$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e9e1b45-be66-39f6-8750-2cc091290b98.roa File: 2e9e1b45-be66-39f6-8750-2cc091290b98.roa (raw, json) Hash identifier: Nx7EgUAwPuyUymEVZYkInzjVp++jC6YTuej8L+mruZ8= Subject key identifier: 50:6E:76:0D:D2:CB:2F:04:F9:F5:48:8A:4A:9E:0F:34:25:F1:90:C8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E59BDAF3726777B45B6BC0E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e9e1b45-be66-39f6-8750-2cc091290b98.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 397196 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:da:f3:72:67:77:b4:5b:6b:c0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=fd85f6ea-0926-4e1f-9bd5-24a14f7f325a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:57:ae:a7:c9:0f:25:9d:0c:d6:37:3e:f8:97: b7:6e:5b:cf:16:53:b8:34:28:97:d8:52:96:3b:7b: da:5f:54:cb:cd:b5:29:22:65:70:9b:2b:c5:e1:df: 1d:3d:76:b0:ab:1d:af:21:28:99:cd:40:e2:e3:b9: ed:47:0b:7a:d6:17:fc:49:85:11:56:62:48:f4:d2: eb:0f:4b:ed:09:f4:e1:4f:65:98:f0:54:74:0b:04: 0e:4f:50:ff:b9:ce:3d:ab:68:e0:ff:c1:cb:4f:13: 39:3b:21:f6:45:87:7b:8c:36:35:dc:7e:51:6b:0a: 58:d7:ce:da:cf:13:29:bf:61:b1:a2:06:1b:f2:73: cb:ac:40:b5:32:cc:f0:a8:e4:b3:17:bd:f9:3b:68: ff:a3:3f:1f:1d:fb:92:a3:f2:9f:f2:90:1c:3a:48: 0d:75:d0:6d:b5:71:75:d9:a6:09:c0:20:21:81:bf: 23:7f:e8:18:ce:42:8c:78:94:7d:d3:19:2d:cb:5b: 46:94:6d:4e:00:cd:e0:bf:5c:d3:07:4b:1f:35:bb: a8:77:59:48:87:8b:e2:e1:f3:80:e5:fa:75:87:d8: 53:3f:91:50:82:31:51:b4:3b:4a:47:28:e2:1d:fe: 96:02:cc:e9:d3:f5:10:45:97:53:f1:93:87:24:da: 32:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6E:76:0D:D2:CB:2F:04:F9:F5:48:8A:4A:9E:0F:34:25:F1:90:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e9e1b45-be66-39f6-8750-2cc091290b98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:7d:91:02:62:fc:22:64:fa:87:91:8e:39:27:04:c3:25:0f: d2:6e:23:86:83:b5:8e:2f:bb:00:64:a5:9c:ce:0f:e5:59:1b: d2:38:cc:dc:70:c5:b9:30:68:07:92:09:e7:36:db:02:8d:35: 21:d8:d6:b2:86:6e:b4:f1:cc:7f:16:2a:7d:89:75:b3:24:e2: d9:dc:cc:a7:56:5a:2f:bd:da:0f:a4:81:cb:a3:23:88:bd:be: 07:c1:51:1b:63:0e:56:d5:70:a1:d3:82:89:77:4d:5b:d3:54: d1:59:d1:62:ef:23:a9:d0:00:f6:f4:da:e4:9f:01:80:aa:ea: b7:1b:18:ab:bc:31:95:e7:6d:55:7e:b2:cc:68:00:3d:01:06: 7d:f1:39:eb:05:b4:2d:52:b9:c1:b5:f6:ff:8c:1c:b8:36:18: d6:52:d7:b9:25:69:70:7f:6d:80:cb:39:a2:31:08:2e:40:10: 80:95:49:7a:11:ad:87:54:0d:15:63:79:af:08:3a:5f:12:14: 99:61:3c:92:3f:72:e5:de:e5:57:4a:00:a4:42:9c:5d:15:a7: d3:b7:57:6c:de:65:94:78:77:09:2c:29:6a:5d:33:c3:48:4b: 11:38:33:42:78:cb:99:36:63:48:40:23:29:99:87:5d:ce:a9: a3:67:af:09 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjlm9rzcmd3tFtrwOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZmQ4NWY2ZWEtMDkyNi00ZTFmLTliZDUtMjRhMTRmN2YzMjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFeup8kPJZ0M1jc++Je3blvPFlO4NCiX2FKW O3vaX1TLzbUpImVwmyvF4d8dPXawqx2vISiZzUDi47ntRwt61hf8SYURVmJI9NLr D0vtCfThT2WY8FR0CwQOT1D/uc49q2jg/8HLTxM5OyH2RYd7jDY13H5RawpY187a zxMpv2GxogYb8nPLrEC1MszwqOSzF735O2j/oz8fHfuSo/Kf8pAcOkgNddBttXF1 2aYJwCAhgb8jf+gYzkKMeJR90xkty1tGlG1OAM3gv1zTB0sfNbuod1lIh4vi4fOA 5fp1h9hTP5FQgjFRtDtKRyjiHf6WAszp0/UQRZdT8ZOHJNoyswIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFBudg3Syy8E+fVIikqeDzQl8ZDIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmU5ZTFiNDUtYmU2Ni0z OWY2LTg3NTAtMmNjMDkxMjkwYjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCHfZECYvwiZPqHkY45JwTDJQ/SbiOGg7WOL7sA ZKWczg/lWRvSOMzccMW5MGgHkgnnNtsCjTUh2Nayhm608cx/Fip9iXWzJOLZ3Myn VlovvdoPpIHLoyOIvb4HwVEbYw5W1XCh04KJd01b01TRWdFi7yOp0AD29NrknwGA quq3GxirvDGV521VfrLMaAA9AQZ98TnrBbQtUrnBtfb/jBy4NhjWUte5JWlwf22A yzmiMQguQBCAlUl6Ea2HVA0VY3mvCDpfEhSZYTySP3Ll3uVXSgCkQpxdFafTt1ds 3mWUeHcJLClqXTPDSEsRODNCeMuZNmNIQCMpmYddzqmjZ68J -----END CERTIFICATE-----Generated at Fri Apr 11 22:03:13 2025 by rpki-client