$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e3d177f-5a3c-3e24-8d49-655e82be96a0.roa File: 3e3d177f-5a3c-3e24-8d49-655e82be96a0.roa (raw, json) Hash identifier: GMtdw1F9UHvyWMp3lGfLpVYdnKTa0ZSX2TfyRZmFFB8= Subject key identifier: 49:A2:FF:86:55:2A:C1:43:82:A3:31:98:96:F9:35:52:2F:67:FC:FD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E59BD96E352C5B68E8BB7CA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e3d177f-5a3c-3e24-8d49-655e82be96a0.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 396615 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:d9:6e:35:2c:5b:68:e8:bb:7c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=e44733e8-e6a7-4ec4-a0d4-ce2451464192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:46:96:c9:52:fc:57:67:3f:1c:82:b7:59:c1: 60:9d:9f:30:22:3a:83:95:45:a9:61:cb:8f:3e:24: 50:1c:54:5c:fe:30:ad:a3:d8:cd:57:ae:60:15:5d: a8:b9:3e:17:85:b8:54:e1:40:e5:34:12:d5:85:ef: a4:c7:62:0c:ef:48:61:7b:34:0d:8d:e8:91:e1:03: 11:98:96:f2:c0:d2:60:9a:b5:a1:5a:bc:e8:06:38: 99:f4:68:61:f3:71:04:79:4a:26:19:8b:a4:84:67: f3:77:a6:3f:2a:5b:b9:b7:dc:84:ca:2f:15:6b:fe: 56:e5:01:e4:01:ef:6a:e2:98:ff:9f:45:78:8d:08: cc:c8:dc:b8:34:9d:05:02:48:bb:9a:dc:0d:4b:04: aa:06:bd:83:58:b3:37:3d:d4:dd:9c:49:f3:d3:7a: a4:e8:32:79:05:0c:0f:bf:1a:24:6e:47:da:df:2b: 8a:63:5a:61:e0:a3:8a:f3:5c:08:ba:cd:65:92:a8: 41:1a:62:fc:c3:d1:a5:6b:a2:59:18:a1:61:2e:0b: c6:cd:db:81:4e:1b:84:0d:21:04:d9:0e:48:c5:30: 82:5e:99:89:63:5e:61:fb:09:5d:b6:6d:e3:68:e4: a2:08:87:8d:74:39:9d:2e:da:c8:11:6d:ec:0a:9c: 1f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A2:FF:86:55:2A:C1:43:82:A3:31:98:96:F9:35:52:2F:67:FC:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3e3d177f-5a3c-3e24-8d49-655e82be96a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:0d:56:13:58:d6:98:c6:45:00:5c:77:c4:65:dd:46:ed:7e: bd:32:91:35:ca:73:f4:87:ed:c5:ae:81:58:60:28:0a:96:d5: 51:d1:ef:27:fc:e0:e5:cf:f8:6d:6a:82:d6:56:84:64:43:b7: b8:d7:5d:03:37:0d:05:cc:2b:db:6a:d4:ad:8d:b7:95:9e:a3: 8b:48:c5:ec:20:68:26:35:9c:ec:27:2e:7d:53:b4:7d:20:c6: 06:67:c4:cf:bb:1b:52:cd:cc:2c:25:13:df:55:12:7c:63:7f: 1c:c2:06:1b:38:eb:a0:78:32:1f:26:1d:67:8e:bb:18:b5:17: c6:07:6a:7d:38:2e:7b:dd:b0:64:06:56:44:ef:ea:34:e3:06: ae:90:0d:d6:79:55:76:0d:3c:19:f6:94:fe:4e:02:77:3b:f5: 8c:59:55:ba:c5:19:3b:c9:72:18:00:59:65:b4:cb:43:fd:e3: 2e:5e:b2:6f:c8:83:7e:80:fe:eb:c8:db:c8:30:d5:18:df:ae: 79:23:d4:8b:ed:16:67:03:d9:98:02:4b:c4:e7:62:45:1a:9e: 7d:3b:d8:0a:c8:b2:45:58:21:2d:0a:9b:ff:34:50:bb:2c:28: 2c:33:c9:50:3b:65:6e:86:60:20:90:77:b8:8d:bc:98:4b:29: 77:f6:7d:c4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjlm9luNSxbaOi7fKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZTQ0NzMzZTgtZTZhNy00ZWM0LWEwZDQtY2UyNDUxNDY0MTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEaWyVL8V2c/HIK3WcFgnZ8wIjqDlUWpYcuP PiRQHFRc/jCto9jNV65gFV2ouT4XhbhU4UDlNBLVhe+kx2IM70hhezQNjeiR4QMR mJbywNJgmrWhWrzoBjiZ9Ghh83EEeUomGYukhGfzd6Y/Klu5t9yEyi8Va/5W5QHk Ae9q4pj/n0V4jQjMyNy4NJ0FAki7mtwNSwSqBr2DWLM3PdTdnEnz03qk6DJ5BQwP vxokbkfa3yuKY1ph4KOK81wIus1lkqhBGmL8w9Gla6JZGKFhLgvGzduBThuEDSEE 2Q5IxTCCXpmJY15h+wldtm3jaOSiCIeNdDmdLtrIEW3sCpwfKwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEmi/4ZVKsFDgqMxmJb5NVIvZ/z9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2UzZDE3N2YtNWEzYy0z ZTI0LThkNDktNjU1ZTgyYmU5NmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBGDVYTWNaYxkUAXHfEZd1G7X69MpE1ynP0h+3F roFYYCgKltVR0e8n/ODlz/htaoLWVoRkQ7e4110DNw0FzCvbatStjbeVnqOLSMXs IGgmNZzsJy59U7R9IMYGZ8TPuxtSzcwsJRPfVRJ8Y38cwgYbOOugeDIfJh1njrsY tRfGB2p9OC573bBkBlZE7+o04waukA3WeVV2DTwZ9pT+TgJ3O/WMWVW6xRk7yXIY AFlltMtD/eMuXrJvyIN+gP7ryNvIMNUY3655I9SL7RZnA9mYAkvE52JFGp59O9gK yLJFWCEtCpv/NFC7LCgsM8lQO2VuhmAgkHe4jbyYSyl39n3E -----END CERTIFICATE-----Generated at Sat Apr 12 01:55:39 2025 by rpki-client