$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a2d2282-6c10-3916-9f45-a51905e3cf0c.roa File: 2a2d2282-6c10-3916-9f45-a51905e3cf0c.roa (raw, json) Hash identifier: gPkUkJzAfQ3Qmm346gAvzxAy1LCL4V2j7h/xvfv7MTo= Subject key identifier: 66:A0:1C:8E:F4:66:D1:ED:63:9A:83:90:E7:47:7D:3D:78:DB:7B:59 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848D21112D3A1BFB523A8D84900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a2d2282-6c10-3916-9f45-a51905e3cf0c.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 396568 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:12:d3:a1:bf:b5:23:a8:d8:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=6a065f4f-340d-4e4a-97aa-1c8c06874268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8c:00:f1:d9:ed:a7:52:49:29:65:bc:28:43: e2:50:44:e5:d5:80:24:fc:af:eb:50:26:26:8e:e4: 41:d1:39:7c:e7:74:46:b5:7c:39:02:ef:63:11:e8: 92:81:32:f6:1a:b2:8c:a7:02:00:50:7f:7a:18:f3: 5b:ed:39:91:eb:a1:1d:0c:87:37:dd:20:42:e9:3e: 85:82:e8:d4:63:58:e9:68:bb:42:48:6b:51:e4:27: e9:ac:99:e8:5e:2f:55:a8:92:91:cf:ad:e1:87:99: b8:57:e2:24:31:49:bf:ae:d5:b4:7c:6e:68:fe:0e: 5e:7a:bd:91:95:c0:6a:03:11:58:34:95:bc:bb:12: bd:80:fc:05:89:7d:a5:e7:7a:e1:40:eb:3d:cf:2e: e4:c6:ef:dd:15:33:f3:aa:45:3e:51:0f:76:d2:30: bb:2f:9e:66:60:84:3d:28:91:66:16:f1:94:bd:6b: 45:43:a2:09:0b:85:83:96:e8:e5:79:7f:ab:e3:50: 29:b1:bc:ff:e3:1b:1a:35:3e:6d:74:8c:78:d8:36: 28:f1:9e:8f:ca:97:d3:cf:09:b2:2e:2f:59:4b:c1: 2b:56:a2:06:db:68:d3:c2:e9:01:f5:7f:d5:8e:52: 7e:af:6c:af:f1:e3:cf:f5:ed:c8:0c:1d:a6:60:8d: 56:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A0:1C:8E:F4:66:D1:ED:63:9A:83:90:E7:47:7D:3D:78:DB:7B:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a2d2282-6c10-3916-9f45-a51905e3cf0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:9a:76:92:fb:55:c0:e0:ba:e4:66:a7:45:04:bd:fd:51:fb: b3:08:f8:2c:a1:36:fa:59:be:2a:3c:39:95:ce:ee:ff:da:c8: 0b:74:5c:27:4a:19:1d:0a:6d:08:94:f6:02:5c:89:96:e2:9a: cc:69:04:70:27:59:34:94:12:dc:5a:cc:48:f3:5e:ac:fb:fb: 50:47:52:93:4a:00:c2:d1:05:18:86:e8:c3:3f:db:15:c2:c5: 8e:6e:b9:4c:ae:27:40:17:85:e6:12:71:7d:ea:ac:f5:85:ce: d3:d8:8c:a7:78:fb:fd:bc:58:e0:8f:8d:ba:6c:fe:38:c4:a1: 33:e4:9e:92:b0:e3:ee:08:c6:53:56:d1:e7:4d:7f:20:c1:18: 37:14:d0:ac:46:b0:c3:9c:21:80:b5:28:4c:f7:5c:9a:c0:20: 1d:58:36:e8:45:81:d6:12:cf:95:72:03:c6:76:71:e8:90:26: 10:f0:e7:f0:41:b5:b4:3c:49:91:94:1e:f0:a3:e9:20:b1:5f: 73:6a:4e:f6:2b:64:ea:5a:8d:c7:09:27:c6:a9:77:c2:06:cc: 8f:2d:38:10:cb:fb:59:91:49:fd:ca:52:f2:3a:59:b7:f1:b0: 95:bf:89:ec:dc:3a:cc:62:ac:21:8c:1a:bc:a9:aa:9a:7c:06: d9:2d:f4:0a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjSERLTob+1I6jYSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NmEwNjVmNGYtMzQwZC00ZTRhLTk3YWEtMWM4YzA2ODc0MjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IwA8dntp1JJKWW8KEPiUETl1YAk/K/rUCYm juRB0Tl853RGtXw5Au9jEeiSgTL2GrKMpwIAUH96GPNb7TmR66EdDIc33SBC6T6F gujUY1jpaLtCSGtR5CfprJnoXi9VqJKRz63hh5m4V+IkMUm/rtW0fG5o/g5eer2R lcBqAxFYNJW8uxK9gPwFiX2l53rhQOs9zy7kxu/dFTPzqkU+UQ920jC7L55mYIQ9 KJFmFvGUvWtFQ6IJC4WDlujleX+r41Apsbz/4xsaNT5tdIx42DYo8Z6PypfTzwmy Li9ZS8ErVqIG22jTwukB9X/VjlJ+r2yv8ePP9e3IDB2mYI1W7wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGagHI70ZtHtY5qDkOdHfT1423tZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmEyZDIyODItNmMxMC0z OTE2LTlmNDUtYTUxOTA1ZTNjZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBymnaS+1XA4LrkZqdFBL39UfuzCPgsoTb6Wb4q PDmVzu7/2sgLdFwnShkdCm0IlPYCXImW4prMaQRwJ1k0lBLcWsxI816s+/tQR1KT SgDC0QUYhujDP9sVwsWObrlMridAF4XmEnF96qz1hc7T2IynePv9vFjgj426bP44 xKEz5J6SsOPuCMZTVtHnTX8gwRg3FNCsRrDDnCGAtShM91yawCAdWDboRYHWEs+V cgPGdnHokCYQ8OfwQbW0PEmRlB7wo+kgsV9zak72K2TqWo3HCSfGqXfCBsyPLTgQ y/tZkUn9ylLyOlm38bCVv4ns3DrMYqwhjBq8qaqafAbZLfQK -----END CERTIFICATE-----Generated at Sat Apr 12 02:09:09 2025 by rpki-client