$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af88d837-e4a3-3b05-8fdf-8b0eddc93aa3.roa File: af88d837-e4a3-3b05-8fdf-8b0eddc93aa3.roa (raw, json) Hash identifier: DZTrBvqyxQgeaKkyy//j3E4kObHjDeSI+2R6tw3Gscc= Subject key identifier: 14:FF:94:3E:C1:78:A0:EE:F6:21:AA:86:D3:2C:5A:2A:11:20:EF:88 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849287E56DB373772287542C3C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af88d837-e4a3-3b05-8fdf-8b0eddc93aa3.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 7342 IP address blocks: 2620:74:7e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:56:db:37:37:72:28:75:42:c3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=859abda8-e6d2-4d7a-b16f-5523440465bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:60:6b:a1:3f:d0:fc:1d:0a:81:d3:57:73:0f: 36:b8:54:8d:de:a5:6b:e6:b8:3a:cd:41:b5:41:06: f9:c2:ed:3b:88:66:bb:89:7c:98:2c:31:f0:bc:97: 7e:43:49:36:f6:c5:79:23:ed:4e:35:6c:ae:5e:d6: 83:09:21:bf:74:22:dd:a1:68:01:97:19:33:d2:91: a9:33:65:e2:c7:e3:03:61:af:d7:6d:c5:33:cd:4a: 0a:a3:f0:02:60:ac:1d:a8:2c:a7:93:d2:86:36:b7: 95:d2:d5:6f:66:ec:a4:f3:89:bd:0e:5b:8c:92:64: e8:2a:19:31:3a:ac:b0:97:9f:52:e3:1a:29:b8:b7: cf:bc:d4:12:c5:ad:90:c0:71:10:7d:2e:ac:d1:49: 7a:b2:81:b8:d8:df:79:7b:c2:42:32:69:f2:df:bf: 9b:f5:a9:78:9b:0b:a7:df:00:9c:02:7b:a2:2f:01: 45:70:39:2c:b6:7c:97:fd:72:06:72:ea:92:72:ce: bb:4e:ee:66:c0:16:43:ad:bd:80:75:57:d3:be:a2: 86:df:68:be:92:5c:88:d5:6b:94:bf:93:f1:ec:60: bd:32:95:f4:36:e2:68:86:25:df:76:d5:96:17:07: f3:65:7c:3b:c0:a5:5a:d1:8f:f4:2a:ac:c4:62:e2: 5b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FF:94:3E:C1:78:A0:EE:F6:21:AA:86:D3:2C:5A:2A:11:20:EF:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af88d837-e4a3-3b05-8fdf-8b0eddc93aa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:7e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:32:b6:e3:11:ea:82:2c:42:26:e1:54:92:c4:7d:90:63:2f: fa:28:e0:58:18:e0:6f:d9:16:61:33:13:e6:b3:3c:e4:cb:5a: c9:38:6f:30:2d:88:ec:28:98:51:e9:8a:85:c4:06:50:7b:86: fa:8f:78:c3:4e:b2:21:a0:40:b0:61:36:66:05:1e:f3:2c:56: ff:a9:cd:b1:ca:a0:74:e3:40:27:f1:b7:ef:cf:a7:e7:90:70: cd:75:3c:6d:84:26:dd:0a:98:76:1d:10:1e:68:c7:41:64:8e: 47:3a:e1:25:03:55:85:25:80:b6:6d:5f:18:67:d8:46:53:02: b6:18:60:e6:e0:9e:0e:a0:9e:7f:a9:f8:0b:04:ce:48:3d:09: 3e:f5:e8:24:5f:73:63:f0:f6:37:17:a7:ae:41:87:56:63:0d: aa:2d:41:12:80:96:ce:08:72:72:d8:2c:90:1a:b0:c1:df:72: 9c:ab:82:7a:f9:e9:b9:03:2e:25:93:c0:77:42:33:90:32:6f: 95:e1:06:97:cc:6a:90:b0:eb:6c:47:56:30:dc:5d:ca:4a:10: ae:59:bf:9d:83:32:c7:48:f3:9b:84:ed:e2:7b:10:9a:8f:02: a0:df:8f:aa:12:a1:c8:5f:41:24:5c:9f:e1:4d:71:02:a3:56: 31:f6:e1:6d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkoflbbNzdyKHVCw8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk ODU5YWJkYTgtZTZkMi00ZDdhLWIxNmYtNTUyMzQ0MDQ2NWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2BroT/Q/B0KgdNXcw82uFSN3qVr5rg6zUG1 QQb5wu07iGa7iXyYLDHwvJd+Q0k29sV5I+1ONWyuXtaDCSG/dCLdoWgBlxkz0pGp M2Xix+MDYa/XbcUzzUoKo/ACYKwdqCynk9KGNreV0tVvZuyk84m9DluMkmToKhkx Oqywl59S4xopuLfPvNQSxa2QwHEQfS6s0Ul6soG42N95e8JCMmny37+b9al4mwun 3wCcAnuiLwFFcDkstnyX/XIGcuqScs67Tu5mwBZDrb2AdVfTvqKG32i+klyI1WuU v5Px7GC9MpX0NuJohiXfdtWWFwfzZXw7wKVa0Y/0KqzEYuJbAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBT/lD7BeKDu9iGqhtMsWioRIO+IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWY4OGQ4MzctZTRhMy0z YjA1LThmZGYtOGIwZWRkYzkzYWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAB+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFoytuMR6oIsQibhVJLEfZBjL/oo4FgY4G/ZFmEzE+azPOTLWsk4 bzAtiOwomFHpioXEBlB7hvqPeMNOsiGgQLBhNmYFHvMsVv+pzbHKoHTjQCfxt+/P p+eQcM11PG2EJt0KmHYdEB5ox0Fkjkc64SUDVYUlgLZtXxhn2EZTArYYYObgng6g nn+p+AsEzkg9CT716CRfc2Pw9jcXp65Bh1ZjDaotQRKAls4IcnLYLJAasMHfcpyr gnr56bkDLiWTwHdCM5Ayb5XhBpfMapCw62xHVjDcXcpKEK5Zv52DMsdI85uE7eJ7 EJqPAqDfj6oSochfQSRcn+FNcQKjVjH24W0= -----END CERTIFICATE-----Generated at Sun May 11 05:25:44 2025 by rpki-client