$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5947acf1-0b76-398c-ae31-49a637d4b87e.roa File: 5947acf1-0b76-398c-ae31-49a637d4b87e.roa (raw, json) Hash identifier: JQonpdSAGEHWu71AzLdJTJttHqRqJ7PV4hFDhFLODUI= Subject key identifier: 7E:65:CB:58:FE:59:39:C6:7F:FE:46:9F:66:94:50:38:15:80:4B:2F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E59BD58FD70A16DB80A2CE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5947acf1-0b76-398c-ae31-49a637d4b87e.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 397209 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:d5:8f:d7:0a:16:db:80:a2:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=11173b91-39d9-4d3b-98be-018ca61b0eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6f:e2:a9:84:91:aa:df:3d:fa:d6:6f:54:8f: 5a:ec:d8:2a:6f:35:d1:e0:d4:07:9c:fc:13:60:53: 64:2b:b2:57:e2:aa:79:9a:2a:ad:69:fb:33:08:93: c6:03:bc:03:91:81:bf:19:9e:67:7b:2c:a9:3c:be: 42:75:b8:90:bf:bc:f5:d0:98:5d:fd:51:59:cb:a5: db:07:94:a8:ae:4c:ba:e9:d9:2b:1f:c3:d2:fc:f3: b4:6e:45:78:f0:aa:fd:34:d7:f8:b0:66:a2:8b:00: 4a:1f:38:1e:74:3c:cd:ca:bf:d3:54:67:5d:8a:0d: ce:c9:3a:d5:e4:18:04:4d:03:14:e8:3f:e2:7d:55: 22:8c:bc:a6:fc:64:4c:a4:36:a1:e1:9e:b3:c3:32: 03:06:90:05:b4:90:ec:fe:57:b1:ff:d7:52:8a:ab: 41:18:b5:5f:36:e8:67:89:27:a9:b7:db:d9:0d:bf: cd:27:14:4b:d0:76:48:13:b5:07:58:04:1f:c2:26: 2e:e7:4c:81:1d:43:b3:e7:af:94:d0:e0:db:95:94: fd:da:51:7b:50:80:ce:61:15:71:00:ef:3e:1c:b6: eb:da:d4:88:8a:f1:98:ee:94:10:78:5b:70:69:fc: 79:1a:07:4b:e5:c5:e5:4b:41:23:f9:63:00:a9:ba: 16:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:65:CB:58:FE:59:39:C6:7F:FE:46:9F:66:94:50:38:15:80:4B:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5947acf1-0b76-398c-ae31-49a637d4b87e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:f4:43:49:24:48:d5:84:5a:a0:49:91:ef:81:76:4d:c8:a0: 02:13:64:28:f4:77:22:04:22:ce:00:dc:cf:63:2e:2c:48:99: e6:74:0b:42:43:44:3b:f7:59:e4:58:2f:f2:e9:e7:a7:33:33: 16:4b:42:62:e8:7f:a9:70:dc:ab:9c:29:f2:77:bb:37:49:bd: 31:c2:ef:f3:4f:fe:84:fc:51:bd:2b:1d:fa:ac:74:0e:a6:93: 93:22:15:e7:4f:ec:8b:83:d0:b7:29:95:b8:0e:ed:18:f3:f4: 04:31:9a:6e:8d:ae:c9:e1:28:b9:02:ed:c2:1a:5a:96:c5:ab: db:86:08:d8:6a:04:07:20:d4:64:a4:d1:bb:ba:04:9f:9e:c6: 73:e2:79:47:02:c4:65:2b:73:a3:da:a3:70:e5:e6:e5:ce:65: 5e:8b:06:36:11:f4:84:59:6d:1a:12:df:af:9b:b9:84:41:fc: 0f:e0:7f:a8:41:59:74:e3:2f:16:f9:f0:2d:97:bf:ce:77:66: 64:e1:4a:8a:79:49:16:0c:1c:f2:60:46:bc:d1:83:e0:32:ea: 62:0c:88:68:f8:ba:f5:9a:de:e6:04:21:f7:58:89:a5:b6:d8: 7c:e7:05:c9:75:b5:69:e8:f1:f7:1f:e1:7a:92:25:01:5b:78: 16:59:02:58 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjlm9WP1woW24CizoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk MTExNzNiOTEtMzlkOS00ZDNiLTk4YmUtMDE4Y2E2MWIwZWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG/iqYSRqt89+tZvVI9a7NgqbzXR4NQHnPwT YFNkK7JX4qp5miqtafszCJPGA7wDkYG/GZ5neyypPL5CdbiQv7z10Jhd/VFZy6Xb B5Sorky66dkrH8PS/PO0bkV48Kr9NNf4sGaiiwBKHzgedDzNyr/TVGddig3OyTrV 5BgETQMU6D/ifVUijLym/GRMpDah4Z6zwzIDBpAFtJDs/lex/9dSiqtBGLVfNuhn iSept9vZDb/NJxRL0HZIE7UHWAQfwiYu50yBHUOz56+U0ODblZT92lF7UIDOYRVx AO8+HLbr2tSIivGY7pQQeFtwafx5GgdL5cXlS0Ej+WMAqboW2QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFH5ly1j+WTnGf/5Gn2aUUDgVgEsvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTk0N2FjZjEtMGI3Ni0z OThjLWFlMzEtNDlhNjM3ZDRiODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAW9ENJJEjVhFqgSZHvgXZNyKACE2Qo9HciBCLO ANzPYy4sSJnmdAtCQ0Q791nkWC/y6eenMzMWS0Ji6H+pcNyrnCnyd7s3Sb0xwu/z T/6E/FG9Kx36rHQOppOTIhXnT+yLg9C3KZW4Du0Y8/QEMZpuja7J4Si5Au3CGlqW xavbhgjYagQHINRkpNG7ugSfnsZz4nlHAsRlK3Oj2qNw5eblzmVeiwY2EfSEWW0a Et+vm7mEQfwP4H+oQVl04y8W+fAtl7/Od2Zk4UqKeUkWDBzyYEa80YPgMupiDIho +Lr1mt7mBCH3WImltth85wXJdbVp6PH3H+F6kiUBW3gWWQJY -----END CERTIFICATE-----Generated at Fri Apr 11 22:36:13 2025 by rpki-client