$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/343d7628-dbc6-3c0f-8209-5a8e298e0db4.roa File: 343d7628-dbc6-3c0f-8209-5a8e298e0db4.roa (raw, json) Hash identifier: ygZRztA7v1i45JZ7k5s92n+9T/rsA8/7gJEDelPTDD8= Subject key identifier: 2F:55:3D:24:5E:26:BB:FC:71:95:AA:22:21:6E:F2:62:91:CF:90:EE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848D7A659A073E84937F5F8CCC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/343d7628-dbc6-3c0f-8209-5a8e298e0db4.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 7342 IP address blocks: 2620:74:69::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:59:a0:73:e8:49:37:f5:f8:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=ec9bd01c-e95b-4480-b76f-1b619f84ffb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b6:84:b0:22:83:88:a1:df:1c:d3:23:c8:8f: e2:1a:d6:4e:19:50:6b:68:4a:69:c5:2a:3e:f7:da: f3:85:dc:7a:21:ab:2a:3e:1b:28:be:c0:96:6f:fd: ef:22:33:25:ae:22:e9:ac:5c:a4:e6:a6:e7:69:0b: 7d:e1:e0:c8:0f:36:4c:8f:57:dc:d1:8a:9e:46:c4: 51:8c:dd:aa:89:4b:04:76:a6:d4:bd:84:45:10:2a: f9:18:7c:4b:65:1c:5f:3f:c5:26:c1:dd:1c:ae:6c: 5f:9d:23:a7:0a:7e:ea:b3:4d:a1:3d:1d:30:47:90: 0d:fd:96:a0:35:68:46:a9:9e:e3:52:19:7d:93:cd: 2f:d0:71:05:80:2c:55:52:39:65:04:e2:c7:78:5c: 60:7f:fc:75:a4:95:f5:73:fd:7d:9c:68:a5:28:fb: cf:63:05:fd:20:3d:a7:8a:05:7d:f9:06:df:95:af: b4:63:58:b0:09:0e:8a:b1:f6:89:5e:10:1d:5a:b4: 6a:b8:df:b9:54:eb:4a:24:8c:3d:be:76:85:8a:87: 20:e7:e5:51:58:46:07:c9:5f:6a:84:bb:a9:0f:c9: ce:1b:1e:43:5c:86:49:ba:16:36:93:b4:ae:67:2e: 81:89:e7:e2:67:6f:64:3c:15:fb:3a:61:29:42:ff: 30:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:55:3D:24:5E:26:BB:FC:71:95:AA:22:21:6E:F2:62:91:CF:90:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/343d7628-dbc6-3c0f-8209-5a8e298e0db4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:69::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:47:6d:5d:b8:e3:01:de:e1:64:5f:15:70:ba:7c:63:93:62: 64:2c:a4:8f:9c:e7:1e:55:fc:93:80:26:2b:41:94:a2:a4:f2: 01:09:bc:4e:a8:62:4d:c9:54:af:5a:51:62:58:c7:2d:a0:9d: 44:2b:0f:84:5a:ec:66:78:12:71:e6:87:a7:40:63:0b:1d:0a: e8:7b:0e:f7:1a:5b:53:ad:01:0c:f6:7a:a7:3a:2e:e9:ed:6f: 24:29:a7:2d:2f:1e:44:93:84:4a:ec:6c:fc:6b:94:45:ac:60: ed:34:37:5b:77:bf:0e:36:51:64:e1:94:d8:11:39:08:56:6d: cf:23:59:ac:fd:b8:b4:57:68:6f:ee:44:e4:0a:67:b9:c0:3a: a2:37:ef:bc:ad:6e:d7:9a:73:79:31:87:e6:98:d5:e8:6a:cc: a9:d9:e0:5c:37:51:00:bf:6e:1e:eb:a3:d8:8f:64:6e:6c:a3: e2:9a:1d:9f:46:09:68:62:93:d6:ef:93:d9:75:33:53:48:b5: 8f:8a:76:e3:70:53:9a:37:2a:5e:91:5e:eb:61:4e:fd:46:44: 28:3a:ab:fb:82:43:b5:62:39:ea:2e:a2:b7:93:42:82:00:82: 0d:f4:c3:e3:b1:a9:45:5f:ce:f7:2b:98:00:5d:ba:ed:af:c7: dc:f8:cd:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjXplmgc+hJN/X4zMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk ZWM5YmQwMWMtZTk1Yi00NDgwLWI3NmYtMWI2MTlmODRmZmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbaEsCKDiKHfHNMjyI/iGtZOGVBraEppxSo+ 99rzhdx6IasqPhsovsCWb/3vIjMlriLprFyk5qbnaQt94eDIDzZMj1fc0YqeRsRR jN2qiUsEdqbUvYRFECr5GHxLZRxfP8Umwd0crmxfnSOnCn7qs02hPR0wR5AN/Zag NWhGqZ7jUhl9k80v0HEFgCxVUjllBOLHeFxgf/x1pJX1c/19nGilKPvPYwX9ID2n igV9+Qbfla+0Y1iwCQ6KsfaJXhAdWrRquN+5VOtKJIw9vnaFiocg5+VRWEYHyV9q hLupD8nOGx5DXIZJuhY2k7SuZy6BiefiZ29kPBX7OmEpQv8wyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC9VPSReJrv8cZWqIiFu8mKRz5DuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzQzZDc2MjgtZGJjNi0z YzBmLTgyMDktNWE4ZTI5OGUwZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAERHbV244wHe4WRfFXC6fGOTYmQspI+c5x5V/JOAJitBlKKk8gEJ vE6oYk3JVK9aUWJYxy2gnUQrD4Ra7GZ4EnHmh6dAYwsdCuh7DvcaW1OtAQz2eqc6 LuntbyQppy0vHkSThErsbPxrlEWsYO00N1t3vw42UWThlNgROQhWbc8jWaz9uLRX aG/uROQKZ7nAOqI377ytbteac3kxh+aY1ehqzKnZ4Fw3UQC/bh7ro9iPZG5so+Ka HZ9GCWhik9bvk9l1M1NItY+KduNwU5o3Kl6RXuthTv1GRCg6q/uCQ7ViOeouoreT QoIAgg30w+OxqUVfzvcrmABduu2vx9z4zUE= -----END CERTIFICATE-----Generated at Wed Apr 9 01:10:33 2025 by rpki-client