$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cca04370-2fee-35d1-aa38-b88d71deb221.roa File: cca04370-2fee-35d1-aa38-b88d71deb221.roa (raw, json) Hash identifier: EJkWnyLQAhEsa8zD5Pw7xksqC/O0yzh1+SvKyuSkTu8= Subject key identifier: 96:A6:C5:52:49:75:A6:8A:84:87:E1:B6:4C:6E:36:8B:F9:3D:A3:2C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C2231F3E5E585A7CA16280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cca04370-2fee-35d1-aa38-b88d71deb221.roa Signing time: Tue 15 Apr 2025 12:34:55 +0000 ROA not before: Tue 15 Apr 2025 12:34:55 +0000 ROA not after: Mon 14 Jul 2025 12:34:55 +0000 asID: 36631 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:23:1f:3e:5e:58:5a:7c:a1:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:55 2025 GMT Not After : Jul 14 12:34:55 2025 GMT Subject: CN=7c9270d4-51bf-41a5-8338-0aa35c831434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a1:b6:4c:1e:0e:d0:04:ea:dd:02:84:18:74: 50:c6:ea:fc:20:3b:3f:2c:8e:01:b6:b8:3b:ac:ef: 2a:b4:b1:b4:6c:15:fc:e9:5f:b3:1f:db:a3:59:66: 44:59:ed:50:2a:9c:96:2a:77:80:94:17:3d:6e:c7: fc:84:a8:09:02:b6:56:72:e1:c7:b2:ab:98:07:e2: 11:08:ba:d8:0f:ac:cd:38:0b:52:92:64:11:4c:50: ac:2e:d5:8f:e3:c9:07:62:b2:02:81:13:d8:7f:56: e2:79:7f:13:4d:3a:e1:d6:32:e0:14:70:54:fc:89: 63:35:38:c4:4b:da:22:64:f0:2f:c1:29:a1:62:e4: c9:89:48:9a:76:30:7c:f8:89:9d:e2:ef:7e:14:ed: d2:92:ec:66:94:c2:73:9f:16:3a:94:db:e0:39:56: fd:a3:d4:0e:8e:f4:bb:3b:a9:05:4f:47:3e:fc:ec: d3:1d:bb:81:a1:7a:66:4f:09:81:3a:9e:ff:99:98: b6:0d:7b:f5:b3:5c:00:24:db:67:f8:d3:4d:e8:28: 41:4d:9c:5b:f9:50:df:f7:30:81:5d:0a:6e:b0:31: 49:da:e7:70:92:92:14:33:84:84:79:7a:45:19:4e: 13:9a:5d:e1:ee:70:38:6b:e2:fd:85:a9:b1:c7:1b: c2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A6:C5:52:49:75:A6:8A:84:87:E1:B6:4C:6E:36:8B:F9:3D:A3:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cca04370-2fee-35d1-aa38-b88d71deb221.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:1b:c4:14:1b:fb:88:88:42:02:0d:97:4f:e1:d7:e2:9e:79: 35:5c:ee:99:c5:a7:21:d3:6b:53:80:7c:03:b5:cd:96:68:e5: 87:77:65:09:e4:01:35:3c:71:d8:03:0e:d6:e8:96:ee:10:60: 1d:2f:5f:df:01:e8:c3:19:3e:23:b3:ae:ef:ff:a7:8a:cd:c6: 15:e4:cf:34:d3:90:ce:aa:35:43:21:e5:92:47:af:7b:11:9e: 2d:19:ef:6a:23:6d:c1:74:1a:73:e8:61:85:1f:d4:a3:18:85: 05:e5:66:0c:ed:54:5f:e8:c6:e1:8e:bf:41:78:06:66:6c:00: b2:79:bf:f4:03:3c:02:62:f7:5d:63:07:6e:4d:03:4e:d3:0c: d5:20:3e:98:53:ff:d8:d1:d7:93:dc:16:a5:e0:db:cb:2a:e6: 35:0c:43:69:af:e7:b5:35:25:0d:74:92:b7:72:92:6a:97:42: 04:a4:a1:83:21:96:12:4e:09:fc:e0:86:90:f2:65:be:fe:84: 86:18:db:e7:36:55:72:53:2f:5e:f2:37:8f:91:71:79:68:4d: af:98:7f:4c:2c:01:1b:b0:fe:fe:75:33:4f:e3:ce:ea:41:40: e0:ed:72:b1:18:2f:ab:7f:c3:9e:4b:b6:28:79:e9:2f:fb:6f: 94:a8:f2:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwiMfPl5YWnyhYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NVoXDTI1MDcxNDEyMzQ1NVowLzEtMCsGA1UEAxMk N2M5MjcwZDQtNTFiZi00MWE1LTgzMzgtMGFhMzVjODMxNDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqG2TB4O0ATq3QKEGHRQxur8IDs/LI4Btrg7 rO8qtLG0bBX86V+zH9ujWWZEWe1QKpyWKneAlBc9bsf8hKgJArZWcuHHsquYB+IR CLrYD6zNOAtSkmQRTFCsLtWP48kHYrICgRPYf1bieX8TTTrh1jLgFHBU/IljNTjE S9oiZPAvwSmhYuTJiUiadjB8+Imd4u9+FO3SkuxmlMJznxY6lNvgOVb9o9QOjvS7 O6kFT0c+/OzTHbuBoXpmTwmBOp7/mZi2DXv1s1wAJNtn+NNN6ChBTZxb+VDf9zCB XQpusDFJ2udwkpIUM4SEeXpFGU4Tml3h7nA4a+L9hamxxxvCxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJamxVJJdaaKhIfhtkxuNov5PaMsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2NhMDQzNzAtMmZlZS0z NWQxLWFhMzgtYjg4ZDcxZGViMjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGcbxBQb+4iIQgINl0/h1+KeeTVc7pnFpyHTa1OAfAO1zZZo5Yd3 ZQnkATU8cdgDDtbolu4QYB0vX98B6MMZPiOzru//p4rNxhXkzzTTkM6qNUMh5ZJH r3sRni0Z72ojbcF0GnPoYYUf1KMYhQXlZgztVF/oxuGOv0F4BmZsALJ5v/QDPAJi 911jB25NA07TDNUgPphT/9jR15PcFqXg28sq5jUMQ2mv57U1JQ10krdykmqXQgSk oYMhlhJOCfzghpDyZb7+hIYY2+c2VXJTL17yN4+RcXloTa+Yf0wsARuw/v51M0/j zupBQODtcrEYL6t/w55Ltih56S/7b5So8qA= -----END CERTIFICATE-----Generated at Sun May 11 06:12:40 2025 by rpki-client