$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/452f9cf0-2d54-3e3c-b39e-92e08c51315f.roa File: 452f9cf0-2d54-3e3c-b39e-92e08c51315f.roa (raw, json) Hash identifier: H1K3udljWlnPhTeD8Qtcq7JTe3Sp/ljI9rXp563P+Xg= Subject key identifier: A5:7D:8A:CA:3F:7A:95:B9:C8:AA:16:C0:D3:32:77:24:B8:E3:FF:3E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E59BD3FFBAB9FF45EB165B60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/452f9cf0-2d54-3e3c-b39e-92e08c51315f.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 396561 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:d3:ff:ba:b9:ff:45:eb:16:5b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=24ee33c1-ec88-4ef7-b2d4-1b38129ddc42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7f:25:b7:10:1f:ae:8a:74:66:40:45:29:52: e6:41:67:e2:b1:d0:ae:9f:30:c2:17:d2:d2:2e:08: 99:d1:72:e3:af:c7:42:b9:ea:58:5c:56:b1:61:3c: fd:b7:2d:f9:6c:77:73:a0:85:24:b5:09:62:26:a1: e2:cf:7c:97:55:fe:df:23:06:ad:16:91:4a:3e:95: 04:e0:70:f3:f7:d3:e2:a1:ea:d9:18:15:62:e8:68: 84:f8:93:11:8e:e1:c0:a2:ab:22:bc:bd:93:44:bc: c5:c5:3a:51:8e:44:dd:bd:bf:6e:0f:55:24:60:f1: 00:ed:b7:03:a8:e9:20:28:5c:97:cd:be:03:d7:4f: 91:fc:0c:26:ac:96:b5:22:98:88:f2:96:47:ff:0b: fe:d0:31:aa:6b:5d:d8:3d:6f:48:92:46:17:6d:4f: 4d:fd:5a:28:b0:ad:a0:dc:f3:5c:08:86:d4:38:be: f7:bb:8a:c9:4f:81:3f:0a:e7:3c:2a:16:eb:4d:b8: 2d:b5:dc:32:77:40:86:a4:8f:ac:05:4e:cf:8e:a7: d0:6a:60:5b:47:7f:a8:b9:da:21:78:e8:94:7c:d6: c1:43:bc:8e:37:a0:ba:1c:70:ca:ac:6c:68:73:4f: 04:aa:44:b0:6b:88:f6:5d:ff:31:69:68:c9:95:08: be:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7D:8A:CA:3F:7A:95:B9:C8:AA:16:C0:D3:32:77:24:B8:E3:FF:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/452f9cf0-2d54-3e3c-b39e-92e08c51315f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:84:36:ae:ab:25:b7:87:1a:21:22:e8:a1:99:14:97:a4:d3: 00:ee:ed:75:a3:b8:ea:dd:a0:8d:f7:82:88:15:23:1e:11:5b: b1:42:da:0d:b4:23:39:ea:15:71:01:09:77:a6:22:98:73:d9: 4c:4b:37:89:4a:74:43:c1:1e:66:12:9c:08:73:be:e7:f6:09: 4b:ac:b0:c5:4e:ee:69:15:61:00:8d:24:ad:e7:bc:56:8b:7a: f5:e5:fd:68:7c:5d:50:5f:d8:bd:db:fa:7a:07:fd:5a:00:79: fc:17:47:48:d2:cb:6e:56:d3:c0:0b:3b:d4:6e:c8:fd:82:8d: a5:2a:6a:d4:94:6e:98:34:2e:b1:cc:96:31:b5:36:84:e3:8f: 57:f5:a3:32:4f:6d:d3:09:17:e7:aa:44:55:df:3f:fc:f2:b7: 94:43:df:ec:96:18:dc:9a:e3:a3:03:50:a2:dd:3b:8e:6a:86: a5:1f:6a:19:46:c0:8f:81:2e:ee:ad:c4:ce:3b:8f:68:64:be: 1c:8c:ec:58:ff:c7:69:a5:00:63:e6:90:16:df:df:9a:82:33: d0:73:48:39:9a:7e:8b:a1:d6:8e:8a:01:1e:26:2a:49:f2:ed: 90:ae:39:7e:4a:cb:98:1f:72:ea:b4:5e:3f:81:df:ce:31:a5: c5:c2:00:dc -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjlm9P/urn/ResWW2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk MjRlZTMzYzEtZWM4OC00ZWY3LWIyZDQtMWIzODEyOWRkYzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn8ltxAfrop0ZkBFKVLmQWfisdCunzDCF9LS LgiZ0XLjr8dCuepYXFaxYTz9ty35bHdzoIUktQliJqHiz3yXVf7fIwatFpFKPpUE 4HDz99PioerZGBVi6GiE+JMRjuHAoqsivL2TRLzFxTpRjkTdvb9uD1UkYPEA7bcD qOkgKFyXzb4D10+R/AwmrJa1IpiI8pZH/wv+0DGqa13YPW9IkkYXbU9N/VoosK2g 3PNcCIbUOL73u4rJT4E/Cuc8KhbrTbgttdwyd0CGpI+sBU7PjqfQamBbR3+oudoh eOiUfNbBQ7yON6C6HHDKrGxoc08EqkSwa4j2Xf8xaWjJlQi+6QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKV9iso/epW5yKoWwNMydyS44/8+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDUyZjljZjAtMmQ1NC0z ZTNjLWIzOWUtOTJlMDhjNTEzMTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCChDauqyW3hxohIuihmRSXpNMA7u11o7jq3aCN 94KIFSMeEVuxQtoNtCM56hVxAQl3piKYc9lMSzeJSnRDwR5mEpwIc77n9glLrLDF Tu5pFWEAjSSt57xWi3r15f1ofF1QX9i92/p6B/1aAHn8F0dI0stuVtPACzvUbsj9 go2lKmrUlG6YNC6xzJYxtTaE449X9aMyT23TCRfnqkRV3z/88reUQ9/slhjcmuOj A1Ci3TuOaoalH2oZRsCPgS7urcTOO49oZL4cjOxY/8dppQBj5pAW39+agjPQc0g5 mn6LodaOigEeJipJ8u2Qrjl+SsuYH3LqtF4/gd/OMaXFwgDc -----END CERTIFICATE-----Generated at Fri Apr 11 23:48:49 2025 by rpki-client