$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2dc591c-6ae5-37c1-a2ce-5015b832787d.roa File: c2dc591c-6ae5-37c1-a2ce-5015b832787d.roa (raw, json) Hash identifier: ZcBm0ZcqppxCQTjdS8QPt3hNJTCwvARWOAVIWptbdCs= Subject key identifier: BA:26:38:87:96:55:94:1E:68:D0:D0:47:64:C1:2A:2E:0E:76:DB:CF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B83C24B6414A60D0E4561540 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2dc591c-6ae5-37c1-a2ce-5015b832787d.roa Signing time: Fri 02 May 2025 12:43:45 +0000 ROA not before: Fri 02 May 2025 12:43:45 +0000 ROA not after: Thu 31 Jul 2025 12:43:45 +0000 asID: 0 IP address blocks: 2620:74:d0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b8:3c:24:b6:41:4a:60:d0:e4:56:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 2 12:43:45 2025 GMT Not After : Jul 31 12:43:45 2025 GMT Subject: CN=b8e82c64-3929-47e3-b6bd-b85dd7a6e95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:60:5b:5b:0c:f9:e6:cd:14:b4:53:e4:1d:0d: a0:8d:07:20:51:5f:a1:57:c0:38:af:a8:63:78:4f: ec:04:93:74:49:36:48:61:90:56:a3:e5:a4:87:d9: 32:bc:be:6b:10:da:d0:0e:cd:0c:b0:6d:b2:31:8c: 53:ac:57:64:71:5e:c3:cd:2c:05:da:7f:c9:2d:1b: b1:f9:40:a0:36:38:49:21:65:c8:c8:56:1b:05:50: b7:5f:cf:1c:ec:76:c0:65:2f:fd:fc:bf:d3:52:96: 9b:76:f7:f0:3e:eb:01:b8:0a:54:c3:78:cd:35:e1: 09:92:f4:a8:b7:28:2d:5b:3a:eb:48:c1:4d:e2:be: e4:9f:d2:b7:f8:51:93:2c:b7:e1:14:33:af:9b:c9: 5e:f3:1d:e9:03:a4:ba:d4:ea:77:21:56:16:98:97: 6e:12:a8:2b:85:00:71:c0:0b:96:2a:2e:b4:b5:65: cd:97:07:a5:a9:9d:19:6c:a8:e2:b4:ec:46:24:57: 2e:b2:a9:18:c5:a4:51:e2:27:30:ce:64:44:1e:e6: 96:a9:9f:75:63:ec:27:85:e4:dd:e2:6f:e6:35:5c: b3:05:81:e6:d0:8c:50:59:19:6c:9f:96:3a:7c:e2: 76:a9:aa:f3:9f:84:9e:b5:5a:09:48:8e:d9:e9:9b: ea:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:26:38:87:96:55:94:1E:68:D0:D0:47:64:C1:2A:2E:0E:76:DB:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2dc591c-6ae5-37c1-a2ce-5015b832787d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:d0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:45:e7:d6:15:35:61:31:b3:c9:c3:a4:59:fd:7c:de:f6:5a: cc:55:39:a9:17:e3:52:22:4c:da:f1:84:80:91:47:8d:ec:3f: 7c:2e:f0:7c:08:37:c0:c9:cf:30:bc:f0:13:c1:14:27:21:45: ce:4b:82:cc:2f:9c:7f:30:dd:ad:37:09:ed:6a:58:e1:33:f1: fd:7e:f1:1c:27:85:90:e2:0f:a9:27:c5:16:60:6b:93:df:dc: 78:d5:5e:12:be:f6:c7:1c:21:47:ad:6c:17:c7:e9:95:32:d7: bf:38:70:b2:9b:a5:ed:2c:d7:00:18:fb:98:b1:a2:86:3e:75: 27:d9:d5:f2:a1:b1:97:f4:98:aa:97:61:54:58:12:90:21:d7: 43:30:53:e7:79:7e:91:85:0c:74:04:65:4c:04:6f:f2:c5:42: 14:c9:06:a6:39:d0:cd:7e:cd:ad:22:7a:87:52:45:94:54:b0: d0:5d:a4:43:c2:42:a2:b1:5f:70:6a:60:1c:c7:94:cd:f6:c8: 32:dd:db:48:57:a1:2e:b0:ae:58:3c:d5:33:2c:8d:ac:85:88: 4e:88:39:c5:d2:54:bf:00:50:de:e5:91:45:ae:d7:cb:4d:b0: b8:11:7a:5e:3e:df:d3:4c:8c:8f:15:a8:ac:4f:42:3d:06:8e: 3e:82:45:e9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm4PCS2QUpg0ORWFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwMjEyNDM0NVoXDTI1MDczMTEyNDM0NVowLzEtMCsGA1UEAxMk YjhlODJjNjQtMzkyOS00N2UzLWI2YmQtYjg1ZGQ3YTZlOTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2BbWwz55s0UtFPkHQ2gjQcgUV+hV8A4r6hj eE/sBJN0STZIYZBWo+Wkh9kyvL5rENrQDs0MsG2yMYxTrFdkcV7DzSwF2n/JLRux +UCgNjhJIWXIyFYbBVC3X88c7HbAZS/9/L/TUpabdvfwPusBuApUw3jNNeEJkvSo tygtWzrrSMFN4r7kn9K3+FGTLLfhFDOvm8le8x3pA6S61Op3IVYWmJduEqgrhQBx wAuWKi60tWXNlwelqZ0ZbKjitOxGJFcusqkYxaRR4icwzmREHuaWqZ91Y+wnheTd 4m/mNVyzBYHm0IxQWRlsn5Y6fOJ2qarzn4SetVoJSI7Z6ZvqswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLomOIeWVZQeaNDQR2TBKi4OdtvPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzJkYzU5MWMtNmFlNS0z N2MxLWEyY2UtNTAxNWI4MzI3ODdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAdADQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEhF59YVNWExs8nDpFn9fN72WsxVOakX41IiTNrxhICRR43sP3wu 8HwIN8DJzzC88BPBFCchRc5LgswvnH8w3a03Ce1qWOEz8f1+8RwnhZDiD6knxRZg a5Pf3HjVXhK+9sccIUetbBfH6ZUy1784cLKbpe0s1wAY+5ixooY+dSfZ1fKhsZf0 mKqXYVRYEpAh10MwU+d5fpGFDHQEZUwEb/LFQhTJBqY50M1+za0ieodSRZRUsNBd pEPCQqKxX3BqYBzHlM32yDLd20hXoS6wrlg81TMsjayFiE6IOcXSVL8AUN7lkUWu 18tNsLgRel4+39NMjI8VqKxPQj0Gjj6CRek= -----END CERTIFICATE-----Generated at Mon May 12 02:08:25 2025 by rpki-client