$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f05635fe-210f-3692-bb05-c619753cba59.roa File: f05635fe-210f-3692-bb05-c619753cba59.roa (raw, json) Hash identifier: j5VgzmziHk34VfJ3r9apDZRJdPTUNDtTwi1YnP+ccwc= Subject key identifier: 8D:67:0A:51:6B:DF:64:B5:16:2E:1F:44:50:06:9A:D0:A6:B0:45:61 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C21D889FFA70303644B6C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f05635fe-210f-3692-bb05-c619753cba59.roa Signing time: Tue 15 Apr 2025 12:34:53 +0000 ROA not before: Tue 15 Apr 2025 12:34:53 +0000 ROA not after: Mon 14 Jul 2025 12:34:53 +0000 asID: 397194 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:1d:88:9f:fa:70:30:36:44:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:53 2025 GMT Not After : Jul 14 12:34:53 2025 GMT Subject: CN=ddf08a72-c428-4dd1-bda8-681db522dabf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a8:a6:49:58:c7:f3:e2:13:f6:91:81:cf:78: df:d2:db:81:65:3d:e3:e5:ca:23:42:1c:2a:27:58: 7c:e7:ea:4f:dc:82:fb:1d:6c:07:bd:b9:44:86:aa: c6:4f:61:cc:f7:62:60:51:be:b0:fd:df:65:0f:9e: 3e:ac:a5:cb:29:2a:da:73:1e:00:8c:04:9c:f2:bd: 0c:8b:49:2d:46:ba:ec:6a:75:81:d1:a4:30:40:80: 76:45:b7:27:16:2c:76:e7:70:8b:dd:60:4d:de:21: 4d:e9:f7:ee:bd:a5:4e:02:47:cd:e9:69:c6:69:9b: 12:25:fb:a3:23:06:34:05:ab:98:f1:71:fb:e5:ad: c0:6c:67:0f:f1:1f:d2:63:16:31:ce:98:b3:fa:82: 40:66:76:b1:6c:77:b4:bd:55:29:a2:c6:00:8d:f1: 33:b1:69:dc:70:7f:48:c8:f6:fb:c7:19:cc:12:6b: b2:b2:0f:06:02:37:2c:58:29:65:46:a6:7b:ca:26: d8:7f:82:48:7a:11:d9:6f:57:c0:5e:fd:e8:17:d1: b3:d5:d3:df:4c:c1:a6:45:1e:32:73:53:ab:1c:01: 68:2e:e4:ff:9b:69:45:4b:0b:7a:11:ea:8b:52:70: 05:ac:d0:74:f9:0e:8c:45:62:5f:45:92:7d:8f:81: d7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:67:0A:51:6B:DF:64:B5:16:2E:1F:44:50:06:9A:D0:A6:B0:45:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f05635fe-210f-3692-bb05-c619753cba59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:52:4d:8a:2b:47:48:c3:51:c6:75:1b:b5:7b:92:84:76:68: 50:4e:5b:02:b3:0f:6c:ef:7e:c6:c4:6d:4d:96:30:d3:6f:d4: 69:a7:3d:52:d8:cd:e8:97:6f:7f:8d:33:8f:e3:28:f0:a9:17: ae:c5:7c:49:81:3f:d3:e2:1b:9c:ed:72:38:6c:0d:9c:90:2d: 25:7d:be:08:d6:d0:ac:14:70:dd:ea:c6:71:7e:1f:3d:22:67: db:00:12:de:a5:90:86:03:a6:54:1d:51:c1:4c:0a:32:9c:95: e1:04:20:6d:a7:f5:4a:c8:f9:52:ed:c0:d6:3c:14:2f:76:98: 9a:9b:fe:82:cd:e8:92:36:c2:0b:92:9b:da:be:ad:ee:61:3b: 8c:66:cb:a2:d5:e9:63:7f:a0:85:e6:2e:0d:84:6f:d9:8d:49: 15:72:02:d4:21:15:d0:e8:19:2b:48:e1:27:e4:da:f1:51:5c: 83:39:e2:60:96:17:58:8c:47:dd:ea:8e:a6:8f:9e:de:71:76: ce:63:39:b5:24:35:d5:69:a2:6b:8c:c0:6a:20:dd:cc:0d:4b: 93:bd:6e:01:f0:5d:b2:5f:4a:70:ec:40:57:38:fe:89:53:3f: 31:7d:89:d1:a9:4b:7b:8c:73:29:11:2f:63:a6:c1:0f:1a:2b: 0a:4b:58:88 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwh2In/pwMDZEtsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1M1oXDTI1MDcxNDEyMzQ1M1owLzEtMCsGA1UEAxMk ZGRmMDhhNzItYzQyOC00ZGQxLWJkYTgtNjgxZGI1MjJkYWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qimSVjH8+IT9pGBz3jf0tuBZT3j5cojQhwq J1h85+pP3IL7HWwHvblEhqrGT2HM92JgUb6w/d9lD54+rKXLKSracx4AjASc8r0M i0ktRrrsanWB0aQwQIB2RbcnFix253CL3WBN3iFN6ffuvaVOAkfN6WnGaZsSJfuj IwY0BauY8XH75a3AbGcP8R/SYxYxzpiz+oJAZnaxbHe0vVUposYAjfEzsWnccH9I yPb7xxnMEmuysg8GAjcsWCllRqZ7yibYf4JIehHZb1fAXv3oF9Gz1dPfTMGmRR4y c1OrHAFoLuT/m2lFSwt6EeqLUnAFrNB0+Q6MRWJfRZJ9j4HXlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI1nClFr32S1Fi4fRFAGmtCmsEVhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjA1NjM1ZmUtMjEwZi0z NjkyLWJiMDUtYzYxOTc1M2NiYTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGVSTYorR0jDUcZ1G7V7koR2aFBOWwKzD2zvfsbEbU2WMNNv1Gmn PVLYzeiXb3+NM4/jKPCpF67FfEmBP9PiG5ztcjhsDZyQLSV9vgjW0KwUcN3qxnF+ Hz0iZ9sAEt6lkIYDplQdUcFMCjKcleEEIG2n9UrI+VLtwNY8FC92mJqb/oLN6JI2 wguSm9q+re5hO4xmy6LV6WN/oIXmLg2Eb9mNSRVyAtQhFdDoGStI4Sfk2vFRXIM5 4mCWF1iMR93qjqaPnt5xds5jObUkNdVpomuMwGog3cwNS5O9bgHwXbJfSnDsQFc4 /olTPzF9idGpS3uMcykRL2OmwQ8aKwpLWIg= -----END CERTIFICATE-----Generated at Sun Apr 27 17:56:25 2025 by rpki-client