$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/843fbb5a-0106-3317-ac02-b8a6c9cd3037.roa File: 843fbb5a-0106-3317-ac02-b8a6c9cd3037.roa (raw, json) Hash identifier: v4VV/ZN36jwBTocPk4nTxAnfvSkdV+/FmaPZP+U1D2A= Subject key identifier: 61:49:6F:CF:15:8E:B8:8C:FE:E0:32:59:63:96:16:05:82:8B:9F:84 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584975446A1B051E6C30CE5F4100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/843fbb5a-0106-3317-ac02-b8a6c9cd3037.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 20172 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:6a:1b:05:1e:6c:30:ce:5f:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=98f2896f-b64c-4474-be0f-740a3301b6e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:df:57:77:36:c7:f0:71:16:1c:6f:2f:ba:2a: a5:41:60:1b:22:31:6f:60:4d:c4:7e:80:ca:39:24: 48:38:f7:1d:37:e9:7e:20:a6:48:cf:9c:f4:68:4f: 04:7f:46:de:b2:81:1c:63:f2:a4:21:13:7e:4c:34: 2a:aa:ff:cc:49:96:0c:d3:82:54:02:db:7a:93:86: a7:ab:7a:b4:91:ea:68:32:6a:dd:a5:85:55:8e:d0: e9:15:6a:81:ad:cb:89:46:8b:4f:84:e4:cc:4c:bb: 9a:9c:89:40:c7:78:5b:e1:2a:83:24:b3:7f:be:3b: 68:c7:6f:41:48:a8:e7:8f:21:6f:59:66:59:3e:3d: 1c:4c:2a:19:e3:3f:55:e1:97:0a:18:fa:7d:6c:5a: 2a:c9:55:ff:9f:72:e0:f5:d2:99:71:b3:ad:f0:53: 2a:f2:5d:a6:83:de:3e:4b:9e:23:60:31:87:6e:e4: 84:40:30:4d:45:6a:fb:19:5d:1e:02:04:24:fb:e2: af:00:93:2e:a8:1c:85:f5:ad:e6:0e:0e:ce:05:4d: 7a:b4:ad:bc:3b:54:cc:16:66:63:b7:06:83:49:ef: d2:87:1c:6c:8b:63:56:60:bc:de:04:cc:f1:b6:eb: 6e:ee:4b:25:91:aa:71:70:a5:73:08:2c:8b:19:77: 7a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:49:6F:CF:15:8E:B8:8C:FE:E0:32:59:63:96:16:05:82:8B:9F:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/843fbb5a-0106-3317-ac02-b8a6c9cd3037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:92:1f:d1:eb:75:df:63:ca:4c:25:4b:de:61:38:c0:fa:cb: 2f:73:96:83:df:92:7e:2c:8e:d2:f8:90:bb:0c:99:55:87:71: ec:a8:12:b1:f8:32:70:95:b3:94:53:ff:00:ce:37:8b:7a:17: fb:93:ca:1e:0e:42:4a:85:dc:75:a2:0d:45:4e:d0:b0:07:9a: 8e:df:0c:dc:46:96:4a:cd:ef:ee:b9:33:25:c3:2d:07:ec:f5: 6b:7e:0d:ac:65:b5:dc:87:3a:9c:9f:31:39:66:ed:9b:64:1a: ea:6f:ad:db:28:5e:25:74:09:7e:c1:d5:fe:79:83:6b:0b:58: b0:43:99:5f:34:63:d6:a2:93:ef:d8:42:8c:29:60:ca:d1:7a: df:0b:e2:5e:32:28:69:f4:4c:40:43:57:58:21:9a:5b:1e:1a: 29:ce:8c:5c:ec:82:d8:8b:21:14:ad:f5:ea:36:20:ac:b7:88: f9:54:98:2d:07:26:5e:f0:1c:a6:f7:01:e3:80:54:ac:90:1c: c2:32:f7:66:b3:1f:04:d3:da:49:45:d2:df:92:f6:be:cf:65: ab:54:c4:59:03:bd:7a:b1:86:da:6d:7d:82:9d:3a:0f:1f:93: 65:5d:bd:e2:13:f0:57:dc:a5:03:30:24:ca:01:6d:da:30:e6: cc:d0:08:86 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEl1RGobBR5sMM5fQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk OThmMjg5NmYtYjY0Yy00NDc0LWJlMGYtNzQwYTMzMDFiNmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod9XdzbH8HEWHG8vuiqlQWAbIjFvYE3EfoDK OSRIOPcdN+l+IKZIz5z0aE8Ef0besoEcY/KkIRN+TDQqqv/MSZYM04JUAtt6k4an q3q0kepoMmrdpYVVjtDpFWqBrcuJRotPhOTMTLuanIlAx3hb4SqDJLN/vjtox29B SKjnjyFvWWZZPj0cTCoZ4z9V4ZcKGPp9bFoqyVX/n3Lg9dKZcbOt8FMq8l2mg94+ S54jYDGHbuSEQDBNRWr7GV0eAgQk++KvAJMuqByF9a3mDg7OBU16tK28O1TMFmZj twaDSe/Shxxsi2NWYLzeBMzxtutu7kslkapxcKVzCCyLGXd6BwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGFJb88VjriM/uAyWWOWFgWCi5+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODQzZmJiNWEtMDEwNi0z MzE3LWFjMDItYjhhNmM5Y2QzMDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA1kh/R63XfY8pMJUveYTjA+ssvc5aD35J+LI7S +JC7DJlVh3HsqBKx+DJwlbOUU/8AzjeLehf7k8oeDkJKhdx1og1FTtCwB5qO3wzc RpZKze/uuTMlwy0H7PVrfg2sZbXchzqcnzE5Zu2bZBrqb63bKF4ldAl+wdX+eYNr C1iwQ5lfNGPWopPv2EKMKWDK0XrfC+JeMihp9ExAQ1dYIZpbHhopzoxc7ILYiyEU rfXqNiCst4j5VJgtByZe8Bym9wHjgFSskBzCMvdmsx8E09pJRdLfkva+z2WrVMRZ A716sYbabX2CnToPH5NlXb3iE/BX3KUDMCTKAW3aMObM0AiG -----END CERTIFICATE-----Generated at Fri Apr 11 23:51:55 2025 by rpki-client