$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f981c9ee-f119-39dd-a90c-574d2d8be6ec.roa File: f981c9ee-f119-39dd-a90c-574d2d8be6ec.roa (raw, json) Hash identifier: PzP/VUGWFnOJjUJJX1d4F/MYMv3S/cL8nPeugGqjL/I= Subject key identifier: E6:2F:0E:36:D4:BF:3A:E9:68:34:F0:D6:37:55:B1:48:32:78:53:86 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C223109D66D03F0D9F0480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f981c9ee-f119-39dd-a90c-574d2d8be6ec.roa Signing time: Tue 15 Apr 2025 12:34:55 +0000 ROA not before: Tue 15 Apr 2025 12:34:55 +0000 ROA not after: Mon 14 Jul 2025 12:34:55 +0000 asID: 396560 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:23:10:9d:66:d0:3f:0d:9f:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:55 2025 GMT Not After : Jul 14 12:34:55 2025 GMT Subject: CN=0485a09e-df2a-41ba-888c-d1d1de7616f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0d:53:bf:fb:c9:e5:27:a6:2f:34:ff:0a:7e: e8:52:cc:2a:21:11:ca:76:04:be:e0:c0:f4:49:79: b3:97:79:41:b2:3a:9f:bb:0d:cd:62:80:07:af:ce: 8a:41:22:d6:c6:f7:a4:a6:a4:06:b1:26:b3:1d:7e: 57:36:7b:31:5f:28:9e:ea:c7:bf:eb:8a:3c:bd:83: 09:8b:a7:48:4a:5f:ab:f3:24:ba:e1:da:2a:b1:2a: a0:64:cc:81:d2:5e:72:0c:4a:e9:0e:be:ea:51:87: c4:ec:f1:1f:53:74:9b:60:27:9d:56:a3:ee:48:03: 94:35:ef:3a:30:e6:00:61:bd:95:3e:a4:0a:bf:18: 9e:1a:81:59:b3:c9:e6:35:c3:75:29:0e:65:33:28: 9d:c5:56:dc:c5:f8:f3:5d:ae:ea:28:dc:d3:3f:df: 0d:fa:9c:85:77:78:24:03:ce:fa:de:75:d9:2b:9e: cb:fa:96:86:dc:44:49:a0:0e:17:f7:fe:cf:0e:70: 0c:33:f6:d2:f0:5f:d8:b5:f0:80:2d:d6:40:12:d6: 53:9b:56:ed:d5:db:6b:43:f1:39:4b:21:e6:e3:68: d5:c1:8a:b5:f7:49:4e:8a:48:8b:10:28:ea:6d:8e: a7:20:7a:7b:ed:fd:85:c4:36:38:06:8c:ef:2f:a4: 3a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:2F:0E:36:D4:BF:3A:E9:68:34:F0:D6:37:55:B1:48:32:78:53:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f981c9ee-f119-39dd-a90c-574d2d8be6ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:aa:6d:47:a2:78:c4:c0:e1:db:b4:21:42:7b:e4:cc:80:7c: f5:bc:31:7b:a8:d0:99:a6:db:36:4c:95:af:67:62:97:d7:70: 17:d2:75:8f:13:43:c2:f2:24:b3:a9:88:f2:ae:af:4e:45:32: 27:f3:f9:e3:10:62:e9:0a:da:8f:7d:c6:5f:ec:0d:6d:9f:62: 67:15:50:dc:5b:c8:6f:78:41:ff:99:79:b2:43:66:d2:7a:2a: 29:ea:5b:77:c4:4a:bf:54:23:f2:2b:15:fb:a7:45:0b:26:f0: 4c:2b:85:13:19:b0:55:b4:f4:7c:ac:5c:f7:0f:8c:06:7f:9d: fc:e6:16:0a:4d:df:1f:48:ca:db:3d:df:f6:a6:40:e4:1f:4e: 43:3d:6b:c1:46:a0:34:ea:7f:f9:d2:a1:75:d8:3e:be:af:a1: 44:1c:0b:b1:d6:3b:4d:57:88:6a:e4:f9:64:19:bd:d2:8b:15: 77:7e:91:c8:68:0e:66:c0:07:ae:88:0b:52:06:6d:f1:d3:59: f4:bb:54:7c:00:8b:3e:e1:ff:d6:62:56:ed:60:a1:21:ec:7c: 09:3e:18:e5:fa:64:c8:57:21:86:59:b7:0f:de:ef:0e:d2:14: 14:24:2c:64:30:3f:4b:f6:98:43:35:1e:bb:ea:2e:2c:c1:9f: eb:70:74:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwiMQnWbQPw2fBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NVoXDTI1MDcxNDEyMzQ1NVowLzEtMCsGA1UEAxMk MDQ4NWEwOWUtZGYyYS00MWJhLTg4OGMtZDFkMWRlNzYxNmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig1Tv/vJ5SemLzT/Cn7oUswqIRHKdgS+4MD0 SXmzl3lBsjqfuw3NYoAHr86KQSLWxvekpqQGsSazHX5XNnsxXyie6se/64o8vYMJ i6dISl+r8yS64doqsSqgZMyB0l5yDErpDr7qUYfE7PEfU3SbYCedVqPuSAOUNe86 MOYAYb2VPqQKvxieGoFZs8nmNcN1KQ5lMyidxVbcxfjzXa7qKNzTP98N+pyFd3gk A8763nXZK57L+paG3ERJoA4X9/7PDnAMM/bS8F/YtfCALdZAEtZTm1bt1dtrQ/E5 SyHm42jVwYq190lOikiLECjqbY6nIHp77f2FxDY4BozvL6Q6LQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOYvDjbUvzrpaDTw1jdVsUgyeFOGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjk4MWM5ZWUtZjExOS0z OWRkLWE5MGMtNTc0ZDJkOGJlNmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADWqbUeieMTA4du0IUJ75MyAfPW8MXuo0Jmm2zZMla9nYpfXcBfS dY8TQ8LyJLOpiPKur05FMifz+eMQYukK2o99xl/sDW2fYmcVUNxbyG94Qf+ZebJD ZtJ6KinqW3fESr9UI/IrFfunRQsm8EwrhRMZsFW09HysXPcPjAZ/nfzmFgpN3x9I yts93/amQOQfTkM9a8FGoDTqf/nSoXXYPr6voUQcC7HWO01XiGrk+WQZvdKLFXd+ kchoDmbAB66IC1IGbfHTWfS7VHwAiz7h/9ZiVu1goSHsfAk+GOX6ZMhXIYZZtw/e 7w7SFBQkLGQwP0v2mEM1HrvqLizBn+twdNM= -----END CERTIFICATE-----Generated at Sun Apr 27 20:56:50 2025 by rpki-client