$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb0ab366-4f1a-3171-a1fe-b1b4484e5092.roa File: fb0ab366-4f1a-3171-a1fe-b1b4484e5092.roa (raw, json) Hash identifier: AC09mWL0/uZspLsBkuf2zbEi00FwE3r6Dr/6t5f8UTs= Subject key identifier: 80:6D:9A:50:0B:F5:9A:B0:74:42:93:F5:7F:FD:4C:AC:09:7F:BE:71 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C2230285222395DE880600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb0ab366-4f1a-3171-a1fe-b1b4484e5092.roa Signing time: Tue 15 Apr 2025 12:34:55 +0000 ROA not before: Tue 15 Apr 2025 12:34:55 +0000 ROA not after: Mon 14 Jul 2025 12:34:55 +0000 asID: 396604 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:23:02:85:22:23:95:de:88:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:55 2025 GMT Not After : Jul 14 12:34:55 2025 GMT Subject: CN=57ab24c6-a686-4307-a3ed-f5947a4ca005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:cf:61:de:5f:f5:62:a1:ba:c6:cf:31:e7:0a: 22:88:7c:88:78:a7:fa:0d:1e:f7:ca:d5:27:29:12: 7c:03:e4:89:0e:67:20:a0:a5:25:f5:d4:d4:42:88: 0f:a8:77:12:39:f2:aa:b8:9c:15:1d:68:ce:35:1d: db:80:2b:b9:20:35:1b:9e:98:72:b1:5c:eb:5b:88: f4:35:0b:44:9e:54:a1:d9:65:4e:78:64:1c:76:ab: 50:7e:9a:b6:f3:4c:c7:12:9a:a2:01:85:02:2e:7d: 49:60:f4:0e:0a:b7:8d:57:23:67:71:33:85:21:00: 9d:a0:27:a9:5d:d5:5a:68:b5:ee:6c:39:26:f6:c7: 52:63:2c:ad:75:dd:e0:e0:98:cb:4c:3e:58:d7:0b: d5:58:6a:d5:07:bf:73:ad:db:e0:cb:cf:d6:d9:1a: 61:84:d9:93:0f:12:eb:93:6f:e0:f8:dd:0d:d6:28: 5f:73:e9:6b:bc:f3:d4:81:58:4b:93:f2:82:e7:8f: ef:0b:2c:a7:fe:5c:12:38:f3:89:42:13:08:84:95: f5:f6:d5:da:6a:fe:0f:07:e4:e0:91:c0:67:f7:7e: 26:26:45:2e:8e:bf:d1:42:5a:20:39:b3:32:76:73: fe:b2:b4:30:9e:25:e3:15:ab:e4:b6:9c:e5:9c:fb: 67:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:6D:9A:50:0B:F5:9A:B0:74:42:93:F5:7F:FD:4C:AC:09:7F:BE:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb0ab366-4f1a-3171-a1fe-b1b4484e5092.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:06:24:d4:f9:dc:63:a3:f1:66:b5:fc:cc:7c:2b:52:d0:e8: 79:13:1d:64:53:29:51:09:a3:f0:f1:8d:85:47:aa:60:39:d6: 49:e1:1a:64:ce:5b:ad:2e:63:76:ab:48:2a:a9:c6:3b:6b:35: aa:57:15:43:4e:d0:1f:6a:b2:79:97:0c:29:09:d7:33:1c:c2: 20:51:80:83:ff:7f:45:ed:af:fe:3c:85:55:82:84:8f:0e:4b: 16:45:c1:e5:8c:99:b4:91:e0:17:4c:9e:6e:71:69:60:a6:57: 2c:75:96:4a:ff:24:78:40:1f:c9:1b:51:98:89:fd:31:d2:ee: c2:61:7a:d1:84:de:00:c6:8e:72:e5:93:d6:64:07:b7:53:d9: 68:1f:63:4c:76:a0:68:1e:81:69:8c:d5:d5:63:31:98:43:65: 19:2f:84:e2:29:0e:4f:d3:10:2a:d8:48:9c:a0:61:b9:d5:63: 04:b5:77:6d:d5:53:4d:03:fd:6f:21:52:82:ef:98:e6:6e:d9: ca:27:aa:26:f6:c6:b9:89:99:8d:20:bf:56:65:4e:a0:3d:a5: cd:91:17:a9:dc:76:cc:04:ba:98:fc:8c:b9:f1:2f:5a:5f:23: cc:94:38:85:10:f4:a3:89:cc:ed:6a:7e:4e:14:51:48:ea:99: f4:24:d3:18 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwiMChSIjld6IBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NVoXDTI1MDcxNDEyMzQ1NVowLzEtMCsGA1UEAxMk NTdhYjI0YzYtYTY4Ni00MzA3LWEzZWQtZjU5NDdhNGNhMDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgc9h3l/1YqG6xs8x5woiiHyIeKf6DR73ytUn KRJ8A+SJDmcgoKUl9dTUQogPqHcSOfKquJwVHWjONR3bgCu5IDUbnphysVzrW4j0 NQtEnlSh2WVOeGQcdqtQfpq280zHEpqiAYUCLn1JYPQOCreNVyNncTOFIQCdoCep XdVaaLXubDkm9sdSYyytdd3g4JjLTD5Y1wvVWGrVB79zrdvgy8/W2RphhNmTDxLr k2/g+N0N1ihfc+lrvPPUgVhLk/KC54/vCyyn/lwSOPOJQhMIhJX19tXaav4PB+Tg kcBn934mJkUujr/RQlogObMydnP+srQwniXjFavktpzlnPtn8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIBtmlAL9ZqwdEKT9X/9TKwJf75xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmIwYWIzNjYtNGYxYS0z MTcxLWExZmUtYjFiNDQ4NGU1MDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAYGJNT53GOj8Wa1/Mx8K1LQ6HkTHWRTKVEJo/DxjYVHqmA51knh GmTOW60uY3arSCqpxjtrNapXFUNO0B9qsnmXDCkJ1zMcwiBRgIP/f0Xtr/48hVWC hI8OSxZFweWMmbSR4BdMnm5xaWCmVyx1lkr/JHhAH8kbUZiJ/THS7sJhetGE3gDG jnLlk9ZkB7dT2WgfY0x2oGgegWmM1dVjMZhDZRkvhOIpDk/TECrYSJygYbnVYwS1 d23VU00D/W8hUoLvmOZu2conqib2xrmJmY0gv1ZlTqA9pc2RF6ncdswEupj8jLnx L1pfI8yUOIUQ9KOJzO1qfk4UUUjqmfQk0xg= -----END CERTIFICATE-----Generated at Sun Apr 27 17:47:24 2025 by rpki-client