$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24c9c28d-46b6-3549-8101-ad0cd851e804.roa File: 24c9c28d-46b6-3549-8101-ad0cd851e804.roa (raw, json) Hash identifier: MGmWDpAtf1xNbNl/sLi3YlIkBz83ginKp8YIq8sdVvU= Subject key identifier: 79:EF:A1:ED:E1:CA:1D:1A:82:36:91:D0:2D:80:64:91:A3:45:95:A4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858490E16D29BAD3EB769737FC080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24c9c28d-46b6-3549-8101-ad0cd851e804.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 7342 IP address blocks: 2620:74:52::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:d2:9b:ad:3e:b7:69:73:7f:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=a4a9ac30-6472-4664-9bd5-9cb8d143b3bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5f:99:2f:af:35:e1:47:7b:2a:63:12:4a:69: ec:75:cc:14:3c:8e:31:b7:20:a2:9b:dc:ef:b7:54: b5:67:a3:90:92:9f:95:75:18:0b:76:c5:7e:5d:60: a1:f0:48:82:08:5a:cb:79:e7:9d:5a:a4:2a:ac:9b: 8f:45:39:69:cd:3d:f8:88:d9:07:1a:ec:3a:06:ed: c5:18:37:fe:50:31:9b:58:c7:4b:50:5a:ee:b7:1b: a9:aa:d7:b6:6c:17:b1:22:05:85:98:69:c2:59:77: 73:7f:96:bb:ef:ea:43:6a:20:9c:04:bc:d3:f0:fe: ef:b7:88:b9:cc:8b:6c:99:eb:7d:f8:95:76:21:16: 39:51:b2:af:60:fa:73:ab:b7:d7:65:f4:13:af:38: b3:fe:90:59:71:c6:5b:82:d0:fb:1e:13:c0:71:d5: ee:01:c1:26:e7:f1:28:e0:22:65:2e:01:e6:21:be: 70:88:08:01:ce:92:39:fc:7c:42:95:7d:be:ad:b6: e4:79:73:1e:4e:b6:a8:39:12:0b:02:c9:93:63:dd: 56:bf:f8:2a:c1:e8:ca:9f:37:75:99:0b:47:f8:9c: e3:f6:ab:45:34:f2:48:ab:9e:01:71:3e:d2:a6:a1: 6a:61:70:27:73:e6:9e:cd:99:c3:3d:be:d0:0b:db: 47:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:EF:A1:ED:E1:CA:1D:1A:82:36:91:D0:2D:80:64:91:A3:45:95:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24c9c28d-46b6-3549-8101-ad0cd851e804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:52::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:85:9e:15:f4:d8:74:55:70:85:b6:85:16:04:39:28:96:f7: eb:3d:a9:40:a2:b3:f6:d0:55:51:56:3c:31:bf:ca:68:0e:54: d8:d0:42:ef:9b:a8:36:a7:23:37:e8:2f:c2:9e:ce:85:32:92: 14:0e:8c:19:14:8b:18:b4:0a:3b:96:3a:c3:f1:13:78:60:da: a4:5e:10:05:2f:37:ff:dd:6a:75:4e:aa:0b:58:f5:fb:48:f3: d5:6e:bb:88:8e:c5:95:d0:d5:74:ba:35:4a:6a:69:79:6b:ff: 4c:94:d8:d9:55:aa:a9:57:5a:12:f5:0c:7a:f6:94:2c:2e:63: 5e:18:2d:e4:d1:09:3b:4f:2a:79:2d:02:23:86:cb:57:57:12: 74:68:41:f8:d0:fb:93:af:43:9b:f3:ef:e1:99:e0:7c:7d:68: 5b:4d:59:46:dd:bc:f8:0c:26:97:88:8e:a7:eb:78:96:00:6e: 13:a5:ea:1f:a5:98:03:cd:3b:4f:4c:2a:ad:a2:f0:7a:c7:25: 71:1c:9c:9a:24:65:c9:51:24:28:e0:c8:d0:b2:7f:64:cd:3b: 6f:3c:a5:9c:2b:e9:04:a9:f6:a3:98:88:13:33:19:b1:47:a3: 6b:6d:9f:98:d9:b2:8f:a7:a8:8c:a8:a4:1d:dc:33:9e:cc:b7: 03:af:3c:7d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkOFtKbrT63aXN/wIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk YTRhOWFjMzAtNjQ3Mi00NjY0LTliZDUtOWNiOGQxNDNiM2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhF+ZL6814Ud7KmMSSmnsdcwUPI4xtyCim9zv t1S1Z6OQkp+VdRgLdsV+XWCh8EiCCFrLeeedWqQqrJuPRTlpzT34iNkHGuw6Bu3F GDf+UDGbWMdLUFrutxupqte2bBexIgWFmGnCWXdzf5a77+pDaiCcBLzT8P7vt4i5 zItsmet9+JV2IRY5UbKvYPpzq7fXZfQTrziz/pBZccZbgtD7HhPAcdXuAcEm5/Eo 4CJlLgHmIb5wiAgBzpI5/HxClX2+rbbkeXMeTraoORILAsmTY91Wv/gqwejKnzd1 mQtH+Jzj9qtFNPJIq54BcT7SpqFqYXAnc+aezZnDPb7QC9tHKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHnvoe3hyh0agjaR0C2AZJGjRZWkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjRjOWMyOGQtNDZiNi0z NTQ5LTgxMDEtYWQwY2Q4NTFlODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFyFnhX02HRVcIW2hRYEOSiW9+s9qUCis/bQVVFWPDG/ymgOVNjQ Qu+bqDanIzfoL8KezoUykhQOjBkUixi0CjuWOsPxE3hg2qReEAUvN//danVOqgtY 9ftI89Vuu4iOxZXQ1XS6NUpqaXlr/0yU2NlVqqlXWhL1DHr2lCwuY14YLeTRCTtP KnktAiOGy1dXEnRoQfjQ+5OvQ5vz7+GZ4Hx9aFtNWUbdvPgMJpeIjqfreJYAbhOl 6h+lmAPNO09MKq2i8HrHJXEcnJokZclRJCjgyNCyf2TNO288pZwr6QSp9qOYiBMz GbFHo2ttn5jZso+nqIyopB3cM57MtwOvPH0= -----END CERTIFICATE-----Generated at Wed Apr 9 01:12:23 2025 by rpki-client