$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc9e38a0-7990-364f-ba30-72becd75524e.roa File: cc9e38a0-7990-364f-ba30-72becd75524e.roa (raw, json) Hash identifier: kXGuE/wxsuQzWgxSkk3esG/myFN2ENB7ta4JORTCJeg= Subject key identifier: D5:E9:4F:77:BD:75:9A:44:C5:62:28:12:74:00:6D:B8:AB:35:05:DD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848C41B82BFCBCEA2EC48673D60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc9e38a0-7990-364f-ba30-72becd75524e.roa Signing time: Tue 04 Feb 2025 02:00:40 +0000 ROA not before: Tue 04 Feb 2025 02:00:40 +0000 ROA not after: Mon 05 May 2025 01:00:40 +0000 asID: 7342 IP address blocks: 2620:74:80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c4:1b:82:bf:cb:ce:a2:ec:48:67:3d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 4 02:00:40 2025 GMT Not After : May 5 01:00:40 2025 GMT Subject: CN=2294a162-5e9c-474e-8b81-2ad43a3f39f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d8:f0:f5:ab:f6:23:6a:b8:62:b9:b6:9f:5f: 3d:8a:57:2c:71:20:fa:6f:1d:69:b2:df:81:12:71: 96:43:7f:aa:98:59:42:3e:5f:e6:10:be:1c:93:65: b4:39:eb:db:d8:31:7e:78:4e:27:fd:9e:f2:f8:d2: 79:fe:83:5f:ef:51:d7:94:78:8e:c6:0a:74:6a:5f: 00:52:e3:81:61:20:7c:0f:bb:43:df:c3:cf:d4:11: ba:19:8f:6e:21:c4:d8:33:68:6b:21:17:95:50:ca: c6:3f:64:2f:6c:0b:26:01:38:17:ff:36:c5:c4:f8: ca:f1:8d:d5:c5:da:db:eb:10:f4:f8:88:f3:93:e3: cd:23:f3:08:d1:e6:1b:ea:a0:ed:f5:96:8a:2a:a2: 25:2f:5b:90:a5:aa:4a:cc:8d:45:5e:fc:33:7e:c5: 3d:29:0c:8e:14:92:8a:b0:76:ec:5a:f6:a8:a9:d2: 11:9e:4c:12:f6:0e:f0:e6:94:4e:82:f5:d2:38:c9: f8:7d:38:39:e2:78:59:12:bf:71:80:df:8e:75:0d: 2f:23:59:92:ce:1a:df:a9:cd:b4:aa:83:7c:48:67: 03:aa:59:a2:f9:fc:c1:72:c2:fd:96:60:c1:26:d6: 16:e0:a1:eb:e3:3f:18:90:74:b4:c4:f3:8d:58:88: 43:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E9:4F:77:BD:75:9A:44:C5:62:28:12:74:00:6D:B8:AB:35:05:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc9e38a0-7990-364f-ba30-72becd75524e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:80::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:06:f9:e7:42:12:01:cf:f0:74:2c:d5:e8:7c:07:7b:3a:6d: 6d:e0:94:22:5f:f3:d2:d4:95:0c:98:d0:d0:d7:a5:c7:4a:f6: e7:71:44:da:a4:19:78:c6:d8:11:c3:6f:88:18:50:dd:d3:63: 6b:da:91:b2:86:5f:e4:ec:62:c6:21:e4:7c:7c:99:0f:48:aa: b6:0f:33:6e:bf:d3:3d:db:66:81:07:0c:5e:36:dc:eb:3a:98: c5:45:4e:ed:19:bc:44:06:56:76:d3:aa:db:b6:90:b0:29:f1: 17:23:9b:2d:e2:ea:b3:51:c2:61:52:2d:44:75:f1:ce:9e:ae: 0b:17:bf:06:bc:70:3c:91:33:20:55:9f:9b:57:e1:df:b8:0a: 48:a8:6f:e6:8e:91:03:48:3c:1a:9c:0a:8b:ab:74:75:87:73: 56:16:01:98:0a:04:dc:88:61:a6:8a:03:8d:52:ba:d3:e4:ce: 6e:58:78:ab:ab:b9:01:93:b1:53:d5:6a:f3:63:de:eb:0c:b8: 4b:2c:ae:fc:7b:35:cc:14:91:7e:b4:9c:e9:b8:a1:3c:e8:dd: 33:54:b2:8f:9b:45:aa:10:51:1d:44:0d:10:0c:46:93:4d:aa: 4b:98:4f:1b:95:0b:02:b0:74:c5:8e:d6:36:30:c9:17:5d:48: d9:4c:f7:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjEG4K/y86i7EhnPWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwNDAyMDA0MFoXDTI1MDUwNTAxMDA0MFowLzEtMCsGA1UEAxMk MjI5NGExNjItNWU5Yy00NzRlLThiODEtMmFkNDNhM2YzOWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNjw9av2I2q4Yrm2n189ilcscSD6bx1pst+B EnGWQ3+qmFlCPl/mEL4ck2W0Oevb2DF+eE4n/Z7y+NJ5/oNf71HXlHiOxgp0al8A UuOBYSB8D7tD38PP1BG6GY9uIcTYM2hrIReVUMrGP2QvbAsmATgX/zbFxPjK8Y3V xdrb6xD0+Ijzk+PNI/MI0eYb6qDt9ZaKKqIlL1uQpapKzI1FXvwzfsU9KQyOFJKK sHbsWvaoqdIRnkwS9g7w5pROgvXSOMn4fTg54nhZEr9xgN+OdQ0vI1mSzhrfqc20 qoN8SGcDqlmi+fzBcsL9lmDBJtYW4KHr4z8YkHS0xPONWIhDHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNXpT3e9dZpExWIoEnQAbbirNQXdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2M5ZTM4YTAtNzk5MC0z NjRmLWJhMzAtNzJiZWNkNzU1MjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGEG+edCEgHP8HQs1eh8B3s6bW3glCJf89LUlQyY0NDXpcdK9udx RNqkGXjG2BHDb4gYUN3TY2vakbKGX+TsYsYh5Hx8mQ9IqrYPM26/0z3bZoEHDF42 3Os6mMVFTu0ZvEQGVnbTqtu2kLAp8Rcjmy3i6rNRwmFSLUR18c6ergsXvwa8cDyR MyBVn5tX4d+4Ckiob+aOkQNIPBqcCourdHWHc1YWAZgKBNyIYaaKA41SutPkzm5Y eKuruQGTsVPVavNj3usMuEssrvx7NcwUkX60nOm4oTzo3TNUso+bRaoQUR1EDRAM RpNNqkuYTxuVCwKwdMWO1jYwyRddSNlM94o= -----END CERTIFICATE-----Generated at Wed Apr 9 01:13:40 2025 by rpki-client