$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a02a6a8-c466-3dba-b4d8-190f4c2ada99.roa File: 5a02a6a8-c466-3dba-b4d8-190f4c2ada99.roa (raw, json) Hash identifier: 4vBqvYL7UGY1L3toRkWASfw0fWLYzMifR21rErhymlI= Subject key identifier: 41:85:AF:B4:D6:30:97:9F:54:6C:34:67:12:3E:06:93:B3:53:EE:6A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858494CC94B7D3C55CDFFF085D500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a02a6a8-c466-3dba-b4d8-190f4c2ada99.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 0 IP address blocks: 2620:74:1d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:4b:7d:3c:55:cd:ff:f0:85:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=9e5b628c-7e88-47a2-9707-13ea80d70775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:74:31:4f:79:43:ca:57:a7:8b:75:ab:6c:36: 01:c6:78:bd:aa:7d:c1:92:0d:6c:21:4a:df:ef:bd: b1:72:34:3a:3d:f0:d8:d4:38:d6:8c:e8:4a:b7:8b: 9d:f4:22:df:55:b8:4b:b0:c7:ca:a0:a9:43:48:ca: 9a:1a:45:01:8d:77:4b:14:fa:7f:ac:32:31:18:94: d2:d8:53:00:de:7b:9b:99:93:66:6e:a4:45:76:be: 72:c4:89:f9:cd:5f:ab:96:8d:fb:cb:85:2e:76:7b: ac:62:7f:bf:3d:72:22:2c:36:fb:4a:ba:e6:cb:38: e6:ad:ca:e5:22:51:33:87:3f:a6:27:fc:21:d4:71: 46:02:7a:a9:a8:6f:b6:82:e8:32:94:d5:ef:9d:59: 69:ba:64:d2:47:ee:f7:b6:0b:a5:6b:f7:4f:24:e4: 84:bb:86:02:b7:06:90:26:90:4d:21:f6:98:cd:de: 00:4f:b6:31:9f:e7:d8:44:52:7e:8a:8b:45:95:2d: b3:72:a8:72:c5:10:ad:c1:1d:cf:aa:f0:e4:32:a3: 0a:5d:ff:b2:7a:a4:cb:4e:e7:29:54:80:5d:3a:36: d3:d7:51:f1:c1:40:c1:64:b4:97:24:71:74:f2:ee: a0:a6:d0:5f:8a:e9:19:2b:3b:d0:46:e6:9b:ee:42: f6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:85:AF:B4:D6:30:97:9F:54:6C:34:67:12:3E:06:93:B3:53:EE:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a02a6a8-c466-3dba-b4d8-190f4c2ada99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:1d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:83:0d:4d:e5:e1:ef:d0:ab:2a:08:4d:c6:16:d2:5c:87:09: 28:10:22:01:68:88:bd:ef:77:58:eb:ff:cb:64:52:74:36:68: c5:24:8c:0c:e1:8f:51:08:1c:b4:97:42:85:f9:30:8f:93:c9: 8c:51:0d:e7:de:83:2f:75:12:15:14:6d:ba:f8:3f:cb:4d:78: 8a:51:0c:78:41:8b:14:b7:cb:9c:3e:33:88:49:d8:5e:bf:97: 58:52:d7:96:c0:06:a5:85:7c:57:3c:03:35:92:62:cb:68:5b: 7a:b3:7c:69:57:8f:e9:07:6c:de:8f:bc:f1:76:32:c9:9a:c5: 52:5a:41:e2:fd:eb:9a:d6:e4:1e:3f:bd:cf:27:8a:eb:c9:bf: cf:8c:ac:3c:53:d7:10:71:c5:fb:77:41:0c:b1:c5:8b:3b:8e: 22:e4:e2:8e:a5:ee:94:4d:4b:f6:3c:2f:15:3e:75:a4:ab:e9: 55:49:c5:bb:31:9b:0f:ad:b5:11:ec:44:17:d9:a3:78:e1:ff: 69:19:b5:c3:cb:ff:c5:4d:52:31:c9:e9:54:df:85:53:35:0b: b3:38:53:d4:a1:17:e8:8f:1e:e4:3f:34:89:b7:9b:39:91:5a: b7:47:18:50:07:f6:ea:07:55:07:86:0c:b3:d8:26:99:7a:24: c5:31:e7:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElMyUt9PFXN//CF1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk OWU1YjYyOGMtN2U4OC00N2EyLTk3MDctMTNlYTgwZDcwNzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3QxT3lDyleni3WrbDYBxni9qn3Bkg1sIUrf 772xcjQ6PfDY1DjWjOhKt4ud9CLfVbhLsMfKoKlDSMqaGkUBjXdLFPp/rDIxGJTS 2FMA3nubmZNmbqRFdr5yxIn5zV+rlo37y4UudnusYn+/PXIiLDb7Srrmyzjmrcrl IlEzhz+mJ/wh1HFGAnqpqG+2gugylNXvnVlpumTSR+73tgula/dPJOSEu4YCtwaQ JpBNIfaYzd4AT7Yxn+fYRFJ+iotFlS2zcqhyxRCtwR3PqvDkMqMKXf+yeqTLTucp VIBdOjbT11HxwUDBZLSXJHF08u6gptBfiukZKzvQRuab7kL2SwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEGFr7TWMJefVGw0ZxI+BpOzU+5qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWEwMmE2YTgtYzQ2Ni0z ZGJhLWI0ZDgtMTkwZjRjMmFkYTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFmDDU3l4e/QqyoITcYW0lyHCSgQIgFoiL3vd1jr/8tkUnQ2aMUk jAzhj1EIHLSXQoX5MI+TyYxRDefegy91EhUUbbr4P8tNeIpRDHhBixS3y5w+M4hJ 2F6/l1hS15bABqWFfFc8AzWSYstoW3qzfGlXj+kHbN6PvPF2MsmaxVJaQeL965rW 5B4/vc8niuvJv8+MrDxT1xBxxft3QQyxxYs7jiLk4o6l7pRNS/Y8LxU+daSr6VVJ xbsxmw+ttRHsRBfZo3jh/2kZtcPL/8VNUjHJ6VTfhVM1C7M4U9ShF+iPHuQ/NIm3 mzmRWrdHGFAH9uoHVQeGDLPYJpl6JMUx54s= -----END CERTIFICATE-----Generated at Fri Apr 11 23:42:13 2025 by rpki-client