$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0453c30c-e694-3beb-a553-08c6212f9091.roa File: 0453c30c-e694-3beb-a553-08c6212f9091.roa (raw, json) Hash identifier: R30UFk6EzSeEuvoA1Vf8ljkuTeZMToD/PKSMsBbBw/A= Subject key identifier: 7D:9F:85:8B:DE:7C:A2:6F:CF:8E:24:8F:81:E8:50:AB:C2:89:19:94 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849194198AB4FA66CE81DB15900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0453c30c-e694-3beb-a553-08c6212f9091.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 22547 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:98:ab:4f:a6:6c:e8:1d:b1:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=60a7dc89-8131-4946-bf34-349defb1aa7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:20:46:61:fb:a4:51:28:27:d3:bb:46:2b:73: 2c:32:9d:e2:98:73:76:46:af:cc:7b:5d:25:85:23: 0c:51:4d:08:e0:33:99:0a:d0:28:98:c4:0d:da:78: 19:5c:bb:71:f2:dc:e4:c2:47:3e:89:87:82:f5:ee: be:00:30:fd:7c:14:d9:a6:39:24:a6:29:a3:0a:02: 66:9b:9c:b0:4f:ca:18:f2:a2:ee:c9:78:3a:45:bf: 3d:5d:6d:95:0b:90:af:82:a6:ec:c0:6f:16:98:0d: 96:09:26:dc:b0:1f:0d:de:5d:80:d6:48:c9:49:9a: b2:5c:e9:c2:44:65:ec:76:9c:bd:e5:e0:39:c4:79: 65:0e:93:23:cc:4a:f0:cd:3f:86:8b:05:24:2f:be: c4:86:cd:06:9b:04:27:f9:fe:e8:98:ba:6f:c2:3e: b5:b3:15:c7:26:4f:35:3b:94:27:50:0b:1b:79:26: 9d:9e:97:36:fc:97:c5:e7:51:14:7d:97:94:1b:83: 02:72:a8:d9:3c:54:e7:24:e2:95:b6:65:04:a2:e7: 91:7f:34:e1:93:aa:91:5b:53:5b:51:32:97:d7:12: 64:cf:2b:b5:3f:4b:b7:9f:62:29:f2:0a:ce:34:66: 91:53:4a:f5:22:8f:70:0d:ca:21:92:d4:0e:08:22: 3c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9F:85:8B:DE:7C:A2:6F:CF:8E:24:8F:81:E8:50:AB:C2:89:19:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0453c30c-e694-3beb-a553-08c6212f9091.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:2d:b2:85:c1:05:31:f6:85:f9:4f:1b:13:68:46:38:68:b3: e3:49:8b:04:50:b4:73:ee:30:0d:6c:b8:36:14:9b:ff:b6:a1: c7:16:ea:70:d4:cd:80:9f:20:ee:82:ad:6e:8c:11:a7:03:65: ae:fa:c8:0a:91:e2:12:5d:2b:04:06:2a:ae:f7:80:cd:e6:7a: 41:d3:0c:f2:f1:6f:e0:b7:cb:ce:19:1f:ec:0f:dc:d0:65:b8: e0:28:4b:27:ec:e6:f6:03:af:a4:39:59:58:f4:c7:d5:83:b9: 8d:65:f9:7d:91:76:ca:fc:5f:15:93:fe:ee:47:28:b8:f0:ef: b5:6f:98:7c:d9:d4:ab:7d:82:58:6f:09:18:2c:b9:d4:f6:44: 34:89:ca:fe:73:ff:f5:e2:94:59:11:5f:8f:90:71:4a:6e:f6: b2:50:e6:75:2d:59:2b:e5:4b:73:4c:8e:ca:01:67:16:4d:9e: 2d:5a:53:c4:e6:e0:7f:b4:d0:88:c5:0a:ae:8b:7e:e1:c9:8e: ab:61:82:ce:50:93:d0:df:24:2d:ff:7d:d1:5c:4a:79:15:9d: 8d:85:a8:eb:0e:08:8b:00:83:b4:b3:94:9c:7f:7f:bf:26:ba: fc:23:f8:62:39:d9:41:3d:8c:f6:6f:31:5a:14:93:61:f3:05: 11:0e:79:75 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkZQZirT6Zs6B2xWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk NjBhN2RjODktODEzMS00OTQ2LWJmMzQtMzQ5ZGVmYjFhYTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiBGYfukUSgn07tGK3MsMp3imHN2Rq/Me10l hSMMUU0I4DOZCtAomMQN2ngZXLtx8tzkwkc+iYeC9e6+ADD9fBTZpjkkpimjCgJm m5ywT8oY8qLuyXg6Rb89XW2VC5CvgqbswG8WmA2WCSbcsB8N3l2A1kjJSZqyXOnC RGXsdpy95eA5xHllDpMjzErwzT+GiwUkL77Ehs0GmwQn+f7omLpvwj61sxXHJk81 O5QnUAsbeSadnpc2/JfF51EUfZeUG4MCcqjZPFTnJOKVtmUEoueRfzThk6qRW1Nb UTKX1xJkzyu1P0u3n2Ip8grONGaRU0r1Io9wDcohktQOCCI8gQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFH2fhYvefKJvz44kj4HoUKvCiRmUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDQ1M2MzMGMtZTY5NC0z YmViLWE1NTMtMDhjNjIxMmY5MDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBfLbKFwQUx9oX5TxsTaEY4aLPjSYsEULRz7jAN bLg2FJv/tqHHFupw1M2AnyDugq1ujBGnA2Wu+sgKkeISXSsEBiqu94DN5npB0wzy 8W/gt8vOGR/sD9zQZbjgKEsn7Ob2A6+kOVlY9MfVg7mNZfl9kXbK/F8Vk/7uRyi4 8O+1b5h82dSrfYJYbwkYLLnU9kQ0icr+c//14pRZEV+PkHFKbvayUOZ1LVkr5Utz TI7KAWcWTZ4tWlPE5uB/tNCIxQqui37hyY6rYYLOUJPQ3yQt/33RXEp5FZ2Nhajr DgiLAIO0s5Scf3+/Jrr8I/hiOdlBPYz2bzFaFJNh8wURDnl1 -----END CERTIFICATE-----Generated at Sat Apr 12 00:26:26 2025 by rpki-client