$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3cefd50f-81c5-37c9-ab27-8ab83695f907.roa File: 3cefd50f-81c5-37c9-ab27-8ab83695f907.roa (raw, json) Hash identifier: iISBYcruSUVjZh5GxM+ludtKhklQighurGxvsN6Czpc= Subject key identifier: 99:93:50:63:C5:53:FA:A7:4B:D6:5F:09:1F:B5:8C:00:75:A7:1F:88 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848F926888DFDECE07ADF5D2420 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3cefd50f-81c5-37c9-ab27-8ab83695f907.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 396565 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:88:8d:fd:ec:e0:7a:df:5d:24:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=197dba84-020d-4adc-9c94-b4242c5a4861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:02:1f:49:a3:dd:c1:00:08:8b:44:5f:f9:bd: cb:cb:47:74:53:7c:28:47:8a:87:c7:a0:bd:95:24: 09:cb:c5:fb:2f:aa:31:b6:eb:5a:42:4a:66:77:2d: b9:22:b4:ee:ab:02:ee:79:b0:89:54:5a:a2:e2:bb: 05:69:e2:8e:ad:9a:77:f7:47:70:f6:82:b5:b2:ce: 59:6a:f1:6a:ca:38:1e:f0:8c:81:c3:ad:30:0b:44: 99:83:9d:dc:aa:8d:70:bc:a8:1e:44:d8:bf:a1:e8: 44:b3:e9:c1:92:09:6a:e8:fe:5a:2e:d9:a2:8a:99: d2:72:f7:f8:cc:e7:0e:00:68:3c:5f:ba:8b:2e:a5: 1d:5f:4f:ca:a6:c5:db:af:82:e4:f3:31:f6:d4:6a: c3:8d:3e:93:22:35:26:3c:bf:47:7e:e1:1d:63:8d: 7b:e6:6a:f7:ad:0d:1d:2b:43:cf:1c:6e:a1:0e:9f: fc:73:e7:a7:74:9e:c7:3f:b3:48:94:49:31:4c:84: 1e:92:8a:06:e2:d3:ce:d7:4d:4e:7c:9a:04:0f:9c: 15:f7:be:ad:0a:0f:a5:2b:94:ae:d3:e2:2c:89:59: 58:81:3f:30:5a:aa:e0:28:a6:09:f0:e3:0f:12:ec: c7:a5:34:c1:66:c7:54:b9:6f:ed:8a:e7:2b:a9:ee: ca:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:93:50:63:C5:53:FA:A7:4B:D6:5F:09:1F:B5:8C:00:75:A7:1F:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3cefd50f-81c5-37c9-ab27-8ab83695f907.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:58:2d:4b:a6:cf:1b:87:85:90:07:55:25:d1:e0:d9:18:02: ad:bd:f9:27:d9:7f:6f:e8:89:54:8a:0c:5e:43:0f:84:0f:1f: 87:83:93:cb:75:89:95:2c:5e:79:2b:23:21:45:71:a8:54:d1: c0:2d:15:f5:25:df:65:16:42:7c:72:b3:1b:4f:df:c8:97:e2: 9c:ff:3e:94:3b:6d:f7:52:50:39:03:8a:50:3d:d4:69:21:36: c5:f2:75:04:6d:7c:ac:3d:5f:bd:c0:c7:d2:59:0d:1d:d5:c9: 8b:18:e3:25:95:8f:34:8b:a2:c5:94:55:5a:9f:5a:ca:f5:3b: eb:bb:1d:48:e1:5f:92:5c:06:2f:18:1c:a6:fe:71:de:5f:eb: 5b:f6:06:f7:d0:69:12:cf:aa:a2:a8:db:c1:33:88:9e:21:c2: 2f:23:35:2f:0c:e4:70:8e:18:24:e6:79:92:e2:8c:9b:88:e0: 74:56:41:34:7b:8a:2a:8c:fa:af:ee:d2:e3:41:a4:75:90:57: 91:f0:e0:0f:a4:8a:b0:f6:ba:98:be:62:5e:eb:f8:a5:d8:bd: a0:c5:7b:c8:d0:01:40:47:b1:0b:bc:cb:a4:a6:6a:d6:8f:9a: 62:f8:d4:5b:38:5e:f9:9b:b9:a3:fe:bb:5d:6a:72:77:c0:d1: f0:78:6d:39 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEj5JoiN/ezget9dJCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MTk3ZGJhODQtMDIwZC00YWRjLTljOTQtYjQyNDJjNWE0ODYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQIfSaPdwQAIi0Rf+b3Ly0d0U3woR4qHx6C9 lSQJy8X7L6oxtutaQkpmdy25IrTuqwLuebCJVFqi4rsFaeKOrZp390dw9oK1ss5Z avFqyjge8IyBw60wC0SZg53cqo1wvKgeRNi/oehEs+nBkglq6P5aLtmiipnScvf4 zOcOAGg8X7qLLqUdX0/KpsXbr4Lk8zH21GrDjT6TIjUmPL9HfuEdY4175mr3rQ0d K0PPHG6hDp/8c+endJ7HP7NIlEkxTIQekooG4tPO101OfJoED5wV976tCg+lK5Su 0+IsiVlYgT8wWqrgKKYJ8OMPEuzHpTTBZsdUuW/tiucrqe7KcQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJmTUGPFU/qnS9ZfCR+1jAB1px+IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2NlZmQ1MGYtODFjNS0z N2M5LWFiMjctOGFiODM2OTVmOTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCPWC1Lps8bh4WQB1Ul0eDZGAKtvfkn2X9v6IlU igxeQw+EDx+Hg5PLdYmVLF55KyMhRXGoVNHALRX1Jd9lFkJ8crMbT9/Il+Kc/z6U O233UlA5A4pQPdRpITbF8nUEbXysPV+9wMfSWQ0d1cmLGOMllY80i6LFlFVan1rK 9Tvrux1I4V+SXAYvGBym/nHeX+tb9gb30GkSz6qiqNvBM4ieIcIvIzUvDORwjhgk 5nmS4oybiOB0VkE0e4oqjPqv7tLjQaR1kFeR8OAPpIqw9rqYvmJe6/il2L2gxXvI 0AFAR7ELvMukpmrWj5pi+NRbOF75m7mj/rtdanJ3wNHweG05 -----END CERTIFICATE-----Generated at Sat Apr 12 01:45:08 2025 by rpki-client