$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bcf8fe3e-4534-36a6-ba40-e473a2b3861f.roa File: bcf8fe3e-4534-36a6-ba40-e473a2b3861f.roa (raw, json) Hash identifier: xufTNv2umgSYHHOt02MJLTfHbZ02X87YL8CeV0qalIE= Subject key identifier: 66:30:D3:96:5D:76:17:CD:52:42:C5:B2:E1:01:89:34:82:08:C3:80 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858492184330122FC9F1F79CEB380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bcf8fe3e-4534-36a6-ba40-e473a2b3861f.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 7342 IP address blocks: 2620:74:34::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:33:01:22:fc:9f:1f:79:ce:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=0803c242-c113-4c04-8d32-16ca6f02aec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ee:f4:8d:ae:31:5e:a4:84:dd:0e:0a:0a:ee: 31:c3:1e:86:6b:7e:f4:74:f2:8d:45:d1:fe:4f:81: 56:8b:32:c2:77:36:f9:cd:72:9a:26:15:e1:aa:99: f6:ca:af:69:13:9b:54:d7:52:b3:bd:41:f7:a5:97: 46:9c:65:9f:00:f9:69:80:f2:b0:ac:af:83:92:39: 86:3f:2c:95:2f:23:31:e0:fd:ee:46:5e:a9:be:1f: ad:aa:b1:a0:56:f6:7c:5a:42:8a:ec:4e:bc:86:5b: 90:2b:c3:83:0e:4c:b8:44:bb:20:75:ad:71:9e:9a: ae:24:f1:42:eb:fa:ed:9e:77:c7:ba:00:ab:ad:ad: bf:00:19:80:11:c2:f3:96:61:a4:87:ce:28:eb:16: ab:9e:a2:60:ab:1b:f2:37:86:2d:ba:31:03:7f:30: 7b:4e:21:a3:00:87:30:4a:ea:01:ee:76:21:10:3b: 92:b8:d4:fb:c0:e0:ee:52:24:47:4c:12:47:f5:a1: 1c:4e:9f:7d:b0:82:66:e6:a4:7d:c2:a9:b8:3e:47: e4:1c:2f:fa:3e:eb:e4:2b:3b:dd:1b:31:32:ee:f0: b5:6e:9a:fe:4b:72:f9:e5:0a:49:26:27:e4:90:84: 43:92:1a:13:4e:59:79:b9:57:be:a6:04:b1:97:bc: 9f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:30:D3:96:5D:76:17:CD:52:42:C5:B2:E1:01:89:34:82:08:C3:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bcf8fe3e-4534-36a6-ba40-e473a2b3861f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:34::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:3e:e6:79:25:7d:5e:5c:20:66:a0:a4:7f:6d:e4:0b:07:95: 23:75:04:be:e0:8d:e2:23:87:d3:72:c8:d2:eb:db:5d:7f:b4: b5:fa:3b:da:a7:04:04:6a:3f:57:0e:40:a5:4e:53:f4:90:dc: d1:79:ab:9f:a5:f8:7f:ad:57:1f:a0:69:af:3d:20:50:ea:47: 1d:ca:78:bf:c7:e8:d1:52:7c:6c:c9:ae:78:42:a4:5a:2e:96: 23:18:88:03:8c:31:6a:8d:93:f7:10:ee:03:51:6d:76:6b:98: 4f:7d:9b:98:0c:47:02:f2:b9:50:4b:ce:f3:41:70:f9:33:fe: b1:21:29:a6:b4:94:d5:62:10:2b:31:98:ac:95:40:08:62:e2: 09:a4:20:b6:d8:e5:75:f7:c7:c8:f3:05:87:1c:d8:cd:ff:e9: e8:33:f3:cd:91:9f:78:62:58:30:a0:da:a1:c4:d2:2a:b0:bb: 5a:c5:2a:91:f1:f3:a8:25:80:01:32:a5:00:5a:93:31:5f:34: b7:48:15:17:80:aa:a4:9e:42:26:e3:08:7c:50:68:b5:cf:da: 07:cb:9b:21:77:fc:0a:b1:df:bf:0e:5a:eb:04:51:c8:35:91: 1d:26:de:f0:b1:dc:42:1b:44:47:26:3b:6f:32:09:f5:f0:57: ce:e8:13:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkhhDMBIvyfH3nOs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk MDgwM2MyNDItYzExMy00YzA0LThkMzItMTZjYTZmMDJhZWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje70ja4xXqSE3Q4KCu4xwx6Ga370dPKNRdH+ T4FWizLCdzb5zXKaJhXhqpn2yq9pE5tU11KzvUH3pZdGnGWfAPlpgPKwrK+DkjmG PyyVLyMx4P3uRl6pvh+tqrGgVvZ8WkKK7E68hluQK8ODDky4RLsgda1xnpquJPFC 6/rtnnfHugCrra2/ABmAEcLzlmGkh84o6xarnqJgqxvyN4YtujEDfzB7TiGjAIcw SuoB7nYhEDuSuNT7wODuUiRHTBJH9aEcTp99sIJm5qR9wqm4PkfkHC/6PuvkKzvd GzEy7vC1bpr+S3L55QpJJifkkIRDkhoTTll5uVe+pgSxl7yf8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGYw05ZddhfNUkLFsuEBiTSCCMOAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmNmOGZlM2UtNDUzNC0z NmE2LWJhNDAtZTQ3M2EyYjM4NjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAA0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIc+5nklfV5cIGagpH9t5AsHlSN1BL7gjeIjh9NyyNLr211/tLX6 O9qnBARqP1cOQKVOU/SQ3NF5q5+l+H+tVx+gaa89IFDqRx3KeL/H6NFSfGzJrnhC pFouliMYiAOMMWqNk/cQ7gNRbXZrmE99m5gMRwLyuVBLzvNBcPkz/rEhKaa0lNVi ECsxmKyVQAhi4gmkILbY5XX3x8jzBYcc2M3/6egz882Rn3hiWDCg2qHE0iqwu1rF KpHx86glgAEypQBakzFfNLdIFReAqqSeQibjCHxQaLXP2gfLmyF3/Aqx378OWusE Ucg1kR0m3vCx3EIbREcmO28yCfXwV87oE8A= -----END CERTIFICATE-----Generated at Wed Apr 9 01:16:14 2025 by rpki-client