$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ce85890-8b53-3974-ae20-8ebc57baf09a.roa File: 9ce85890-8b53-3974-ae20-8ebc57baf09a.roa (raw, json) Hash identifier: 6yrKms0Nv03+gBXifwZYfc3qkoIbBcvk0fRxjlkwe5A= Subject key identifier: A7:4A:E3:2D:CC:A7:36:B2:4D:45:16:11:02:98:82:3C:69:A8:0E:C9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E59BD50DB7C83653475C3380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ce85890-8b53-3974-ae20-8ebc57baf09a.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 396568 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:d5:0d:b7:c8:36:53:47:5c:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=6d60a1de-5849-462f-ab12-cf2964361564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c4:6f:ec:09:b3:1c:d0:c6:3e:ef:ae:cd:89: ff:cd:67:9c:a4:1c:a7:0e:c7:c1:d1:30:ce:3d:3b: 9c:48:25:b6:08:9c:4a:5c:b2:82:df:e3:cf:0c:7c: 28:e3:43:66:dc:19:38:e7:86:8e:f0:1b:8e:f4:77: f7:9a:d2:fd:10:cb:0b:99:49:8f:91:ef:9b:b0:c3: bb:8f:84:91:b6:62:e2:b0:e2:68:0a:60:24:de:2f: 47:c5:81:ce:b0:4b:5e:72:77:15:e1:10:ce:09:c8: 45:f2:69:44:a8:a1:70:eb:d3:d8:59:f1:82:ad:a3: 6b:a4:a7:42:3e:2b:e9:5f:66:38:33:9b:cc:cf:b5: bf:66:eb:5c:94:24:ec:59:44:e7:13:4e:61:ca:a9: c1:43:17:e4:93:0c:89:1e:05:8b:be:23:d3:19:80: 04:78:f5:e9:07:e8:13:f5:22:23:fb:bb:2b:fd:19: 5a:99:73:7a:80:03:6b:97:cd:af:6c:2f:df:6d:02: 7b:9f:bf:36:45:66:ec:df:57:87:c4:75:db:29:ed: fb:38:7a:41:9d:7a:99:94:09:5a:5d:70:fd:97:50: d0:8a:09:11:44:1d:f1:df:19:99:4a:f7:c1:fc:f7: b6:73:30:70:62:ed:4c:bd:89:80:2a:15:89:4c:77: b1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4A:E3:2D:CC:A7:36:B2:4D:45:16:11:02:98:82:3C:69:A8:0E:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ce85890-8b53-3974-ae20-8ebc57baf09a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:a2:fb:2f:1e:14:a5:76:29:aa:1f:19:a8:06:3e:06:09:31: 54:dc:43:35:ef:48:31:b0:69:75:9e:72:93:e3:02:31:af:12: 19:ca:b6:43:69:21:85:fc:42:2f:60:52:39:f9:80:2f:58:b9: ec:3a:e6:73:ae:ad:15:78:c3:9d:e0:7d:36:e8:01:e8:8d:65: 04:60:3f:4f:0c:84:4a:78:b1:70:9f:ef:40:aa:29:c4:83:4d: 35:40:eb:33:39:5b:0a:4f:23:24:6c:72:80:67:86:09:0e:86: e0:35:c2:21:b9:14:2c:5c:f4:bd:df:25:2a:28:6d:bd:04:aa: 88:df:4e:bf:4e:04:bc:de:2c:2f:7a:d5:14:3e:1e:ce:ac:eb: 4c:c9:6d:e4:54:9f:06:34:0e:35:4f:51:a9:d8:9e:25:5c:3a: 4a:be:e5:be:2a:71:5a:77:ac:d2:09:27:9c:2c:33:3e:51:1c: 70:03:92:f6:67:74:60:2f:4b:49:d7:8c:70:27:cf:82:39:92: a0:5d:c1:3b:74:bb:ab:b9:23:af:f3:42:cc:8a:69:4c:cf:9f: d2:0a:3a:01:c8:11:22:b5:51:ae:01:f9:3c:88:15:d4:6e:94: d0:04:27:7a:fa:62:8c:ff:a4:d6:c5:de:79:db:2b:9e:3a:37: 70:da:91:71 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjlm9UNt8g2U0dcM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk NmQ2MGExZGUtNTg0OS00NjJmLWFiMTItY2YyOTY0MzYxNTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsRv7AmzHNDGPu+uzYn/zWecpBynDsfB0TDO PTucSCW2CJxKXLKC3+PPDHwo40Nm3Bk454aO8BuO9Hf3mtL9EMsLmUmPke+bsMO7 j4SRtmLisOJoCmAk3i9HxYHOsEtecncV4RDOCchF8mlEqKFw69PYWfGCraNrpKdC PivpX2Y4M5vMz7W/ZutclCTsWUTnE05hyqnBQxfkkwyJHgWLviPTGYAEePXpB+gT 9SIj+7sr/RlamXN6gANrl82vbC/fbQJ7n782RWbs31eHxHXbKe37OHpBnXqZlAla XXD9l1DQigkRRB3x3xmZSvfB/Pe2czBwYu1MvYmAKhWJTHex5wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKdK4y3MpzayTUUWEQKYgjxpqA7JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWNlODU4OTAtOGI1My0z OTc0LWFlMjAtOGViYzU3YmFmMDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQATovsvHhSldimqHxmoBj4GCTFU3EM170gxsGl1 nnKT4wIxrxIZyrZDaSGF/EIvYFI5+YAvWLnsOuZzrq0VeMOd4H026AHojWUEYD9P DIRKeLFwn+9AqinEg001QOszOVsKTyMkbHKAZ4YJDobgNcIhuRQsXPS93yUqKG29 BKqI306/TgS83iwvetUUPh7OrOtMyW3kVJ8GNA41T1Gp2J4lXDpKvuW+KnFad6zS CSecLDM+URxwA5L2Z3RgL0tJ14xwJ8+COZKgXcE7dLuruSOv80LMimlMz5/SCjoB yBEitVGuAfk8iBXUbpTQBCd6+mKM/6TWxd552yueOjdw2pFx -----END CERTIFICATE-----Generated at Fri Apr 11 23:49:42 2025 by rpki-client