$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/370e13f6-bde2-31cb-9f17-361a30229839.roa File: 370e13f6-bde2-31cb-9f17-361a30229839.roa (raw, json) Hash identifier: lVSjwGexVBmtO7sdUZtb8wObZgRu7eoZRMn5Maqq94w= Subject key identifier: 41:5C:76:58:A0:21:8E:A0:1E:6F:63:E2:2A:3E:D5:C6:5F:8E:F0:F0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584975446F663D2E7E114B271800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/370e13f6-bde2-31cb-9f17-361a30229839.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 396583 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:6f:66:3d:2e:7e:11:4b:27:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=c9ef22d0-6ef6-4dad-b0a2-f42557f65fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:40:2e:25:6f:7b:63:dc:5c:d9:b1:ce:a1:1c: 74:a1:cd:07:31:50:5e:55:e1:fa:c1:6a:18:0f:1c: 3e:59:f7:1c:81:49:5f:03:e1:69:0c:a2:f2:4c:84: e4:c0:70:63:22:c0:ba:c4:25:62:cb:4e:31:8a:d2: da:74:93:83:8b:54:c2:b8:87:de:7e:38:d9:39:c9: 34:f1:57:66:88:da:6d:ae:66:78:f3:52:60:3c:68: 55:fb:d5:09:6f:e8:66:db:86:3a:81:1d:4b:ea:aa: 08:ad:fc:5c:1c:11:25:3f:49:11:1d:ae:1e:5b:59: c7:8a:44:b2:c9:ca:86:58:44:ca:6d:d2:1d:54:81: c4:f5:10:c1:50:36:c7:e8:9a:15:70:0c:0f:b5:b5: fe:f1:eb:72:df:b0:aa:3d:18:32:ec:86:f6:3f:3d: 90:91:d1:05:88:09:39:e2:a9:95:cc:71:7e:0f:25: 8c:4f:21:3f:4f:9a:b0:7a:e1:dd:39:96:89:33:53: 66:7c:27:d0:5b:9d:a1:76:1b:19:fb:df:d1:f4:da: d1:2f:e1:79:05:c2:ac:a9:d6:a2:41:ac:e9:86:ee: 77:62:0b:82:7d:52:6f:03:c9:02:68:52:5b:6f:28: 4c:94:21:9b:4f:e1:83:82:ed:4b:72:68:37:f2:be: a3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5C:76:58:A0:21:8E:A0:1E:6F:63:E2:2A:3E:D5:C6:5F:8E:F0:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/370e13f6-bde2-31cb-9f17-361a30229839.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:73:c6:e9:1f:b9:cf:55:74:9f:ef:36:67:3e:26:4b:56:e7: 80:95:2c:27:a1:36:56:63:f2:7e:c5:ec:c3:de:96:e4:91:44: ef:6d:b7:4f:87:4d:ed:8f:69:db:80:90:33:f0:db:f4:34:2e: 25:83:5b:77:11:59:b7:05:c9:9e:ee:af:67:c8:a6:fa:32:d0: ff:ae:78:96:9a:d6:ad:81:70:e5:0f:75:dc:43:92:d2:c0:a4: 24:e3:e1:0a:68:96:8f:a7:e6:2c:c6:2f:69:78:36:f7:63:5d: b2:2e:bb:f3:ff:ae:c2:b6:d5:dc:3d:9a:f1:07:b2:d7:19:99: 23:4b:6e:10:f1:4a:f2:a1:09:7b:59:ef:f9:29:ba:74:dc:0e: 91:c5:bf:83:9d:ca:fa:5f:1e:c4:74:4e:a2:6f:a2:cc:b3:92: a6:1c:71:db:3c:2d:88:14:24:16:09:17:83:54:7e:14:4e:73: 1d:30:93:8b:f7:73:4c:b0:5c:b0:e4:17:74:cd:4b:b6:34:ea: ba:b7:45:b2:a2:f3:f2:55:f8:b4:8d:b7:b2:cc:37:94:6f:71: 13:30:ac:d6:73:47:10:2f:ab:f4:41:cf:b6:f1:58:1e:6d:3f: 9b:3e:f4:5d:81:0d:c0:00:f8:e8:56:b6:9f:71:a7:26:fa:d8: 5a:c5:14:1e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEl1RG9mPS5+EUsnGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk YzllZjIyZDAtNmVmNi00ZGFkLWIwYTItZjQyNTU3ZjY1ZmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkAuJW97Y9xc2bHOoRx0oc0HMVBeVeH6wWoY Dxw+WfccgUlfA+FpDKLyTITkwHBjIsC6xCViy04xitLadJODi1TCuIfefjjZOck0 8VdmiNptrmZ481JgPGhV+9UJb+hm24Y6gR1L6qoIrfxcHBElP0kRHa4eW1nHikSy ycqGWETKbdIdVIHE9RDBUDbH6JoVcAwPtbX+8ety37CqPRgy7Ib2Pz2QkdEFiAk5 4qmVzHF+DyWMTyE/T5qweuHdOZaJM1NmfCfQW52hdhsZ+9/R9NrRL+F5BcKsqdai Qazphu53YguCfVJvA8kCaFJbbyhMlCGbT+GDgu1Lcmg38r6jMQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEFcdligIY6gHm9j4io+1cZfjvDwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzcwZTEzZjYtYmRlMi0z MWNiLTlmMTctMzYxYTMwMjI5ODM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAKc8bpH7nPVXSf7zZnPiZLVueAlSwnoTZWY/J+ xezD3pbkkUTvbbdPh03tj2nbgJAz8Nv0NC4lg1t3EVm3Bcme7q9nyKb6MtD/rniW mtatgXDlD3XcQ5LSwKQk4+EKaJaPp+Ysxi9peDb3Y12yLrvz/67CttXcPZrxB7LX GZkjS24Q8UryoQl7We/5Kbp03A6Rxb+Dncr6Xx7EdE6ib6LMs5KmHHHbPC2IFCQW CReDVH4UTnMdMJOL93NMsFyw5Bd0zUu2NOq6t0WyovPyVfi0jbeyzDeUb3ETMKzW c0cQL6v0Qc+28VgebT+bPvRdgQ3AAPjoVrafcacm+thaxRQe -----END CERTIFICATE-----Generated at Sat Apr 12 00:15:21 2025 by rpki-client