$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a57e6ae3-2b44-3394-9c6c-27e34c560a5d.roa File: a57e6ae3-2b44-3394-9c6c-27e34c560a5d.roa (raw, json) Hash identifier: C5waA1pkCCK6xdJ3yD/8LW3EBaUAOp93DEoc14Cgcf8= Subject key identifier: E0:04:67:AA:B5:C1:7E:07:C2:8E:49:CD:C9:39:1C:2C:51:5B:55:44 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584961B9A8A051A2E1B62101FB80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a57e6ae3-2b44-3394-9c6c-27e34c560a5d.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 36624 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:a8:a0:51:a2:e1:b6:21:01:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=54283795-2ece-4555-9c28-4278881521eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:83:04:22:c4:96:26:ef:1b:21:8b:31:9b:c3: 3d:f6:ba:4a:e7:ea:35:7e:26:24:ad:e0:3a:3b:00: e7:ad:ae:5d:b8:ec:51:74:1f:f8:6c:3d:c4:0c:9d: c5:bd:1f:d1:a6:6c:eb:3c:e0:0c:d6:ee:22:c3:32: 1c:eb:cc:35:a6:01:ab:dd:3e:0b:b0:ff:6c:8a:61: bf:c5:75:87:6b:ca:49:51:6f:80:d4:88:98:51:e1: 42:0e:75:5a:75:92:71:cb:ab:ed:19:01:04:f7:a4: ea:b0:a2:d5:f1:ba:14:3b:16:3c:68:1f:83:5e:84: 3b:3c:a9:9c:ad:a8:a6:95:8c:eb:09:de:39:a7:c3: d5:70:35:0c:ac:b7:82:73:b3:80:49:37:5a:e5:86: d1:dd:f8:c2:db:f3:21:24:82:8a:91:37:de:0e:dc: f3:8a:53:54:b1:f7:98:db:95:9b:6a:32:72:2d:ee: 28:ae:ee:09:1b:51:76:b6:f3:0f:a0:f9:d6:f7:1c: 33:bd:50:9a:8a:f1:26:aa:20:7a:5b:a8:24:85:de: 57:aa:3c:60:8c:95:2b:97:61:27:c7:79:e8:d6:76: af:23:ed:49:81:8c:d4:45:51:5a:d1:d4:82:26:b3: e2:1d:72:37:36:bd:ba:78:d2:76:e3:b9:e1:20:84: e0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:04:67:AA:B5:C1:7E:07:C2:8E:49:CD:C9:39:1C:2C:51:5B:55:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a57e6ae3-2b44-3394-9c6c-27e34c560a5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c7:a1:3d:d7:db:93:dc:72:7a:e9:21:45:12:72:e0:07:54: cd:ed:65:84:3e:be:29:3c:f1:36:33:89:58:13:4c:52:e3:fb: c3:31:42:e3:ab:42:1c:16:9a:73:89:f9:0c:fc:80:e8:2a:b0: fd:41:fb:36:c6:20:5f:5c:d0:96:e1:c9:74:17:e1:2a:93:c3: a8:6d:e8:46:69:a4:9d:d7:a1:32:7a:64:ab:76:a8:70:b8:41: 78:1e:4b:19:bb:89:5d:bd:82:91:33:33:6c:95:33:f2:08:cc: aa:48:65:be:21:d9:9e:6f:8f:53:29:d5:ff:a1:67:6b:ae:a3: 76:ec:4c:eb:26:71:cc:16:4b:9e:23:e1:07:df:2f:f9:4b:48: fc:e0:a8:c3:48:5e:f8:5f:f9:bb:c8:18:90:f6:31:7f:ec:1d: fe:87:9f:16:51:87:02:b2:c8:e9:38:1a:fd:8f:a8:aa:95:e5: 97:e8:64:5d:07:d1:cb:6c:ae:92:e7:00:a8:99:03:59:b3:92: 65:cf:67:f2:4c:ff:50:30:ec:cb:39:fe:c9:ac:c3:3c:d8:e5: 2c:9e:f4:de:c6:0e:95:66:92:48:bb:11:8c:b3:cb:6a:ba:4e: b8:1b:af:b5:2e:0a:86:57:6f:f3:26:9b:2e:c4:24:25:e4:db: fa:01:5f:be -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWElhuaigUaLhtiEB+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk NTQyODM3OTUtMmVjZS00NTU1LTljMjgtNDI3ODg4MTUyMWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4MEIsSWJu8bIYsxm8M99rpK5+o1fiYkreA6 OwDnra5duOxRdB/4bD3EDJ3FvR/RpmzrPOAM1u4iwzIc68w1pgGr3T4LsP9simG/ xXWHa8pJUW+A1IiYUeFCDnVadZJxy6vtGQEE96TqsKLV8boUOxY8aB+DXoQ7PKmc raimlYzrCd45p8PVcDUMrLeCc7OASTda5YbR3fjC2/MhJIKKkTfeDtzzilNUsfeY 25WbajJyLe4oru4JG1F2tvMPoPnW9xwzvVCaivEmqiB6W6gkhd5XqjxgjJUrl2En x3no1navI+1JgYzURVFa0dSCJrPiHXI3Nr26eNJ247nhIITgqQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOAEZ6q1wX4Hwo5Jzck5HCxRW1VEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTU3ZTZhZTMtMmI0NC0z Mzk0LTljNmMtMjdlMzRjNTYwYTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA8x6E919uT3HJ66SFFEnLgB1TN7WWEPr4pPPE2 M4lYE0xS4/vDMULjq0IcFppzifkM/IDoKrD9Qfs2xiBfXNCW4cl0F+Eqk8OobehG aaSd16EyemSrdqhwuEF4HksZu4ldvYKRMzNslTPyCMyqSGW+Idmeb49TKdX/oWdr rqN27EzrJnHMFkueI+EH3y/5S0j84KjDSF74X/m7yBiQ9jF/7B3+h58WUYcCssjp OBr9j6iqleWX6GRdB9HLbK6S5wComQNZs5Jlz2fyTP9QMOzLOf7JrMM82OUsnvTe xg6VZpJIuxGMs8tquk64G6+1LgqGV2/zJpsuxCQl5Nv6AV++ -----END CERTIFICATE-----Generated at Fri Apr 11 23:50:36 2025 by rpki-client