$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fbdf453a-5a87-3bd1-b390-b73280df4dfb.roa File: fbdf453a-5a87-3bd1-b390-b73280df4dfb.roa (raw, json) Hash identifier: wa2VZgafXHReZUEcXOwkFvqaSUxKXmfl0JKu/l8K8eI= Subject key identifier: B3:74:58:9C:CB:87:4A:44:15:65:4F:CF:2D:5D:58:2A:20:44:5C:29 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C221DDCBF7C9109A479780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fbdf453a-5a87-3bd1-b390-b73280df4dfb.roa Signing time: Tue 15 Apr 2025 12:34:55 +0000 ROA not before: Tue 15 Apr 2025 12:34:55 +0000 ROA not after: Mon 14 Jul 2025 12:34:55 +0000 asID: 396590 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:21:dd:cb:f7:c9:10:9a:47:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:55 2025 GMT Not After : Jul 14 12:34:55 2025 GMT Subject: CN=814692eb-6717-4fec-8755-1e44d26c9b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e8:f0:0e:7c:ff:d0:ca:a8:9c:92:25:71:b5: 97:21:f7:78:b3:78:40:9a:db:9b:75:de:bd:7b:73: 0c:5e:00:ba:61:00:4f:00:5e:10:e4:ac:1a:b0:47: a3:9c:a3:b8:14:09:28:ed:cc:6e:3d:5b:f0:75:b2: ac:b9:7d:87:09:9c:0f:f7:d9:a6:5d:df:5e:fd:f0: ef:94:3d:07:e2:ca:ea:0b:34:40:8d:97:41:a6:57: a5:f9:25:ec:81:c4:bc:47:41:f0:d0:ef:93:c6:81: b9:46:da:f8:38:ef:e4:66:28:a8:3d:85:47:cb:64: f6:66:b2:31:ca:7c:d3:9f:14:1e:8a:fe:d3:d7:89: d5:6d:9e:c6:cd:f9:2a:58:39:da:92:35:78:b2:80: 33:2c:37:88:ab:7d:74:3e:5b:3d:96:fe:21:f5:81: ca:30:c9:db:13:3a:50:a2:5f:5b:74:f1:6c:f6:91: 91:d0:af:e5:2e:4c:ec:72:0e:e7:5b:ce:ca:88:b6: 9c:94:c4:e0:ad:36:2c:47:e4:3d:a4:49:5c:5b:9e: a1:c7:3a:18:67:42:99:7b:fd:9c:e7:b6:65:a8:9e: 6b:8f:0f:76:ad:ab:e8:0a:69:fd:27:46:ae:4a:2e: ca:c3:33:87:d2:4f:f7:45:22:7e:fc:64:22:0a:88: 47:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:74:58:9C:CB:87:4A:44:15:65:4F:CF:2D:5D:58:2A:20:44:5C:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fbdf453a-5a87-3bd1-b390-b73280df4dfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:bc:9a:27:4b:dd:27:82:f9:8d:db:65:ac:eb:4a:ae:6b:90: 6e:fe:73:b6:e8:64:82:ea:2f:35:3f:1d:30:21:43:d4:08:ce: ca:d6:64:dd:6a:83:d6:29:30:32:11:ec:07:e2:19:24:35:61: 1e:6c:12:52:6b:ee:8e:ec:60:52:77:5c:f6:ac:93:b0:67:80: cf:6c:44:34:95:b0:38:8c:1b:4e:43:79:24:26:38:f1:6b:c4: 11:1f:cc:ca:bc:6d:29:f6:d7:44:b6:2f:11:44:65:35:9c:2c: ba:5c:d6:07:01:6d:4e:37:e4:1f:69:32:49:13:e1:9d:e8:92: a6:f5:5d:4c:42:b4:e4:5b:9b:51:b8:c5:7c:10:25:01:ed:50: 12:cb:90:8e:16:7e:1c:9e:9c:3d:e3:9d:60:c4:e4:96:2e:d1: 61:2d:f4:3b:d9:45:47:64:7f:35:19:30:e3:a2:dc:62:b7:f7: a7:0a:ed:86:08:89:81:19:73:e1:08:2b:91:37:da:fb:4b:eb: d9:8a:ec:89:7e:62:83:c0:3a:d6:ea:61:92:81:35:b3:1f:53: 78:db:c9:07:e0:1c:63:29:d6:da:e7:47:49:ff:c8:c6:d2:95: 71:09:ff:08:8a:51:20:95:62:4b:78:27:5e:1a:4d:47:23:4b: 5a:ff:95:a6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwiHdy/fJEJpHl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NVoXDTI1MDcxNDEyMzQ1NVowLzEtMCsGA1UEAxMk ODE0NjkyZWItNjcxNy00ZmVjLTg3NTUtMWU0NGQyNmM5YjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApejwDnz/0MqonJIlcbWXIfd4s3hAmtubdd69 e3MMXgC6YQBPAF4Q5KwasEejnKO4FAko7cxuPVvwdbKsuX2HCZwP99mmXd9e/fDv lD0H4srqCzRAjZdBplel+SXsgcS8R0Hw0O+TxoG5Rtr4OO/kZiioPYVHy2T2ZrIx ynzTnxQeiv7T14nVbZ7GzfkqWDnakjV4soAzLDeIq310Pls9lv4h9YHKMMnbEzpQ ol9bdPFs9pGR0K/lLkzscg7nW87KiLaclMTgrTYsR+Q9pElcW56hxzoYZ0KZe/2c 57ZlqJ5rjw92ravoCmn9J0auSi7KwzOH0k/3RSJ+/GQiCohHdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLN0WJzLh0pEFWVPzy1dWCogRFwpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmJkZjQ1M2EtNWE4Ny0z YmQxLWIzOTAtYjczMjgwZGY0ZGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI+8midL3SeC+Y3bZazrSq5rkG7+c7boZILqLzU/HTAhQ9QIzsrW ZN1qg9YpMDIR7AfiGSQ1YR5sElJr7o7sYFJ3XPask7BngM9sRDSVsDiMG05DeSQm OPFrxBEfzMq8bSn210S2LxFEZTWcLLpc1gcBbU435B9pMkkT4Z3okqb1XUxCtORb m1G4xXwQJQHtUBLLkI4WfhyenD3jnWDE5JYu0WEt9DvZRUdkfzUZMOOi3GK396cK 7YYIiYEZc+EIK5E32vtL69mK7Il+YoPAOtbqYZKBNbMfU3jbyQfgHGMp1trnR0n/ yMbSlXEJ/wiKUSCVYkt4J14aTUcjS1r/laY= -----END CERTIFICATE-----Generated at Sun Apr 27 17:55:26 2025 by rpki-client