$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40801f6c-baf4-39ca-8afd-ff4f25798169.roa File: 40801f6c-baf4-39ca-8afd-ff4f25798169.roa (raw, json) Hash identifier: UCkFNCz4UvHYY3ecO0yHMr04YHxTXtKXi3j25TgqiR8= Subject key identifier: 9C:78:4B:E6:FE:6A:86:20:F3:69:63:26:19:F5:3C:9A:44:6F:07:A6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C21F6FF5A8C614536AAC70 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40801f6c-baf4-39ca-8afd-ff4f25798169.roa Signing time: Tue 15 Apr 2025 12:34:54 +0000 ROA not before: Tue 15 Apr 2025 12:34:54 +0000 ROA not after: Mon 14 Jul 2025 12:34:54 +0000 asID: 396585 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:1f:6f:f5:a8:c6:14:53:6a:ac:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:54 2025 GMT Not After : Jul 14 12:34:54 2025 GMT Subject: CN=e277fe89-028e-4a52-a748-62f438424712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:aa:35:7f:88:4f:07:a7:8a:e0:de:fa:c0:e4: 83:ef:fa:b5:da:05:6a:9f:6c:56:05:00:34:ce:7f: 8c:83:40:2b:f4:86:a8:0e:24:27:0b:29:de:56:4c: 54:49:27:89:4c:01:81:28:67:bb:e9:e8:63:9c:b6: 50:c6:83:b2:1c:a8:30:d6:27:46:07:44:60:70:09: ed:26:c9:94:ad:0b:de:1f:ef:36:1e:24:7e:8b:19: 1c:5f:47:b1:7f:5f:6a:9f:77:95:97:b1:94:8f:b7: a3:b8:7f:04:96:29:41:6b:14:70:8b:41:bd:c3:8a: 00:64:8d:b2:14:ba:2a:5f:e7:88:01:aa:bf:dd:3c: dc:c7:1e:20:00:d3:ea:5b:d6:9d:d6:26:64:cc:00: f1:58:de:01:8c:cb:8f:f3:dc:d2:80:a9:1e:79:b5: 42:6c:c7:1d:c6:18:12:98:82:b5:48:98:03:2d:1a: 1b:c1:19:5d:73:e9:ab:01:a3:ba:36:c5:87:10:c2: fd:27:2a:6f:71:8a:26:74:9f:58:5c:27:0d:be:02: 25:97:86:d4:f5:9e:14:fb:86:3e:36:b3:88:b2:8d: af:5c:44:0d:d8:3b:c7:45:97:8c:5f:64:74:bf:4d: bd:d1:b0:f0:b7:38:1b:49:0a:ad:12:88:ab:c1:7f: 90:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:78:4B:E6:FE:6A:86:20:F3:69:63:26:19:F5:3C:9A:44:6F:07:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40801f6c-baf4-39ca-8afd-ff4f25798169.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:87:d0:83:c6:50:cb:ee:76:27:22:d0:10:d9:7a:ce:dc:6a: 87:2a:b4:99:b8:45:42:f8:d1:7c:e3:1f:99:91:0b:a7:b9:52: a5:65:2b:82:ea:6e:ac:6b:d2:fe:02:02:7f:36:13:b0:2d:3e: 07:b9:c4:5d:2a:df:07:cd:e8:ea:3e:9c:5e:69:ca:db:92:05: 25:cf:d1:9f:b0:0b:a2:5b:55:95:81:47:48:01:1b:1d:fd:e2: b7:15:e4:fc:3d:e6:56:56:34:88:f7:af:8c:8f:17:7c:c1:c3: 0d:65:bd:a5:09:6a:05:18:74:c2:5d:fb:48:43:6f:a0:44:48: a9:a8:ea:1d:6c:b0:8a:6a:d1:7f:60:0f:91:04:44:e3:71:96: 8b:62:98:48:79:0b:9d:e0:36:17:07:e5:34:43:d2:2e:01:a5: 39:b8:bf:43:44:27:89:36:e1:7f:22:81:66:e7:5f:29:9f:fa: 2a:b0:3c:d5:24:bd:41:2c:d3:a9:37:6b:00:1e:7d:0f:3f:75: 66:4d:5b:88:83:80:04:9b:c3:ea:59:60:0b:7a:75:f4:d4:a8: 92:93:b0:79:cb:0d:3b:88:00:02:be:fa:ee:24:e0:84:96:ad: ed:09:7e:00:91:aa:9b:87:fb:e3:16:ff:52:ef:da:c4:e8:ce: ee:0b:bf:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwh9v9ajGFFNqrHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NFoXDTI1MDcxNDEyMzQ1NFowLzEtMCsGA1UEAxMk ZTI3N2ZlODktMDI4ZS00YTUyLWE3NDgtNjJmNDM4NDI0NzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjao1f4hPB6eK4N76wOSD7/q12gVqn2xWBQA0 zn+Mg0Ar9IaoDiQnCyneVkxUSSeJTAGBKGe76ehjnLZQxoOyHKgw1idGB0RgcAnt JsmUrQveH+82HiR+ixkcX0exf19qn3eVl7GUj7ejuH8ElilBaxRwi0G9w4oAZI2y FLoqX+eIAaq/3Tzcxx4gANPqW9ad1iZkzADxWN4BjMuP89zSgKkeebVCbMcdxhgS mIK1SJgDLRobwRldc+mrAaO6NsWHEML9JypvcYomdJ9YXCcNvgIll4bU9Z4U+4Y+ NrOIso2vXEQN2DvHRZeMX2R0v0290bDwtzgbSQqtEoirwX+QRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJx4S+b+aoYg82ljJhn1PJpEbwemMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDA4MDFmNmMtYmFmNC0z OWNhLThhZmQtZmY0ZjI1Nzk4MTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGWH0IPGUMvudici0BDZes7caocqtJm4RUL40XzjH5mRC6e5UqVl K4Lqbqxr0v4CAn82E7AtPge5xF0q3wfN6Oo+nF5pytuSBSXP0Z+wC6JbVZWBR0gB Gx394rcV5Pw95lZWNIj3r4yPF3zBww1lvaUJagUYdMJd+0hDb6BESKmo6h1ssIpq 0X9gD5EERONxlotimEh5C53gNhcH5TRD0i4BpTm4v0NEJ4k24X8igWbnXymf+iqw PNUkvUEs06k3awAefQ8/dWZNW4iDgASbw+pZYAt6dfTUqJKTsHnLDTuIAAK++u4k 4ISWre0JfgCRqpuH++MW/1Lv2sTozu4Lvyk= -----END CERTIFICATE-----Generated at Sun May 11 06:32:55 2025 by rpki-client