$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8af1acee-2bf6-3f05-baf9-b3b987560b2e.roa File: 8af1acee-2bf6-3f05-baf9-b3b987560b2e.roa (raw, json) Hash identifier: 35yaREsBVH3gJalPcUd15wYFZLGvgh5c24J30POakT0= Subject key identifier: 8A:ED:F7:9D:C7:CD:41:65:3C:18:2B:2E:D1:81:78:4F:B8:66:38:CD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848D2110C3B04B691E91DD29D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8af1acee-2bf6-3f05-baf9-b3b987560b2e.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 397200 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:0c:3b:04:b6:91:e9:1d:d2:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=8312cf49-1b9f-40db-916d-d4d484918932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e2:33:09:f5:47:c6:e3:02:c8:9d:69:9d:68: 46:09:74:65:88:fb:03:4d:9f:13:6d:3e:cf:3e:cf: 83:47:57:54:44:20:3f:71:ef:7f:b5:05:a9:d7:68: d2:9b:47:f7:6f:0f:d7:c5:8f:ce:83:18:fc:4f:d3: 91:9d:22:53:13:99:af:4f:fe:3e:6a:de:c3:25:b1: 31:c3:bd:7d:e9:76:ec:8d:78:b3:fd:bd:6a:6f:11: d9:56:95:93:f4:e1:89:97:33:36:a7:96:a2:92:93: f1:48:ba:0a:fa:5b:fa:e8:2a:90:7f:7e:30:a9:6f: ad:34:76:20:77:11:2a:61:b2:80:a8:32:d6:42:7b: 05:64:7f:15:47:ff:bf:67:7c:82:a6:eb:5f:9c:90: 3b:cb:2b:c6:a8:64:b3:1d:36:95:07:7c:74:a0:97: 5b:fe:74:6d:c4:d6:a3:68:79:73:de:1f:5b:38:79: 3f:88:0e:31:32:ca:42:a5:2d:fc:03:7a:27:e4:e8: b0:12:30:67:c5:47:cf:9c:db:b2:9e:a5:98:18:10: 26:19:74:90:15:32:4d:f8:f8:14:c5:26:36:e9:af: 10:40:e4:2e:95:af:1d:88:35:44:8b:6c:d7:17:ef: 08:57:68:c8:76:80:90:4c:43:3e:ce:59:b2:20:88: 10:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:ED:F7:9D:C7:CD:41:65:3C:18:2B:2E:D1:81:78:4F:B8:66:38:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8af1acee-2bf6-3f05-baf9-b3b987560b2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:6e:bb:f1:bd:25:fd:b0:31:d9:a3:9d:63:8e:80:52:b3:f7: 45:94:2b:78:c5:12:f7:84:87:57:c5:8c:11:14:14:ba:69:97: 25:97:20:72:d3:83:e8:5d:aa:65:1b:cc:65:c9:d2:2a:44:04: 1f:72:b8:62:9e:25:6f:d6:d2:b0:6a:34:0f:02:e3:6f:ef:6e: fa:31:fc:1e:9d:22:52:dc:35:cb:8b:6a:a2:0a:b1:db:3d:8d: 77:f6:29:b6:ee:18:6d:a9:9f:88:24:28:72:7f:2e:c4:0a:63: 2d:e5:e7:6a:76:43:7a:85:bb:47:ca:bb:ab:b5:98:26:0c:c9: ec:b7:f2:7f:51:1e:ae:25:17:54:4e:06:31:5a:34:a1:a0:fa: d0:88:62:54:76:0a:4e:52:40:a3:bb:98:80:7c:58:d2:a4:1e: 27:6b:cf:6d:f7:ba:21:19:e0:24:25:9b:7c:49:ce:e2:6f:45: ad:c1:fe:95:cb:99:1c:ce:90:94:71:ed:b4:4c:b9:7d:09:c4: bf:c8:66:da:bb:f4:8e:8f:57:b6:ea:51:5f:f7:79:58:72:29: 06:dd:8f:a5:c3:37:b1:20:55:55:23:37:86:68:76:54:e4:2c: 1c:8a:3b:85:3b:f6:f9:91:22:81:42:26:f2:e7:fd:db:fd:be: c8:ae:48:2e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjSEQw7BLaR6R3SnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ODMxMmNmNDktMWI5Zi00MGRiLTkxNmQtZDRkNDg0OTE4OTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneIzCfVHxuMCyJ1pnWhGCXRliPsDTZ8TbT7P Ps+DR1dURCA/ce9/tQWp12jSm0f3bw/XxY/Ogxj8T9ORnSJTE5mvT/4+at7DJbEx w7196XbsjXiz/b1qbxHZVpWT9OGJlzM2p5aikpPxSLoK+lv66CqQf34wqW+tNHYg dxEqYbKAqDLWQnsFZH8VR/+/Z3yCputfnJA7yyvGqGSzHTaVB3x0oJdb/nRtxNaj aHlz3h9bOHk/iA4xMspCpS38A3on5OiwEjBnxUfPnNuynqWYGBAmGXSQFTJN+PgU xSY26a8QQOQula8diDVEi2zXF+8IV2jIdoCQTEM+zlmyIIgQzwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIrt953HzUFlPBgrLtGBeE+4ZjjNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGFmMWFjZWUtMmJmNi0z ZjA1LWJhZjktYjNiOTg3NTYwYjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB1brvxvSX9sDHZo51jjoBSs/dFlCt4xRL3hIdX xYwRFBS6aZcllyBy04PoXaplG8xlydIqRAQfcrhiniVv1tKwajQPAuNv7276Mfwe nSJS3DXLi2qiCrHbPY139im27hhtqZ+IJChyfy7ECmMt5edqdkN6hbtHyrurtZgm DMnst/J/UR6uJRdUTgYxWjShoPrQiGJUdgpOUkCju5iAfFjSpB4na89t97ohGeAk JZt8Sc7ib0Wtwf6Vy5kczpCUce20TLl9CcS/yGbau/SOj1e26lFf93lYcikG3Y+l wzexIFVVIzeGaHZU5CwcijuFO/b5kSKBQiby5/3b/b7Irkgu -----END CERTIFICATE-----Generated at Sat Apr 12 01:47:40 2025 by rpki-client