$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30c97a7a-df06-3c9d-8337-4deb980ffa39.roa File: 30c97a7a-df06-3c9d-8337-4deb980ffa39.roa (raw, json) Hash identifier: /Sxy00iI9TF8iPZ7Ztu/RTjI5B9lAxeuxCgPEkupfyM= Subject key identifier: AB:02:D8:23:F2:9B:60:E9:F5:18:78:CD:C7:2F:29:BB:A2:AC:06:3F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E59BDA88AAA0BEA6B40FF480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30c97a7a-df06-3c9d-8337-4deb980ffa39.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 396595 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:da:88:aa:a0:be:a6:b4:0f:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=b83de059-bf0a-4e86-ba6a-51974d8bdc82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:fc:51:9f:35:3c:71:f2:db:0f:a6:27:54:33: 66:14:a1:72:60:b3:55:90:a2:e7:52:11:71:75:03: 9e:5c:90:ae:d4:03:08:c2:7c:1b:9b:fd:26:70:4f: b4:f0:d7:6b:e5:8c:80:76:ac:7a:4c:f4:3b:80:a4: 6a:74:33:96:4e:b0:ee:d5:34:d3:e1:00:7a:35:8d: 0a:11:a1:71:a0:ab:63:f5:7f:e0:dd:ef:df:84:dc: 22:63:a8:79:18:df:b4:e9:af:58:a6:36:d4:6b:d5: 19:7a:61:52:4f:58:cf:21:39:28:a7:39:37:36:22: 2e:10:ff:39:8a:ee:54:12:87:0b:fc:f4:1b:18:b1: eb:15:ae:a4:6f:10:80:d3:98:71:8e:0b:18:0a:8e: bb:a2:b6:52:fb:27:ca:c0:40:0c:49:03:d4:45:0d: 42:b5:fa:35:bd:0d:80:ce:2e:49:79:53:4b:7a:8d: 64:6c:b8:1b:23:9e:d0:e9:fa:cf:48:09:90:2f:1b: 5b:ce:81:3c:26:11:52:95:4d:ab:49:6e:0a:9c:dd: 51:19:2b:db:0b:00:ee:b2:8f:5b:b0:02:15:77:87: fb:15:56:71:40:83:67:5a:d9:e7:fa:c7:14:fd:a8: ff:e3:1f:04:fd:36:0f:1e:be:cf:15:7c:7b:c9:37: 28:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:02:D8:23:F2:9B:60:E9:F5:18:78:CD:C7:2F:29:BB:A2:AC:06:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30c97a7a-df06-3c9d-8337-4deb980ffa39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:af:52:eb:1b:00:47:7a:62:2a:70:d8:1f:a8:cb:7a:2f:ab: 94:55:84:06:10:36:a8:c6:17:9a:f9:cb:97:db:79:3f:ff:14: a7:b2:6a:65:10:bb:44:4d:3d:6b:fc:28:12:d7:22:d7:b1:7c: bd:29:36:cd:93:7b:22:f4:d7:8a:5a:1f:f5:70:27:7d:f5:aa: 65:e7:54:c3:a8:1a:94:6f:47:59:47:19:be:48:43:76:fb:ba: 06:7e:d6:a3:ae:aa:4a:e0:7d:c9:a0:f1:10:81:96:bc:bb:a8: ca:57:0d:04:a2:ea:74:3b:84:a8:a2:bf:4d:e9:61:dc:02:c6: 9b:3c:77:6d:cd:b8:2b:6a:55:78:52:ab:d7:d0:fe:9b:47:ca: cb:f2:a6:9a:b2:dc:c1:69:91:10:5b:92:27:9c:f0:4b:da:c6: 3b:3d:fd:4f:74:24:e5:ba:d0:05:f9:60:ad:58:4d:1a:26:49: ae:bd:88:c6:95:7a:4f:e3:07:46:68:c3:05:d3:a0:60:5d:4a: 1f:56:79:e3:25:08:a4:cb:7b:7c:0c:79:eb:a4:f9:55:64:e0: 30:1b:ea:0c:91:bb:c0:21:f0:c4:1a:8f:89:b9:a1:db:db:7a: 3f:1f:a7:80:86:6d:df:a9:4a:7d:03:1f:70:51:e7:5d:4d:a4: 4f:d6:02:e4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjlm9qIqqC+prQP9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk YjgzZGUwNTktYmYwYS00ZTg2LWJhNmEtNTE5NzRkOGJkYzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/xRnzU8cfLbD6YnVDNmFKFyYLNVkKLnUhFx dQOeXJCu1AMIwnwbm/0mcE+08Ndr5YyAdqx6TPQ7gKRqdDOWTrDu1TTT4QB6NY0K EaFxoKtj9X/g3e/fhNwiY6h5GN+06a9YpjbUa9UZemFST1jPITkopzk3NiIuEP85 iu5UEocL/PQbGLHrFa6kbxCA05hxjgsYCo67orZS+yfKwEAMSQPURQ1Ctfo1vQ2A zi5JeVNLeo1kbLgbI57Q6frPSAmQLxtbzoE8JhFSlU2rSW4KnN1RGSvbCwDuso9b sAIVd4f7FVZxQINnWtnn+scU/aj/4x8E/TYPHr7PFXx7yTcoyQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKsC2CPym2Dp9Rh4zccvKbuirAY/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzBjOTdhN2EtZGYwNi0z YzlkLTgzMzctNGRlYjk4MGZmYTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAAr1LrGwBHemIqcNgfqMt6L6uUVYQGEDaoxhea +cuX23k//xSnsmplELtETT1r/CgS1yLXsXy9KTbNk3si9NeKWh/1cCd99apl51TD qBqUb0dZRxm+SEN2+7oGftajrqpK4H3JoPEQgZa8u6jKVw0Eoup0O4Soor9N6WHc AsabPHdtzbgralV4UqvX0P6bR8rL8qaastzBaZEQW5InnPBL2sY7Pf1PdCTlutAF +WCtWE0aJkmuvYjGlXpP4wdGaMMF06BgXUofVnnjJQiky3t8DHnrpPlVZOAwG+oM kbvAIfDEGo+JuaHb23o/H6eAhm3fqUp9Ax9wUeddTaRP1gLk -----END CERTIFICATE-----Generated at Sat Apr 12 02:09:10 2025 by rpki-client