$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/53c4457a-8d70-366c-bc84-ccda67b517c9.roa File: 53c4457a-8d70-366c-bc84-ccda67b517c9.roa (raw, json) Hash identifier: 1cP0dWwmxy9VQ9cMd6QeNFbsMwf05ZwIRCsRqrIs+Jc= Subject key identifier: 84:88:46:B1:DA:42:EE:18:41:6D:AD:ED:B9:47:25:D1:48:09:AF:6D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848D7A658764C68EF418C7B3E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/53c4457a-8d70-366c-bc84-ccda67b517c9.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 7342 IP address blocks: 2620:74:a6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:58:76:4c:68:ef:41:8c:7b:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=34537fcc-8c30-4791-8674-9c2c26e7eb69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0a:19:69:e9:a5:72:86:88:ab:ee:36:38:69: 00:13:a8:0d:49:84:f4:01:05:ae:9b:ee:6e:b4:a2: 79:ad:12:67:b6:20:e4:87:1e:7e:a0:46:93:a0:63: 94:f6:31:0b:2f:7c:8d:7c:c9:8d:7b:9d:de:4a:24: 20:ee:b7:e5:22:2f:a4:4b:11:00:58:e4:b1:0c:dc: 87:56:08:d8:46:15:bb:e9:49:c9:22:36:6b:d5:28: af:3d:c7:c8:8f:72:b2:23:7d:e1:64:68:91:bf:fb: 79:c6:2d:3b:37:bb:54:34:27:7b:fb:a9:26:eb:71: ae:a8:0f:09:29:46:d1:70:cb:a4:c3:0e:90:a8:0e: 4a:39:d5:64:82:53:6f:5d:5a:c0:0a:ea:0b:8d:c2: 3a:80:62:32:a5:29:26:44:bf:47:3a:32:43:2e:a3: b9:2d:fa:80:7c:45:1c:90:61:8b:fb:99:e3:bc:3e: 79:05:54:7a:09:42:dc:3e:40:23:1d:7f:bf:f6:08: f4:1b:3e:09:29:c6:1c:d1:d5:d1:47:6c:a3:77:09: cb:2b:78:2f:dd:c3:a0:28:a0:45:3d:16:1e:7e:9a: 8c:64:20:09:72:3c:61:10:cf:69:44:6d:b5:3c:a9: 08:3c:79:ed:a6:5d:cc:c2:92:87:21:a9:f8:ef:d8: ee:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:88:46:B1:DA:42:EE:18:41:6D:AD:ED:B9:47:25:D1:48:09:AF:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/53c4457a-8d70-366c-bc84-ccda67b517c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:a6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:0b:d2:97:0e:27:f0:45:1b:ed:03:80:cd:82:15:7c:7e:d8: 7c:6e:7b:cc:b2:d2:3f:66:69:66:5e:47:f6:1c:20:61:fa:f5: 6c:8d:5a:7d:3c:00:6f:21:24:ec:e8:6b:ed:87:bb:fd:1a:73: b0:bb:34:e8:7d:50:82:42:13:bf:21:87:15:cd:9a:a6:52:9b: 8a:ef:2d:94:d5:a3:e9:6b:41:83:24:f9:b8:90:08:71:e9:9d: c2:c6:f3:f5:48:e7:1a:31:3c:3e:89:48:35:dc:bc:cd:c1:ca: 17:bd:26:e9:08:13:07:c6:98:db:ae:12:42:01:7c:eb:0b:9b: b3:98:f7:55:58:e0:a0:e6:59:0c:e1:32:de:7d:2f:25:4f:61: a9:f0:e8:82:c4:36:1e:1f:1e:2c:ad:5b:31:f9:9c:48:83:1d: 9f:f8:17:83:cf:9e:82:9a:1f:f0:d3:78:bf:69:b1:ed:4f:3c: 9f:c0:d8:d1:26:78:d1:9d:07:f6:1f:30:ea:a1:a6:79:6e:8a: b4:1b:a6:42:c6:27:3b:e5:af:fb:a1:b1:d1:3f:c5:e9:68:9e: 9e:68:cd:1d:1e:62:46:31:f1:4e:a4:be:81:87:55:a5:7f:a9: d7:de:46:ed:d0:84:0f:1c:ee:4d:5d:ef:7b:41:6c:f8:d6:19: 75:7a:07:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjXplh2TGjvQYx7PoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk MzQ1MzdmY2MtOGMzMC00NzkxLTg2NzQtOWMyYzI2ZTdlYjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogoZaemlcoaIq+42OGkAE6gNSYT0AQWum+5u tKJ5rRJntiDkhx5+oEaToGOU9jELL3yNfMmNe53eSiQg7rflIi+kSxEAWOSxDNyH VgjYRhW76UnJIjZr1SivPcfIj3KyI33hZGiRv/t5xi07N7tUNCd7+6km63GuqA8J KUbRcMukww6QqA5KOdVkglNvXVrACuoLjcI6gGIypSkmRL9HOjJDLqO5LfqAfEUc kGGL+5njvD55BVR6CULcPkAjHX+/9gj0Gz4JKcYc0dXRR2yjdwnLK3gv3cOgKKBF PRYefpqMZCAJcjxhEM9pRG21PKkIPHntpl3MwpKHIan479ju0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFISIRrHaQu4YQW2t7blHJdFICa9tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTNjNDQ1N2EtOGQ3MC0z NjZjLWJjODQtY2NkYTY3YjUxN2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIIL0pcOJ/BFG+0DgM2CFXx+2Hxue8yy0j9maWZeR/YcIGH69WyN Wn08AG8hJOzoa+2Hu/0ac7C7NOh9UIJCE78hhxXNmqZSm4rvLZTVo+lrQYMk+biQ CHHpncLG8/VI5xoxPD6JSDXcvM3Byhe9JukIEwfGmNuuEkIBfOsLm7OY91VY4KDm WQzhMt59LyVPYanw6ILENh4fHiytWzH5nEiDHZ/4F4PPnoKaH/DTeL9pse1PPJ/A 2NEmeNGdB/YfMOqhpnluirQbpkLGJzvlr/uhsdE/xelonp5ozR0eYkYx8U6kvoGH VaV/qdfeRu3QhA8c7k1d73tBbPjWGXV6B0Y= -----END CERTIFICATE-----Generated at Wed Apr 9 01:09:50 2025 by rpki-client