:df:13:2b:ea:63:29:b2:9b:16: dd:69:40:e4:3f:10:be:26:f1:8f:5d:88:c1:14:5e: 29:5c:c5:90:58:4d:09:51:d8:90:cc:ba:f8:d8:d8: 91:81:03:cb:6a:97:38:ab:b9:47:92:4b:f2:5e:15: 23:5d:b6:4d:a1:49:3c:e2:b2:2f:da:b5:3c:c1:4b: 38:c9:96:7c:d9:fa:92:41:fd:9f:f6:e3:63:ac:f8: 1a:03:20:7b:b5:24:38:cf:df:71:75:c5:e9:d3:24: d6:2f:87:8b:e0:a3:91:ed:e6:71:d6:9c:e4:62:a7: ee:78:2a:b7:14:ec:7f:32:4e:cc:01:b4:20:7d:78: 44:ed:01:b5:f4:6f:5c:9d:72:61:48:d4:10:74:a7: 15:78:99:ba:14:7d:19:4e:20:d0:d6:d3:a6:b6:bf: 70:ca:50:c2:52:f8:46:9d:36:86:b9:15:19:78:5b: c0:17:47:e3:22:72:ac:f1:1b:e8:e9:3f:67:21:54: c7:60:17:b1:f3:1b:8f:b0:52:44:6a:7d:96:3e:37: b9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:60:03:F0:D0:78:56:44:3F:2E:27:95:E5:1C:04:15:81:5D:E5:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c68a42b1-be3f-33b5-a424-037b4328a509.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:24:06:a2:61:f4:70:71:f9:6b:1b:41:c5:e6:30:37:f9:90: 3a:4c:98:79:ac:35:a8:e7:6c:5c:a2:9f:af:7d:d9:0f:14:69: de:0f:6b:2a:93:d0:61:61:e7:ec:95:07:a4:69:61:58:b8:72: 34:9e:80:9e:42:b1:a3:1e:31:23:c3:9b:64:f8:55:36:e7:ab: 42:cb:bc:4a:6a:94:63:cd:cf:52:a7:fa:01:6d:40:c1:25:88: 24:8c:f0:ab:d7:a1:8d:6f:a2:bd:27:a4:c8:9f:a1:cf:59:24: 7f:d8:63:7b:59:16:aa:33:ef:3d:e0:81:84:71:c9:72:17:f4: 82:3d:3f:e6:ee:0c:78:5a:94:47:2a:4c:12:6a:42:c0:40:28: b9:44:f9:6a:cd:93:70:2b:aa:c3:a6:6b:dc:52:27:bf:73:ce: c3:a2:69:6e:91:23:57:03:6f:b1:4b:73:f0:20:d6:98:da:d6: 65:05:9a:cc:50:80:46:0a:ca:c4:48:04:be:ab:9d:db:d3:c1: 24:59:ab:84:9b:66:03:2a:12:03:9b:6b:93:1a:8f:d0:cf:c7: 34:f0:21:4a:79:5a:56:9f:26:35:67:9a:01:ca:14:09:8b:f4: e7:a4:84:16:f7:8f:5e:ab:43:4f:1a:89:11:17:76:ac:cb:8c: d9:1d:73:f2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjvYXKwj28J/tksdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk YzQ1YTgwMDMtOTJkOC00N2NjLTg5MWUtMGRmZTU3MDkxMDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh68xXfG/OQuEbqd03dVAeFb/sezdmTVcRPSt CyUBeFNmdX28wpIOXXuhSmYxn/ViPtPfEyvqYymymxbdaUDkPxC+JvGPXYjBFF4p XMWQWE0JUdiQzLr42NiRgQPLapc4q7lHkkvyXhUjXbZNoUk84rIv2rU8wUs4yZZ8 2fqSQf2f9uNjrPgaAyB7tSQ4z99xdcXp0yTWL4eL4KOR7eZx1pzkYqfueCq3FOx/ Mk7MAbQgfXhE7QG19G9cnXJhSNQQdKcVeJm6FH0ZTiDQ1tOmtr9wylDCUvhGnTaG uRUZeFvAF0fjInKs8Rvo6T9nIVTHYBex8xuPsFJEan2WPje5vQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKdgA/DQeFZEPy4nleUcBBWBXeXtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzY4YTQyYjEtYmUzZi0z M2I1LWE0MjQtMDM3YjQzMjhhNTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD8kBqJh9HBx+WsbQcXmMDf5kDpMmHmsNajnbFyin6992Q8Uad4P ayqT0GFh5+yVB6RpYVi4cjSegJ5CsaMeMSPDm2T4VTbnq0LLvEpqlGPNz1Kn+gFt QMEliCSM8KvXoY1vor0npMifoc9ZJH/YY3tZFqoz7z3ggYRxyXIX9II9P+buDHha lEcqTBJqQsBAKLlE+WrNk3ArqsOma9xSJ79zzsOiaW6RI1cDb7FLc/Ag1pja1mUF msxQgEYKysRIBL6rndvTwSRZq4SbZgMqEgOba5Maj9DPxzTwIUp5WlafJjVnmgHK FAmL9OekhBb3j16rQ08aiREXdqzLjNkdc/I= -----END CERTIFICATE-----Generated at Sat Apr 26 15:58:56 2025 by rpki-client