$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/289cadc9-0163-35f2-be04-4cda10892c79.roa File: 289cadc9-0163-35f2-be04-4cda10892c79.roa (raw, json) Hash identifier: toYmwTaNTJaeiS3xUpfScPIaxYj6UMd65/OL3eA7V6Y= Subject key identifier: 67:A1:2E:25:9F:8F:FD:5C:1C:24:B7:38:61:B4:4B:EB:97:03:37:C7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E59BD4D32EC7DB2D8867CF80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/289cadc9-0163-35f2-be04-4cda10892c79.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 396555 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:d4:d3:2e:c7:db:2d:88:67:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=6aac80fc-6aca-43dd-b01b-8e9e5c5138aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:64:1d:9a:72:04:5d:5f:2f:3e:a4:bb:17:3f: 73:9d:9a:46:cd:ce:64:77:c1:b2:9a:51:ec:c5:db: ce:78:4e:d9:ab:20:69:83:cd:fb:87:e8:48:d6:33: f9:c0:67:2e:18:df:73:9e:4c:31:74:90:0d:62:59: ec:52:23:6f:6f:30:35:d6:d5:87:ab:1c:5d:f9:8d: 85:ee:f2:38:11:2b:70:9a:eb:73:37:af:cb:32:9c: 67:10:df:83:7f:82:b8:56:e2:b8:1a:e2:7c:28:9f: 83:91:c8:13:8e:bd:c3:a2:34:e6:f6:5b:55:4f:bf: c9:6d:60:4d:8c:a0:6d:b7:30:56:dd:3d:49:a5:46: 28:1e:9f:62:72:78:17:54:95:64:ce:2a:83:98:0c: 08:89:bf:6e:ad:16:c0:9d:ca:ab:c7:2e:e5:84:82: c2:22:2b:4f:0e:9b:bc:74:7a:8b:3f:35:be:b4:2a: a1:e0:dd:2e:3a:9e:a0:3f:f6:36:bb:44:c4:54:30: e7:a1:83:0e:e5:bf:44:82:3b:cf:6c:7c:15:cd:73: 80:5d:7b:a9:be:35:ba:3c:ea:ec:07:92:20:a1:86: ce:b3:0c:8c:5d:2d:e1:67:c4:13:1e:af:3d:7c:e8: 5c:4f:46:bc:f3:2c:ab:00:80:78:72:63:6b:4f:74: f4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A1:2E:25:9F:8F:FD:5C:1C:24:B7:38:61:B4:4B:EB:97:03:37:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/289cadc9-0163-35f2-be04-4cda10892c79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:1e:8a:ac:24:c0:0a:63:c4:1e:c5:d9:28:3d:09:80:e4:93: 22:bb:9c:ec:85:4c:6b:bd:b4:61:f4:d5:b4:79:54:2e:12:9a: a7:10:a5:aa:4e:14:f7:ca:88:b8:67:76:ad:73:b7:c4:15:f6: 6a:a8:2e:6d:08:92:77:5f:e4:8f:63:f5:4b:4c:cd:07:14:23: 83:c4:27:69:b9:88:ec:9f:fd:78:4e:93:78:32:75:da:8a:08: eb:73:30:99:f8:00:a6:1d:06:58:0b:6b:7d:86:2e:df:9c:69: bc:2d:1d:61:71:10:eb:af:07:99:b3:65:7d:f8:88:59:40:2c: 01:7e:d2:3b:56:1a:b6:85:ee:55:b5:96:1d:36:e2:dd:43:56: d5:33:4e:93:ba:1d:7f:ec:53:fd:c7:df:5d:91:88:ae:1d:6c: c6:42:3a:47:53:d0:d1:22:2f:da:88:a8:49:95:14:e5:ff:43: eb:85:80:99:22:74:5f:e1:61:e7:69:62:e4:ba:25:82:d8:e4: 24:ac:fc:7e:7d:be:46:4a:dc:73:f2:7d:54:1a:58:1e:7c:55: 50:e5:53:02:e0:54:5a:c0:ed:ae:49:13:16:d6:37:79:58:86: a4:09:ba:e4:3b:a8:bd:d0:b1:c4:78:a6:15:cf:a2:23:73:d5: 40:c5:b3:20 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjlm9TTLsfbLYhnz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk NmFhYzgwZmMtNmFjYS00M2RkLWIwMWItOGU5ZTVjNTEzOGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWQdmnIEXV8vPqS7Fz9znZpGzc5kd8GymlHs xdvOeE7ZqyBpg837h+hI1jP5wGcuGN9znkwxdJANYlnsUiNvbzA11tWHqxxd+Y2F 7vI4EStwmutzN6/LMpxnEN+Df4K4VuK4GuJ8KJ+DkcgTjr3DojTm9ltVT7/JbWBN jKBttzBW3T1JpUYoHp9icngXVJVkziqDmAwIib9urRbAncqrxy7lhILCIitPDpu8 dHqLPzW+tCqh4N0uOp6gP/Y2u0TEVDDnoYMO5b9EgjvPbHwVzXOAXXupvjW6POrs B5IgoYbOswyMXS3hZ8QTHq89fOhcT0a88yyrAIB4cmNrT3T0qQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGehLiWfj/1cHCS3OGG0S+uXAzfHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjg5Y2FkYzktMDE2My0z NWYyLWJlMDQtNGNkYTEwODkyYzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCPHoqsJMAKY8QexdkoPQmA5JMiu5zshUxrvbRh 9NW0eVQuEpqnEKWqThT3yoi4Z3atc7fEFfZqqC5tCJJ3X+SPY/VLTM0HFCODxCdp uYjsn/14TpN4MnXaigjrczCZ+ACmHQZYC2t9hi7fnGm8LR1hcRDrrweZs2V9+IhZ QCwBftI7Vhq2he5VtZYdNuLdQ1bVM06Tuh1/7FP9x99dkYiuHWzGQjpHU9DRIi/a iKhJlRTl/0PrhYCZInRf4WHnaWLkuiWC2OQkrPx+fb5GStxz8n1UGlgefFVQ5VMC 4FRawO2uSRMW1jd5WIakCbrkO6i90LHEeKYVz6Ijc9VAxbMg -----END CERTIFICATE-----Generated at Fri Apr 11 23:45:45 2025 by rpki-client