$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f96cca7-c1d8-3505-b3b2-845b54d28c24.roa File: 0f96cca7-c1d8-3505-b3b2-845b54d28c24.roa (raw, json) Hash identifier: 4FeURWHIvK2PjJ/DvQF12tTi0jesWLXsu+tCbntJUFA= Subject key identifier: EC:55:E7:EA:9D:B3:28:F1:CE:90:8D:66:69:E0:42:7B:2A:35:E7:1F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848F926887CA50191C757DBCE20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f96cca7-c1d8-3505-b3b2-845b54d28c24.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 396582 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:88:7c:a5:01:91:c7:57:db:ce:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=ae89213e-604d-45f7-819f-43d9d35ed943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8a:a3:f7:18:36:a5:a5:7e:a8:d2:a7:1d:28: 71:da:e9:6f:d9:fe:cb:e5:77:f4:8c:b0:a0:87:47: df:f5:bc:77:94:b9:90:87:b7:bc:45:6a:5d:4c:ee: 3b:85:92:d1:9f:77:68:42:87:87:f9:0a:e9:34:dd: 22:ef:5b:67:35:9c:33:46:56:9e:60:91:02:fa:0a: 21:9f:2e:1d:8c:c8:3e:91:89:49:92:d7:87:15:82: b3:88:c1:2a:5f:5c:b5:ff:d7:d5:d9:7a:44:f5:9f: 94:a0:4b:18:32:95:a1:dd:6d:7a:43:2b:7e:00:06: 88:c7:61:38:f3:ae:3c:bf:0a:b1:35:1f:86:c5:fd: e6:29:98:40:8d:e2:44:d7:ea:5b:28:d5:06:f4:ca: 93:4c:3a:94:11:58:0f:a1:ef:2a:7d:be:a0:cd:04: a1:97:7b:26:32:45:6e:dd:88:d1:7f:82:1e:91:b9: 9a:a2:53:a3:98:5b:ac:92:81:e5:a9:39:67:09:5e: 6c:13:6e:09:86:6d:5b:57:5c:4b:2e:b6:9e:70:0e: d3:e8:bd:da:95:ad:05:f3:de:ea:1f:c8:e2:06:6a: 51:e0:62:4a:cf:93:1c:cf:ba:40:5e:e9:53:97:74: 54:55:87:bb:90:b5:a3:aa:69:ff:e2:fb:65:ff:3d: 06:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:55:E7:EA:9D:B3:28:F1:CE:90:8D:66:69:E0:42:7B:2A:35:E7:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f96cca7-c1d8-3505-b3b2-845b54d28c24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:ef:70:4a:69:66:b3:8a:63:e3:fa:4c:d2:ce:86:dc:17:95: 4e:b0:89:b5:f4:95:e7:94:d3:7e:62:e1:f7:91:9d:a3:ff:2a: fc:41:39:e2:53:17:58:53:2d:37:0b:bb:0f:09:4d:98:b6:1c: 90:0f:6a:25:3e:a8:51:af:dd:72:04:e6:a2:b9:76:20:86:5f: a2:24:c6:ad:cd:c3:48:a5:f0:f5:5a:ac:5a:2c:db:16:fe:36: 27:f1:66:8e:69:16:d8:f3:d0:b2:b7:aa:85:fe:3c:cf:11:9d: db:e3:8b:23:63:3e:17:21:57:19:ce:24:f5:5d:32:82:46:78: 0b:ef:d2:c7:45:93:3b:28:98:56:c0:ca:25:fb:8d:58:88:2a: 99:58:53:08:01:8c:38:c2:e6:a3:f6:a7:43:07:2f:aa:2b:0d: 3c:e2:7c:f5:93:e8:d0:5a:26:b3:f2:e0:41:cd:bb:cd:8e:5e: 35:37:e8:d0:5f:aa:e5:12:3a:54:29:ad:18:91:ca:12:3c:63: 67:59:67:f2:81:48:5e:19:1f:c5:e2:6e:4b:99:46:0d:53:6f: 56:73:a8:b2:98:bc:aa:79:e5:0c:f0:e3:27:fe:b0:4e:b9:4b: bb:b3:9d:54:d0:52:5b:d0:d1:91:ec:7a:a1:8f:0b:cf:a4:70: 80:0c:12:4a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEj5Joh8pQGRx1fbziAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YWU4OTIxM2UtNjA0ZC00NWY3LTgxOWYtNDNkOWQzNWVkOTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoqj9xg2paV+qNKnHShx2ulv2f7L5Xf0jLCg h0ff9bx3lLmQh7e8RWpdTO47hZLRn3doQoeH+QrpNN0i71tnNZwzRlaeYJEC+goh ny4djMg+kYlJkteHFYKziMEqX1y1/9fV2XpE9Z+UoEsYMpWh3W16Qyt+AAaIx2E4 8648vwqxNR+Gxf3mKZhAjeJE1+pbKNUG9MqTTDqUEVgPoe8qfb6gzQShl3smMkVu 3YjRf4IekbmaolOjmFuskoHlqTlnCV5sE24Jhm1bV1xLLraecA7T6L3ala0F897q H8jiBmpR4GJKz5Mcz7pAXulTl3RUVYe7kLWjqmn/4vtl/z0G/QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOxV5+qdsyjxzpCNZmngQnsqNecfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGY5NmNjYTctYzFkOC0z NTA1LWIzYjItODQ1YjU0ZDI4YzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCJ73BKaWazimPj+kzSzobcF5VOsIm19JXnlNN+ YuH3kZ2j/yr8QTniUxdYUy03C7sPCU2YthyQD2olPqhRr91yBOaiuXYghl+iJMat zcNIpfD1WqxaLNsW/jYn8WaOaRbY89Cyt6qF/jzPEZ3b44sjYz4XIVcZziT1XTKC RngL79LHRZM7KJhWwMol+41YiCqZWFMIAYw4wuaj9qdDBy+qKw084nz1k+jQWiaz 8uBBzbvNjl41N+jQX6rlEjpUKa0YkcoSPGNnWWfygUheGR/F4m5LmUYNU29Wc6iy mLyqeeUM8OMn/rBOuUu7s51U0FJb0NGR7HqhjwvPpHCADBJK -----END CERTIFICATE-----Generated at Fri Apr 11 23:43:17 2025 by rpki-client