$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f6f15930-2225-3240-b395-7cdcf97f6dd6.roa File: f6f15930-2225-3240-b395-7cdcf97f6dd6.roa (raw, json) Hash identifier: IBth+8U+vF7vpz8muToP8+EoRWf4elW0duo8epkD6a4= Subject key identifier: 16:46:DB:94:0A:28:09:F9:F3:93:53:57:E9:BF:53:D1:43:AE:D2:4F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858494CC94BE89168F97FE2F17340 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f6f15930-2225-3240-b395-7cdcf97f6dd6.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 0 IP address blocks: 2620:74:93::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:4b:e8:91:68:f9:7f:e2:f1:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=de552cd6-c880-488c-9549-baf82090c235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:46:e8:01:54:e9:11:48:f1:0f:53:28:c3:5d: 92:36:30:25:c4:f3:89:c7:28:bc:c9:93:dd:3a:95: 0b:06:eb:ec:fe:ff:c5:23:81:73:35:c7:f4:ef:f5: c0:f3:2b:1d:e7:24:21:f9:aa:e7:82:1c:29:3a:27: 67:24:5e:17:5d:cd:f7:71:8a:85:a4:c6:68:82:3a: 6d:2d:5f:34:bc:00:2a:b4:38:9b:d1:61:b0:2d:9d: 0e:ed:07:1e:cd:67:6f:d3:df:0e:c8:93:46:50:61: 25:8d:20:13:77:90:8f:81:5c:f1:56:61:34:22:d6: 86:8f:3d:28:ad:1c:b4:db:b7:1a:68:2c:19:c1:c2: c0:8e:a4:c2:73:fe:7b:4c:5b:e3:89:31:b9:d5:cb: 8a:ee:88:9d:38:51:f8:bc:42:71:89:83:37:8a:d7: bb:cb:16:71:1b:3b:6b:c8:bd:a1:0a:58:ec:a4:98: 98:7a:58:0b:7e:99:77:ab:f1:a2:0b:13:ae:15:a6: 4a:bc:2e:c4:fd:a2:2e:89:46:37:25:46:8d:bb:62: 65:05:ea:84:0c:62:aa:af:28:17:63:6f:eb:33:af: eb:ce:91:16:af:0e:32:3c:11:5a:f8:a8:e2:f8:b4: 6d:ab:1c:47:74:bb:e5:4a:f2:a1:3f:dc:e1:21:1a: f7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:46:DB:94:0A:28:09:F9:F3:93:53:57:E9:BF:53:D1:43:AE:D2:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f6f15930-2225-3240-b395-7cdcf97f6dd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:93::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:4c:d0:1f:e4:a1:96:90:35:a1:ca:fe:f8:a4:85:82:7c:28: 77:f4:83:2b:2a:70:d6:2c:32:d5:f6:53:e2:cc:df:ad:ca:78: 77:1b:07:df:08:b9:4d:dc:65:ea:71:55:35:25:72:a6:f6:bf: 73:d0:e6:0a:8b:c3:69:55:b2:92:89:0a:03:fe:c1:37:26:31: 13:f5:90:7c:2b:2d:a7:f2:b3:21:1e:54:85:5c:f4:d3:cf:19: 33:8a:9a:f8:06:2b:4e:d0:b9:e9:51:d8:09:18:6e:91:e0:b8: 7f:6f:5f:07:8c:03:40:27:62:61:58:e0:e0:fd:6f:08:fc:3e: c9:0f:af:be:08:0c:16:06:c4:6d:a2:d0:1b:6c:23:0b:2a:18: 5c:a4:ac:6c:77:36:cb:af:82:35:70:e0:c0:9b:eb:57:b3:2d: 81:73:f9:73:c1:28:a4:e6:88:b9:56:20:be:60:d3:63:8c:2e: 4c:17:78:dc:09:21:87:03:9d:6b:bd:e3:00:f6:80:43:8a:ba: b0:0d:71:21:ec:9b:73:43:12:50:84:89:21:52:26:41:0b:66: 1d:cc:c5:5d:7f:6b:33:4d:32:db:15:ad:be:ff:e2:90:20:31: 31:24:0e:d7:51:c2:3b:6a:b5:04:61:96:f2:28:e4:6f:44:57: 53:0e:8f:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElMyUvokWj5f+Lxc0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk ZGU1NTJjZDYtYzg4MC00ODhjLTk1NDktYmFmODIwOTBjMjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUboAVTpEUjxD1Mow12SNjAlxPOJxyi8yZPd OpULBuvs/v/FI4FzNcf07/XA8ysd5yQh+arnghwpOidnJF4XXc33cYqFpMZogjpt LV80vAAqtDib0WGwLZ0O7QcezWdv098OyJNGUGEljSATd5CPgVzxVmE0ItaGjz0o rRy027caaCwZwcLAjqTCc/57TFvjiTG51cuK7oidOFH4vEJxiYM3ite7yxZxGztr yL2hCljspJiYelgLfpl3q/GiCxOuFaZKvC7E/aIuiUY3JUaNu2JlBeqEDGKqrygX Y2/rM6/rzpEWrw4yPBFa+Kji+LRtqxxHdLvlSvKhP9zhIRr3iQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBZG25QKKAn585NTV+m/U9FDrtJPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjZmMTU5MzAtMjIyNS0z MjQwLWIzOTUtN2NkY2Y5N2Y2ZGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABtM0B/koZaQNaHK/vikhYJ8KHf0gysqcNYsMtX2U+LM363KeHcb B98IuU3cZepxVTUlcqb2v3PQ5gqLw2lVspKJCgP+wTcmMRP1kHwrLafysyEeVIVc 9NPPGTOKmvgGK07QuelR2AkYbpHguH9vXweMA0AnYmFY4OD9bwj8PskPr74IDBYG xG2i0BtsIwsqGFykrGx3NsuvgjVw4MCb61ezLYFz+XPBKKTmiLlWIL5g02OMLkwX eNwJIYcDnWu94wD2gEOKurANcSHsm3NDElCEiSFSJkELZh3MxV1/azNNMtsVrb7/ 4pAgMTEkDtdRwjtqtQRhlvIo5G9EV1MOj8g= -----END CERTIFICATE-----Generated at Sat Apr 26 16:18:16 2025 by rpki-client