$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a3e9aa4-8d6e-3712-8d35-b8a8d9fe91a3.roa File: 2a3e9aa4-8d6e-3712-8d35-b8a8d9fe91a3.roa (raw, json) Hash identifier: 4hCShXeI5NOJGscz3D6xrZkvejVppv7TwOUklk5OVo4= Subject key identifier: 44:37:B0:8E:F7:BC:03:90:C7:B4:FB:E6:17:0D:63:1B:FD:6F:49:15 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848D2110E6D2D94DC22D899BA00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a3e9aa4-8d6e-3712-8d35-b8a8d9fe91a3.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 396585 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:0e:6d:2d:94:dc:22:d8:99:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=3c8b29a0-8340-463b-83f6-bb8e2d14f137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b6:df:c1:de:84:2d:a3:3b:94:5a:f0:38:83: 7b:ca:25:d0:17:51:5e:3b:23:26:76:99:0a:94:1c: ca:c3:35:be:7a:cd:b1:af:b9:39:f5:fc:52:ed:2f: 7f:3b:90:95:61:2d:32:9f:f6:07:bb:70:3c:78:94: 1f:8a:ea:07:04:fd:c8:9b:c6:59:92:4a:75:94:ce: 85:2a:6e:1d:c2:d2:e9:94:85:ad:0d:eb:72:67:d3: 53:44:2d:2b:9d:b8:5c:50:cd:70:f7:c9:c8:62:c3: 05:23:54:9f:ae:49:10:26:0d:bb:ad:e3:86:20:7a: a6:80:0d:bd:d1:1b:ad:08:94:6a:e0:da:c8:84:c6: a3:d1:e5:7a:1e:42:ab:6a:bf:76:c0:d3:eb:67:e5: bf:19:71:db:fa:f7:f3:19:3e:4a:13:bf:45:55:ca: aa:fc:cd:8c:f3:ec:99:13:5f:bb:53:65:5c:65:db: cc:51:48:b6:a8:9d:20:69:0a:93:39:63:03:e6:7d: c4:cc:b3:d5:83:24:3b:75:80:0e:6d:ca:1e:88:f8: 49:e9:ba:d2:79:9c:85:0c:6c:d8:2f:79:8c:d2:4d: 6e:1b:1c:a2:75:89:eb:8f:15:41:f3:f0:b6:bc:1d: be:c8:1b:0a:23:75:68:fd:22:37:19:6c:75:37:36: d1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:37:B0:8E:F7:BC:03:90:C7:B4:FB:E6:17:0D:63:1B:FD:6F:49:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a3e9aa4-8d6e-3712-8d35-b8a8d9fe91a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:3c:f5:21:72:05:4b:2b:0a:21:2e:e4:92:0e:75:ef:18:72: 1d:ad:93:32:e8:4a:1b:44:4b:95:5f:aa:b4:f3:0d:6e:08:aa: d4:58:73:2f:dd:83:a1:24:15:f5:8b:4c:d3:77:28:00:3b:6b: 88:0a:06:c1:4f:68:1f:ab:05:b2:8f:e6:ba:db:d4:ee:5c:17: 40:dc:2a:61:2e:29:9a:78:b6:8e:28:74:f2:91:de:38:4c:f5: 2e:30:00:32:44:3c:e4:3b:5c:8f:92:39:d5:12:c4:47:26:a7: ff:dd:db:5e:61:55:20:19:91:ef:ee:57:dd:1a:26:c6:54:5e: e2:40:df:ff:b7:a6:72:0e:9f:4a:8b:ea:66:93:8a:e8:35:e6: 21:41:18:a3:da:07:84:5d:69:b6:9d:ff:bb:6f:37:46:d8:a1: a0:fb:63:20:da:e3:71:67:97:5e:90:84:8c:76:ca:5d:1b:69: 7b:db:92:6e:a8:2b:64:87:31:10:68:88:a9:61:0c:24:44:b1: ab:9d:32:89:61:1c:b7:c4:10:6c:4d:6d:bc:13:14:15:f0:1a: d4:db:7b:51:dc:32:1d:1a:ec:2e:01:50:41:a7:73:39:5d:39: 77:4c:d3:9b:b3:fb:04:a0:96:bf:b9:5a:0f:4b:51:b1:3b:d4: ba:d6:b6:ef -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjSEQ5tLZTcItiZugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk M2M4YjI5YTAtODM0MC00NjNiLTgzZjYtYmI4ZTJkMTRmMTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLbfwd6ELaM7lFrwOIN7yiXQF1FeOyMmdpkK lBzKwzW+es2xr7k59fxS7S9/O5CVYS0yn/YHu3A8eJQfiuoHBP3Im8ZZkkp1lM6F Km4dwtLplIWtDetyZ9NTRC0rnbhcUM1w98nIYsMFI1SfrkkQJg27reOGIHqmgA29 0RutCJRq4NrIhMaj0eV6HkKrar92wNPrZ+W/GXHb+vfzGT5KE79FVcqq/M2M8+yZ E1+7U2VcZdvMUUi2qJ0gaQqTOWMD5n3EzLPVgyQ7dYAObcoeiPhJ6brSeZyFDGzY L3mM0k1uGxyidYnrjxVB8/C2vB2+yBsKI3Vo/SI3GWx1NzbRIQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEQ3sI73vAOQx7T75hcNYxv9b0kVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmEzZTlhYTQtOGQ2ZS0z NzEyLThkMzUtYjhhOGQ5ZmU5MWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAAPPUhcgVLKwohLuSSDnXvGHIdrZMy6EobREuV X6q08w1uCKrUWHMv3YOhJBX1i0zTdygAO2uICgbBT2gfqwWyj+a629TuXBdA3Cph LimaeLaOKHTykd44TPUuMAAyRDzkO1yPkjnVEsRHJqf/3dteYVUgGZHv7lfdGibG VF7iQN//t6ZyDp9Ki+pmk4roNeYhQRij2geEXWm2nf+7bzdG2KGg+2Mg2uNxZ5de kISMdspdG2l725JuqCtkhzEQaIipYQwkRLGrnTKJYRy3xBBsTW28ExQV8BrU23tR 3DIdGuwuAVBBp3M5XTl3TNObs/sEoJa/uVoPS1GxO9S61rbv -----END CERTIFICATE-----Generated at Fri Apr 11 23:45:39 2025 by rpki-client