$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2064d786-143a-30d6-b028-aba4222934c5.roa File: 2064d786-143a-30d6-b028-aba4222934c5.roa (raw, json) Hash identifier: 8hFUHo6h6AloIpm19+/93mzOLUXGZPFprfw1gFY4/Bw= Subject key identifier: ED:6A:8A:CD:7B:FE:13:56:E1:A3:50:5A:DD:FF:BA:DD:10:9A:5F:2E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858494CC94AF63E43C123F70865C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2064d786-143a-30d6-b028-aba4222934c5.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 0 IP address blocks: 2620:74:f0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:4a:f6:3e:43:c1:23:f7:08:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=4fb282a4-1944-448e-ae67-81549e40287e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c2:56:b4:1b:54:d2:ff:d8:8f:0d:78:c7:db: d4:f3:fd:8b:71:9b:b6:f0:2a:b2:96:95:3a:65:8f: af:69:a2:3c:17:35:a6:dd:a0:70:09:93:21:73:96: 00:14:71:a2:a4:0a:ab:82:71:73:2d:35:ec:6d:c3: 8b:ce:03:32:cd:a2:9e:39:78:06:b7:c6:c3:4e:a6: 08:ac:3a:bc:89:97:d5:32:4b:98:1b:ef:ae:14:18: f4:68:b5:0c:90:5a:97:54:70:16:a1:fd:f0:c9:2f: 7f:95:1f:09:47:11:de:d7:a5:f2:3e:ef:d7:d6:c6: d1:54:90:a1:3d:8e:3f:93:b7:7f:50:c1:89:f0:e4: 41:dc:70:5a:3b:5d:0d:72:0b:1b:39:77:e8:40:a9: 12:c1:8f:49:ee:8b:07:d3:20:7c:38:88:ac:5d:30: cf:dc:3b:bd:95:2c:df:95:b7:de:0d:2d:f1:6b:2e: 19:b5:69:a1:61:45:49:6e:af:10:1c:e1:3a:fc:f4: 8a:f4:f3:a5:23:70:7f:a2:c8:42:75:93:2b:35:21: 31:38:0a:ce:53:d6:95:c1:d8:ac:69:87:06:a9:60: 58:f2:43:94:71:7b:b1:c0:b7:15:14:75:dc:05:13: 7f:91:cd:1e:c0:86:b8:f0:3e:ef:6a:e1:70:ba:49: 7d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:6A:8A:CD:7B:FE:13:56:E1:A3:50:5A:DD:FF:BA:DD:10:9A:5F:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2064d786-143a-30d6-b028-aba4222934c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:f0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:d3:61:5d:e1:4f:59:b4:0f:a7:19:30:ba:03:e7:b9:70:fe: 1a:c7:62:6c:10:47:a9:59:25:de:c9:31:74:7e:cd:1b:d6:92: 7f:6b:00:28:85:f0:dd:11:71:d4:80:32:ba:67:b4:2b:f6:6d: 11:b2:b1:07:13:7f:56:4a:5c:16:4b:dc:82:27:ff:30:8d:6f: 15:32:05:ce:cf:80:47:63:ad:9e:eb:70:c1:d7:5e:c9:69:18: d9:f9:8b:92:13:c2:92:54:cb:f9:75:24:51:27:f7:1e:a4:9e: 5f:bc:fc:84:10:ea:14:ff:a3:6a:6b:b3:22:bd:f4:2b:5f:e8: 6f:cf:97:2d:c3:97:74:a0:de:d9:89:01:92:67:3c:27:4e:4a: 2d:d1:3d:02:45:d0:7a:fc:dd:ad:c1:c2:aa:48:db:e5:b6:9a: 8e:6a:b3:d6:bf:67:7d:50:2b:82:43:fd:54:98:92:6b:cc:f1: d9:f8:90:1f:e8:cd:1f:f5:90:f3:1b:3c:5e:14:7f:f4:84:9d: c5:1b:90:d3:49:03:b7:04:f4:2d:bc:4f:91:75:d9:93:94:4a: 36:c0:9b:31:b9:9e:69:60:b0:e2:3c:7a:82:27:d3:aa:02:ae: 4f:3a:94:5f:e4:3a:ae:82:25:c9:c2:36:c0:38:0c:52:12:fa: b6:b3:60:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElMyUr2PkPBI/cIZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk NGZiMjgyYTQtMTk0NC00NDhlLWFlNjctODE1NDllNDAyODdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8JWtBtU0v/Yjw14x9vU8/2LcZu28CqylpU6 ZY+vaaI8FzWm3aBwCZMhc5YAFHGipAqrgnFzLTXsbcOLzgMyzaKeOXgGt8bDTqYI rDq8iZfVMkuYG++uFBj0aLUMkFqXVHAWof3wyS9/lR8JRxHe16XyPu/X1sbRVJCh PY4/k7d/UMGJ8ORB3HBaO10NcgsbOXfoQKkSwY9J7osH0yB8OIisXTDP3Du9lSzf lbfeDS3xay4ZtWmhYUVJbq8QHOE6/PSK9POlI3B/oshCdZMrNSExOArOU9aVwdis aYcGqWBY8kOUcXuxwLcVFHXcBRN/kc0ewIa48D7vauFwukl9SwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO1qis17/hNW4aNQWt3/ut0Qml8uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjA2NGQ3ODYtMTQzYS0z MGQ2LWIwMjgtYWJhNDIyMjkzNGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAdADw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEXTYV3hT1m0D6cZMLoD57lw/hrHYmwQR6lZJd7JMXR+zRvWkn9r ACiF8N0RcdSAMrpntCv2bRGysQcTf1ZKXBZL3IIn/zCNbxUyBc7PgEdjrZ7rcMHX XslpGNn5i5ITwpJUy/l1JFEn9x6knl+8/IQQ6hT/o2prsyK99Ctf6G/Ply3Dl3Sg 3tmJAZJnPCdOSi3RPQJF0Hr83a3BwqpI2+W2mo5qs9a/Z31QK4JD/VSYkmvM8dn4 kB/ozR/1kPMbPF4Uf/SEncUbkNNJA7cE9C28T5F12ZOUSjbAmzG5nmlgsOI8eoIn 06oCrk86lF/kOq6CJcnCNsA4DFIS+razYLg= -----END CERTIFICATE-----Generated at Sat Apr 12 00:09:57 2025 by rpki-client