$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c14a4fa-9d9a-3f74-95d4-6159758b8d3a.roa File: 5c14a4fa-9d9a-3f74-95d4-6159758b8d3a.roa (raw, json) Hash identifier: Nz4x16VqHiOxImErzOM0aMif8NG5MxuUqz1gmehIf9c= Subject key identifier: 71:3B:BA:36:1B:D7:A7:8E:22:50:AD:FE:8D:87:E0:B3:5D:D9:B2:8D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584961B9AB02B718E95551FDF500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c14a4fa-9d9a-3f74-95d4-6159758b8d3a.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 397198 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:ab:02:b7:18:e9:55:51:fd:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=94f605e5-135c-4ac3-bbaa-3571a06ba44a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:89:64:a0:f4:09:48:08:36:23:7c:85:77:ed: b8:43:84:42:3c:09:5c:46:50:b1:cf:57:8f:ea:4b: 4e:0d:1e:5e:d0:0c:03:77:5e:f4:f9:58:bf:e4:6e: b2:60:0d:c1:3b:bc:2a:64:90:e6:e5:83:fb:92:88: 57:28:db:ee:0c:f3:36:40:63:06:17:3d:10:31:b4: 46:5f:00:1a:53:d5:f5:c8:01:7a:ed:c4:a9:93:80: 31:be:0e:b2:89:04:13:0f:de:66:04:45:f9:4d:5c: 48:42:a4:3b:19:1b:06:f6:88:07:4d:ab:23:b1:e4: fb:1e:58:ce:f8:b2:86:48:c9:83:f7:f9:07:9f:01: a8:16:aa:a9:bf:45:40:24:a9:2e:2b:ff:76:b3:94: 46:64:0b:22:8d:b2:af:47:3c:c3:0d:d1:54:2c:19: b2:6f:75:8c:50:77:37:aa:8a:8c:ca:cb:3e:f0:9d: 30:aa:b1:50:df:89:3c:79:5a:02:3a:96:c5:47:3a: c6:0b:f7:69:78:fa:54:65:97:b0:a5:9b:a0:69:a7: 7b:bb:96:a6:ef:59:e9:31:ba:5c:f8:5b:f0:6a:5f: 97:61:47:3f:8e:6e:42:dc:0f:5f:d9:9c:22:5a:12: b5:18:a3:97:cf:f4:eb:36:c9:00:b1:6a:c8:64:5f: 90:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3B:BA:36:1B:D7:A7:8E:22:50:AD:FE:8D:87:E0:B3:5D:D9:B2:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c14a4fa-9d9a-3f74-95d4-6159758b8d3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:cc:ad:a6:5d:77:c5:ad:e4:be:67:7a:65:68:ea:c3:7d:e7: e0:5f:b2:52:59:62:8b:e0:df:42:96:3e:6d:e3:79:0f:2c:4a: 6b:13:de:84:21:ef:ca:c4:18:01:fd:ef:1a:0f:68:f9:36:ba: 9b:c0:08:d5:9e:fb:7e:5c:b4:85:2b:2e:73:ee:50:2e:80:0b: d5:14:b0:95:9e:2f:44:60:e9:66:03:c6:a9:89:8b:33:62:c7: 4e:4d:3e:65:cc:d1:4f:1d:28:0b:b1:8f:0c:c3:64:1c:9d:58: a5:ff:32:88:77:2c:7f:2d:1a:74:9b:b5:82:1f:c7:00:03:e7: f0:9f:62:6e:44:a0:e2:4b:ed:6f:4f:12:bf:b3:c2:b8:4e:9b: f4:42:73:e4:9a:2a:81:5e:4a:ad:b7:09:48:90:d2:8c:5d:9f: b8:13:6e:50:c2:d8:7c:d1:22:51:66:16:20:53:66:59:0e:82: da:20:8a:04:1a:36:80:17:2d:bc:86:f8:13:f6:0c:b2:35:17: d2:ea:05:6e:94:eb:55:59:db:a7:47:d8:d6:79:4e:e4:26:6c: a0:3a:6d:6a:e4:01:03:2b:4b:08:b3:bd:9b:29:a5:94:e8:94: 02:a9:f7:0f:c1:63:45:af:c4:d5:c1:78:50:85:db:35:3c:d9: db:37:b4:4a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWElhuasCtxjpVVH99QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk OTRmNjA1ZTUtMTM1Yy00YWMzLWJiYWEtMzU3MWEwNmJhNDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYlkoPQJSAg2I3yFd+24Q4RCPAlcRlCxz1eP 6ktODR5e0AwDd170+Vi/5G6yYA3BO7wqZJDm5YP7kohXKNvuDPM2QGMGFz0QMbRG XwAaU9X1yAF67cSpk4Axvg6yiQQTD95mBEX5TVxIQqQ7GRsG9ogHTasjseT7HljO +LKGSMmD9/kHnwGoFqqpv0VAJKkuK/92s5RGZAsijbKvRzzDDdFULBmyb3WMUHc3 qoqMyss+8J0wqrFQ34k8eVoCOpbFRzrGC/dpePpUZZewpZugaad7u5am71npMbpc +Fvwal+XYUc/jm5C3A9f2ZwiWhK1GKOXz/TrNskAsWrIZF+QEwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHE7ujYb16eOIlCt/o2H4LNd2bKNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWMxNGE0ZmEtOWQ5YS0z Zjc0LTk1ZDQtNjE1OTc1OGI4ZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCMzK2mXXfFreS+Z3plaOrDfefgX7JSWWKL4N9C lj5t43kPLEprE96EIe/KxBgB/e8aD2j5NrqbwAjVnvt+XLSFKy5z7lAugAvVFLCV ni9EYOlmA8apiYszYsdOTT5lzNFPHSgLsY8Mw2QcnVil/zKIdyx/LRp0m7WCH8cA A+fwn2JuRKDiS+1vTxK/s8K4Tpv0QnPkmiqBXkqttwlIkNKMXZ+4E25Qwth80SJR ZhYgU2ZZDoLaIIoEGjaAFy28hvgT9gyyNRfS6gVulOtVWdunR9jWeU7kJmygOm1q 5AEDK0sIs72bKaWU6JQCqfcPwWNFr8TVwXhQhds1PNnbN7RK -----END CERTIFICATE-----Generated at Wed Apr 16 04:53:01 2025 by rpki-client