$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7aa526c9-53d8-3092-ac32-cf3ddac079d3.roa File: 7aa526c9-53d8-3092-ac32-cf3ddac079d3.roa (raw, json) Hash identifier: kzGzh9BijooUHpx3ZMbizd7R5SEJvn1s16DkRGS1NCE= Subject key identifier: 08:A3:47:8C:54:BC:89:05:8B:0D:C5:D7:FA:2B:16:7C:49:61:E6:98 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858497544709C55019C254C8F1980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7aa526c9-53d8-3092-ac32-cf3ddac079d3.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 397210 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:70:9c:55:01:9c:25:4c:8f:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=e72d679a-8660-4ca7-b87d-7469cbca48bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:35:6c:c2:a4:2d:52:30:c2:ce:c8:4f:7c:64: 5f:71:e2:6f:85:49:21:06:e4:a6:b5:b0:5f:8d:e5: 41:77:1a:70:44:e0:0a:61:32:2e:48:bd:e7:eb:a9: bc:e4:53:6f:65:11:b0:88:01:78:aa:18:2e:c1:fa: 80:8d:fc:4d:a7:0c:fe:4a:5d:62:47:0e:dd:4a:78: c2:eb:ee:fc:f5:c4:22:98:ff:b6:6b:f6:9b:a6:81: 62:d5:73:f2:79:78:19:e6:72:20:66:b2:b2:6d:04: 3e:9c:1e:f8:ac:a6:82:2e:b3:57:10:ab:cb:a8:76: c5:14:77:33:7d:84:40:85:ed:11:3a:be:41:f2:cd: 69:9d:04:17:ff:06:80:b3:bf:7a:91:5a:0d:d0:99: bb:d3:12:a4:27:96:a0:4b:af:6c:22:8e:ef:c6:c7: d2:f9:03:8b:f0:3f:25:25:a2:f6:7e:20:64:ff:fb: 71:bd:73:6d:11:b0:0f:fa:c6:33:9b:5f:3d:6e:e5: 9b:2a:30:73:97:c3:32:c4:5a:ef:88:8c:25:46:70: 9b:02:04:dd:67:e6:2e:9b:b0:a0:7c:fb:3b:99:6f: aa:e8:2d:e0:93:eb:9b:76:ed:ef:37:c3:77:02:86: 01:dc:2e:70:1a:23:5f:cc:c4:72:13:c9:12:da:e0: e3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A3:47:8C:54:BC:89:05:8B:0D:C5:D7:FA:2B:16:7C:49:61:E6:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7aa526c9-53d8-3092-ac32-cf3ddac079d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:bb:0a:e1:ea:bc:4f:18:46:29:4c:8e:57:25:4f:79:14:b1: ad:db:0c:d6:4a:ea:82:75:ba:44:a7:87:fb:c9:09:51:35:42: a6:e8:67:cf:01:0d:d5:91:d3:2a:19:b8:04:05:d1:92:86:fd: 22:34:1d:93:82:90:38:eb:65:e7:56:10:08:45:7d:8e:10:a8: c7:af:18:16:57:5d:1e:37:78:e0:5c:f7:d9:1a:17:a5:0c:41: 0d:f1:86:da:af:f8:da:74:e1:df:29:1c:ea:dc:1b:dd:7f:26: c0:57:a0:11:0e:ab:e6:d5:42:14:fb:50:94:0c:19:1f:92:31: d3:32:c8:e3:ea:88:a2:3a:ef:d9:10:c2:2b:83:fe:dd:cb:71: c8:ad:73:15:b0:d0:21:d6:94:83:60:97:d3:e0:73:42:22:61: 4c:34:54:23:6d:27:38:52:f8:ac:96:8a:45:5f:5a:df:ee:cd: 4a:b4:0b:62:d9:5d:92:78:51:53:96:56:16:8c:06:d7:d5:70: 96:1a:5c:cc:75:b1:b8:75:4f:8b:f3:35:d0:c3:13:b3:ac:d6: 3c:c9:42:ff:8b:23:b5:3b:04:9a:ba:6d:dc:51:16:c9:8f:fb: 08:d8:2a:d6:5e:d1:03:b5:95:0c:97:59:a0:06:e1:84:e1:37: 00:8d:b4:62 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEl1RHCcVQGcJUyPGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk ZTcyZDY3OWEtODY2MC00Y2E3LWI4N2QtNzQ2OWNiY2E0OGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTVswqQtUjDCzshPfGRfceJvhUkhBuSmtbBf jeVBdxpwROAKYTIuSL3n66m85FNvZRGwiAF4qhguwfqAjfxNpwz+Sl1iRw7dSnjC 6+789cQimP+2a/abpoFi1XPyeXgZ5nIgZrKybQQ+nB74rKaCLrNXEKvLqHbFFHcz fYRAhe0ROr5B8s1pnQQX/waAs796kVoN0Jm70xKkJ5agS69sIo7vxsfS+QOL8D8l JaL2fiBk//txvXNtEbAP+sYzm189buWbKjBzl8MyxFrviIwlRnCbAgTdZ+Yum7Cg fPs7mW+q6C3gk+ubdu3vN8N3AoYB3C5wGiNfzMRyE8kS2uDjGwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAijR4xUvIkFiw3F1/orFnxJYeaYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2FhNTI2YzktNTNkOC0z MDkyLWFjMzItY2YzZGRhYzA3OWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCFuwrh6rxPGEYpTI5XJU95FLGt2wzWSuqCdbpE p4f7yQlRNUKm6GfPAQ3VkdMqGbgEBdGShv0iNB2TgpA462XnVhAIRX2OEKjHrxgW V10eN3jgXPfZGhelDEEN8Ybar/jadOHfKRzq3BvdfybAV6ARDqvm1UIU+1CUDBkf kjHTMsjj6oiiOu/ZEMIrg/7dy3HIrXMVsNAh1pSDYJfT4HNCImFMNFQjbSc4Uvis lopFX1rf7s1KtAti2V2SeFFTllYWjAbX1XCWGlzMdbG4dU+L8zXQwxOzrNY8yUL/ iyO1OwSaum3cURbJj/sI2CrWXtEDtZUMl1mgBuGE4TcAjbRi -----END CERTIFICATE-----Generated at Fri Apr 11 23:40:51 2025 by rpki-client