$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95492b19-4cda-3a63-86f3-5869625ae3b8.roa File: 95492b19-4cda-3a63-86f3-5869625ae3b8.roa (raw, json) Hash identifier: dKPJn0GyZJWWymLu4H+yFG3vR7NNlfz1VaowJSeiCBc= Subject key identifier: EC:BF:1A:5A:45:58:25:14:63:0C:3C:22:6B:85:64:A7:BB:D3:05:6F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584993FA02610D0706C91C651000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95492b19-4cda-3a63-86f3-5869625ae3b8.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 7342 IP address blocks: 2620:74:ee::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:fa:02:61:0d:07:06:c9:1c:65:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=41310216-0e1a-4008-8681-6178b0a57486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:51:e1:7f:4c:f8:63:32:3c:fd:bd:74:78:a2: 52:21:cb:44:f3:1d:fa:bc:14:94:4c:d2:2a:41:97: 67:e7:21:a0:43:be:e2:71:ef:c4:d4:84:3c:c2:80: 6c:b2:1c:d1:06:23:ff:78:9d:69:be:8a:95:06:ec: 0e:f6:ff:67:52:35:0c:88:b1:42:c5:a2:34:a5:ae: 7f:a4:d4:2e:5c:a5:dd:32:38:68:2b:dc:30:94:08: 06:c0:2a:0d:dd:30:3a:ea:af:ba:de:9a:6d:f2:fb: b0:a3:60:83:76:c8:15:d4:aa:06:6f:1f:20:aa:b0: 9d:36:29:8d:b8:5e:9c:36:b4:86:6c:84:9d:50:97: 20:f9:18:f1:3b:ea:1d:55:e6:11:53:6e:cf:df:c8: e9:0e:9c:72:3c:e4:e5:e3:16:e8:d3:43:03:80:c3: 9a:4b:cb:aa:45:e1:bc:96:fe:0f:6e:f9:c6:62:b0: 0c:03:0a:2a:8b:22:97:d2:d8:02:8e:6a:65:cc:8a: 75:af:1b:8c:de:15:8a:7e:1f:11:84:b0:87:75:73: 29:0c:70:82:aa:dc:ff:c6:89:02:5c:cf:24:69:8c: 78:a5:76:ba:1b:5f:97:bc:9d:f8:b1:e9:92:d8:c1: d5:b3:35:5e:bd:91:44:2a:41:53:56:37:25:70:6c: 34:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BF:1A:5A:45:58:25:14:63:0C:3C:22:6B:85:64:A7:BB:D3:05:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/95492b19-4cda-3a63-86f3-5869625ae3b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:ee::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:92:15:b4:54:14:59:9c:2a:02:f2:77:20:7a:bf:46:a4:9a: 2c:86:46:6d:a6:97:7c:db:d5:cd:b7:fa:7a:6b:1d:54:eb:a4: d2:ca:5c:77:cf:f1:8f:eb:7e:74:c0:59:1d:8d:ed:d4:45:59: 04:45:24:80:22:bb:1a:eb:62:60:85:d6:52:9b:c3:60:0a:4f: 35:52:06:c2:6f:d5:6f:93:2d:30:d3:16:7d:62:a2:86:77:53: 0e:bd:dd:1a:03:33:15:21:eb:dd:12:1d:ab:4c:34:40:ad:93: b0:f1:20:2b:98:9c:0a:8f:fe:a3:85:a6:a8:e0:c2:a6:05:63: 93:bd:66:f5:1a:2b:3f:8b:45:97:be:29:ca:2c:30:12:e7:9b: dd:8d:d5:5c:9c:7a:8f:a2:29:6b:7b:69:01:d3:d1:d2:11:dd: 5d:84:6c:57:69:96:cd:7d:9a:b7:e6:ac:62:41:de:95:3a:98: 0d:b3:da:a9:1c:f8:2b:0b:02:59:33:2a:46:62:f7:8f:58:f9: 9f:4a:21:42:46:9b:7d:8a:1c:eb:eb:0a:40:16:28:ea:9a:65: 3a:9d:a1:a6:b1:a4:aa:26:73:2c:a0:5f:57:83:61:8b:bb:6d: 10:19:88:e5:b2:54:c7:48:2c:93:9b:9f:7e:f9:32:79:88:d0: e7:db:d9:88 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmT+gJhDQcGyRxlEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk NDEzMTAyMTYtMGUxYS00MDA4LTg2ODEtNjE3OGIwYTU3NDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FHhf0z4YzI8/b10eKJSIctE8x36vBSUTNIq QZdn5yGgQ77ice/E1IQ8woBsshzRBiP/eJ1pvoqVBuwO9v9nUjUMiLFCxaI0pa5/ pNQuXKXdMjhoK9wwlAgGwCoN3TA66q+63ppt8vuwo2CDdsgV1KoGbx8gqrCdNimN uF6cNrSGbISdUJcg+RjxO+odVeYRU27P38jpDpxyPOTl4xbo00MDgMOaS8uqReG8 lv4PbvnGYrAMAwoqiyKX0tgCjmplzIp1rxuM3hWKfh8RhLCHdXMpDHCCqtz/xokC XM8kaYx4pXa6G1+XvJ34semS2MHVszVevZFEKkFTVjclcGw0IwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOy/GlpFWCUUYww8ImuFZKe70wVvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTU0OTJiMTktNGNkYS0z YTYzLTg2ZjMtNTg2OTYyNWFlM2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdADu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADGSFbRUFFmcKgLydyB6v0akmiyGRm2ml3zb1c23+nprHVTrpNLK XHfP8Y/rfnTAWR2N7dRFWQRFJIAiuxrrYmCF1lKbw2AKTzVSBsJv1W+TLTDTFn1i ooZ3Uw693RoDMxUh690SHatMNECtk7DxICuYnAqP/qOFpqjgwqYFY5O9ZvUaKz+L RZe+KcosMBLnm92N1Vyceo+iKWt7aQHT0dIR3V2EbFdpls19mrfmrGJB3pU6mA2z 2qkc+CsLAlkzKkZi949Y+Z9KIUJGm32KHOvrCkAWKOqaZTqdoaaxpKomcyygX1eD YYu7bRAZiOWyVMdILJObn375MnmI0Ofb2Yg= -----END CERTIFICATE-----Generated at Sun May 11 06:56:39 2025 by rpki-client