$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0cad2d99-4b5d-3f3d-873e-9694a6f5be42.roa File: 0cad2d99-4b5d-3f3d-873e-9694a6f5be42.roa (raw, json) Hash identifier: 23dCQqSPG5dS9oGCfuTtRq8CFg2yCeYAVyTeJ6fnScQ= Subject key identifier: 59:8E:B7:44:76:28:F8:E6:80:E9:B9:54:28:B4:BD:C7:0E:03:8A:89 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C904F718835D53156ACD5F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0cad2d99-4b5d-3f3d-873e-9694a6f5be42.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 0 IP address blocks: 2620:74:61::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:f7:18:83:5d:53:15:6a:cd:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=40544cf5-b155-4d22-a68d-4c24dae6dc12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d2:6d:85:38:4c:ea:2b:14:19:59:e9:ba:f4: 7c:81:6e:3b:a0:83:b9:00:76:52:f4:94:26:c8:d2: 27:9c:42:2f:4d:ec:d4:43:34:f5:46:e7:b8:b3:f8: 91:e2:94:ea:71:8b:a5:39:b1:d7:ea:a7:ec:9e:b7: b2:82:b6:a6:e2:85:81:a4:f3:1a:ca:17:0d:4d:24: 31:1e:e5:d3:1f:19:49:ec:c1:fd:de:ce:be:76:82: 0d:18:28:9e:05:16:85:59:db:e7:1e:ad:78:56:34: 7d:0a:e3:49:5c:9a:ae:f8:a3:34:94:da:b2:a4:9f: 93:60:59:e3:15:cc:21:19:a4:f9:81:e2:7f:ae:22: 34:06:c2:61:23:21:f0:61:78:a2:83:44:a7:3e:b8: 58:fb:58:82:0f:18:b4:cc:12:05:75:0a:f8:fb:cf: a4:7c:ec:d4:2c:16:ec:11:b3:13:6d:ec:87:54:98: 46:10:65:6c:8e:10:1d:33:5e:56:7c:46:62:c4:f2: 56:5e:d8:45:a7:2b:ae:ec:0f:6e:54:3a:73:e9:4b: 23:ab:3c:06:ee:3a:17:ba:33:9f:f3:62:8c:29:b5: 26:a0:5b:d4:f7:45:2e:3c:a5:e2:68:3e:f3:e5:f6: 55:87:5c:e1:a6:58:be:bd:2b:8f:fd:97:78:cb:94: 45:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:8E:B7:44:76:28:F8:E6:80:E9:B9:54:28:B4:BD:C7:0E:03:8A:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0cad2d99-4b5d-3f3d-873e-9694a6f5be42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:61::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:5c:6f:9a:b9:90:6f:2a:31:5f:0e:64:6f:ef:55:fa:5d:b6: b3:da:1d:3a:6e:9d:0b:79:ea:f8:5d:3d:74:85:0d:64:bd:1d: 98:e3:aa:ae:fb:15:28:55:cc:97:9d:1a:7e:cf:85:04:3c:b1: b4:ec:4d:ae:46:81:39:3c:7e:4c:04:e5:4c:52:ff:da:ee:17: d2:43:1b:ea:49:0a:a3:63:bf:42:78:4e:a9:02:86:cb:38:ff: 2c:df:85:6b:5f:c6:27:70:ad:c0:3a:f6:f9:23:ef:8a:48:c5: 72:2e:5b:cf:e2:3d:ab:49:4a:f0:ae:27:cb:7b:1d:17:c5:26: 56:f9:14:10:09:07:f2:3a:07:3e:3f:92:45:e4:19:99:4d:52: 1c:e1:b8:18:1c:78:54:83:4b:fe:a5:02:61:b5:26:31:80:27: 4b:df:35:9e:d0:22:12:18:53:1b:ba:d9:96:6b:8b:dc:f3:61: aa:db:1a:89:41:bc:69:50:7d:06:4d:7a:b5:2b:0a:f4:eb:2f: 8f:57:b3:f6:06:97:a5:7b:55:f7:92:a3:0e:7a:09:24:62:22: 6b:ea:28:b5:20:7d:16:ba:5d:b4:32:e7:d2:8a:f6:61:91:04: cd:13:7e:33:56:b0:7c:37:e3:a5:99:d0:a5:e4:08:a9:1a:98: 08:49:4d:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnJBPcYg11TFWrNX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk NDA1NDRjZjUtYjE1NS00ZDIyLWE2OGQtNGMyNGRhZTZkYzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdJthThM6isUGVnpuvR8gW47oIO5AHZS9JQm yNInnEIvTezUQzT1Rue4s/iR4pTqcYulObHX6qfsnreygram4oWBpPMayhcNTSQx HuXTHxlJ7MH93s6+doINGCieBRaFWdvnHq14VjR9CuNJXJqu+KM0lNqypJ+TYFnj FcwhGaT5geJ/riI0BsJhIyHwYXiig0SnPrhY+1iCDxi0zBIFdQr4+8+kfOzULBbs EbMTbeyHVJhGEGVsjhAdM15WfEZixPJWXthFpyuu7A9uVDpz6UsjqzwG7joXujOf 82KMKbUmoFvU90UuPKXiaD7z5fZVh1zhpli+vSuP/Zd4y5RFgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFmOt0R2KPjmgOm5VCi0vccOA4qJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGNhZDJkOTktNGI1ZC0z ZjNkLTg3M2UtOTY5NGE2ZjViZTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI5cb5q5kG8qMV8OZG/vVfpdtrPaHTpunQt56vhdPXSFDWS9HZjj qq77FShVzJedGn7PhQQ8sbTsTa5GgTk8fkwE5UxS/9ruF9JDG+pJCqNjv0J4TqkC hss4/yzfhWtfxidwrcA69vkj74pIxXIuW8/iPatJSvCuJ8t7HRfFJlb5FBAJB/I6 Bz4/kkXkGZlNUhzhuBgceFSDS/6lAmG1JjGAJ0vfNZ7QIhIYUxu62ZZri9zzYarb GolBvGlQfQZNerUrCvTrL49Xs/YGl6V7VfeSow56CSRiImvqKLUgfRa6XbQy59KK 9mGRBM0TfjNWsHw346WZ0KXkCKkamAhJTSE= -----END CERTIFICATE-----Generated at Mon May 12 10:45:22 2025 by rpki-client