$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7f57f6d-27e5-3df1-ae97-cbea1b61453b.roa File: a7f57f6d-27e5-3df1-ae97-cbea1b61453b.roa (raw, json) Hash identifier: zMbG+hzIRtDGN6E5zgemeycNv+Xt7x0MtDP5XOm47cs= Subject key identifier: 3E:33:AB:F6:9F:41:BC:A9:05:29:83:98:A4:A7:A1:F5:C0:5C:30:4F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C21F2DD280629F755B03C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7f57f6d-27e5-3df1-ae97-cbea1b61453b.roa Signing time: Tue 15 Apr 2025 12:34:53 +0000 ROA not before: Tue 15 Apr 2025 12:34:53 +0000 ROA not after: Mon 14 Jul 2025 12:34:53 +0000 asID: 21313 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:1f:2d:d2:80:62:9f:75:5b:03:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:53 2025 GMT Not After : Jul 14 12:34:53 2025 GMT Subject: CN=5457a287-fb53-426d-8504-a115fb1a20d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:41:ca:bd:97:37:39:62:55:9a:0b:f3:27:15: 24:3c:c1:47:0c:34:19:01:cc:32:ac:f2:e2:af:88: 1c:86:fa:cd:1c:13:5c:ae:11:4c:51:c9:b0:81:3f: cc:de:46:49:83:44:48:c5:e3:cb:ba:46:fc:dc:88: d3:7e:a5:1e:ee:80:9c:54:b4:83:5d:a3:b7:b4:12: b2:34:6d:c2:95:5c:a7:41:59:5b:c1:ca:06:db:91: 91:31:7c:7d:da:53:ba:3b:de:fd:9b:5b:56:12:40: 0b:81:f5:6f:4a:a9:a5:aa:1c:3e:a0:74:26:f8:04: 2b:23:4e:9c:4a:19:ba:ae:da:d8:e2:b9:47:64:27: 1f:c1:1d:30:72:b7:5c:72:cf:40:ee:4a:1c:f7:17: 42:d4:0e:97:1c:5d:49:20:89:bc:a6:a3:cb:c3:12: 90:94:93:d5:8d:d8:95:64:02:ca:4a:f7:47:91:0c: 88:02:63:e7:f1:57:83:43:b6:b6:24:e6:df:56:94: b6:79:eb:2b:65:d9:57:41:d4:22:de:76:32:4e:73: 85:5b:56:c5:83:af:52:d9:f0:d0:fb:59:aa:c9:1d: 62:41:e5:d3:f3:16:b4:71:2c:c2:cd:6a:74:b9:1d: e3:95:19:42:71:de:9d:36:a8:af:c4:56:28:bb:d9: 9f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:33:AB:F6:9F:41:BC:A9:05:29:83:98:A4:A7:A1:F5:C0:5C:30:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7f57f6d-27e5-3df1-ae97-cbea1b61453b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:01:21:23:96:da:91:90:4e:ac:0a:a2:8b:41:c3:e1:dc:a6: e5:03:af:f8:0a:45:4b:79:cb:b9:d1:af:75:2a:f6:08:ed:35: 22:eb:28:e8:3c:ee:91:b6:83:03:39:a0:69:46:34:08:5f:c5: b2:f7:87:e0:89:bb:59:83:5e:47:39:5e:59:0f:d8:83:1d:37: 0d:8d:a4:c3:0f:ce:3c:b0:01:a5:93:11:d6:3a:f6:a3:41:b6: 52:6f:44:c2:1e:ef:6c:3e:e3:68:6e:5f:32:e7:e8:3c:01:72: 5c:ed:45:60:4f:8c:50:22:1c:45:b8:e8:36:33:44:13:78:52: 70:89:4e:a1:31:c9:79:1b:c5:83:29:e0:27:31:db:ab:84:2b: d8:db:15:8e:6e:a8:b8:75:10:08:27:81:db:49:14:ac:f2:07: cf:e2:fc:b5:14:f8:dc:86:13:9b:9c:48:07:4b:11:83:93:d0: 9f:39:66:c4:91:4e:d0:16:91:82:a4:17:c0:24:37:dd:67:2b: 19:69:50:2c:ba:7b:35:71:0b:12:04:5b:dd:37:7c:ce:b1:b3: 2a:b8:a6:e2:84:0c:4a:44:4e:90:ba:c4:66:6f:5c:b8:ad:be: 41:57:d6:8d:f9:bb:de:28:7c:f9:57:66:a9:2c:30:30:07:37: 08:b5:cd:4a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwh8t0oBin3VbA8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1M1oXDTI1MDcxNDEyMzQ1M1owLzEtMCsGA1UEAxMk NTQ1N2EyODctZmI1My00MjZkLTg1MDQtYTExNWZiMWEyMGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskHKvZc3OWJVmgvzJxUkPMFHDDQZAcwyrPLi r4gchvrNHBNcrhFMUcmwgT/M3kZJg0RIxePLukb83IjTfqUe7oCcVLSDXaO3tBKy NG3ClVynQVlbwcoG25GRMXx92lO6O979m1tWEkALgfVvSqmlqhw+oHQm+AQrI06c Shm6rtrY4rlHZCcfwR0wcrdccs9A7koc9xdC1A6XHF1JIIm8pqPLwxKQlJPVjdiV ZALKSvdHkQyIAmPn8VeDQ7a2JObfVpS2eesrZdlXQdQi3nYyTnOFW1bFg69S2fDQ +1mqyR1iQeXT8xa0cSzCzWp0uR3jlRlCcd6dNqivxFYou9mfrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD4zq/afQbypBSmDmKSnofXAXDBPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTdmNTdmNmQtMjdlNS0z ZGYxLWFlOTctY2JlYTFiNjE0NTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHwBISOW2pGQTqwKootBw+HcpuUDr/gKRUt5y7nRr3Uq9gjtNSLr KOg87pG2gwM5oGlGNAhfxbL3h+CJu1mDXkc5XlkP2IMdNw2NpMMPzjywAaWTEdY6 9qNBtlJvRMIe72w+42huXzLn6DwBclztRWBPjFAiHEW46DYzRBN4UnCJTqExyXkb xYMp4Ccx26uEK9jbFY5uqLh1EAgngdtJFKzyB8/i/LUU+NyGE5ucSAdLEYOT0J85 ZsSRTtAWkYKkF8AkN91nKxlpUCy6ezVxCxIEW903fM6xsyq4puKEDEpETpC6xGZv XLitvkFX1o35u94ofPlXZqksMDAHNwi1zUo= -----END CERTIFICATE-----Generated at Sun May 11 05:29:37 2025 by rpki-client