$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/854af60f-7834-3062-b291-19376e30c743.roa File: 854af60f-7834-3062-b291-19376e30c743.roa (raw, json) Hash identifier: m2zFHnRj0fdHEltziQP2XcwBW42ReDv0FbPZXi4NY0o= Subject key identifier: 1B:1E:2A:51:74:19:7A:63:E2:F3:E5:61:40:38:8C:78:E9:DC:17:D1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858491941926C2112EA98B2C84B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/854af60f-7834-3062-b291-19376e30c743.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 396580 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:92:6c:21:12:ea:98:b2:c8:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=8c324493-76da-47b9-99a7-e4c78739e15b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c9:bb:f0:68:fb:f1:79:4f:2a:a5:e5:1f:4a: 9b:c3:91:54:ad:dd:99:47:41:59:c2:3a:cf:10:21: d5:90:52:13:4e:48:12:23:f7:61:ab:44:93:bf:cf: 65:e5:67:73:78:42:49:d5:e0:8a:b7:3a:6c:af:1b: 1a:9c:a8:ad:99:72:11:05:b1:a1:00:fd:cd:73:4e: f5:13:6a:eb:d9:5b:26:2b:64:92:79:14:ec:0d:1e: 90:27:27:91:a9:8c:46:31:94:7f:dd:c4:d2:9c:eb: a4:a7:d1:d1:56:13:79:d3:e0:af:21:60:95:9d:52: 96:23:f4:3a:cf:74:e4:b2:97:c3:f6:07:61:ff:45: 46:fb:d5:3a:97:ed:59:74:5c:f6:f6:9f:75:51:de: f7:3d:89:36:e0:5b:16:3e:af:a7:3b:64:1b:d0:eb: 11:e2:8a:80:a8:19:62:31:0b:2c:19:45:1b:f6:7b: 94:93:4d:13:92:9d:3d:17:71:04:1c:b1:fe:ae:e4: d8:9c:65:fb:1e:bc:5f:2e:44:07:a9:e5:4f:0e:72: 9d:32:73:cf:61:56:14:92:e0:d0:74:c7:36:44:9b: 98:af:97:0b:7e:b9:6f:5e:e9:48:52:e9:e0:b3:07: 17:25:6c:14:92:8a:bf:58:11:7d:94:66:e2:31:67: 46:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1E:2A:51:74:19:7A:63:E2:F3:E5:61:40:38:8C:78:E9:DC:17:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/854af60f-7834-3062-b291-19376e30c743.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:74:20:12:8a:24:0b:52:91:e0:ff:5d:e2:63:5e:9e:23:79: d8:50:d5:34:99:51:b0:f0:9f:4f:35:c8:69:ba:1e:2a:06:67: 57:26:cb:3f:db:80:3f:51:c2:a4:00:7a:ef:a7:b9:bb:21:19: 65:f8:2b:0d:de:40:3a:c7:9c:6c:63:72:d3:a2:fc:c5:86:47: ac:62:1b:d6:9a:ab:a8:ec:03:a3:36:d3:3f:6b:fd:df:eb:ee: 8b:ba:b6:b3:ec:1a:cb:87:ea:da:aa:b5:e1:32:4f:f0:36:06: 5d:45:79:0f:82:61:4a:0a:1f:b0:61:4e:e7:c1:70:0f:e7:e5: 00:a0:9c:0c:3e:77:3f:fa:80:90:83:b0:53:9a:65:0d:b0:d3: ae:f5:b9:8a:c0:e3:d5:af:cb:3c:de:12:8c:d5:d5:2a:6f:b5: fd:28:c2:30:32:e0:73:3f:ea:08:c1:97:79:5f:64:2e:e6:67: 28:08:5f:ad:fd:b7:29:2e:82:c0:e9:88:00:45:aa:26:27:31: 66:a5:65:b7:d9:64:e2:e9:27:7f:0c:9a:81:38:d8:08:75:7f: 6f:c1:4b:7c:44:61:74:c4:cd:45:18:b0:7d:dd:df:41:4a:1e: 44:4a:75:e0:08:51:c9:49:2f:b6:a3:3e:af:2f:ee:0c:4c:ca: 3e:75:c2:65 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkZQZJsIRLqmLLISwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk OGMzMjQ0OTMtNzZkYS00N2I5LTk5YTctZTRjNzg3MzllMTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsm78Gj78XlPKqXlH0qbw5FUrd2ZR0FZwjrP ECHVkFITTkgSI/dhq0STv89l5WdzeEJJ1eCKtzpsrxsanKitmXIRBbGhAP3Nc071 E2rr2VsmK2SSeRTsDR6QJyeRqYxGMZR/3cTSnOukp9HRVhN50+CvIWCVnVKWI/Q6 z3TkspfD9gdh/0VG+9U6l+1ZdFz29p91Ud73PYk24FsWPq+nO2Qb0OsR4oqAqBli MQssGUUb9nuUk00Tkp09F3EEHLH+ruTYnGX7HrxfLkQHqeVPDnKdMnPPYVYUkuDQ dMc2RJuYr5cLfrlvXulIUungswcXJWwUkoq/WBF9lGbiMWdGmQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBseKlF0GXpj4vPlYUA4jHjp3BfRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODU0YWY2MGYtNzgzNC0z MDYyLWIyOTEtMTkzNzZlMzBjNzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBGdCASiiQLUpHg/13iY16eI3nYUNU0mVGw8J9P Nchpuh4qBmdXJss/24A/UcKkAHrvp7m7IRll+CsN3kA6x5xsY3LTovzFhkesYhvW mquo7AOjNtM/a/3f6+6Luraz7BrLh+raqrXhMk/wNgZdRXkPgmFKCh+wYU7nwXAP 5+UAoJwMPnc/+oCQg7BTmmUNsNOu9bmKwOPVr8s83hKM1dUqb7X9KMIwMuBzP+oI wZd5X2Qu5mcoCF+t/bcpLoLA6YgARaomJzFmpWW32WTi6Sd/DJqBONgIdX9vwUt8 RGF0xM1FGLB93d9BSh5ESnXgCFHJSS+2oz6vL+4MTMo+dcJl -----END CERTIFICATE-----Generated at Fri Apr 11 22:44:23 2025 by rpki-client