$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9dd345a-83fc-3451-8db3-8cbf07fc751b.roa File: a9dd345a-83fc-3451-8db3-8cbf07fc751b.roa (raw, json) Hash identifier: +kWoSwvAM+RKRnhxBkAsxZcTASib8cXYtEMthYsnp/Y= Subject key identifier: 64:A5:6F:CF:61:A8:B4:85:2A:D6:FB:76:90:06:25:D9:BF:A8:10:42 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584975446F053842D63AEB392E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9dd345a-83fc-3451-8db3-8cbf07fc751b.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 396552 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:6f:05:38:42:d6:3a:eb:39:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=7fd0bc16-d5a8-4fc5-8864-1b06a9b6d8d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:25:38:f2:20:e7:58:2e:7b:61:7e:8b:f9:9c: c3:1b:6e:7b:35:26:67:d8:6a:a4:41:3e:84:fa:24: 58:87:bf:d2:68:84:f7:1e:95:30:63:7f:c0:34:0c: e8:c3:a3:50:60:c1:65:ef:0c:b8:66:c0:ae:b6:76: 70:fd:3f:2c:5f:85:f2:19:18:e9:e4:b7:9c:4e:a4: a1:e4:9a:7e:58:09:08:80:4a:0b:28:a6:43:8f:80: d8:bd:89:49:fc:e7:d2:bd:58:b9:28:61:07:54:0c: a3:7c:05:06:78:14:04:75:48:29:44:bd:da:27:03: 5f:90:48:82:ad:fe:65:12:b7:22:e3:b0:f4:0e:5f: 0b:85:ba:0a:c9:e3:00:69:bf:b5:02:77:21:77:a7: 5f:37:81:e7:07:00:eb:42:c7:22:be:92:b5:e8:f1: 45:ac:e3:0f:09:8b:11:2c:6d:8e:29:1d:51:8b:4a: 36:10:93:07:7a:ca:2b:6d:98:52:71:e4:82:d9:bd: be:c8:16:d2:65:72:4f:4e:98:ed:74:af:55:8a:34: f5:2b:db:8d:98:17:b5:13:10:13:4f:51:bd:ad:f7: b8:3d:15:69:f5:2c:d6:16:d1:c7:7b:55:17:5b:9e: 1e:26:53:32:49:e9:1d:61:68:24:26:21:af:8b:8d: a6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A5:6F:CF:61:A8:B4:85:2A:D6:FB:76:90:06:25:D9:BF:A8:10:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9dd345a-83fc-3451-8db3-8cbf07fc751b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:94:f7:97:26:cb:cf:70:c4:c2:d5:a5:11:1f:a7:db:1d:39: c2:32:ab:ea:50:e3:cc:33:56:3a:67:67:72:a8:c2:30:53:a4: a9:fb:6c:96:7c:5d:f7:9b:91:80:42:d6:5e:36:88:3d:db:bb: bc:64:87:4a:b3:98:54:4f:fa:57:b8:a1:56:3b:0b:61:ab:18: f6:e4:3c:a3:14:86:16:c2:10:34:45:63:4f:68:cf:66:26:6d: 8b:ec:3b:6e:66:14:76:32:18:db:32:55:09:44:1a:d8:b9:74: a3:42:21:8c:e6:17:c4:66:fc:dd:ff:3f:66:5d:13:98:aa:55: e7:3e:2e:11:47:75:14:25:a0:26:d3:0a:47:63:20:bc:d4:84: cb:87:4e:4f:63:48:3b:74:99:f9:8f:bc:44:66:2f:71:45:05: f6:aa:ef:82:61:8f:4d:31:32:a9:75:a1:70:d1:90:fc:97:1a: a8:a1:e7:de:90:0d:cd:0e:be:5b:8c:41:33:04:0b:d5:3f:10: 47:9b:6c:a8:15:ca:4e:9e:51:81:74:22:8b:69:2a:b6:5d:43: 4f:a1:6b:4a:09:b4:14:7d:a1:c1:69:f5:16:9d:f3:eb:43:0e: ee:08:18:bf:a6:ed:35:22:9b:fb:e4:5c:ff:09:04:1a:43:f2: 5f:75:40:44 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEl1RG8FOELWOus5LoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk N2ZkMGJjMTYtZDVhOC00ZmM1LTg4NjQtMWIwNmE5YjZkOGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyU48iDnWC57YX6L+ZzDG257NSZn2GqkQT6E +iRYh7/SaIT3HpUwY3/ANAzow6NQYMFl7wy4ZsCutnZw/T8sX4XyGRjp5LecTqSh 5Jp+WAkIgEoLKKZDj4DYvYlJ/OfSvVi5KGEHVAyjfAUGeBQEdUgpRL3aJwNfkEiC rf5lErci47D0Dl8LhboKyeMAab+1Anchd6dfN4HnBwDrQscivpK16PFFrOMPCYsR LG2OKR1Ri0o2EJMHesorbZhSceSC2b2+yBbSZXJPTpjtdK9VijT1K9uNmBe1ExAT T1G9rfe4PRVp9SzWFtHHe1UXW54eJlMySekdYWgkJiGvi42m1QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGSlb89hqLSFKtb7dpAGJdm/qBBCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTlkZDM0NWEtODNmYy0z NDUxLThkYjMtOGNiZjA3ZmM3NTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAMlPeXJsvPcMTC1aURH6fbHTnCMqvqUOPMM1Y6 Z2dyqMIwU6Sp+2yWfF33m5GAQtZeNog927u8ZIdKs5hUT/pXuKFWOwthqxj25Dyj FIYWwhA0RWNPaM9mJm2L7DtuZhR2MhjbMlUJRBrYuXSjQiGM5hfEZvzd/z9mXROY qlXnPi4RR3UUJaAm0wpHYyC81ITLh05PY0g7dJn5j7xEZi9xRQX2qu+CYY9NMTKp daFw0ZD8lxqooefekA3NDr5bjEEzBAvVPxBHm2yoFcpOnlGBdCKLaSq2XUNPoWtK CbQUfaHBafUWnfPrQw7uCBi/pu01Ipv75Fz/CQQaQ/JfdUBE -----END CERTIFICATE-----Generated at Fri Apr 11 23:42:06 2025 by rpki-client