$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/20c61510-ec43-3517-9c57-12d63181a3e8.roa File: 20c61510-ec43-3517-9c57-12d63181a3e8.roa (raw, json) Hash identifier: al1o5c5Gg8jjWVLvIzou7OcCqg1wyMbgdFxkv13DCtU= Subject key identifier: 9A:E1:8A:CA:72:32:D8:F5:D7:4E:83:13:D0:07:ED:24:CB:80:7F:A1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C221C2AFF2707DA3DE7000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/20c61510-ec43-3517-9c57-12d63181a3e8.roa Signing time: Tue 15 Apr 2025 12:34:55 +0000 ROA not before: Tue 15 Apr 2025 12:34:55 +0000 ROA not after: Mon 14 Jul 2025 12:34:55 +0000 asID: 396610 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:21:c2:af:f2:70:7d:a3:de:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:55 2025 GMT Not After : Jul 14 12:34:55 2025 GMT Subject: CN=39ca9705-3562-4561-a87a-304fc07b1023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1e:59:af:94:8b:15:0f:1f:c2:a2:1b:4d:c1: 76:ff:93:ac:33:9f:82:15:38:81:55:34:09:a7:be: 25:24:49:b1:36:eb:37:35:c5:87:5c:7d:5f:50:0c: a8:ee:9a:bf:96:71:e4:99:37:bc:82:f5:b0:c6:41: 36:78:17:2f:d7:1c:86:6c:af:63:18:97:5e:7c:9e: 2f:e9:50:62:26:bf:c5:e5:02:44:e9:7f:f6:df:56: 33:50:2b:06:4c:ca:30:a8:36:f5:10:36:99:fc:e3: a7:94:b7:3a:94:58:ec:6f:78:97:6f:68:7c:df:89: e8:30:6f:bc:07:6e:9f:7a:55:b5:1f:08:d4:de:4b: e1:3a:b3:97:ab:1a:45:ec:d6:83:70:6c:19:16:94: bc:94:95:6a:1e:5a:a7:c8:1e:6e:fe:a1:fd:57:e0: 43:2d:ec:d5:01:d1:c4:04:8e:50:b2:db:0a:24:33: 33:27:db:13:22:51:52:55:7c:f5:bd:52:fc:8b:f8: cd:0d:6c:f2:39:9d:2f:6a:7a:b7:92:6d:42:7e:df: 13:dc:8f:17:f1:ee:17:e1:7b:49:05:de:d2:db:af: 06:86:31:cf:6d:77:2a:f9:db:f9:c4:ca:62:de:02: df:db:84:19:3f:07:04:4b:36:26:b1:d8:6b:2b:c4: aa:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E1:8A:CA:72:32:D8:F5:D7:4E:83:13:D0:07:ED:24:CB:80:7F:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/20c61510-ec43-3517-9c57-12d63181a3e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:a2:76:d6:fc:a4:47:68:09:ee:a3:92:61:ee:56:05:22:14: 41:ed:6c:8f:63:24:0c:6a:f9:29:83:69:19:e0:9d:05:27:df: ec:e1:53:20:39:c2:18:92:1d:f9:ed:87:ea:5a:72:d5:cc:47: b9:32:cc:88:34:20:58:dd:49:f8:1c:6c:bc:2e:0d:fe:b1:21: 8d:c9:9a:6f:27:63:8d:ca:77:b8:72:9b:e1:99:1c:9a:eb:ea: 79:46:29:ff:70:34:b8:3a:41:3f:ee:e5:a5:30:b0:d6:53:06: 4d:8a:25:7d:73:24:14:22:3b:25:6a:2b:dd:0a:c5:68:63:c4: f5:5e:66:e7:55:d0:fa:95:f0:b9:22:16:71:57:e4:b0:d6:28: 6e:a2:1f:21:42:af:09:38:29:b0:66:45:dc:65:1c:e9:fc:53: 9c:57:d9:e5:80:84:7e:70:9a:07:95:fa:e3:39:20:62:be:f5: 24:5b:f4:d4:7b:a1:bf:36:71:ea:74:61:64:9b:9e:09:5c:bf: 8e:a5:76:e2:25:ba:49:3b:50:43:d6:e0:36:68:db:17:56:f3: 8e:59:e7:9f:3a:da:b4:fc:5a:2f:52:b5:9c:55:9e:d1:f0:ac: c1:2b:db:04:e9:2c:ff:2f:aa:93:3c:e7:b4:3f:3c:d8:ac:f2: 2e:d1:aa:8d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwiHCr/JwfaPecAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NVoXDTI1MDcxNDEyMzQ1NVowLzEtMCsGA1UEAxMk MzljYTk3MDUtMzU2Mi00NTYxLWE4N2EtMzA0ZmMwN2IxMDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgR5Zr5SLFQ8fwqIbTcF2/5OsM5+CFTiBVTQJ p74lJEmxNus3NcWHXH1fUAyo7pq/lnHkmTe8gvWwxkE2eBcv1xyGbK9jGJdefJ4v 6VBiJr/F5QJE6X/231YzUCsGTMowqDb1EDaZ/OOnlLc6lFjsb3iXb2h834noMG+8 B26felW1HwjU3kvhOrOXqxpF7NaDcGwZFpS8lJVqHlqnyB5u/qH9V+BDLezVAdHE BI5QstsKJDMzJ9sTIlFSVXz1vVL8i/jNDWzyOZ0vanq3km1Cft8T3I8X8e4X4XtJ Bd7S268GhjHPbXcq+dv5xMpi3gLf24QZPwcESzYmsdhrK8SqNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJrhispyMtj1106DE9AH7STLgH+hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjBjNjE1MTAtZWM0My0z NTE3LTljNTctMTJkNjMxODFhM2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIqidtb8pEdoCe6jkmHuVgUiFEHtbI9jJAxq+SmDaRngnQUn3+zh UyA5whiSHfnth+pactXMR7kyzIg0IFjdSfgcbLwuDf6xIY3Jmm8nY43Kd7hym+GZ HJrr6nlGKf9wNLg6QT/u5aUwsNZTBk2KJX1zJBQiOyVqK90KxWhjxPVeZudV0PqV 8LkiFnFX5LDWKG6iHyFCrwk4KbBmRdxlHOn8U5xX2eWAhH5wmgeV+uM5IGK+9SRb 9NR7ob82cep0YWSbnglcv46lduIlukk7UEPW4DZo2xdW845Z55862rT8Wi9StZxV ntHwrMEr2wTpLP8vqpM857Q/PNis8i7Rqo0= -----END CERTIFICATE-----Generated at Sun May 11 06:00:41 2025 by rpki-client