$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd67ddd1-a432-367e-917b-469914bddcb2.roa File: fd67ddd1-a432-367e-917b-469914bddcb2.roa (raw, json) Hash identifier: sj/sjuRpKjjCH+pXDkfyd0MtSAl5cFwFrmE9SOQpqZ8= Subject key identifier: E0:89:CB:B2:55:1E:EE:01:24:99:0A:83:6F:2D:F0:5C:AB:6D:23:F9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858490E16D20AEB4F3D9913C1C500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd67ddd1-a432-367e-917b-469914bddcb2.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 7342 IP address blocks: 2620:74:3f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:d2:0a:eb:4f:3d:99:13:c1:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=4424d23c-e697-4e18-9511-56eb4adaf425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ea:2a:bf:fa:bc:77:b7:a6:bc:b9:cc:d6:43: db:76:18:1c:91:b9:20:89:88:8f:df:e8:8b:9b:32: 70:89:59:87:cb:6e:fb:e4:6d:12:76:8c:64:b2:20: e6:0c:91:07:0d:c3:b1:04:5b:a2:b6:30:fd:eb:fc: 2b:ca:8a:30:24:f2:af:78:ac:66:81:54:31:77:55: db:1f:0d:7c:1b:08:8a:8d:84:40:4d:7b:7d:5d:88: 57:f2:96:9d:7d:f7:d7:da:0a:ba:89:70:b8:a1:a3: 36:d7:78:64:41:89:1d:a7:ed:bb:c4:99:c6:ff:e1: 12:a3:97:db:ab:d1:7c:d1:b4:96:6e:6a:20:d7:31: 63:66:d2:99:97:b9:f9:ce:86:52:ae:15:1c:4d:d7: f4:d1:21:77:20:ba:43:ac:80:bd:25:79:d2:ab:61: 04:2a:c0:75:49:4c:22:b3:bf:05:78:99:b9:7b:bc: 18:b7:cc:de:91:52:63:36:13:ed:4b:c2:a7:61:ed: 09:46:9e:78:6e:82:c2:0f:ec:bd:66:b3:84:83:a0: 29:b3:16:89:84:56:6e:b4:da:07:0b:a6:13:71:bc: 8b:24:fd:70:c0:3f:0a:c2:90:f4:a4:d9:7e:79:fd: 8b:31:86:d4:4c:61:0f:45:3d:1c:f3:3e:31:c6:f1: e5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:89:CB:B2:55:1E:EE:01:24:99:0A:83:6F:2D:F0:5C:AB:6D:23:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd67ddd1-a432-367e-917b-469914bddcb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:3f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:dc:a1:03:e9:65:ea:4a:6b:5c:12:1c:1a:ef:a2:ef:0c:c8: 85:54:4d:a4:6d:d3:d1:3d:e2:0c:af:8f:06:ce:a3:4e:a9:2b: e8:d7:32:f3:bd:79:a6:7f:c2:5a:fe:0d:6b:22:6c:43:d8:3b: a7:d6:00:62:23:31:ca:43:af:2d:ee:32:06:f2:39:90:73:02: fd:0c:7e:60:36:72:81:59:b6:8f:a1:e1:39:72:40:9e:1b:02: 32:e6:49:b2:01:45:31:f0:44:ce:17:d3:bb:fc:3b:05:ec:1e: e9:74:31:d0:b0:72:2c:91:5f:ae:5c:ba:84:44:fb:d7:77:9d: 1e:c1:02:f4:f0:d8:65:c0:47:04:82:2a:8d:0e:ea:05:c0:e8: 73:9f:35:aa:78:cb:bc:bd:92:73:f4:dd:8b:4d:6f:fa:49:5e: 65:d2:11:48:9f:59:ac:01:03:6b:c4:86:49:fa:32:91:b5:db: 44:46:10:e5:b0:4d:3e:b8:b0:32:c3:c1:d7:3a:42:82:9f:04: e2:17:b5:0f:22:5e:9e:81:85:a1:f9:56:39:38:e1:7f:77:6c: 2e:15:4d:9b:fa:99:46:cb:ae:c8:b8:e9:d9:81:b9:e1:f4:7e: a1:34:6a:ea:29:83:2a:68:53:6d:90:18:e2:3c:d0:d0:f7:e2: 37:2e:61:6f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkOFtIK6089mRPBxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk NDQyNGQyM2MtZTY5Ny00ZTE4LTk1MTEtNTZlYjRhZGFmNDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOoqv/q8d7emvLnM1kPbdhgckbkgiYiP3+iL mzJwiVmHy2775G0SdoxksiDmDJEHDcOxBFuitjD96/wryoowJPKveKxmgVQxd1Xb Hw18GwiKjYRATXt9XYhX8padfffX2gq6iXC4oaM213hkQYkdp+27xJnG/+ESo5fb q9F80bSWbmog1zFjZtKZl7n5zoZSrhUcTdf00SF3ILpDrIC9JXnSq2EEKsB1SUwi s78FeJm5e7wYt8zekVJjNhPtS8KnYe0JRp54boLCD+y9ZrOEg6ApsxaJhFZutNoH C6YTcbyLJP1wwD8KwpD0pNl+ef2LMYbUTGEPRT0c8z4xxvHlMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOCJy7JVHu4BJJkKg28t8FyrbSP5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmQ2N2RkZDEtYTQzMi0z NjdlLTkxN2ItNDY5OTE0YmRkY2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAA/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACDcoQPpZepKa1wSHBrvou8MyIVUTaRt09E94gyvjwbOo06pK+jX MvO9eaZ/wlr+DWsibEPYO6fWAGIjMcpDry3uMgbyOZBzAv0MfmA2coFZto+h4Tly QJ4bAjLmSbIBRTHwRM4X07v8OwXsHul0MdCwciyRX65cuoRE+9d3nR7BAvTw2GXA RwSCKo0O6gXA6HOfNap4y7y9knP03YtNb/pJXmXSEUifWawBA2vEhkn6MpG120RG EOWwTT64sDLDwdc6QoKfBOIXtQ8iXp6BhaH5Vjk44X93bC4VTZv6mUbLrsi46dmB ueH0fqE0auopgypoU22QGOI80ND34jcuYW8= -----END CERTIFICATE-----Generated at Wed Apr 9 01:12:20 2025 by rpki-client