$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e696a77-1907-396f-8f77-87763e5d1464.roa File: 4e696a77-1907-396f-8f77-87763e5d1464.roa (raw, json) Hash identifier: GqRfLTplSFbt4ZoidvX5+K4u5y1lqiEQs89tmvjjVeE= Subject key identifier: A1:73:99:67:C7:F9:82:CE:46:7D:7F:9D:02:F7:EA:C4:F5:83:97:F7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E59BDEEC77ACF1725600F700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e696a77-1907-396f-8f77-87763e5d1464.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 396826 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:de:ec:77:ac:f1:72:56:00:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=b3622772-0599-428f-83ab-a409dc57a596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:32:7c:b3:27:5f:d0:9b:19:69:31:fd:e1:5e: b2:9c:15:8e:8d:fc:47:fa:71:47:1d:e1:18:da:55: f6:c6:4d:84:06:3a:59:e9:64:f2:42:d9:e7:61:43: 17:f6:9f:2b:f2:11:8b:5e:f4:5b:bd:6d:3d:4e:1c: d8:13:7c:de:33:d6:cc:fc:74:24:f5:d2:c9:61:78: 00:e1:d3:23:8e:a0:33:53:d3:19:9d:6f:6d:d5:32: f8:13:f9:cb:c0:50:af:59:95:ac:2f:80:54:c6:f8: b4:6d:c8:b8:7a:1d:9f:09:da:80:92:ef:f8:37:43: 64:2f:22:c2:68:45:b6:72:63:b5:f0:62:81:e3:62: c2:37:89:a2:f9:07:4b:27:95:4e:2f:4c:aa:be:ab: 3d:da:75:71:8e:0c:aa:7f:eb:bd:18:7f:ae:a6:52: a6:ab:91:1e:0d:1c:9d:63:51:62:89:41:c9:ae:2f: b8:d4:b8:26:72:dd:a5:8a:4f:26:06:3d:60:e6:3b: 9e:ee:1f:ec:d3:98:18:cd:32:12:df:22:af:56:7c: 8d:2e:69:92:b0:d4:69:5a:bf:0a:26:7f:6a:c8:d4: 1c:e9:16:e7:78:0d:b3:90:48:96:b3:62:05:4f:e1: 1a:3b:39:b7:3b:90:8e:8a:8c:87:87:6d:3f:44:2b: 09:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:73:99:67:C7:F9:82:CE:46:7D:7F:9D:02:F7:EA:C4:F5:83:97:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e696a77-1907-396f-8f77-87763e5d1464.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:7f:a1:8e:95:9e:4c:9e:74:fb:a0:7e:f0:13:89:85:cd:02: c6:c6:61:8e:69:7f:4c:16:6c:e4:c2:7c:85:d3:7d:f5:b0:25: 5f:b6:62:8c:90:85:24:8e:e9:21:8d:1a:9c:3e:2e:6f:65:65: 2b:92:6d:46:c2:ab:e8:92:50:77:72:c9:00:fe:48:f2:ac:a7: 68:eb:f3:15:d5:ae:6c:b9:df:18:e7:91:d2:52:52:a4:3b:c7: 8f:16:de:ee:3e:06:dc:07:9a:42:d3:2c:08:1d:88:77:7e:9f: 31:4e:f3:47:17:0c:2b:6b:10:b6:98:4f:95:50:76:5d:c0:b1: f7:e2:8b:10:9d:fd:c9:74:dd:bb:f7:b2:a4:47:95:58:8b:59: b1:1d:5e:da:af:d0:e7:5d:77:e6:2f:23:f9:b6:27:cc:14:55: 14:d1:4e:cd:99:e1:77:1e:81:14:2b:fe:a2:e7:81:f7:98:6a: a7:8d:87:65:3c:82:9d:b1:7c:c7:16:76:8f:5c:ac:51:db:55: dc:e1:7d:05:fd:6d:20:39:91:52:63:cb:7b:9e:1c:88:49:73: 47:90:1d:12:75:30:37:6f:7a:fc:6d:2c:bb:ac:b0:56:fe:35: eb:36:bc:60:8a:7a:bf:92:d9:70:75:79:a0:b3:38:3b:81:67: 1d:0a:cd:16 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjlm97sd6zxclYA9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk YjM2MjI3NzItMDU5OS00MjhmLTgzYWItYTQwOWRjNTdhNTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjJ8sydf0JsZaTH94V6ynBWOjfxH+nFHHeEY 2lX2xk2EBjpZ6WTyQtnnYUMX9p8r8hGLXvRbvW09ThzYE3zeM9bM/HQk9dLJYXgA 4dMjjqAzU9MZnW9t1TL4E/nLwFCvWZWsL4BUxvi0bci4eh2fCdqAku/4N0NkLyLC aEW2cmO18GKB42LCN4mi+QdLJ5VOL0yqvqs92nVxjgyqf+u9GH+uplKmq5EeDRyd Y1FiiUHJri+41Lgmct2lik8mBj1g5jue7h/s05gYzTIS3yKvVnyNLmmSsNRpWr8K Jn9qyNQc6RbneA2zkEiWs2IFT+EaOzm3O5COioyHh20/RCsJtQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKFzmWfH+YLORn1/nQL36sT1g5f3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGU2OTZhNzctMTkwNy0z OTZmLThmNzctODc3NjNlNWQxNDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBlf6GOlZ5MnnT7oH7wE4mFzQLGxmGOaX9MFmzk wnyF0331sCVftmKMkIUkjukhjRqcPi5vZWUrkm1GwqvoklB3cskA/kjyrKdo6/MV 1a5sud8Y55HSUlKkO8ePFt7uPgbcB5pC0ywIHYh3fp8xTvNHFwwraxC2mE+VUHZd wLH34osQnf3JdN2797KkR5VYi1mxHV7ar9DnXXfmLyP5tifMFFUU0U7NmeF3HoEU K/6i54H3mGqnjYdlPIKdsXzHFnaPXKxR21Xc4X0F/W0gOZFSY8t7nhyISXNHkB0S dTA3b3r8bSy7rLBW/jXrNrxginq/ktlwdXmgszg7gWcdCs0W -----END CERTIFICATE-----Generated at Fri Apr 11 22:33:20 2025 by rpki-client