$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/396a69fa-b146-38c5-8d03-f7dd0fb98f0e.roa File: 396a69fa-b146-38c5-8d03-f7dd0fb98f0e.roa (raw, json) Hash identifier: 2AHqKgZN0clj3FpJEbECZf7EhFuD/zTakTmAs9XvvOk= Subject key identifier: F9:08:65:67:CB:FC:76:3A:3A:DD:8A:77:81:0D:81:59:D2:C8:6E:23 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584975446CA83D23606DD10DEF80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/396a69fa-b146-38c5-8d03-f7dd0fb98f0e.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 40647 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:6c:a8:3d:23:60:6d:d1:0d:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=c5b1cb6d-99ce-434d-b2b5-6507490ac8ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ac:7c:28:f4:c3:2e:19:55:da:68:d8:97:d1: f7:a9:7f:aa:d4:ca:7f:a3:4e:a7:22:81:a6:a3:ca: cf:68:42:33:27:c0:a1:02:3a:ae:a8:29:9d:0b:79: ce:28:c5:4b:bf:ed:34:b3:dd:14:93:3f:8a:eb:f8: 5e:1d:c1:04:28:13:a3:99:6f:fc:d9:99:31:b7:63: 37:4d:4d:d7:dd:56:5e:07:f3:94:6c:2c:38:5f:b4: a6:df:7d:9e:4c:97:d9:08:95:a1:62:75:ec:0f:c8: a7:01:86:61:6d:79:c8:41:f3:01:49:ad:03:ea:ef: e2:a6:a4:3f:fc:54:2e:bc:a8:5d:f6:72:ad:c9:5f: 86:7b:0f:56:82:c8:7a:a7:63:65:cd:c3:38:d3:96: d5:1e:49:1a:14:56:06:b4:65:37:d7:5b:3d:5c:83: c1:aa:cd:04:f7:03:c1:3a:a6:15:f9:0a:d8:a7:8d: 4a:4a:9b:c2:73:69:0a:a0:b8:76:2b:1a:70:4b:6c: 67:4d:29:79:74:4b:3c:aa:e8:23:42:76:af:f2:35: b8:40:19:a7:a6:7f:5f:d3:46:7b:6a:40:e8:59:8a: c7:91:75:c9:91:33:8b:ec:ff:cd:2b:06:2f:43:0c: dd:c8:6c:c1:59:20:4c:51:d9:ec:c6:7a:c2:79:9b: dd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:08:65:67:CB:FC:76:3A:3A:DD:8A:77:81:0D:81:59:D2:C8:6E:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/396a69fa-b146-38c5-8d03-f7dd0fb98f0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:cb:30:f9:b8:36:b7:84:50:fd:c4:58:9b:d8:e6:4c:42:3d: 43:6d:19:1c:f7:72:1d:c9:37:5f:38:b1:01:89:48:a3:3d:ab: a1:e9:60:d3:18:63:96:b1:77:60:50:0d:3a:0e:36:63:69:06: fd:51:62:58:fa:dc:39:fb:4d:e7:b0:13:6c:22:7c:e3:a6:ac: 27:3f:32:76:0a:ab:32:57:12:f6:cd:92:78:1a:5e:ab:9c:c8: a4:0c:7a:12:40:fb:da:3e:6b:36:a5:74:61:d2:72:5d:56:b0: 54:33:13:10:a9:58:8a:6c:78:28:4f:db:e4:3c:ac:5e:59:f5: 12:de:8c:38:c9:16:d3:d0:9f:2e:45:c6:56:c2:32:e4:dd:68: 16:e4:aa:d3:2d:86:32:1b:48:e0:84:e6:3f:06:87:d3:76:87: 0d:c2:11:25:af:5d:61:df:76:81:ad:a4:50:ea:9a:ad:f4:a4: 42:47:38:46:a1:4e:7b:4f:31:56:f6:9a:79:a1:11:bf:2b:c2: f5:d8:7e:e9:de:1e:f6:80:4e:c9:99:93:50:ea:af:68:2b:63: c4:20:59:3f:2f:4f:a5:63:b2:52:2c:69:55:33:79:5e:34:b6: 7b:4a:1d:0a:3b:be:f3:14:78:08:7c:9f:fd:f9:2b:16:68:8d: c1:6e:7d:10 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEl1RGyoPSNgbdEN74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk YzViMWNiNmQtOTljZS00MzRkLWIyYjUtNjUwNzQ5MGFjOGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ax8KPTDLhlV2mjYl9H3qX+q1Mp/o06nIoGm o8rPaEIzJ8ChAjquqCmdC3nOKMVLv+00s90Ukz+K6/heHcEEKBOjmW/82Zkxt2M3 TU3X3VZeB/OUbCw4X7Sm332eTJfZCJWhYnXsD8inAYZhbXnIQfMBSa0D6u/ipqQ/ /FQuvKhd9nKtyV+Gew9Wgsh6p2NlzcM405bVHkkaFFYGtGU311s9XIPBqs0E9wPB OqYV+QrYp41KSpvCc2kKoLh2KxpwS2xnTSl5dEs8qugjQnav8jW4QBmnpn9f00Z7 akDoWYrHkXXJkTOL7P/NKwYvQwzdyGzBWSBMUdnsxnrCeZvdKwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPkIZWfL/HY6Ot2Kd4ENgVnSyG4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzk2YTY5ZmEtYjE0Ni0z OGM1LThkMDMtZjdkZDBmYjk4ZjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAryzD5uDa3hFD9xFib2OZMQj1DbRkc93IdyTdf OLEBiUijPauh6WDTGGOWsXdgUA06DjZjaQb9UWJY+tw5+03nsBNsInzjpqwnPzJ2 CqsyVxL2zZJ4Gl6rnMikDHoSQPvaPms2pXRh0nJdVrBUMxMQqViKbHgoT9vkPKxe WfUS3ow4yRbT0J8uRcZWwjLk3WgW5KrTLYYyG0jghOY/BofTdocNwhElr11h33aB raRQ6pqt9KRCRzhGoU57TzFW9pp5oRG/K8L12H7p3h72gE7JmZNQ6q9oK2PEIFk/ L0+lY7JSLGlVM3leNLZ7Sh0KO77zFHgIfJ/9+SsWaI3Bbn0Q -----END CERTIFICATE-----Generated at Fri Apr 11 23:39:36 2025 by rpki-client