$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5061038-0bb9-3802-a5a4-f801e56e57be.roa File: a5061038-0bb9-3802-a5a4-f801e56e57be.roa (raw, json) Hash identifier: YlSxLxXo7C2oHxPj5FICDsuKTsedDl41luGrIrfm6C8= Subject key identifier: A5:C1:92:35:75:50:A2:59:83:D0:AC:77:9E:1A:B1:54:2A:7C:8D:10 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848EF614C8DD2FB66A6173C0C60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5061038-0bb9-3802-a5a4-f801e56e57be.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 7342 IP address blocks: 2620:74:6d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:4c:8d:d2:fb:66:a6:17:3c:0c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=ee90f478-ccbf-4d95-8ff9-0bf681f26339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8b:30:cf:40:ba:f5:9a:e4:11:6f:fd:59:d2: f9:27:b1:09:93:cd:b0:d0:da:7a:d1:51:24:9c:dc: 30:0e:39:39:6c:4e:8a:ef:80:59:80:12:11:45:19: 0a:d8:d1:87:f5:36:4d:7b:d9:a5:ee:48:ba:c5:5e: 35:91:15:93:f0:02:9c:a6:08:c2:0d:47:ba:37:06: 9c:86:51:b1:3f:d1:a2:d4:6e:54:38:9d:cf:b2:f3: 2d:bf:30:56:98:4c:9f:49:3d:ea:ea:c7:93:ca:41: ab:d4:b9:75:c1:72:3a:a8:6e:94:f9:e1:ad:b1:d1: c4:2b:99:f8:eb:8d:b6:64:a9:4b:49:a3:aa:c3:d3: 48:eb:61:24:49:90:a0:1f:a8:14:3f:00:fa:91:8d: 96:83:e1:23:d4:b8:ba:8c:94:5b:2d:26:23:e2:13: 08:a7:ad:f4:ae:2b:e8:97:0b:91:32:93:27:27:0e: 64:29:c8:c8:76:f9:f5:2c:7c:d2:2d:2b:5b:34:29: c9:59:41:5e:7e:6a:44:dd:f0:42:2e:6e:0e:c9:0c: 97:05:f3:2d:fb:54:a1:6b:26:80:c4:35:97:70:4a: 86:3d:70:01:1e:54:43:44:ce:3a:e0:e1:f7:7d:1a: 17:da:d5:e7:a1:71:5e:58:1a:a2:8b:00:18:a1:14: c3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C1:92:35:75:50:A2:59:83:D0:AC:77:9E:1A:B1:54:2A:7C:8D:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5061038-0bb9-3802-a5a4-f801e56e57be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:6d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:bb:cd:ac:dd:b2:ff:20:de:61:23:94:9d:00:a7:e5:5f:54: a4:8e:9b:ab:5d:fe:c3:2f:bf:39:88:a7:ab:45:64:d6:1e:4d: 7a:26:0b:cd:45:ac:16:04:1d:c8:94:ad:32:4d:50:e4:24:26: 12:af:de:72:d2:7b:16:c2:46:74:cd:cf:81:4f:28:36:c0:39: 3b:13:16:02:83:fc:6d:5f:e0:b9:c8:ca:9f:2f:42:1d:cd:c9: 13:b4:e0:c4:fd:b4:f4:39:ec:1c:0c:0a:6d:df:54:9e:ec:33: 31:5b:4c:a6:7b:b3:16:eb:7b:73:f3:72:90:68:53:0b:fa:6c: 16:67:10:17:4a:a2:cc:f9:6e:2d:06:8a:89:52:63:c1:4c:c5: b9:c3:7e:50:c9:e0:3f:a0:14:8a:14:bd:14:28:db:a2:6b:0c: ca:a7:75:59:91:87:63:9e:9a:f8:1a:38:e2:c7:15:24:d0:18: 81:0b:c4:c2:f9:58:17:0e:c8:f9:d1:c2:24:51:78:1f:39:99: 13:dd:6c:61:8b:cd:4b:bd:34:67:50:7e:9f:4b:23:d3:72:22: 8f:fa:64:1b:c9:b8:f6:72:c3:12:94:ef:c8:93:60:d6:93:44: e4:67:b9:eb:eb:f7:c9:c7:fa:ea:ea:bc:c3:d0:ec:01:d8:73: dd:d2:3b:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjvYUyN0vtmphc8DGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk ZWU5MGY0NzgtY2NiZi00ZDk1LThmZjktMGJmNjgxZjI2MzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroswz0C69ZrkEW/9WdL5J7EJk82w0Np60VEk nNwwDjk5bE6K74BZgBIRRRkK2NGH9TZNe9ml7ki6xV41kRWT8AKcpgjCDUe6Nwac hlGxP9Gi1G5UOJ3PsvMtvzBWmEyfST3q6seTykGr1Ll1wXI6qG6U+eGtsdHEK5n4 6422ZKlLSaOqw9NI62EkSZCgH6gUPwD6kY2Wg+Ej1Li6jJRbLSYj4hMIp630rivo lwuRMpMnJw5kKcjIdvn1LHzSLStbNCnJWUFefmpE3fBCLm4OyQyXBfMt+1ShayaA xDWXcEqGPXABHlRDRM464OH3fRoX2tXnoXFeWBqiiwAYoRTDFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKXBkjV1UKJZg9Csd54asVQqfI0QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTUwNjEwMzgtMGJiOS0z ODAyLWE1YTQtZjgwMWU1NmU1N2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAu7zazdsv8g3mEjlJ0Ap+VfVKSOm6td/sMvvzmIp6tFZNYeTXom C81FrBYEHciUrTJNUOQkJhKv3nLSexbCRnTNz4FPKDbAOTsTFgKD/G1f4LnIyp8v Qh3NyRO04MT9tPQ57BwMCm3fVJ7sMzFbTKZ7sxbre3PzcpBoUwv6bBZnEBdKosz5 bi0GiolSY8FMxbnDflDJ4D+gFIoUvRQo26JrDMqndVmRh2OemvgaOOLHFSTQGIEL xML5WBcOyPnRwiRReB85mRPdbGGLzUu9NGdQfp9LI9NyIo/6ZBvJuPZywxKU78iT YNaTRORnuevr98nH+urqvMPQ7AHYc93SO2w= -----END CERTIFICATE-----Generated at Wed Apr 9 01:07:42 2025 by rpki-client