$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19932ac9-f9ff-3b9d-95b2-5b9ec3f4b08d.roa File: 19932ac9-f9ff-3b9d-95b2-5b9ec3f4b08d.roa (raw, json) Hash identifier: 8Kud1+uLRyhTggf6S6xxQPyf98gNpUpbLyoXHzfT8Es= Subject key identifier: 27:33:D9:89:4F:29:00:17:A3:AE:7C:BA:B3:15:6E:4C:98:37:12:6A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E59BDDAC116835607BF69E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19932ac9-f9ff-3b9d-95b2-5b9ec3f4b08d.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 397212 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:dd:ac:11:68:35:60:7b:f6:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=da5cc889-f4d3-4005-ae82-d288a8dfe82e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:7a:8e:1e:95:d4:68:4c:b5:e9:fa:1b:bd:45: 55:5d:38:13:af:ae:ff:20:bd:4f:3f:44:c8:7a:e1: c1:34:05:8e:fd:23:4a:c7:ec:f2:b1:27:96:ec:8d: c5:06:16:57:fb:94:23:df:89:fc:69:8b:1e:ba:8e: 9b:d4:a8:3c:81:4f:9b:1d:3b:c9:61:54:0c:52:63: 06:a2:be:52:3c:b0:34:4c:c7:fd:29:92:61:ac:dd: d1:e1:c1:53:6d:3f:45:d8:70:ab:0c:0c:e1:4b:d0: e8:25:e1:4f:09:a6:89:9f:de:f1:eb:cf:b8:d3:cb: b7:95:7e:30:f5:3e:0a:99:ea:f3:f8:f1:8c:39:e5: 7d:6d:e2:63:5a:a9:db:4a:6f:d8:c6:77:60:ce:8a: e1:38:fb:c9:be:d1:71:4c:b9:1f:c5:dd:dd:25:f6: ee:90:df:34:13:2e:63:4b:06:e6:fd:8c:bf:c4:c1: 34:e5:66:3e:86:c6:a5:74:18:aa:00:22:54:bb:b8: f9:f3:0a:65:df:2d:a6:80:f8:b1:7f:e2:50:0b:b4: b7:3c:14:c1:f6:66:b5:9d:2a:ac:6d:9b:b8:ee:6e: 95:c9:2e:09:76:75:9b:a8:8e:a7:39:6f:59:a6:98: 9b:cc:12:fe:3e:c8:39:6a:d1:5e:14:9e:03:67:cf: 70:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:33:D9:89:4F:29:00:17:A3:AE:7C:BA:B3:15:6E:4C:98:37:12:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19932ac9-f9ff-3b9d-95b2-5b9ec3f4b08d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:59:e9:92:45:2e:df:ed:15:b3:3d:a5:3b:4d:77:ef:be:48: f9:cc:69:cc:26:7e:c9:20:d0:23:a4:8a:1a:52:6e:46:49:54: 8f:25:b3:db:40:ee:da:e4:fe:8a:89:9e:93:fa:f8:38:e4:43: a3:42:be:21:d8:e5:b8:57:af:14:32:60:db:f7:b3:03:65:f1: 57:f8:d6:33:7e:ac:9a:f0:38:12:eb:78:2d:39:7e:fa:ab:9d: c0:e1:8c:bb:5c:71:32:42:68:32:5a:92:5e:6f:db:8e:dc:ea: ea:e9:b8:0d:aa:b0:c8:69:52:58:cb:a3:92:a3:90:06:fa:9e: e0:13:1b:a8:55:75:fd:d5:37:bb:a4:db:09:e1:87:86:1f:67: e4:9b:b9:b9:56:dd:e4:32:e1:cd:0c:57:2f:64:ec:41:a1:6a: b2:d0:db:73:2b:c0:0a:4c:b1:7b:37:8a:2b:55:2e:27:6d:36: 3f:1e:b1:b1:c5:66:76:8c:0a:98:40:75:ce:c6:d0:5c:54:c8: 71:b1:89:a8:ec:77:c3:87:3e:de:e7:72:d8:ea:c5:bb:d0:dc: fd:3a:4e:bb:39:06:af:49:26:5c:8f:b3:3d:23:71:8a:5b:8a: fa:a8:92:7f:d6:f5:4e:5e:f3:5d:5f:4e:99:9d:f4:40:15:a6: 35:fb:c5:dd -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjlm92sEWg1YHv2ngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZGE1Y2M4ODktZjRkMy00MDA1LWFlODItZDI4OGE4ZGZlODJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+XqOHpXUaEy16fobvUVVXTgTr67/IL1PP0TI euHBNAWO/SNKx+zysSeW7I3FBhZX+5Qj34n8aYseuo6b1Kg8gU+bHTvJYVQMUmMG or5SPLA0TMf9KZJhrN3R4cFTbT9F2HCrDAzhS9DoJeFPCaaJn97x68+408u3lX4w 9T4Kmerz+PGMOeV9beJjWqnbSm/YxndgzorhOPvJvtFxTLkfxd3dJfbukN80Ey5j Swbm/Yy/xME05WY+hsaldBiqACJUu7j58wpl3y2mgPixf+JQC7S3PBTB9ma1nSqs bZu47m6VyS4JdnWbqI6nOW9ZppibzBL+Psg5atFeFJ4DZ89wlwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCcz2YlPKQAXo658urMVbkyYNxJqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTk5MzJhYzktZjlmZi0z YjlkLTk1YjItNWI5ZWMzZjRiMDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAQWemSRS7f7RWzPaU7TXfvvkj5zGnMJn7JINAj pIoaUm5GSVSPJbPbQO7a5P6KiZ6T+vg45EOjQr4h2OW4V68UMmDb97MDZfFX+NYz fqya8DgS63gtOX76q53A4Yy7XHEyQmgyWpJeb9uO3Orq6bgNqrDIaVJYy6OSo5AG +p7gExuoVXX91Te7pNsJ4YeGH2fkm7m5Vt3kMuHNDFcvZOxBoWqy0NtzK8AKTLF7 N4orVS4nbTY/HrGxxWZ2jAqYQHXOxtBcVMhxsYmo7HfDhz7e53LY6sW70Nz9Ok67 OQavSSZcj7M9I3GKW4r6qJJ/1vVOXvNdX06ZnfRAFaY1+8Xd -----END CERTIFICATE-----Generated at Fri Apr 11 23:56:27 2025 by rpki-client