$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dacc0c61-c6d3-3b2c-b507-f1cef9c969b1.roa File: dacc0c61-c6d3-3b2c-b507-f1cef9c969b1.roa (raw, json) Hash identifier: pKuK7057RnwVhvffwMbW5i+IUnERPSTKnEO1ZsWGpPY= Subject key identifier: 58:B9:7D:C6:FB:E0:C3:6A:D3:D2:28:B8:F3:53:0E:AD:9B:C3:65:69 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849287E5A8031C0A7DA57FD1300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dacc0c61-c6d3-3b2c-b507-f1cef9c969b1.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 7342 IP address blocks: 2620:74:3c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:5a:80:31:c0:a7:da:57:fd:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=fd36416f-82e0-4ece-b06a-4e541b9c8aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:84:9c:6b:20:4d:37:17:1f:29:d4:3a:15:d4: 7d:14:67:d2:73:49:35:6f:86:7c:82:6a:84:16:81: 6f:3f:2b:6c:3b:6b:58:d8:1d:0f:70:0d:a3:bb:77: a9:26:fe:fc:85:91:d6:d7:95:58:8d:e7:63:e8:b2: 51:be:27:81:cc:f6:0a:bb:87:15:44:d0:71:50:0c: 78:c2:09:d2:fc:ba:18:7a:07:7f:75:06:ea:b3:6c: ec:45:33:23:71:74:d1:c0:f3:fd:fb:31:7d:ff:7c: eb:57:f3:5d:e3:99:8d:6e:46:9e:a6:b8:47:b5:39: 61:fa:31:59:c9:5e:7c:95:1b:87:c8:33:eb:ee:ee: 21:ad:91:fa:85:1a:54:b2:44:11:7e:13:21:a9:10: 25:16:7b:5c:b1:d7:c6:48:a6:0d:e2:9a:35:d5:26: 58:3e:ef:dc:19:27:53:83:56:18:a2:3f:97:31:51: c6:3c:ba:df:88:bb:f0:d7:90:f9:20:31:3e:38:e5: 3d:f5:03:b7:3e:6b:f4:69:a9:18:75:c0:c6:43:a3: a1:da:17:0e:fd:38:25:48:2a:28:08:c1:93:5a:c6: 1f:3a:d0:94:b3:02:f6:fe:ca:6f:8b:01:49:3e:56: ce:85:cf:46:10:41:ec:bd:06:7f:fa:76:4e:22:96: 90:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B9:7D:C6:FB:E0:C3:6A:D3:D2:28:B8:F3:53:0E:AD:9B:C3:65:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dacc0c61-c6d3-3b2c-b507-f1cef9c969b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:3c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:ed:0e:78:07:05:6f:b4:54:a7:ff:6d:38:4b:0a:09:69:e3: 0f:4e:12:d0:fe:e9:60:17:81:3b:8d:5d:c9:9c:8d:81:f4:f7: b5:df:2b:35:e5:3a:3d:5f:e3:3b:3b:fb:bd:8b:1b:1b:2e:70: 6d:b6:d4:f6:92:7e:27:90:b4:45:10:56:28:42:d8:36:54:47: a3:72:fb:a7:d7:18:ac:42:0a:fc:af:59:c3:e8:e7:23:26:f2: f7:2e:62:fc:a3:e0:9b:ba:6f:74:b1:f6:7e:88:ae:7a:be:d8: 1a:a7:5c:57:79:3e:bc:f8:c6:31:b3:76:f6:20:c9:1c:63:fa: fe:f7:01:62:90:38:2a:a6:02:2d:cc:86:dc:3b:ef:43:52:24: fe:ce:53:77:60:93:b3:e1:c7:ce:ff:91:c0:3c:5e:fa:c6:6f: 98:09:d2:bb:e4:ef:e7:9d:55:83:94:9c:83:e9:a2:12:f2:e0: 38:4c:2f:a8:af:ec:0f:5e:6e:27:a1:fe:9c:7d:53:2f:ab:d6: d1:3b:2f:c7:ed:7a:31:c9:fd:a7:26:e2:2a:33:61:83:78:c6: 91:4d:5b:49:30:28:b3:4f:f9:2d:2e:54:39:a1:6e:fb:2e:a2: 16:8e:88:e4:07:6c:38:cd:ca:39:f9:4e:f1:2c:84:37:37:bb: bf:d5:74:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkoflqAMcCn2lf9EwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZmQzNjQxNmYtODJlMC00ZWNlLWIwNmEtNGU1NDFiOWM4YWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIScayBNNxcfKdQ6FdR9FGfSc0k1b4Z8gmqE FoFvPytsO2tY2B0PcA2ju3epJv78hZHW15VYjedj6LJRvieBzPYKu4cVRNBxUAx4 wgnS/LoYegd/dQbqs2zsRTMjcXTRwPP9+zF9/3zrV/Nd45mNbkaeprhHtTlh+jFZ yV58lRuHyDPr7u4hrZH6hRpUskQRfhMhqRAlFntcsdfGSKYN4po11SZYPu/cGSdT g1YYoj+XMVHGPLrfiLvw15D5IDE+OOU99QO3Pmv0aakYdcDGQ6Oh2hcO/TglSCoo CMGTWsYfOtCUswL2/spviwFJPlbOhc9GEEHsvQZ/+nZOIpaQ6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFi5fcb74MNq09IouPNTDq2bw2VpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGFjYzBjNjEtYzZkMy0z YjJjLWI1MDctZjFjZWY5Yzk2OWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAA8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADXtDngHBW+0VKf/bThLCglp4w9OEtD+6WAXgTuNXcmcjYH097Xf KzXlOj1f4zs7+72LGxsucG221PaSfieQtEUQVihC2DZUR6Ny+6fXGKxCCvyvWcPo 5yMm8vcuYvyj4Ju6b3Sx9n6Irnq+2BqnXFd5Prz4xjGzdvYgyRxj+v73AWKQOCqm Ai3Mhtw770NSJP7OU3dgk7Phx87/kcA8XvrGb5gJ0rvk7+edVYOUnIPpohLy4DhM L6iv7A9ebieh/px9Uy+r1tE7L8ftejHJ/acm4iozYYN4xpFNW0kwKLNP+S0uVDmh bvsuohaOiOQHbDjNyjn5TvEshDc3u7/VdP0= -----END CERTIFICATE-----Generated at Wed Apr 9 01:09:51 2025 by rpki-client