$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc9e38a0-7990-364f-ba30-72becd75524e.roa File: cc9e38a0-7990-364f-ba30-72becd75524e.roa (raw, json) Hash identifier: ijWb4hbj83ZVm3nZlN+x3EoXrAPEL7TOchjg/QDJk1A= Subject key identifier: 90:77:48:A1:DE:46:AF:C4:06:6C:CB:27:81:5A:82:33:3E:67:BE:BF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A35486D8A646CE7C750F4436 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc9e38a0-7990-364f-ba30-72becd75524e.roa Signing time: Fri 25 Apr 2025 01:00:47 +0000 ROA not before: Fri 25 Apr 2025 01:00:47 +0000 ROA not after: Thu 24 Jul 2025 01:00:47 +0000 asID: 7342 IP address blocks: 2620:74:80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a3:54:86:d8:a6:46:ce:7c:75:0f:44:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 25 01:00:47 2025 GMT Not After : Jul 24 01:00:47 2025 GMT Subject: CN=872f0a38-602d-47fb-bd1c-49fa6123932f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:28:e8:78:84:b7:89:53:84:e4:1a:b9:22:31: fd:ee:e6:0b:98:08:d9:ea:9b:4c:c0:67:f6:9d:e2: bb:aa:dd:3f:ba:de:b3:2e:27:5f:1c:c4:e4:89:2d: ec:26:7c:92:de:43:28:14:c2:62:37:be:b2:e6:c4: d5:e6:67:c2:5f:59:d4:e9:4b:0a:8a:21:d5:42:41: 2b:9f:8b:12:8f:65:04:3d:b9:b8:3c:46:da:19:94: 12:98:c0:bd:94:6b:19:de:b7:fc:71:06:06:c6:4e: a0:cd:af:b8:54:79:b2:ba:e8:3a:4f:38:41:d4:2e: 1e:a4:5e:6a:f8:32:9f:42:ce:8d:9d:a0:5c:c6:42: c9:0d:f9:22:b6:f6:5d:05:a5:4c:50:ea:dc:71:c8: 1f:fb:da:dd:dc:28:dc:a9:20:de:85:e7:df:c5:9a: d1:76:eb:99:84:de:32:f9:43:84:eb:08:af:12:fa: 21:bc:20:fa:f0:cf:55:3e:9b:e6:74:bf:b6:db:58: 32:1a:8c:cc:55:d1:90:80:9f:2f:6e:6d:bd:7e:1a: bb:12:d9:15:87:ff:f6:93:95:e1:08:fa:6d:5d:64: 9e:25:fe:e1:c3:60:24:5c:92:ec:e5:46:44:99:a3: de:7c:12:a2:f5:75:df:b6:cd:c9:db:51:93:17:6d: fc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:77:48:A1:DE:46:AF:C4:06:6C:CB:27:81:5A:82:33:3E:67:BE:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc9e38a0-7990-364f-ba30-72becd75524e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:80::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:97:c2:0f:b7:3d:d1:b1:f9:de:53:aa:80:47:ba:e4:df:6d: 94:82:4f:4b:81:1c:fe:99:da:e7:b0:99:56:ee:1c:4e:c4:6e: ff:2c:de:8b:2f:fd:fc:93:56:cf:ff:83:92:85:34:37:53:0f: 2d:83:73:96:da:fc:df:94:3e:b2:b6:d4:4a:15:5b:2d:93:d1: ea:5c:50:da:1a:4b:42:b5:c7:f3:ad:f3:e0:01:83:7f:b5:4f: 12:db:9a:72:da:00:21:64:67:fb:d1:e8:6b:e4:bf:74:70:31: f5:07:e2:ed:b3:22:a9:f7:96:20:02:8c:2e:c0:7e:f6:75:5c: 3e:f8:15:a6:b6:1a:ed:32:d5:20:21:5a:73:c5:5a:fa:a4:1a: 2a:f8:75:99:94:74:4f:d4:6e:68:6e:48:e6:00:67:2e:76:84: ae:69:38:72:87:a0:3d:15:cd:61:fc:c2:09:cd:6b:2b:36:b4: 4e:7f:19:c4:8d:11:bf:f9:e6:3a:a9:e4:09:1f:a2:2a:00:fc: fd:f1:fd:96:0e:b5:53:8b:c1:a8:64:c2:ee:f9:55:31:c6:d2: ae:12:3f:59:bc:dd:c4:5a:2a:ac:b7:d9:20:85:78:eb:c1:8e: 1d:4e:95:98:51:1e:cf:9a:cc:87:5c:f0:30:9e:d9:36:6b:79: 1e:1c:f4:38 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmjVIbYpkbOfHUPRDYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNTAxMDA0N1oXDTI1MDcyNDAxMDA0N1owLzEtMCsGA1UEAxMk ODcyZjBhMzgtNjAyZC00N2ZiLWJkMWMtNDlmYTYxMjM5MzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCjoeIS3iVOE5Bq5IjH97uYLmAjZ6ptMwGf2 neK7qt0/ut6zLidfHMTkiS3sJnyS3kMoFMJiN76y5sTV5mfCX1nU6UsKiiHVQkEr n4sSj2UEPbm4PEbaGZQSmMC9lGsZ3rf8cQYGxk6gza+4VHmyuug6TzhB1C4epF5q +DKfQs6NnaBcxkLJDfkitvZdBaVMUOrcccgf+9rd3CjcqSDeheffxZrRduuZhN4y +UOE6wivEvohvCD68M9VPpvmdL+221gyGozMVdGQgJ8vbm29fhq7EtkVh//2k5Xh CPptXWSeJf7hw2AkXJLs5UZEmaPefBKi9XXfts3J21GTF2382wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJB3SKHeRq/EBmzLJ4FagjM+Z76/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2M5ZTM4YTAtNzk5MC0z NjRmLWJhMzAtNzJiZWNkNzU1MjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADiXwg+3PdGx+d5TqoBHuuTfbZSCT0uBHP6Z2uewmVbuHE7Ebv8s 3osv/fyTVs//g5KFNDdTDy2Dc5ba/N+UPrK21EoVWy2T0epcUNoaS0K1x/Ot8+AB g3+1TxLbmnLaACFkZ/vR6Gvkv3RwMfUH4u2zIqn3liACjC7AfvZ1XD74Faa2Gu0y 1SAhWnPFWvqkGir4dZmUdE/UbmhuSOYAZy52hK5pOHKHoD0VzWH8wgnNays2tE5/ GcSNEb/55jqp5AkfoioA/P3x/ZYOtVOLwahkwu75VTHG0q4SP1m83cRaKqy32SCF eOvBjh1OlZhRHs+azIdc8DCe2TZreR4c9Dg= -----END CERTIFICATE-----Generated at Mon Apr 28 01:18:21 2025 by rpki-client