$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/526b3a19-ab1a-36ab-b6ad-46405ac52802.roa File: 526b3a19-ab1a-36ab-b6ad-46405ac52802.roa (raw, json) Hash identifier: /YBGihAxUcQUEZvTQ76+22uwi1/thLWvWBJWiCUEK+Y= Subject key identifier: 1F:E2:B9:9F:F9:DC:5E:9E:2A:04:93:77:8A:9E:B4:BE:EB:B4:B5:97 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584919419450359266734EAAE800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/526b3a19-ab1a-36ab-b6ad-46405ac52802.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 396572 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:94:50:35:92:66:73:4e:aa:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=a0a71d76-d6a6-489d-9193-9a6e9c88b1e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:79:83:0a:d8:99:e6:22:93:e7:83:17:68:14: ff:6a:ae:73:cb:33:8e:04:b3:28:a2:c0:63:a9:33: e7:f5:a8:cf:a2:9c:00:20:fa:92:4a:fd:2e:e4:c4: 60:7c:97:d8:b6:15:27:e7:0e:81:03:d9:a3:b8:af: 62:54:ba:2a:4b:d4:b3:de:28:6b:e8:51:92:b6:5d: e2:d3:27:57:e6:d0:8a:7c:fa:f8:68:7f:5e:3f:23: ac:52:29:81:f6:45:1a:7b:44:71:e0:ae:8a:b7:0b: e3:a7:4a:39:6f:1f:76:63:11:36:ed:43:22:34:6a: e4:3a:e6:6b:d8:8e:80:73:3d:19:45:00:5a:19:3c: ea:7b:3e:95:26:3f:2e:c1:bb:4e:68:d5:f0:88:00: f2:c2:a3:b9:51:97:e7:47:b5:b9:33:c8:16:02:12: 91:73:82:94:e6:97:b7:dd:2b:59:5d:63:c3:20:ca: f9:35:1a:5b:88:28:5f:d9:b8:22:8d:ad:96:3a:84: 34:5a:21:78:86:d6:3e:3b:21:0d:88:e4:d2:ec:e5: c6:c3:6d:ec:21:33:11:ac:fd:51:53:1b:69:e1:10: 6b:a3:ba:e4:0f:0c:02:32:71:45:c6:d3:0d:23:21: 6c:62:a5:06:25:5a:0f:d4:b7:8d:4b:42:71:2c:80: 62:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E2:B9:9F:F9:DC:5E:9E:2A:04:93:77:8A:9E:B4:BE:EB:B4:B5:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/526b3a19-ab1a-36ab-b6ad-46405ac52802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d3:d6:b6:94:c8:10:17:7c:9a:52:04:70:c9:29:01:2f:c5: 8a:d1:9f:a2:c8:60:b8:91:f1:a9:f4:d7:da:73:91:e2:c1:2e: 23:ab:01:37:f3:d1:3f:82:ae:de:3b:ed:71:39:1c:8d:00:3b: f1:80:06:7d:49:74:b9:c4:57:37:c1:65:e9:44:cd:ac:43:ff: 3b:97:3a:17:56:a2:e2:96:2c:69:b3:58:51:e1:2e:04:64:55: 96:78:30:0a:32:ef:a6:c5:a4:2f:ac:f7:d6:85:e6:6a:79:7f: a7:93:9e:1b:0b:41:04:9d:f1:bb:20:a7:18:af:9c:b8:0e:df: aa:93:52:47:96:8a:57:ed:c4:f7:05:ed:30:7f:ca:27:45:29: 05:1a:44:33:c2:d0:56:ee:8b:78:5b:02:59:af:c3:09:6f:f9: 22:75:8b:1e:fb:95:d9:29:1a:83:c4:2e:51:b9:31:56:e1:e7: 8a:bc:d7:69:fd:b1:b6:5a:0e:b3:84:8f:54:e8:2a:96:74:51: 42:73:2d:11:6a:21:c8:5c:39:a6:2e:40:28:e5:7d:69:4f:d8: e7:a4:fa:bb:e9:b8:e5:be:3a:fe:89:f6:11:a6:a1:9d:79:fd: b5:22:9f:aa:e7:66:53:f7:e8:62:23:29:3c:a8:c0:7e:a2:47: 98:f4:38:2f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkZQZRQNZJmc06q6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk YTBhNzFkNzYtZDZhNi00ODlkLTkxOTMtOWE2ZTljODhiMWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnmDCtiZ5iKT54MXaBT/aq5zyzOOBLMoosBj qTPn9ajPopwAIPqSSv0u5MRgfJfYthUn5w6BA9mjuK9iVLoqS9Sz3ihr6FGStl3i 0ydX5tCKfPr4aH9ePyOsUimB9kUae0Rx4K6Ktwvjp0o5bx92YxE27UMiNGrkOuZr 2I6Acz0ZRQBaGTzqez6VJj8uwbtOaNXwiADywqO5UZfnR7W5M8gWAhKRc4KU5pe3 3StZXWPDIMr5NRpbiChf2bgija2WOoQ0WiF4htY+OyENiOTS7OXGw23sITMRrP1R Uxtp4RBro7rkDwwCMnFFxtMNIyFsYqUGJVoP1LeNS0JxLIBiJwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFB/iuZ/53F6eKgSTd4qetL7rtLWXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTI2YjNhMTktYWIxYS0z NmFiLWI2YWQtNDY0MDVhYzUyODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAt09a2lMgQF3yaUgRwySkBL8WK0Z+iyGC4kfGp 9Nfac5HiwS4jqwE389E/gq7eO+1xORyNADvxgAZ9SXS5xFc3wWXpRM2sQ/87lzoX VqLilixps1hR4S4EZFWWeDAKMu+mxaQvrPfWheZqeX+nk54bC0EEnfG7IKcYr5y4 Dt+qk1JHlopX7cT3Be0wf8onRSkFGkQzwtBW7ot4WwJZr8MJb/kidYse+5XZKRqD xC5RuTFW4eeKvNdp/bG2Wg6zhI9U6CqWdFFCcy0RaiHIXDmmLkAo5X1pT9jnpPq7 6bjlvjr+ifYRpqGdef21Ip+q52ZT9+hiIyk8qMB+okeY9Dgv -----END CERTIFICATE-----Generated at Sat Apr 12 00:21:38 2025 by rpki-client