$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f8fe2ab-9a44-31c5-809b-b58b82b412f8.roa File: 6f8fe2ab-9a44-31c5-809b-b58b82b412f8.roa (raw, json) Hash identifier: fDX/z4KkjTsKKcaXsDy4LyPDgDLJdHNJQm+5aP0ua1M= Subject key identifier: A3:CD:C0:F7:F0:9E:51:17:D0:4D:37:EA:EF:2C:4E:58:91:B5:8F:3A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858491941955C8B3DC0614E496EA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f8fe2ab-9a44-31c5-809b-b58b82b412f8.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 20172 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:95:5c:8b:3d:c0:61:4e:49:6e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=012a5f9d-2277-4508-b3db-1662b02e04c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6c:ef:34:1c:fb:53:0c:3e:cb:6f:42:2e:53: 65:4e:79:3e:37:72:56:af:62:4f:28:92:aa:0e:7b: d9:04:e6:98:e8:e3:a8:c3:01:5e:2f:a6:a2:54:84: f0:f8:3a:b1:0a:60:d3:f5:1c:77:50:97:d0:a5:bf: 83:ab:53:c7:ef:47:ff:16:1c:4b:ff:d5:13:05:99: c0:36:2b:46:4a:63:c6:86:1d:2b:55:e1:d3:2a:d9: ab:72:2d:67:3b:da:6f:fa:e2:15:89:45:83:8b:94: 19:12:a3:d8:3e:f0:ad:62:e3:a9:69:ef:98:68:0c: 06:d5:42:91:4d:cc:40:2d:13:dc:25:68:95:20:d7: 77:dc:78:e3:81:6e:3a:fe:60:19:c3:c4:f0:03:e8: 60:0c:ee:bb:fd:4d:07:28:dc:b1:65:b0:34:1f:be: ab:47:bf:33:0b:e6:61:bf:66:f0:4b:97:49:66:84: 44:70:83:f4:88:18:ec:2a:de:8c:b9:41:8e:59:a4: 25:10:d7:ee:31:cf:3b:b7:49:e8:f2:f9:ba:64:53: 15:ca:3f:2a:a8:36:71:ac:37:31:d0:3d:30:8a:82: fa:ac:ae:e1:e7:83:d7:56:80:f7:ee:00:af:04:da: fd:89:00:5c:db:d6:60:33:66:0e:ee:9c:75:17:42: 6f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CD:C0:F7:F0:9E:51:17:D0:4D:37:EA:EF:2C:4E:58:91:B5:8F:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f8fe2ab-9a44-31c5-809b-b58b82b412f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:1c:0d:0a:ab:cb:cb:c6:f0:9a:98:f0:65:65:00:9d:07:9d: bd:3a:8f:f0:76:c8:d5:70:0e:89:f9:69:2f:00:a3:83:7e:16: ce:07:b6:8d:23:3e:45:bc:e0:de:df:c9:07:1c:ca:54:91:3f: cc:bc:07:bd:e7:06:b2:ee:a6:a2:14:6f:d5:d3:76:1c:f4:44: 0f:73:62:a1:08:b0:97:a8:1b:cb:b1:24:bd:ed:16:ba:06:7f: 8c:a6:69:97:a3:00:77:8a:6a:38:a5:11:b3:f6:04:56:59:7b: 34:21:d7:55:fc:da:7e:3b:c4:48:65:db:86:fb:53:e6:18:49: 64:20:1e:f1:4f:82:45:e1:6d:4b:b6:f2:69:f7:03:7f:7c:8e: de:7e:45:71:d3:d5:bf:13:4d:8d:f4:eb:71:82:2f:8e:e8:08: ab:3d:34:b9:22:48:ac:9c:18:c3:d0:0d:fb:ac:e4:ad:22:fa: 7a:71:09:27:89:ca:53:46:b6:46:f6:49:81:0d:25:42:41:de: e9:ea:6b:0d:ed:c4:90:71:40:04:df:da:26:f0:35:86:b0:90: 9b:13:1d:8b:36:87:d6:46:ab:f7:15:6a:80:bb:61:de:fa:b1: b2:ca:c2:fa:a0:83:07:90:86:dc:11:61:39:f3:60:d3:db:9a: ee:30:34:cb -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkZQZVciz3AYU5JbqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk MDEyYTVmOWQtMjI3Ny00NTA4LWIzZGItMTY2MmIwMmUwNGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGzvNBz7Uww+y29CLlNlTnk+N3JWr2JPKJKq DnvZBOaY6OOowwFeL6aiVITw+DqxCmDT9Rx3UJfQpb+Dq1PH70f/FhxL/9UTBZnA NitGSmPGhh0rVeHTKtmrci1nO9pv+uIViUWDi5QZEqPYPvCtYuOpae+YaAwG1UKR TcxALRPcJWiVINd33HjjgW46/mAZw8TwA+hgDO67/U0HKNyxZbA0H76rR78zC+Zh v2bwS5dJZoREcIP0iBjsKt6MuUGOWaQlENfuMc87t0no8vm6ZFMVyj8qqDZxrDcx 0D0wioL6rK7h54PXVoD37gCvBNr9iQBc29ZgM2YO7px1F0JvWQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKPNwPfwnlEX0E036u8sTliRtY86MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmY4ZmUyYWItOWE0NC0z MWM1LTgwOWItYjU4YjgyYjQxMmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCIHA0Kq8vLxvCamPBlZQCdB529Oo/wdsjVcA6J +WkvAKODfhbOB7aNIz5FvODe38kHHMpUkT/MvAe95way7qaiFG/V03Yc9EQPc2Kh CLCXqBvLsSS97Ra6Bn+MpmmXowB3imo4pRGz9gRWWXs0IddV/Np+O8RIZduG+1Pm GElkIB7xT4JF4W1LtvJp9wN/fI7efkVx09W/E02N9Otxgi+O6AirPTS5IkisnBjD 0A37rOStIvp6cQknicpTRrZG9kmBDSVCQd7p6msN7cSQcUAE39om8DWGsJCbEx2L NofWRqv3FWqAu2He+rGyysL6oIMHkIbcEWE582DT25ruMDTL -----END CERTIFICATE-----Generated at Tue Apr 15 18:37:55 2025 by rpki-client