$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c820ab43-1033-3d58-b4a0-dda33f5dfb6a.roa File: c820ab43-1033-3d58-b4a0-dda33f5dfb6a.roa (raw, json) Hash identifier: mXKooU7XzFevd/lkaH4QSYAIkl5NwfEPZDnodL1G6wE= Subject key identifier: 70:7C:8D:36:B6:E3:33:8A:37:67:67:59:93:4B:29:60:78:2C:09:53 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584913AC441C751588DE4F6D5B40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c820ab43-1033-3d58-b4a0-dda33f5dfb6a.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 7342 IP address blocks: 2620:74:86::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:44:1c:75:15:88:de:4f:6d:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=9d1af802-781a-4b59-8f91-5af7c9d55680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:35:de:84:ff:61:e2:ac:ce:67:07:b5:b5:08: ea:38:84:e2:5c:28:4c:c2:2d:fa:7b:5a:8e:93:54: 0a:32:93:4b:89:05:8e:98:95:b1:e5:40:3d:7e:cc: 87:1f:3f:75:2c:27:d8:f8:bb:8d:7d:59:be:44:5d: de:2d:7c:cc:dd:a1:3d:1a:05:cd:79:57:21:41:fa: 39:04:22:40:03:07:6e:58:56:b8:33:72:a4:cb:9d: f5:a3:a3:65:58:25:ae:80:eb:30:c9:86:f5:ed:26: 59:a0:4d:39:c5:b5:5c:a1:96:27:d9:08:7f:73:3c: a0:ed:78:0c:93:b1:96:a9:3d:6e:d3:b9:8c:0a:da: 74:85:b1:5c:44:cb:47:bc:58:bd:67:0b:12:b9:3d: c5:c3:c3:f8:53:e5:ec:ab:bf:b0:4a:59:7c:cf:7e: 9f:bd:e1:dc:a8:aa:d0:aa:6f:0b:39:29:3b:77:bf: 0b:e3:66:66:29:d1:01:e5:ad:94:dc:04:87:f5:7e: d5:dd:94:e4:9a:2d:3d:10:74:83:5f:e1:7a:2a:99: 09:8b:b2:7e:d4:42:8c:72:60:f2:90:2b:a5:b1:51: 7d:35:27:28:42:7e:f5:38:28:9f:03:cf:6a:d1:46: 86:dc:3a:ab:26:f4:94:5b:64:c9:ae:25:e4:17:54: c0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7C:8D:36:B6:E3:33:8A:37:67:67:59:93:4B:29:60:78:2C:09:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c820ab43-1033-3d58-b4a0-dda33f5dfb6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:86::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:9e:d0:b3:52:7a:c6:f9:ad:f4:52:35:72:24:0a:1b:82:c3: 5e:48:67:68:55:7e:d2:92:cc:f7:1c:33:18:5e:2a:db:1c:cb: e7:f3:c3:2a:67:30:ec:b9:ba:73:63:47:dc:83:21:f6:62:e8: 6b:8b:9b:36:52:c4:2b:e6:d1:37:ef:eb:82:55:7e:96:35:d0: 1e:04:38:dc:b6:6b:09:55:6f:9f:4d:bf:86:5c:e4:b4:f0:13: eb:b9:0a:69:a1:63:88:d4:8b:9f:79:de:1b:36:58:b0:f6:5e: 72:a1:0f:b9:fc:28:de:05:c0:d9:fd:1f:fe:6c:ea:30:2f:fa: c4:22:32:4a:f4:c4:43:36:da:47:6b:fb:7b:5b:c4:2f:f0:7d: ac:a3:64:e2:06:95:9e:84:d4:99:a1:e0:34:62:f5:d3:de:12: 25:34:4d:d9:ce:3c:e4:5e:c2:b1:a0:94:d6:2d:0a:78:95:b8: ac:ac:da:6a:18:9e:0b:38:46:b9:78:6a:81:5a:86:2a:f1:09: f5:e6:cf:95:bf:9c:d9:37:63:5f:d2:dd:ae:ba:55:c9:a6:34: ac:2c:32:bf:b7:67:ed:56:52:08:e8:10:40:80:b3:07:7e:ae: 81:e4:2e:9f:ec:15:95:42:c2:85:57:d3:e2:15:4f:28:5a:79: ad:4d:cd:47 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkTrEQcdRWI3k9tW0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk OWQxYWY4MDItNzgxYS00YjU5LThmOTEtNWFmN2M5ZDU1NjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTXehP9h4qzOZwe1tQjqOITiXChMwi36e1qO k1QKMpNLiQWOmJWx5UA9fsyHHz91LCfY+LuNfVm+RF3eLXzM3aE9GgXNeVchQfo5 BCJAAwduWFa4M3Kky531o6NlWCWugOswyYb17SZZoE05xbVcoZYn2Qh/czyg7XgM k7GWqT1u07mMCtp0hbFcRMtHvFi9ZwsSuT3Fw8P4U+Xsq7+wSll8z36fveHcqKrQ qm8LOSk7d78L42ZmKdEB5a2U3ASH9X7V3ZTkmi09EHSDX+F6KpkJi7J+1EKMcmDy kCulsVF9NScoQn71OCifA89q0UaG3DqrJvSUW2TJriXkF1TAPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHB8jTa24zOKN2dnWZNLKWB4LAlTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzgyMGFiNDMtMTAzMy0z ZDU4LWI0YTAtZGRhMzNmNWRmYjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABie0LNSesb5rfRSNXIkChuCw15IZ2hVftKSzPccMxheKtscy+fz wypnMOy5unNjR9yDIfZi6GuLmzZSxCvm0Tfv64JVfpY10B4EONy2awlVb59Nv4Zc 5LTwE+u5CmmhY4jUi5953hs2WLD2XnKhD7n8KN4FwNn9H/5s6jAv+sQiMkr0xEM2 2kdr+3tbxC/wfayjZOIGlZ6E1Jmh4DRi9dPeEiU0TdnOPORewrGglNYtCniVuKys 2moYngs4Rrl4aoFahirxCfXmz5W/nNk3Y1/S3a66VcmmNKwsMr+3Z+1WUgjoEECA swd+roHkLp/sFZVCwoVX0+IVTyhaea1NzUc= -----END CERTIFICATE-----Generated at Wed Apr 9 01:09:52 2025 by rpki-client