$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4a18951d-e646-3fa7-b6cf-4a4b9fa32ebc.roa File: 4a18951d-e646-3fa7-b6cf-4a4b9fa32ebc.roa (raw, json) Hash identifier: O9ZQ/QwHmYqnTPVk2O/OgPiS5DPb4yWKm71ebvwb2Wg= Subject key identifier: DF:38:FA:6F:F8:6C:91:05:F4:3A:4D:B4:1C:EE:76:0D:1C:FF:F9:23 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848D21111BCFF7631CCFE578680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4a18951d-e646-3fa7-b6cf-4a4b9fa32ebc.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 396561 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:11:bc:ff:76:31:cc:fe:57:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=95719c31-6bb6-4a64-bb0e-32e0916a0389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:76:fd:a2:9e:be:22:58:53:2e:17:47:aa:89: 7d:21:33:fa:47:4e:03:38:5e:86:f0:f6:0a:66:15: c2:8c:3e:57:55:ba:44:ac:30:64:c6:0d:c7:0d:58: 2e:66:50:13:7e:48:1b:f3:83:88:c3:9e:71:59:ee: ac:f1:92:1a:cc:aa:07:9e:ef:b9:5f:89:2e:66:66: 16:63:b0:c4:8f:23:38:5b:6f:4c:ef:e5:8e:23:87: 18:c3:cf:c3:5c:2c:be:f9:e1:ca:99:8d:6e:fb:9a: 9f:ff:4e:88:80:2b:7d:8e:6b:6d:0c:30:10:ea:2f: 1a:23:e3:d4:ec:c1:fc:53:b1:ca:96:fa:98:0c:87: 01:0f:8a:ab:38:df:ec:60:a9:a7:fa:33:3f:b8:81: 6c:03:5b:39:cc:68:bb:8b:db:55:dd:c3:92:26:66: 8b:43:61:52:13:4a:2b:3c:da:46:6e:d7:e0:a6:25: dd:20:87:4b:c6:c9:24:d3:cd:8c:85:04:d8:5d:52: 1b:88:e9:e5:6c:bc:6e:02:3b:f8:f4:4e:f7:01:b9: 33:37:0a:1d:a8:4a:b6:c8:b6:55:c1:2f:62:ce:8e: 2f:24:ee:52:c3:ef:88:1c:68:f0:ad:e7:5b:a0:86: 5f:1e:7a:11:e0:60:d9:a4:f6:0d:48:1a:8d:3e:21: 26:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:38:FA:6F:F8:6C:91:05:F4:3A:4D:B4:1C:EE:76:0D:1C:FF:F9:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4a18951d-e646-3fa7-b6cf-4a4b9fa32ebc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:be:55:5c:9b:3d:4f:c3:8c:5e:a6:f0:1a:23:cd:ff:a7:05: 77:00:d1:58:b9:fb:da:a6:e8:1c:51:5f:99:78:50:f4:72:33: a1:ba:d4:d7:b1:05:2d:e6:4c:eb:9f:b8:d5:01:e1:60:e3:ee: bf:17:22:70:47:26:b1:68:9b:94:48:4e:c2:ae:7c:db:e1:ce: 80:43:60:35:89:3a:5d:93:f8:24:dc:e1:62:d7:1e:4d:e7:35: 8a:0b:a1:60:6a:a8:86:ed:a1:1b:07:81:3f:18:66:ed:ee:0e: ca:34:e6:7c:fd:da:05:04:4a:c8:63:22:16:9e:21:90:02:ad: 09:52:6b:1c:6d:c9:00:01:d3:dc:db:e5:40:bf:e5:2e:1c:b3: 6e:d8:6a:72:11:5b:2a:32:21:29:7e:f2:67:b6:b9:13:8e:52: 89:1d:28:50:1d:e2:6c:91:44:92:6c:44:02:d8:32:13:6a:f2: b1:ae:4d:47:45:e3:73:27:91:1d:1e:9e:7e:12:92:aa:9b:11: bf:f1:58:e2:75:5f:d6:9a:10:8c:00:8a:f7:1e:8b:42:d3:e3: 56:b2:c8:e9:78:da:54:97:57:a0:e2:40:c1:31:00:b4:fd:67: a0:95:ce:8b:89:9f:07:29:75:84:5b:89:18:6f:30:0c:2b:f7: 48:51:2d:1d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjSERG8/3YxzP5XhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk OTU3MTljMzEtNmJiNi00YTY0LWJiMGUtMzJlMDkxNmEwMzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHb9op6+IlhTLhdHqol9ITP6R04DOF6G8PYK ZhXCjD5XVbpErDBkxg3HDVguZlATfkgb84OIw55xWe6s8ZIazKoHnu+5X4kuZmYW Y7DEjyM4W29M7+WOI4cYw8/DXCy++eHKmY1u+5qf/06IgCt9jmttDDAQ6i8aI+PU 7MH8U7HKlvqYDIcBD4qrON/sYKmn+jM/uIFsA1s5zGi7i9tV3cOSJmaLQ2FSE0or PNpGbtfgpiXdIIdLxskk082MhQTYXVIbiOnlbLxuAjv49E73AbkzNwodqEq2yLZV wS9izo4vJO5Sw++IHGjwredboIZfHnoR4GDZpPYNSBqNPiEmxwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFN84+m/4bJEF9DpNtBzudg0c//kjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGExODk1MWQtZTY0Ni0z ZmE3LWI2Y2YtNGE0YjlmYTMyZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQABvlVcmz1Pw4xepvAaI83/pwV3ANFYufvapugc UV+ZeFD0cjOhutTXsQUt5kzrn7jVAeFg4+6/FyJwRyaxaJuUSE7Crnzb4c6AQ2A1 iTpdk/gk3OFi1x5N5zWKC6FgaqiG7aEbB4E/GGbt7g7KNOZ8/doFBErIYyIWniGQ Aq0JUmscbckAAdPc2+VAv+UuHLNu2GpyEVsqMiEpfvJntrkTjlKJHShQHeJskUSS bEQC2DITavKxrk1HReNzJ5EdHp5+EpKqmxG/8VjidV/WmhCMAIr3HotC0+NWssjp eNpUl1eg4kDBMQC0/Weglc6LiZ8HKXWEW4kYbzAMK/dIUS0d -----END CERTIFICATE-----Generated at Fri Apr 11 23:42:27 2025 by rpki-client