$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4490573f-486e-35bf-b04b-3652fa2d79b7.roa File: 4490573f-486e-35bf-b04b-3652fa2d79b7.roa (raw, json) Hash identifier: jbtuFY419cCmFwiErNBgU/ciHR8txOenzB4DyOssHec= Subject key identifier: B0:DA:1A:E5:7F:AE:CA:D0:09:76:83:98:84:A7:47:9E:2F:D1:18:6B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849194198F142D666FEA8F3B700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4490573f-486e-35bf-b04b-3652fa2d79b7.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 396543 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:98:f1:42:d6:66:fe:a8:f3:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=995b9d00-63ef-4bcb-93fd-d229afd85831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:47:ee:5e:54:fd:80:77:7c:f7:89:b8:db:fd: 7c:4b:7c:67:bb:f9:65:a5:db:31:70:d6:14:77:63: 9b:57:31:b7:33:3b:6d:ab:d6:fe:50:03:ef:48:f2: 80:bf:07:61:7a:2c:99:f6:5c:6d:68:46:96:57:2e: 7f:7d:87:4f:e9:f9:85:a4:bc:5f:66:df:35:34:b5: 90:3d:e7:fc:1b:85:f3:3d:94:a2:fe:87:bf:4c:5f: d9:53:af:b1:bd:ee:f1:0d:38:e2:36:c1:5a:00:e3: d4:cf:95:60:49:2c:51:84:6d:72:d9:72:30:ce:3d: 36:39:49:79:a7:c0:bf:10:bf:e3:5c:95:37:c5:c8: 28:f0:ae:47:77:7a:f1:9f:69:75:85:45:7d:22:a1: 77:60:5c:fb:57:ec:ef:cd:71:48:2a:ae:23:06:6b: eb:fc:08:4c:9c:30:96:80:17:de:c1:8a:0e:e6:43: 44:e5:0a:26:57:aa:f1:28:da:d3:61:30:f8:bc:76: f0:48:a5:97:18:ef:19:cd:5e:00:22:d0:30:0b:5b: 50:ce:95:4a:89:07:fa:59:db:b8:7b:c6:ba:3d:92: e9:b5:f9:a1:71:34:7b:35:7a:5f:74:71:14:9d:73: 8f:9f:42:36:ec:30:83:81:af:15:78:8b:84:50:3a: 91:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DA:1A:E5:7F:AE:CA:D0:09:76:83:98:84:A7:47:9E:2F:D1:18:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4490573f-486e-35bf-b04b-3652fa2d79b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:d3:0f:8e:83:d6:45:3c:10:d7:33:bc:28:5c:19:a0:c1:9a: 55:1b:2a:66:d0:69:a9:76:d2:39:00:49:72:2f:46:df:af:2d: ff:1e:be:b8:27:04:38:89:4b:74:da:4b:ca:17:77:9e:5c:f2: 3e:d4:c8:9b:40:9c:23:a5:cc:4e:6e:86:0e:2f:69:df:20:1e: 44:31:69:c0:03:92:58:4f:63:3b:e9:a0:c5:34:39:ca:25:37: d8:2c:a8:95:02:8a:bc:53:1b:eb:7f:50:eb:41:c1:2a:1a:64: d9:07:24:ab:8e:5e:b3:7d:10:01:b2:0d:a3:6a:00:2c:62:25: ad:2a:9b:24:6e:8c:ff:1b:20:ea:2b:2e:08:1d:9d:2b:75:8d: 2d:f1:fc:25:73:54:db:c5:90:fa:43:93:d9:a9:e2:c0:a5:59: 87:c6:a2:9b:63:e1:fc:c6:95:d3:e7:91:5f:44:e8:ab:f4:d8: 4a:61:72:15:79:15:81:11:db:ef:6d:4e:b0:49:3c:a2:2e:f7: 52:ed:de:ce:7a:47:e4:a7:60:9e:e7:40:34:f8:38:cb:7c:39: fd:94:82:c6:42:8e:6d:c8:51:34:cc:d6:8c:54:33:63:57:34: ae:0f:f9:43:55:26:4a:eb:78:cd:02:90:96:08:db:f4:58:78: 67:ff:fd:66 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkZQZjxQtZm/qjztwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk OTk1YjlkMDAtNjNlZi00YmNiLTkzZmQtZDIyOWFmZDg1ODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0fuXlT9gHd894m42/18S3xnu/llpdsxcNYU d2ObVzG3Mzttq9b+UAPvSPKAvwdheiyZ9lxtaEaWVy5/fYdP6fmFpLxfZt81NLWQ Pef8G4XzPZSi/oe/TF/ZU6+xve7xDTjiNsFaAOPUz5VgSSxRhG1y2XIwzj02OUl5 p8C/EL/jXJU3xcgo8K5Hd3rxn2l1hUV9IqF3YFz7V+zvzXFIKq4jBmvr/AhMnDCW gBfewYoO5kNE5QomV6rxKNrTYTD4vHbwSKWXGO8ZzV4AItAwC1tQzpVKiQf6Wdu4 e8a6PZLptfmhcTR7NXpfdHEUnXOPn0I27DCDga8VeIuEUDqRKQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLDaGuV/rsrQCXaDmISnR54v0RhrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDQ5MDU3M2YtNDg2ZS0z NWJmLWIwNGItMzY1MmZhMmQ3OWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAJ0w+Og9ZFPBDXM7woXBmgwZpVGypm0GmpdtI5 AElyL0bfry3/Hr64JwQ4iUt02kvKF3eeXPI+1MibQJwjpcxOboYOL2nfIB5EMWnA A5JYT2M76aDFNDnKJTfYLKiVAoq8Uxvrf1DrQcEqGmTZBySrjl6zfRABsg2jagAs YiWtKpskboz/GyDqKy4IHZ0rdY0t8fwlc1TbxZD6Q5PZqeLApVmHxqKbY+H8xpXT 55FfROir9NhKYXIVeRWBEdvvbU6wSTyiLvdS7d7Oekfkp2Ce50A0+DjLfDn9lILG Qo5tyFE0zNaMVDNjVzSuD/lDVSZK63jNApCWCNv0WHhn//1m -----END CERTIFICATE-----Generated at Tue Apr 15 23:36:54 2025 by rpki-client