$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51d2fadc-4a9c-38b4-bd8b-9daedca7f560.roa File: 51d2fadc-4a9c-38b4-bd8b-9daedca7f560.roa (raw, json) Hash identifier: kDR3k/7tgHfLskvYt4pz99+wa4J1IAQgro9v8qGP1Ic= Subject key identifier: 07:C9:1A:CA:FA:B0:7F:50:70:29:97:3C:09:5C:17:A7:E7:44:C0:9C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848F22A7D9D4645D176F91B5C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51d2fadc-4a9c-38b4-bd8b-9daedca7f560.roa Signing time: Thu 20 Feb 2025 13:58:07 +0000 ROA not before: Thu 20 Feb 2025 13:58:07 +0000 ROA not after: Wed 21 May 2025 12:58:07 +0000 asID: 0 IP address blocks: 2620:74:a2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2a:7d:9d:46:45:d1:76:f9:1b:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 20 13:58:07 2025 GMT Not After : May 21 12:58:07 2025 GMT Subject: CN=47da73b9-f224-4c63-9178-d3965be15162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:dc:53:96:ee:84:4e:85:c8:83:49:38:6b:10: 3b:bd:36:4a:12:75:35:16:8d:c1:fa:69:5b:53:e5: 95:5b:eb:5a:4c:e2:83:ea:96:8c:f8:21:df:f3:76: bf:5c:8d:14:57:1d:03:29:05:4a:9b:66:5a:b5:31: 8f:75:8b:30:1c:0e:da:ba:89:b3:ec:8d:91:8e:f9: 27:e6:8c:75:32:16:e8:32:89:fe:96:d5:fc:10:e2: 6e:d1:d9:75:79:d7:5d:df:21:d3:09:a0:c7:10:b1: 54:ca:95:98:6c:6d:c7:5a:6d:61:64:c6:9c:28:43: 3e:c7:f6:90:f7:e6:65:8b:0d:a7:7b:43:43:a7:79: 5f:7e:f8:18:7c:78:bf:e7:52:6e:17:d2:68:8b:5a: 20:e2:11:49:4f:6e:9b:84:2d:da:df:d4:4c:44:4f: 00:0e:2b:cb:79:45:69:a6:76:ef:35:48:29:c4:63: 09:4e:76:59:d0:31:8b:32:ff:a0:19:22:da:3c:ef: f6:13:22:a5:dd:eb:cb:55:07:36:e0:21:74:a5:be: 9a:1c:86:81:df:51:67:db:37:e2:c7:24:a6:17:0b: 15:60:3b:bb:d8:dd:a2:57:3f:9c:28:2c:a3:2a:58: de:0d:d5:d2:71:3a:5c:30:8a:c0:e4:0b:28:09:f2: 88:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C9:1A:CA:FA:B0:7F:50:70:29:97:3C:09:5C:17:A7:E7:44:C0:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51d2fadc-4a9c-38b4-bd8b-9daedca7f560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:a2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:6a:c5:ae:3a:a8:21:b1:50:0a:b5:5e:a1:1e:df:8f:ae:6f: 81:bb:65:20:ef:d0:ee:ba:11:e8:b6:51:c5:bd:71:41:e3:d6: 3e:60:5d:88:05:60:78:4d:43:55:a0:44:29:aa:70:9e:6c:66: fc:18:dd:23:17:23:eb:a3:5d:00:69:72:18:69:e4:2c:59:10: 59:96:b9:a3:ea:cf:b7:5a:a0:bb:85:e5:ae:01:77:7d:c6:5e: 45:e5:02:c7:af:b2:da:65:08:7f:de:77:6e:4c:96:ac:63:5e: e6:24:ff:24:c6:95:be:15:6b:26:37:ad:d5:18:c8:f9:a5:5c: 5e:8a:96:84:76:89:b8:06:10:8d:2d:2e:23:bd:f9:24:93:d2: 32:98:4c:e8:ca:3e:46:fe:28:e2:23:10:ae:a9:9b:df:8d:46: 75:25:02:99:5a:08:65:93:72:8f:eb:d3:37:d1:a5:61:19:37: 7e:b2:fc:8d:d1:a8:71:1f:9e:26:be:3d:44:a5:33:7c:e9:6a: 7e:aa:90:91:2d:48:64:98:61:da:11:2c:24:3b:53:42:06:91: c3:ae:96:52:67:68:3d:cb:a7:b7:7c:21:1c:06:32:bf:6e:b6: 29:54:cc:f9:f7:cb:6e:6b:5c:8b:dd:d3:33:6a:33:9e:e8:ad: 27:80:6f:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjyKn2dRkXRdvkbXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIyMDEzNTgwN1oXDTI1MDUyMTEyNTgwN1owLzEtMCsGA1UEAxMk NDdkYTczYjktZjIyNC00YzYzLTkxNzgtZDM5NjViZTE1MTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdxTlu6EToXIg0k4axA7vTZKEnU1Fo3B+mlb U+WVW+taTOKD6paM+CHf83a/XI0UVx0DKQVKm2ZatTGPdYswHA7auomz7I2Rjvkn 5ox1MhboMon+ltX8EOJu0dl1eddd3yHTCaDHELFUypWYbG3HWm1hZMacKEM+x/aQ 9+Zliw2ne0NDp3lffvgYfHi/51JuF9Joi1og4hFJT26bhC3a39RMRE8ADivLeUVp pnbvNUgpxGMJTnZZ0DGLMv+gGSLaPO/2EyKl3evLVQc24CF0pb6aHIaB31Fn2zfi xySmFwsVYDu72N2iVz+cKCyjKljeDdXScTpcMIrA5AsoCfKIJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAfJGsr6sH9QcCmXPAlcF6fnRMCcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTFkMmZhZGMtNGE5Yy0z OGI0LWJkOGItOWRhZWRjYTdmNTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHJqxa46qCGxUAq1XqEe34+ub4G7ZSDv0O66Eei2UcW9cUHj1j5g XYgFYHhNQ1WgRCmqcJ5sZvwY3SMXI+ujXQBpchhp5CxZEFmWuaPqz7daoLuF5a4B d33GXkXlAsevstplCH/ed25MlqxjXuYk/yTGlb4VayY3rdUYyPmlXF6KloR2ibgG EI0tLiO9+SST0jKYTOjKPkb+KOIjEK6pm9+NRnUlAplaCGWTco/r0zfRpWEZN36y /I3RqHEfnia+PUSlM3zpan6qkJEtSGSYYdoRLCQ7U0IGkcOullJnaD3Lp7d8IRwG Mr9utilUzPn3y25rXIvd0zNqM57orSeAb7k= -----END CERTIFICATE-----Generated at Sat Apr 12 01:49:57 2025 by rpki-client