$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78f3fa29-1117-3bff-a670-2d33d4e21fd6.roa File: 78f3fa29-1117-3bff-a670-2d33d4e21fd6.roa (raw, json) Hash identifier: YbHon59WRwpaJ0bi0xgLc7y1mf/pZ934UfNdF39eITY= Subject key identifier: F9:1C:05:F8:66:AC:C8:7D:91:63:7A:A7:2C:63:80:24:C7:6D:12:CE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584913AC440E5BA962EB8F12AD10 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78f3fa29-1117-3bff-a670-2d33d4e21fd6.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 7342 IP address blocks: 2620:74:44::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:44:0e:5b:a9:62:eb:8f:12:ad:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=e4abcd3e-1e72-407b-8fdf-9d86c76a9907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7e:94:ad:2d:d9:84:b9:c8:de:a9:ca:3d:92: b8:e1:c6:cd:0b:d3:82:ce:61:3f:fb:2a:78:a7:9d: 1f:28:eb:c8:bc:22:83:76:54:65:b3:c1:52:65:cd: c5:ef:0f:73:4f:7f:e2:45:d5:e4:cc:6c:54:c4:6f: f0:0d:05:74:0b:6b:cb:77:f4:87:48:38:82:a4:b9: 45:dc:32:6e:1f:45:e8:b2:1d:66:a1:f9:02:2a:ff: ce:01:fd:df:d2:d4:b8:69:e4:7c:9c:22:e7:13:d9: 9b:9a:8e:0d:de:23:4d:18:d3:5c:90:ad:cc:62:6c: 4f:d3:01:41:fb:f0:66:97:f2:3f:fc:a5:12:23:29: aa:24:92:e4:48:46:9d:0c:97:3b:fb:50:0f:ac:71: 77:79:27:8b:20:e7:68:67:f6:13:7b:b8:41:aa:79: 7a:c1:b3:8b:a3:6d:4f:8a:94:88:fd:91:6a:6d:8c: 6b:fc:02:8d:b0:72:ce:e5:33:46:60:9b:21:e2:2c: 73:fa:c3:7a:bf:f6:38:db:7c:23:4d:c4:0a:a4:7a: 5b:1e:7e:4b:59:62:5b:03:e4:86:bb:43:31:f8:51: cd:b1:c4:5c:bc:0a:27:11:1e:95:7f:0a:a3:89:bd: 3b:db:53:8a:c2:27:8c:d1:c5:fb:f7:3f:6a:86:0c: 38:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1C:05:F8:66:AC:C8:7D:91:63:7A:A7:2C:63:80:24:C7:6D:12:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78f3fa29-1117-3bff-a670-2d33d4e21fd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:44::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:0b:30:30:6e:41:73:ae:61:a8:76:76:9d:4d:3e:8c:b2:8f: a2:0c:16:18:77:47:ff:64:98:b4:ca:45:de:3b:e6:95:97:22: 85:75:56:2e:b3:ef:28:55:1c:4a:d1:12:e0:a5:c5:f0:18:0d: 7e:98:5b:08:ca:4e:a6:8c:b3:9d:42:7c:7e:18:6a:80:c5:f3: df:97:92:21:53:7f:8f:c4:6a:25:b7:fe:4f:99:e4:c2:04:e5: 2c:12:dc:89:f5:d3:9a:58:d7:68:b8:a7:fe:c7:35:81:d0:6a: 5f:14:e7:2f:ff:26:af:61:70:48:92:68:fa:05:61:4f:28:a8: 0c:70:46:4e:05:17:5f:0e:a5:74:49:21:e1:09:3b:b5:9b:71: 06:f8:35:a6:9b:f8:7d:b5:6b:d7:8e:77:14:95:78:9d:11:08: a0:da:61:a1:46:0c:fe:6d:d0:28:3e:70:ff:22:6c:ba:61:5d: 82:de:ae:e4:6b:b5:04:0d:8f:a6:15:46:b3:c8:0e:e5:a2:a5: 99:4a:a7:c4:58:5b:ab:05:f6:47:8f:35:44:f5:ea:0e:43:56: f4:96:01:ff:9a:ad:b6:4b:2c:e6:3f:f2:87:7f:fb:89:e9:eb: c1:f2:21:e3:9c:91:da:c7:49:74:42:fd:fd:67:a4:43:8f:42: 5d:b6:63:a9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkTrEQOW6li648SrRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk ZTRhYmNkM2UtMWU3Mi00MDdiLThmZGYtOWQ4NmM3NmE5OTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhH6UrS3ZhLnI3qnKPZK44cbNC9OCzmE/+yp4 p50fKOvIvCKDdlRls8FSZc3F7w9zT3/iRdXkzGxUxG/wDQV0C2vLd/SHSDiCpLlF 3DJuH0Xosh1mofkCKv/OAf3f0tS4aeR8nCLnE9mbmo4N3iNNGNNckK3MYmxP0wFB +/Bml/I//KUSIymqJJLkSEadDJc7+1APrHF3eSeLIOdoZ/YTe7hBqnl6wbOLo21P ipSI/ZFqbYxr/AKNsHLO5TNGYJsh4ixz+sN6v/Y423wjTcQKpHpbHn5LWWJbA+SG u0Mx+FHNscRcvAonER6Vfwqjib0721OKwieM0cX79z9qhgw4eQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPkcBfhmrMh9kWN6pyxjgCTHbRLOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzhmM2ZhMjktMTExNy0z YmZmLWE2NzAtMmQzM2Q0ZTIxZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIILMDBuQXOuYah2dp1NPoyyj6IMFhh3R/9kmLTKRd475pWXIoV1 Vi6z7yhVHErREuClxfAYDX6YWwjKTqaMs51CfH4YaoDF89+XkiFTf4/EaiW3/k+Z 5MIE5SwS3In105pY12i4p/7HNYHQal8U5y//Jq9hcEiSaPoFYU8oqAxwRk4FF18O pXRJIeEJO7WbcQb4Naab+H21a9eOdxSVeJ0RCKDaYaFGDP5t0Cg+cP8ibLphXYLe ruRrtQQNj6YVRrPIDuWipZlKp8RYW6sF9kePNUT16g5DVvSWAf+arbZLLOY/8od/ +4np68HyIeOckdrHSXRC/f1npEOPQl22Y6k= -----END CERTIFICATE-----Generated at Wed Apr 9 01:10:33 2025 by rpki-client