$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f9281cdb-a45e-3361-bfad-c157259d847a.roa File: f9281cdb-a45e-3361-bfad-c157259d847a.roa (raw, json) Hash identifier: gWv4+OmYRnx7+irlZ4sNZHcMHiwFFbRXEA0W5c+hdmY= Subject key identifier: 34:34:51:21:EB:FC:98:A5:F9:F8:EE:6F:D5:BC:0D:1D:52:CD:F6:E1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C21FA63427A4E2805C3F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f9281cdb-a45e-3361-bfad-c157259d847a.roa Signing time: Tue 15 Apr 2025 12:34:54 +0000 ROA not before: Tue 15 Apr 2025 12:34:54 +0000 ROA not after: Mon 14 Jul 2025 12:34:54 +0000 asID: 396611 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:1f:a6:34:27:a4:e2:80:5c:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:54 2025 GMT Not After : Jul 14 12:34:54 2025 GMT Subject: CN=8534b853-ad99-4764-b592-c9e3df5a0788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:41:22:63:4f:f4:93:3f:66:42:af:8a:7f:b9: a1:8f:8c:4d:e5:38:d5:50:4c:90:a5:d5:87:ab:54: 60:03:de:5d:a0:0b:aa:ac:ec:16:f7:9d:a7:ad:d6: 39:d8:4e:d9:a7:8f:6c:34:ef:57:40:f6:8b:a0:e6: 2c:83:eb:f2:2c:25:bc:b4:c8:02:af:9a:9c:d5:42: 96:a3:36:7e:cb:e0:d8:10:65:fb:26:b3:87:2b:65: ce:5c:2d:6e:72:95:57:a4:9e:8e:ac:b2:90:11:31: ff:fa:ad:22:a8:38:60:fc:6f:42:5f:67:a8:76:5d: e4:b1:2e:22:f3:83:c4:96:2e:3c:9e:9f:6f:2e:30: c2:8e:f2:8b:88:25:05:08:45:7a:15:c5:9f:1a:69: b2:ad:a9:ca:ed:65:d5:35:0a:3c:02:14:fc:3f:c7: 9b:cf:00:be:9c:f0:d4:1d:01:23:0f:df:d2:d3:2a: fe:8e:c5:e6:9a:e7:5c:70:69:29:3e:d3:0b:77:2d: 7d:59:a8:4f:60:9f:72:b5:2a:a3:00:58:62:78:00: 50:71:fa:1e:5b:99:ec:cc:59:4b:53:e6:f8:76:9c: bc:dc:00:34:15:91:66:23:f7:5a:78:1a:e9:c4:42: bf:8e:03:b0:b8:73:ef:c0:bc:c3:58:57:cb:ce:53: bf:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:34:51:21:EB:FC:98:A5:F9:F8:EE:6F:D5:BC:0D:1D:52:CD:F6:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f9281cdb-a45e-3361-bfad-c157259d847a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:7d:47:af:74:6c:7f:03:02:f9:34:b2:c9:8a:62:39:1e:d5: 71:f1:a6:ce:4b:26:14:52:1a:44:28:1f:73:74:14:b0:63:85: 7b:e5:1e:86:24:69:6b:3a:07:3e:ea:b1:61:ca:6c:66:2e:34: ad:23:4e:80:f9:ed:0c:48:10:61:40:d7:1b:d2:22:5a:6a:4a: fe:e2:e6:e4:38:52:10:e3:bf:89:fb:48:bf:c7:7c:0f:72:52: 9b:80:1f:84:01:d0:48:46:21:1a:4c:43:63:e4:3f:c0:3b:2a: 5b:a7:14:29:e5:9f:dc:48:56:38:31:cf:2f:51:f0:36:d5:de: 5b:f3:5f:6e:7d:8f:b9:cf:bd:b8:a0:b1:72:21:70:bd:84:e6: 5f:f6:08:58:9b:18:b8:e0:16:2c:a5:05:fa:a5:88:09:5a:9f: 58:4e:32:8c:23:37:b4:1e:3a:6e:22:e3:8b:8e:8d:3c:f4:86: 66:16:d7:57:37:f2:ac:3f:de:d1:2f:42:5c:6d:66:b2:08:f4: 77:bb:1e:d5:b0:82:4e:19:4b:cb:b5:22:9b:01:a2:3b:8d:68: 08:c6:59:dd:aa:8c:51:58:b0:b5:ee:8d:fe:4b:83:53:2f:9d: 95:ff:49:f7:39:26:ea:82:7d:b1:c9:b2:ad:47:19:bc:dd:13: 5b:4b:b8:3e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwh+mNCek4oBcPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NFoXDTI1MDcxNDEyMzQ1NFowLzEtMCsGA1UEAxMk ODUzNGI4NTMtYWQ5OS00NzY0LWI1OTItYzllM2RmNWEwNzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0EiY0/0kz9mQq+Kf7mhj4xN5TjVUEyQpdWH q1RgA95doAuqrOwW952nrdY52E7Zp49sNO9XQPaLoOYsg+vyLCW8tMgCr5qc1UKW ozZ+y+DYEGX7JrOHK2XOXC1ucpVXpJ6OrLKQETH/+q0iqDhg/G9CX2eodl3ksS4i 84PEli48np9vLjDCjvKLiCUFCEV6FcWfGmmyranK7WXVNQo8AhT8P8ebzwC+nPDU HQEjD9/S0yr+jsXmmudccGkpPtMLdy19WahPYJ9ytSqjAFhieABQcfoeW5nszFlL U+b4dpy83AA0FZFmI/daeBrpxEK/jgOwuHPvwLzDWFfLzlO/5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDQ0USHr/Jil+fjub9W8DR1SzfbhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjkyODFjZGItYTQ1ZS0z MzYxLWJmYWQtYzE1NzI1OWQ4NDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGB9R690bH8DAvk0ssmKYjke1XHxps5LJhRSGkQoH3N0FLBjhXvl HoYkaWs6Bz7qsWHKbGYuNK0jToD57QxIEGFA1xvSIlpqSv7i5uQ4UhDjv4n7SL/H fA9yUpuAH4QB0EhGIRpMQ2PkP8A7KlunFCnln9xIVjgxzy9R8DbV3lvzX259j7nP vbigsXIhcL2E5l/2CFibGLjgFiylBfqliAlan1hOMowjN7QeOm4i44uOjTz0hmYW 11c38qw/3tEvQlxtZrII9He7HtWwgk4ZS8u1IpsBojuNaAjGWd2qjFFYsLXujf5L g1MvnZX/Sfc5JuqCfbHJsq1HGbzdE1tLuD4= -----END CERTIFICATE-----Generated at Sun May 11 05:24:39 2025 by rpki-client