$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e437137-ec80-38e3-a86e-89ab811d658e.roa File: 8e437137-ec80-38e3-a86e-89ab811d658e.roa (raw, json) Hash identifier: YCvzNjThltoDrxXOC4jNlU6vchW1UBeyKpYMEHi14yQ= Subject key identifier: EA:CC:88:B3:98:4F:ED:9B:44:4D:B3:39:03:F4:00:F1:6B:F6:CD:24 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849287E56EDAE2410AEF63E2300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e437137-ec80-38e3-a86e-89ab811d658e.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 7342 IP address blocks: 2620:74:85::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:56:ed:ae:24:10:ae:f6:3e:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=ccd7317e-2f3c-4b6c-a020-b1783d0af423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bc:d4:3e:fb:62:7d:46:e4:32:58:6d:37:b3: 8f:43:a6:5d:da:92:ed:9e:79:1e:2b:c1:99:b8:d7: ca:bb:ba:64:14:05:c4:6b:56:d9:1d:c4:33:da:5b: 7d:37:2c:2b:ee:51:5b:86:87:4e:3f:61:28:b7:d5: 99:86:43:ee:79:39:3c:d0:55:c0:b6:75:a5:28:50: 2e:65:d2:da:13:2a:f7:dc:25:bd:07:50:65:58:5b: 98:31:4a:bf:16:36:17:75:e5:13:7c:c2:53:94:1d: de:e6:58:29:d7:36:18:bd:a8:cb:d7:72:36:5e:2b: ac:45:47:40:ec:10:0c:1c:72:95:d5:6f:a5:6d:b6: f1:06:10:0d:99:74:1a:d9:c1:30:c2:81:ef:66:38: ab:73:b0:29:71:f5:88:20:3b:74:aa:ef:0d:65:e2: 50:24:f8:1d:96:00:69:be:c9:85:bc:12:77:f3:6d: 5d:e7:86:b1:c6:da:77:d6:f2:62:b8:12:7f:0b:c7: 77:3f:15:3c:95:ed:84:d8:6e:7c:c3:f5:78:fc:6c: 97:ba:75:08:a5:88:e4:cf:b9:4b:95:c9:99:61:e8: 8b:07:30:d7:0b:88:cc:a6:16:fe:5c:09:b1:37:33: f5:c5:cc:cd:6b:7e:ad:9c:c5:e3:5f:f3:47:44:67: 12:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:CC:88:B3:98:4F:ED:9B:44:4D:B3:39:03:F4:00:F1:6B:F6:CD:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e437137-ec80-38e3-a86e-89ab811d658e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:85::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:d2:9d:3f:4c:9c:5c:29:29:27:62:05:65:a0:8c:40:25:18: e1:89:9b:1b:1b:d3:cb:70:01:07:73:27:09:3c:94:0d:d7:2c: 5f:1a:c8:bd:6a:b4:82:8a:00:a0:6a:0c:27:f6:3e:6b:f0:f8: 66:4b:0f:83:96:15:4c:d8:7b:0c:63:a7:2a:3b:96:1b:06:82: fb:52:67:fc:41:55:a6:db:87:90:fd:8f:81:46:f9:47:81:94: ae:65:b1:bc:e3:fa:fa:58:45:07:4a:f1:6e:ad:f7:86:98:6d: 5a:34:dc:0b:26:dd:26:f3:96:b1:b3:c2:f9:ea:32:dd:f2:a9: fb:19:e2:77:f7:b8:d1:17:67:47:54:45:84:dd:1a:92:f3:02: 4e:44:88:f8:29:43:72:86:4d:2a:25:5f:19:e1:1d:a8:56:d7: 24:47:a7:c2:7b:c4:c6:05:b2:f6:22:b6:2e:01:3e:67:e0:47: 30:4a:07:fd:b1:d4:fa:ac:c7:f1:01:fd:c2:36:87:d8:20:b9: 55:0d:a0:27:65:0f:96:03:af:a9:7c:a8:1c:99:90:87:82:3c: d8:80:78:44:62:39:83:00:09:b1:62:bd:63:d2:b9:f8:fc:7f: 70:25:e9:3c:fc:2f:36:33:49:cb:6c:46:68:46:70:0f:7b:ca: 42:1a:fb:81 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkoflbtriQQrvY+IwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk Y2NkNzMxN2UtMmYzYy00YjZjLWEwMjAtYjE3ODNkMGFmNDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LzUPvtifUbkMlhtN7OPQ6Zd2pLtnnkeK8GZ uNfKu7pkFAXEa1bZHcQz2lt9Nywr7lFbhodOP2Eot9WZhkPueTk80FXAtnWlKFAu ZdLaEyr33CW9B1BlWFuYMUq/FjYXdeUTfMJTlB3e5lgp1zYYvajL13I2XiusRUdA 7BAMHHKV1W+lbbbxBhANmXQa2cEwwoHvZjirc7ApcfWIIDt0qu8NZeJQJPgdlgBp vsmFvBJ3821d54axxtp31vJiuBJ/C8d3PxU8le2E2G58w/V4/GyXunUIpYjkz7lL lcmZYeiLBzDXC4jMphb+XAmxNzP1xczNa36tnMXjX/NHRGcSrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOrMiLOYT+2bRE2zOQP0APFr9s0kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGU0MzcxMzctZWM4MC0z OGUzLWE4NmUtODlhYjgxMWQ2NThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACTSnT9MnFwpKSdiBWWgjEAlGOGJmxsb08twAQdzJwk8lA3XLF8a yL1qtIKKAKBqDCf2Pmvw+GZLD4OWFUzYewxjpyo7lhsGgvtSZ/xBVabbh5D9j4FG +UeBlK5lsbzj+vpYRQdK8W6t94aYbVo03Asm3SbzlrGzwvnqMt3yqfsZ4nf3uNEX Z0dURYTdGpLzAk5EiPgpQ3KGTSolXxnhHahW1yRHp8J7xMYFsvYiti4BPmfgRzBK B/2x1Pqsx/EB/cI2h9gguVUNoCdlD5YDr6l8qByZkIeCPNiAeERiOYMACbFivWPS ufj8f3Al6Tz8LzYzSctsRmhGcA97ykIa+4E= -----END CERTIFICATE-----Generated at Wed Apr 9 01:12:23 2025 by rpki-client