$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4add2be0-489a-3b89-b772-9357bf488d7c.roa File: 4add2be0-489a-3b89-b772-9357bf488d7c.roa (raw, json) Hash identifier: n2cYkaxO83Fjyh4n6d9wo8tGz8laZthB/XrXN3Qhe/c= Subject key identifier: 94:5F:B7:78:0A:4D:84:4F:5D:17:76:45:D8:0B:05:E2:17:1E:49:C4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E59BD8E85B4DC7195F1C0280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4add2be0-489a-3b89-b772-9357bf488d7c.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 397197 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:d8:e8:5b:4d:c7:19:5f:1c:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=a5fd6bd5-2195-4b54-8826-b4ebe9dde050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:32:2a:99:1d:be:85:c8:5d:b2:03:84:c6:80: 0a:b8:8b:48:34:46:d3:83:43:3b:b2:e2:23:de:42: 37:60:2c:6f:19:8a:0c:4d:ba:34:3c:75:37:d0:73: 91:97:76:53:86:ac:7d:c6:14:5b:89:3a:9c:fd:2d: c0:47:83:cd:3e:e4:51:a8:62:43:9d:a9:7f:70:c1: c2:81:91:d9:4e:ba:22:33:30:03:5b:03:52:05:a8: 0c:59:0e:9b:22:f4:5b:d6:a1:70:ce:46:dc:8f:3a: 56:bd:6f:43:04:65:68:05:62:5e:c9:d6:de:06:9d: 17:df:28:ee:43:4e:59:5a:a9:83:d4:a4:47:8e:fa: 97:bf:e5:b7:33:72:83:6c:23:82:1e:68:a0:26:8e: 5f:c3:e2:3d:42:bb:8f:f3:01:5d:7e:cc:4f:37:e3: 6d:32:81:21:8c:dc:46:9f:37:6f:d5:dd:88:39:d5: e8:e0:67:b6:19:7c:bd:1d:8e:a1:e0:c9:4a:2a:fb: 36:09:17:dd:d4:94:15:9b:87:76:be:c9:c0:76:f3: b0:57:52:98:c1:72:90:b6:82:8d:8d:6d:fc:02:8b: 40:76:7d:84:3f:ec:50:50:99:36:9d:60:d8:53:f0: 86:9b:d0:01:2d:7f:28:4c:19:8b:8a:dc:1a:0f:5e: ea:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5F:B7:78:0A:4D:84:4F:5D:17:76:45:D8:0B:05:E2:17:1E:49:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4add2be0-489a-3b89-b772-9357bf488d7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:72:d3:b5:fa:d9:c0:4e:6d:79:91:1a:b1:a2:73:e6:e5:aa: c6:c7:80:69:40:cd:d8:94:d7:be:4f:ec:87:b8:8f:78:3d:ae: f7:6a:79:e2:b3:1a:df:5e:7b:4f:19:ca:05:79:80:c8:15:ba: 5b:89:9c:92:e1:74:be:ee:94:eb:22:99:c1:b8:a2:fd:65:73: 1d:a4:d5:4e:19:1d:c4:18:e5:02:3a:e8:89:77:1b:f1:2d:f5: 67:a7:98:01:2d:eb:37:39:15:52:91:60:3d:b8:e4:07:50:59: a4:9b:1a:05:04:fe:9d:7e:9b:2f:5d:62:32:fb:d4:2f:e9:6f: 5e:ae:b1:22:35:1c:91:1a:93:88:03:bc:f6:3f:82:0c:bb:f5: cf:94:43:dd:a9:ee:02:1a:50:b9:61:64:c3:cc:93:b3:19:a3: 36:40:9c:de:90:2f:57:e3:0a:cd:8c:9a:42:51:f0:bc:0d:b7: 24:a9:cd:d9:e6:d8:98:40:df:f7:02:86:ef:b5:77:02:e5:e0: 75:3b:94:f5:54:d9:56:ad:13:a1:b3:88:54:9f:c1:c9:23:8d: c5:04:a6:57:c9:9d:54:8a:83:63:9a:03:9b:e7:b1:e1:70:7e: 2e:a8:86:2d:3a:b0:01:94:72:db:4f:2a:12:f5:54:48:35:47: 0b:c4:e2:79 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjlm9joW03HGV8cAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk YTVmZDZiZDUtMjE5NS00YjU0LTg4MjYtYjRlYmU5ZGRlMDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTIqmR2+hchdsgOExoAKuItINEbTg0M7suIj 3kI3YCxvGYoMTbo0PHU30HORl3ZThqx9xhRbiTqc/S3AR4PNPuRRqGJDnal/cMHC gZHZTroiMzADWwNSBagMWQ6bIvRb1qFwzkbcjzpWvW9DBGVoBWJeydbeBp0X3yju Q05ZWqmD1KRHjvqXv+W3M3KDbCOCHmigJo5fw+I9QruP8wFdfsxPN+NtMoEhjNxG nzdv1d2IOdXo4Ge2GXy9HY6h4MlKKvs2CRfd1JQVm4d2vsnAdvOwV1KYwXKQtoKN jW38AotAdn2EP+xQUJk2nWDYU/CGm9ABLX8oTBmLitwaD17qJQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJRft3gKTYRPXRd2RdgLBeIXHknEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGFkZDJiZTAtNDg5YS0z Yjg5LWI3NzItOTM1N2JmNDg4ZDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA4ctO1+tnATm15kRqxonPm5arGx4BpQM3YlNe+ T+yHuI94Pa73annisxrfXntPGcoFeYDIFbpbiZyS4XS+7pTrIpnBuKL9ZXMdpNVO GR3EGOUCOuiJdxvxLfVnp5gBLes3ORVSkWA9uOQHUFmkmxoFBP6dfpsvXWIy+9Qv 6W9errEiNRyRGpOIA7z2P4IMu/XPlEPdqe4CGlC5YWTDzJOzGaM2QJzekC9X4wrN jJpCUfC8Dbckqc3Z5tiYQN/3AobvtXcC5eB1O5T1VNlWrROhs4hUn8HJI43FBKZX yZ1UioNjmgOb57HhcH4uqIYtOrABlHLbTyoS9VRINUcLxOJ5 -----END CERTIFICATE-----Generated at Sat Apr 12 00:14:30 2025 by rpki-client