$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28464c60-d2e4-3b92-a2e2-c88f1defcf0b.roa File: 28464c60-d2e4-3b92-a2e2-c88f1defcf0b.roa (raw, json) Hash identifier: 9tBFlERGAEiQbj59bG4Zxvft6gMMmrhZhXRIeafLFa0= Subject key identifier: C2:F4:48:A2:74:15:DA:3D:C9:33:0D:45:8C:81:42:FE:3E:CF:91:45 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858491941956BC0DBD120B3FC9000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28464c60-d2e4-3b92-a2e2-c88f1defcf0b.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 397202 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:95:6b:c0:db:d1:20:b3:fc:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=78effc09-113c-4153-9522-9eaf851a6800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:db:f6:0f:46:60:d3:3c:b3:d3:d5:31:ff:e8: ff:de:d5:71:24:ef:61:00:ef:24:2d:b4:94:bf:07: 19:d8:53:3d:db:56:d5:76:cb:25:76:36:a6:22:4d: 6f:00:f3:52:5b:bc:b1:0e:e5:0c:37:ff:6c:db:b3: 73:47:a9:9c:83:c7:8f:f9:79:5c:d2:54:ee:8d:fa: 63:f8:15:b9:4d:df:9d:9a:69:90:40:52:e4:5b:19: ec:ef:61:95:21:c4:7c:d4:d5:26:b8:06:a7:35:63: f3:e4:c0:ba:a4:19:f8:85:fd:da:18:42:d5:d8:b7: de:f1:0a:1d:ef:dc:5d:17:92:15:c8:66:f3:d5:7e: cd:98:98:2f:40:ea:c6:72:11:34:80:5b:b2:73:00: 94:8f:3f:b5:6b:78:de:f1:b5:9e:4c:bf:f5:ed:5b: f2:3d:36:6e:87:4a:4f:b7:57:c0:b4:e1:85:83:e1: 30:b2:d3:d7:a3:7a:c9:e1:5e:98:0c:b0:cb:14:78: f7:87:4c:f1:53:4c:80:f9:d4:1a:1e:17:0a:9b:56: 39:bc:eb:5f:2b:b9:8e:dc:de:ea:2f:cb:5e:d2:5d: 53:7a:0f:df:a9:fb:0f:68:aa:57:36:56:1e:9a:73: eb:64:2c:7b:69:48:a4:e9:13:80:04:1c:47:29:38: 9a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F4:48:A2:74:15:DA:3D:C9:33:0D:45:8C:81:42:FE:3E:CF:91:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28464c60-d2e4-3b92-a2e2-c88f1defcf0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:68:2a:fb:35:29:cc:fb:59:06:80:6c:12:7c:f3:ce:bb:4a: 60:33:c5:92:4f:99:ac:ce:9f:dd:05:57:e6:82:33:00:81:e9: f2:01:81:a4:62:4f:31:34:20:e6:15:d8:53:7e:1c:ab:23:84: 75:c3:40:b1:81:95:3a:5e:82:11:98:67:10:70:48:20:34:8d: 08:bb:90:4e:56:66:b4:9d:d8:10:46:05:36:4d:f7:9c:c6:89: ce:fc:e9:8a:e8:ca:94:6b:e4:04:96:9c:b3:7d:86:b1:f7:7c: ca:8b:8c:51:00:b1:40:c6:8a:88:7d:a6:16:75:50:59:84:2e: 55:ea:68:03:33:d4:dc:83:56:1a:4e:bb:42:56:f1:58:a4:80: 92:e5:1e:7b:3d:5d:04:f4:ab:f2:6b:d6:8e:dd:69:22:bf:8e: 39:1f:fe:76:fe:5b:86:50:9d:88:6b:e5:13:16:8c:17:f5:19: 89:67:f7:38:10:0a:be:fb:7f:da:fd:c6:3c:07:99:42:1c:61: ca:9b:4c:49:3e:cb:db:bf:ca:20:80:1b:0a:d7:c2:4c:ab:8c: 0f:00:4d:fc:79:59:23:ed:45:31:38:51:d2:e0:9a:82:e4:a0: 65:9c:d4:3a:18:9b:58:25:ef:49:3d:7b:84:ce:1c:f9:9b:e3: 91:2c:be:83 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkZQZVrwNvRILP8kAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk NzhlZmZjMDktMTEzYy00MTUzLTk1MjItOWVhZjg1MWE2ODAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Nv2D0Zg0zyz09Ux/+j/3tVxJO9hAO8kLbSU vwcZ2FM921bVdssldjamIk1vAPNSW7yxDuUMN/9s27NzR6mcg8eP+Xlc0lTujfpj +BW5Td+dmmmQQFLkWxns72GVIcR81NUmuAanNWPz5MC6pBn4hf3aGELV2Lfe8Qod 79xdF5IVyGbz1X7NmJgvQOrGchE0gFuycwCUjz+1a3je8bWeTL/17VvyPTZuh0pP t1fAtOGFg+EwstPXo3rJ4V6YDLDLFHj3h0zxU0yA+dQaHhcKm1Y5vOtfK7mO3N7q L8te0l1Teg/fqfsPaKpXNlYemnPrZCx7aUik6ROABBxHKTiaEwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFML0SKJ0Fdo9yTMNRYyBQv4+z5FFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjg0NjRjNjAtZDJlNC0z YjkyLWEyZTItYzg4ZjFkZWZjZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBeaCr7NSnM+1kGgGwSfPPOu0pgM8WST5mszp/d BVfmgjMAgenyAYGkYk8xNCDmFdhTfhyrI4R1w0CxgZU6XoIRmGcQcEggNI0Iu5BO Vma0ndgQRgU2TfecxonO/OmK6MqUa+QElpyzfYax93zKi4xRALFAxoqIfaYWdVBZ hC5V6mgDM9Tcg1YaTrtCVvFYpICS5R57PV0E9Kvya9aO3Wkiv445H/52/luGUJ2I a+UTFowX9RmJZ/c4EAq++3/a/cY8B5lCHGHKm0xJPsvbv8oggBsK18JMq4wPAE38 eVkj7UUxOFHS4JqC5KBlnNQ6GJtYJe9JPXuEzhz5m+ORLL6D -----END CERTIFICATE-----Generated at Sun May 11 05:26:57 2025 by rpki-client