$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40473fe4-0171-356c-b712-dad01ceb2039.roa File: 40473fe4-0171-356c-b712-dad01ceb2039.roa (raw, json) Hash identifier: gwmqTbfmPpBnFo7tOBSZCr1cQGZ6aVgpmbouxzC9Kvc= Subject key identifier: C1:F2:4C:83:4A:23:7F:4C:6B:BE:15:9F:DF:7D:D8:F9:F0:87:E1:DA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584975446EA775DD53A432733000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40473fe4-0171-356c-b712-dad01ceb2039.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 396553 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:6e:a7:75:dd:53:a4:32:73:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=4fef598a-928e-4987-b8be-57e71a5e085f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:47:82:df:5f:d4:98:ac:34:d7:44:7d:75:46: a0:85:98:78:fb:d1:2a:18:c2:a7:d4:dd:4e:dc:ed: f9:30:61:93:52:1f:cd:fd:80:37:26:c1:ad:a9:86: d2:bb:24:ed:02:dc:40:3a:df:ec:46:ab:46:01:6c: b6:f0:5d:66:15:05:7f:d3:1b:8c:f8:26:a6:98:42: d2:e6:a7:5f:37:38:d7:cb:f3:e3:13:a0:12:44:86: 87:16:2b:2b:1d:3d:28:bb:dc:c3:fa:2c:46:c9:94: 81:af:c7:13:ed:3b:5b:54:7b:24:6a:e1:b2:83:b5: e8:7c:b1:3b:e7:92:8f:27:91:51:51:67:0a:04:55: 29:d4:08:35:ef:8d:f5:7e:3a:c5:95:43:38:93:1a: e7:9d:09:5d:d2:ad:a7:09:84:36:09:be:22:a5:ae: 80:bf:10:d3:5d:62:f0:2d:d4:6b:75:c3:b1:96:96: 69:28:1b:27:7d:76:1a:bb:50:da:c9:e5:29:da:c7: ad:68:84:ae:d9:51:b3:6c:f8:d0:fd:05:36:f9:17: 7f:f9:82:a8:c6:94:f6:62:1a:20:61:91:4a:0b:10: c4:eb:f4:5e:74:70:bc:c2:3a:63:aa:91:32:41:28: 9c:9d:06:e1:23:7b:f5:b9:75:2e:6b:f6:4d:50:1f: d4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F2:4C:83:4A:23:7F:4C:6B:BE:15:9F:DF:7D:D8:F9:F0:87:E1:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40473fe4-0171-356c-b712-dad01ceb2039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:db:aa:a8:06:99:da:d0:e2:d4:b1:3d:60:42:7b:ab:af:27: 51:ae:dc:0e:dd:46:99:21:1c:e3:4f:6a:7f:10:da:92:4d:b2: ab:a2:97:9d:22:f3:01:2c:21:19:98:aa:eb:7f:02:65:44:1a: 6c:6b:8d:bc:ca:38:30:c3:5f:5c:db:87:8f:65:c9:e1:f8:35: b8:af:2f:4e:d8:de:90:da:d1:42:3b:a1:63:83:61:f5:51:2f: 60:fd:ed:ac:f4:32:8a:00:51:8e:9e:8a:eb:71:0c:67:4d:3c: 4d:d0:ea:16:3b:cb:b0:6a:50:48:2a:65:05:f6:ef:47:d1:88: 8c:ae:16:15:38:37:46:1e:35:e9:ec:2a:ab:66:04:68:2e:fa: 6b:cb:3b:05:4d:1b:f8:ce:6d:2f:fb:04:f0:57:aa:ac:a6:4e: b3:4b:2c:48:07:54:f6:ea:a8:48:5a:c1:78:bf:ec:53:bc:d3: d9:79:a1:09:47:f8:60:c4:92:19:10:c1:0a:be:7c:3e:43:06: 4b:31:60:a2:99:d6:d2:d5:5d:99:91:56:87:a5:3e:55:61:54: f3:11:6c:09:d9:82:8c:4b:5c:57:7b:2a:af:76:d9:cd:a4:85: 41:3b:22:3a:4a:bb:ba:f3:95:e2:4f:19:6b:e1:5a:f5:47:a6: 95:67:62:57 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEl1RG6ndd1TpDJzMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk NGZlZjU5OGEtOTI4ZS00OTg3LWI4YmUtNTdlNzFhNWUwODVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUeC31/UmKw010R9dUaghZh4+9EqGMKn1N1O 3O35MGGTUh/N/YA3JsGtqYbSuyTtAtxAOt/sRqtGAWy28F1mFQV/0xuM+CammELS 5qdfNzjXy/PjE6ASRIaHFisrHT0ou9zD+ixGyZSBr8cT7TtbVHskauGyg7XofLE7 55KPJ5FRUWcKBFUp1Ag17431fjrFlUM4kxrnnQld0q2nCYQ2Cb4ipa6AvxDTXWLw LdRrdcOxlpZpKBsnfXYau1DayeUp2setaISu2VGzbPjQ/QU2+Rd/+YKoxpT2Yhog YZFKCxDE6/RedHC8wjpjqpEyQSicnQbhI3v1uXUua/ZNUB/UCwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMHyTINKI39Ma74Vn9992Pnwh+HaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDA0NzNmZTQtMDE3MS0z NTZjLWI3MTItZGFkMDFjZWIyMDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAi26qoBpna0OLUsT1gQnurrydRrtwO3UaZIRzj T2p/ENqSTbKropedIvMBLCEZmKrrfwJlRBpsa428yjgww19c24ePZcnh+DW4ry9O 2N6Q2tFCO6Fjg2H1US9g/e2s9DKKAFGOnorrcQxnTTxN0OoWO8uwalBIKmUF9u9H 0YiMrhYVODdGHjXp7CqrZgRoLvpryzsFTRv4zm0v+wTwV6qspk6zSyxIB1T26qhI WsF4v+xTvNPZeaEJR/hgxJIZEMEKvnw+QwZLMWCimdbS1V2ZkVaHpT5VYVTzEWwJ 2YKMS1xXeyqvdtnNpIVBOyI6Sru685XiTxlr4Vr1R6aVZ2JX -----END CERTIFICATE-----Generated at Fri Apr 11 23:00:49 2025 by rpki-client