$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97e7fe72-c812-3e89-857d-cba10fa54a1c.roa File: 97e7fe72-c812-3e89-857d-cba10fa54a1c.roa (raw, json) Hash identifier: Ol2Rflqy4zysUdORvW4gnin2SvbeExkJOgJbi4BxUsE= Subject key identifier: 79:84:A5:A9:C5:4D:53:7B:8D:C0:45:27:ED:04:B9:F2:46:4F:B7:AC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E59BD819CA1928A1CD933100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97e7fe72-c812-3e89-857d-cba10fa54a1c.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 396583 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:d8:19:ca:19:28:a1:cd:93:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=8221a396-8de6-406a-9edd-ca6f76d799ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:98:67:fb:eb:09:48:cc:d2:8a:7d:20:de:3a: 69:8d:49:94:e1:d9:af:e0:03:b4:09:9b:40:fb:c7: 51:0e:75:86:04:af:84:e4:89:7d:50:ed:d5:d6:df: a0:34:76:66:7f:a9:83:0a:cf:8c:70:29:3c:e7:6b: b3:da:54:33:b2:6f:61:b5:c5:53:32:19:ba:82:97: 05:50:97:64:43:36:ba:c7:bf:6d:5c:6c:11:70:cf: eb:66:2b:99:1a:35:9d:10:95:5e:3b:fe:eb:ea:5d: e7:f1:18:fa:45:42:97:7b:41:05:63:40:8d:33:be: 87:66:60:95:ec:4a:32:28:c2:f5:6c:fa:c5:68:95: 7e:c9:ed:04:7d:02:88:46:df:73:16:df:7e:2a:cd: bc:09:81:80:f3:be:cb:26:a2:4f:dc:a8:16:14:2a: fa:9a:61:cf:bb:9a:3e:10:39:c0:a9:61:4c:2d:73: 1e:3d:26:d1:46:10:32:5d:95:45:2f:10:85:71:3b: 2e:63:21:5a:d5:ee:cb:97:29:fd:48:27:6e:a5:fd: 56:45:67:58:62:d4:ad:88:62:94:d0:d6:ab:ef:88: c5:a3:e8:1a:7a:47:9d:8d:4c:b6:56:33:f2:f7:f7: 39:7d:4c:ac:c9:6e:f5:1b:63:d2:64:ac:74:43:bd: 61:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:84:A5:A9:C5:4D:53:7B:8D:C0:45:27:ED:04:B9:F2:46:4F:B7:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97e7fe72-c812-3e89-857d-cba10fa54a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:cb:91:87:c4:86:af:b0:b8:20:91:79:03:70:67:88:81:31: 65:94:c5:c3:4f:f6:ad:b1:0a:8f:ee:13:12:e6:7f:43:51:03: 27:98:c7:99:c6:af:be:e1:01:8e:06:99:33:c5:23:d0:98:70: fa:07:88:5f:36:de:76:c4:ac:26:ca:68:60:85:aa:cd:71:b0: 68:59:70:99:44:28:91:f8:ed:77:a2:0a:91:03:c3:a7:15:82: b3:b5:ae:cd:3a:1d:b9:b7:95:9c:96:88:58:16:0a:29:e6:a8: 6d:d2:a2:1a:1f:48:85:6c:21:b5:94:14:9e:d3:11:e5:92:13: 5a:2e:c9:1b:7a:5d:9a:00:3e:78:78:d6:54:1c:e9:ac:98:85: a0:6f:e1:32:53:eb:12:8b:2d:3e:cb:23:15:81:45:a3:4b:ee: 8e:42:c6:18:0b:b1:be:c7:9e:d9:e1:29:65:7c:d2:8d:58:1a: c1:4c:0e:b4:aa:19:9d:81:7a:e4:27:dc:f8:e5:9b:fd:36:9e: f5:2c:4c:6c:a0:41:df:ba:8f:bc:8b:b8:43:d1:07:a9:7d:fa: 7a:88:18:6a:a2:c7:7c:0d:20:87:2d:75:44:10:7f:04:37:84: 00:b9:6f:a2:ab:e3:1f:5a:a2:70:50:fb:35:9f:74:89:9f:5e: 75:55:18:43 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjlm9gZyhkooc2TMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ODIyMWEzOTYtOGRlNi00MDZhLTllZGQtY2E2Zjc2ZDc5OWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJhn++sJSMzSin0g3jppjUmU4dmv4AO0CZtA +8dRDnWGBK+E5Il9UO3V1t+gNHZmf6mDCs+McCk852uz2lQzsm9htcVTMhm6gpcF UJdkQza6x79tXGwRcM/rZiuZGjWdEJVeO/7r6l3n8Rj6RUKXe0EFY0CNM76HZmCV 7EoyKML1bPrFaJV+ye0EfQKIRt9zFt9+Ks28CYGA877LJqJP3KgWFCr6mmHPu5o+ EDnAqWFMLXMePSbRRhAyXZVFLxCFcTsuYyFa1e7Llyn9SCdupf1WRWdYYtStiGKU 0Nar74jFo+gaekedjUy2VjPy9/c5fUysyW71G2PSZKx0Q71hdQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHmEpanFTVN7jcBFJ+0EufJGT7esMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTdlN2ZlNzItYzgxMi0z ZTg5LTg1N2QtY2JhMTBmYTU0YTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBRy5GHxIavsLggkXkDcGeIgTFllMXDT/atsQqP 7hMS5n9DUQMnmMeZxq++4QGOBpkzxSPQmHD6B4hfNt52xKwmymhgharNcbBoWXCZ RCiR+O13ogqRA8OnFYKzta7NOh25t5WclohYFgop5qht0qIaH0iFbCG1lBSe0xHl khNaLskbel2aAD54eNZUHOmsmIWgb+EyU+sSiy0+yyMVgUWjS+6OQsYYC7G+x57Z 4SllfNKNWBrBTA60qhmdgXrkJ9z45Zv9Np71LExsoEHfuo+8i7hD0Qepffp6iBhq osd8DSCHLXVEEH8EN4QAuW+iq+MfWqJwUPs1n3SJn151VRhD -----END CERTIFICATE-----Generated at Tue Apr 15 13:37:21 2025 by rpki-client