$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/889eca23-f39a-383d-a987-f471c78398c8.roa File: 889eca23-f39a-383d-a987-f471c78398c8.roa (raw, json) Hash identifier: b0jssANb8JCpttNVPclpAaK+R+gbGotbfYuO9OoAVmo= Subject key identifier: CC:5D:9E:1B:59:9C:C3:AD:A3:51:66:CC:61:23:12:68:92:43:C6:28 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848D2110EFD5F7E0CE9366B6A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/889eca23-f39a-383d-a987-f471c78398c8.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 396540 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:0e:fd:5f:7e:0c:e9:36:6b:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=fcc7fff1-af39-4540-b6c0-93493911bf9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:90:f6:fa:58:7c:0c:be:53:d7:ee:da:72:5c: 6e:df:f2:34:8a:0a:31:62:42:34:73:8d:c3:64:14: 33:90:61:cc:c6:b2:88:6e:81:de:e8:99:c4:20:29: 24:14:a6:e8:5f:e8:74:5c:c2:dd:88:37:f3:23:eb: 83:f9:26:73:32:a3:6e:1e:7e:50:79:27:40:9f:fd: c9:c1:51:16:d1:b2:e4:63:58:a3:80:f4:19:3a:e6: 10:b0:9c:7a:98:d6:a0:0e:fb:21:23:e1:eb:1f:36: ae:5b:d3:4b:1c:39:74:00:ff:7f:66:54:44:46:b1: 3c:74:a3:e2:c3:62:a6:1b:74:02:f0:dc:4b:5d:80: a6:7a:4c:05:78:9d:3d:c4:7a:dc:9f:17:95:55:90: 87:a0:58:6e:f5:3e:74:0b:31:3b:37:6c:03:93:a7: 7b:ba:2a:b1:57:cd:01:11:55:88:bb:41:0f:f3:10: f4:e0:ae:6b:01:af:9d:12:95:30:1a:11:4a:63:1a: e9:1a:c8:80:47:c9:ef:6e:e2:22:07:17:29:70:05: 31:33:47:4d:2f:5b:2d:26:94:f3:0e:12:06:43:83: e2:30:3b:0e:e0:d7:9a:6a:2a:1d:b3:30:36:44:83: 17:e0:ef:fb:2e:4a:43:36:50:12:3a:7b:d5:e5:66: d1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5D:9E:1B:59:9C:C3:AD:A3:51:66:CC:61:23:12:68:92:43:C6:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/889eca23-f39a-383d-a987-f471c78398c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:1f:c5:33:80:f7:4a:cd:a0:90:ba:cf:2e:82:4b:b5:10:5b: 27:03:a5:29:c5:2a:4f:86:cb:a6:1f:b9:cf:d7:6d:b8:a8:e7: f3:43:9e:fb:b0:cd:bf:92:df:b0:9b:90:15:64:ae:5e:b0:f2: a2:75:14:75:bc:b0:08:48:49:44:ac:50:15:a7:7d:12:90:99: 14:25:23:a4:85:f6:e8:93:c0:db:fc:1f:72:0e:1a:5d:40:32: ee:e6:4a:b7:12:4e:f4:50:df:f8:17:52:18:60:96:e6:5c:a5: 77:82:4d:3e:3d:ee:e0:9e:c9:cf:73:13:bc:de:60:08:9f:1d: 46:2d:c3:1d:e3:94:12:ef:cd:ae:91:c1:a1:ed:a0:e2:2b:58: 5b:45:e9:92:36:04:ef:4e:ec:c4:f9:8b:e4:ce:81:d1:51:11: 99:bf:11:aa:37:c5:9b:8c:2c:22:fb:78:19:a9:1c:eb:b4:43: 04:8a:c8:16:ca:2f:c6:81:36:04:b2:80:fc:7e:1c:83:11:f1: 8d:88:21:6b:ea:10:a5:7c:ea:30:c2:ee:de:19:17:2f:ec:9c: 58:87:a5:48:a3:fe:03:8a:8f:b9:89:37:25:a2:88:ab:39:ef: 79:f3:27:68:d2:29:0a:03:b9:02:36:2b:0d:23:60:34:db:9f: 55:0e:24:8c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjSEQ79X34M6TZraoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZmNjN2ZmZjEtYWYzOS00NTQwLWI2YzAtOTM0OTM5MTFiZjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZD2+lh8DL5T1+7aclxu3/I0igoxYkI0c43D ZBQzkGHMxrKIboHe6JnEICkkFKboX+h0XMLdiDfzI+uD+SZzMqNuHn5QeSdAn/3J wVEW0bLkY1ijgPQZOuYQsJx6mNagDvshI+HrHzauW9NLHDl0AP9/ZlRERrE8dKPi w2KmG3QC8NxLXYCmekwFeJ09xHrcnxeVVZCHoFhu9T50CzE7N2wDk6d7uiqxV80B EVWIu0EP8xD04K5rAa+dEpUwGhFKYxrpGsiAR8nvbuIiBxcpcAUxM0dNL1stJpTz DhIGQ4PiMDsO4NeaaiodszA2RIMX4O/7LkpDNlASOnvV5WbR1wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMxdnhtZnMOto1FmzGEjEmiSQ8YoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODg5ZWNhMjMtZjM5YS0z ODNkLWE5ODctZjQ3MWM3ODM5OGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB+H8UzgPdKzaCQus8ugku1EFsnA6UpxSpPhsum H7nP1224qOfzQ577sM2/kt+wm5AVZK5esPKidRR1vLAISElErFAVp30SkJkUJSOk hfbok8Db/B9yDhpdQDLu5kq3Ek70UN/4F1IYYJbmXKV3gk0+Pe7gnsnPcxO83mAI nx1GLcMd45QS782ukcGh7aDiK1hbRemSNgTvTuzE+YvkzoHRURGZvxGqN8WbjCwi +3gZqRzrtEMEisgWyi/GgTYEsoD8fhyDEfGNiCFr6hClfOowwu7eGRcv7JxYh6VI o/4Dio+5iTclooirOe958ydo0ikKA7kCNisNI2A0259VDiSM -----END CERTIFICATE-----Generated at Sat Apr 12 00:11:49 2025 by rpki-client