$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dcb70587-6e70-3563-b710-bd788e442858.roa File: dcb70587-6e70-3563-b710-bd788e442858.roa (raw, json) Hash identifier: ZVMhR8dAt/iV2aFzTyJFDHZY2+9A7SpBBN4lkJ76PZo= Subject key identifier: 64:04:7B:71:61:7E:25:23:61:5C:4F:05:F0:96:2E:14:E9:06:DB:0B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C21DCBDA80C5B7A805C780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dcb70587-6e70-3563-b710-bd788e442858.roa Signing time: Tue 15 Apr 2025 12:34:53 +0000 ROA not before: Tue 15 Apr 2025 12:34:53 +0000 ROA not after: Mon 14 Jul 2025 12:34:53 +0000 asID: 36623 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:1d:cb:da:80:c5:b7:a8:05:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:53 2025 GMT Not After : Jul 14 12:34:53 2025 GMT Subject: CN=ce35ac13-5139-4e8b-9822-45531e29d1ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:46:c0:ec:7b:ea:02:5c:26:9d:a8:01:c9:fc: 09:c7:c2:06:19:82:da:4f:cc:c3:71:1d:31:b3:72: fb:50:d9:a8:81:8c:59:a3:33:92:76:f1:ba:aa:95: ac:3e:9a:42:a7:d2:a1:bf:cf:e0:f4:5c:46:b4:cf: 6d:34:20:3b:70:70:ea:d2:9a:ff:e0:09:1a:6f:eb: 08:27:5b:98:8f:18:8c:92:b5:52:aa:ec:25:5e:70: 17:49:de:02:1d:c6:ac:fa:ea:d7:d5:1a:d1:dd:59: c5:7d:84:4b:11:a6:f1:8e:52:72:27:59:63:0e:4c: f5:ae:d4:d8:4b:70:e7:f9:f7:50:df:82:82:37:92: 1a:eb:91:04:46:b4:d7:00:a6:83:60:55:b7:bd:35: 8a:c2:1f:64:73:ea:2b:23:b3:a0:db:08:aa:e9:07: de:93:d5:97:2b:03:b6:5c:d9:41:5b:c7:07:39:a2: ab:fe:92:92:fb:3e:c0:1b:4d:d1:35:0e:8b:46:f0: 0f:15:45:8c:07:c5:dc:2a:ad:c0:b3:a3:8a:29:1c: 52:eb:b0:05:ad:5a:50:f5:b8:59:4e:29:b2:11:6e: 3d:b2:23:2c:19:c3:ac:ff:32:d9:4d:c2:5e:a2:c6: 91:96:c5:54:4d:f6:f3:8a:8e:f7:6b:45:b8:09:70: 39:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:04:7B:71:61:7E:25:23:61:5C:4F:05:F0:96:2E:14:E9:06:DB:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dcb70587-6e70-3563-b710-bd788e442858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:69:fb:e8:fa:dd:d6:7b:dd:95:c0:a3:31:92:a9:4d:70:0e: f6:de:24:87:65:81:dc:e5:34:a7:7b:72:66:ab:da:ec:29:e3: ad:88:42:be:f4:58:27:01:47:56:5d:45:6f:94:09:67:1f:81: 74:4d:0a:d3:46:56:35:eb:76:cf:e5:a4:d8:8e:79:a2:49:f0: 0d:7b:4c:f3:79:c4:24:7d:b1:10:b0:75:03:eb:2a:bd:88:45: 09:99:f9:26:7f:66:82:40:8c:25:53:7d:10:2a:76:7d:58:c3: dd:82:f6:f0:42:54:1c:b2:04:51:57:6c:6f:d3:bc:59:da:53: 9f:e8:7d:94:ac:fa:90:5d:41:ce:e4:4e:fc:c7:e4:7e:91:80: 11:c6:d0:84:a5:87:8f:57:94:97:51:f3:e2:53:1b:c5:9e:90: 8e:03:21:cc:07:78:41:bd:e1:d8:c8:8a:a4:9a:cb:de:2c:38: 11:e0:af:d8:24:af:56:d3:ed:95:6e:fc:c2:7f:74:76:0f:c2: 31:f6:01:68:cd:90:9b:f8:3d:fb:a6:6b:a3:ca:1c:34:39:a6: dd:04:83:8d:46:10:ea:a2:0a:10:f3:f7:02:22:80:3b:d0:fa: ff:37:bf:b0:cb:3f:3c:25:f7:e9:fa:c2:18:0f:12:35:b0:0a: 0a:bd:c6:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwh3L2oDFt6gFx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1M1oXDTI1MDcxNDEyMzQ1M1owLzEtMCsGA1UEAxMk Y2UzNWFjMTMtNTEzOS00ZThiLTk4MjItNDU1MzFlMjlkMWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUbA7HvqAlwmnagByfwJx8IGGYLaT8zDcR0x s3L7UNmogYxZozOSdvG6qpWsPppCp9Khv8/g9FxGtM9tNCA7cHDq0pr/4Akab+sI J1uYjxiMkrVSquwlXnAXSd4CHcas+urX1RrR3VnFfYRLEabxjlJyJ1ljDkz1rtTY S3Dn+fdQ34KCN5Ia65EERrTXAKaDYFW3vTWKwh9kc+orI7Og2wiq6Qfek9WXKwO2 XNlBW8cHOaKr/pKS+z7AG03RNQ6LRvAPFUWMB8XcKq3As6OKKRxS67AFrVpQ9bhZ TimyEW49siMsGcOs/zLZTcJeosaRlsVUTfbzio73a0W4CXA5kwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGQEe3FhfiUjYVxPBfCWLhTpBtsLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGNiNzA1ODctNmU3MC0z NTYzLWI3MTAtYmQ3ODhlNDQyODU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE5p++j63dZ73ZXAozGSqU1wDvbeJIdlgdzlNKd7cmar2uwp462I Qr70WCcBR1ZdRW+UCWcfgXRNCtNGVjXrds/lpNiOeaJJ8A17TPN5xCR9sRCwdQPr Kr2IRQmZ+SZ/ZoJAjCVTfRAqdn1Yw92C9vBCVByyBFFXbG/TvFnaU5/ofZSs+pBd Qc7kTvzH5H6RgBHG0ISlh49XlJdR8+JTG8WekI4DIcwHeEG94djIiqSay94sOBHg r9gkr1bT7ZVu/MJ/dHYPwjH2AWjNkJv4Pfuma6PKHDQ5pt0Eg41GEOqiChDz9wIi gDvQ+v83v7DLPzwl9+n6whgPEjWwCgq9xu8= -----END CERTIFICATE-----Generated at Sun Apr 27 19:50:19 2025 by rpki-client