$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd2209f3-37ce-32d6-97ec-3d99ffc6dc3b.roa File: dd2209f3-37ce-32d6-97ec-3d99ffc6dc3b.roa (raw, json) Hash identifier: gJqTR6sNBdOfUZxjUrbtL3rCuTy8hSegSGbWCw0TIt0= Subject key identifier: 69:41:E4:B8:C8:C3:AA:B3:40:A3:3D:FB:5D:A5:35:1F:46:49:C7:16 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584921842005BF24B533C0E76400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd2209f3-37ce-32d6-97ec-3d99ffc6dc3b.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 7342 IP address blocks: 2620:74:6a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:20:05:bf:24:b5:33:c0:e7:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=dbc74dad-a434-4f11-816f-8b7567ae15b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f8:d8:58:13:6f:51:d7:1d:88:de:8c:72:5c: d5:12:35:8d:81:69:fc:eb:d2:90:99:64:72:8f:95: f4:d8:ab:86:f9:1f:aa:65:c0:29:1b:59:f0:6f:30: 9a:73:34:ab:8a:3e:fd:45:0e:ca:3d:2c:a9:9c:aa: d6:32:1e:15:13:6e:80:d1:5f:94:a0:45:13:99:cc: 4f:38:bb:89:a5:87:fe:09:f8:1d:a1:e3:be:46:e0: 26:e2:e4:2c:37:8e:0c:2a:b0:66:1c:69:68:e1:90: cd:08:08:57:e6:ef:82:03:99:81:de:7d:eb:8a:c9: 4c:02:16:69:6c:d1:af:09:91:72:39:b1:3e:4a:c4: 52:4a:9f:be:73:07:34:a8:33:93:48:8b:24:6c:46: fd:16:9b:65:27:7d:31:01:85:73:74:27:f7:c7:cf: 10:04:73:5a:82:fa:6a:a0:57:75:4d:c4:c2:b1:c8: 1f:d2:7d:08:ae:7d:02:2f:87:38:56:6c:30:77:1b: 65:b5:ce:e0:d1:37:f6:97:2d:45:0e:86:3f:27:d8: a5:b9:34:91:bc:ba:d6:ef:16:2c:66:63:a7:a8:72: 29:e5:23:6d:4e:f8:30:72:b3:8c:ed:f3:f7:a8:f0: 99:f9:a5:1a:05:7d:31:a6:b0:1b:e2:f9:c3:d7:5d: 2c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:41:E4:B8:C8:C3:AA:B3:40:A3:3D:FB:5D:A5:35:1F:46:49:C7:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd2209f3-37ce-32d6-97ec-3d99ffc6dc3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:6a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:e2:08:59:1b:95:eb:61:d4:59:1f:59:bf:b7:a9:bc:56:af: ff:63:ba:73:03:08:0f:c9:b5:16:a3:55:2e:dc:ca:c0:96:61: 6a:5e:46:b0:7b:ee:0b:d8:01:1d:13:dc:a1:99:41:e0:9f:eb: 47:67:e6:26:0c:83:87:2a:3d:ec:27:8c:90:ef:d3:ae:8a:8a: b6:de:a2:fa:23:a3:5d:b7:aa:a3:48:ec:af:fd:65:3f:d4:e9: 73:63:f2:5c:e2:de:fc:66:1f:e8:80:24:b3:d3:d3:44:60:74: 5d:db:6e:6d:17:48:2b:31:42:14:57:fd:73:8a:57:84:da:ef: c6:6e:d7:35:d5:67:2a:5f:25:10:37:a6:82:5b:07:b4:f3:39: ad:b1:1a:ca:de:77:cb:9b:d5:0a:07:41:68:c8:e5:ec:f6:94: 45:dd:c5:8a:a5:e8:96:f9:02:be:bf:22:e5:85:74:ba:2d:ab: 01:6f:0c:d6:f4:be:1f:5a:fe:2f:68:1b:e1:3e:97:d4:fa:2b: 7b:a0:2f:39:9a:e4:8b:60:58:07:7f:75:50:48:0e:3e:f8:5c: e2:4d:e9:a8:b8:f0:28:f7:5a:ad:e8:db:6b:90:26:5f:ab:c8: 7b:e0:49:67:cf:bd:96:b3:2d:30:fe:4d:de:99:28:e2:4f:b3: 98:c5:fb:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkhhCAFvyS1M8DnZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk ZGJjNzRkYWQtYTQzNC00ZjExLTgxNmYtOGI3NTY3YWUxNWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/jYWBNvUdcdiN6MclzVEjWNgWn869KQmWRy j5X02KuG+R+qZcApG1nwbzCaczSrij79RQ7KPSypnKrWMh4VE26A0V+UoEUTmcxP OLuJpYf+CfgdoeO+RuAm4uQsN44MKrBmHGlo4ZDNCAhX5u+CA5mB3n3rislMAhZp bNGvCZFyObE+SsRSSp++cwc0qDOTSIskbEb9FptlJ30xAYVzdCf3x88QBHNagvpq oFd1TcTCscgf0n0Irn0CL4c4Vmwwdxtltc7g0Tf2ly1FDoY/J9iluTSRvLrW7xYs ZmOnqHIp5SNtTvgwcrOM7fP3qPCZ+aUaBX0xprAb4vnD110suwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGlB5LjIw6qzQKM9+12lNR9GSccWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGQyMjA5ZjMtMzdjZS0z MmQ2LTk3ZWMtM2Q5OWZmYzZkYzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD/iCFkbleth1FkfWb+3qbxWr/9junMDCA/JtRajVS7cysCWYWpe RrB77gvYAR0T3KGZQeCf60dn5iYMg4cqPewnjJDv066Kirbeovojo123qqNI7K/9 ZT/U6XNj8lzi3vxmH+iAJLPT00RgdF3bbm0XSCsxQhRX/XOKV4Ta78Zu1zXVZypf JRA3poJbB7TzOa2xGsred8ub1QoHQWjI5ez2lEXdxYql6Jb5Ar6/IuWFdLotqwFv DNb0vh9a/i9oG+E+l9T6K3ugLzma5ItgWAd/dVBIDj74XOJN6ai48Cj3Wq3o22uQ Jl+ryHvgSWfPvZazLTD+Td6ZKOJPs5jF+7M= -----END CERTIFICATE-----Generated at Wed Apr 9 01:10:31 2025 by rpki-client