$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a09a28bf-d9c9-33fd-820a-99762c1beb00.roa File: a09a28bf-d9c9-33fd-820a-99762c1beb00.roa (raw, json) Hash identifier: nSz21/TUNKQ5aRjavyWxlhU7XEbO0GbOHSg6XFWDI98= Subject key identifier: 3D:A6:BD:1E:E3:C9:5F:4E:C5:07:98:FB:58:21:8D:DB:5F:83:C6:37 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849194195BD919F3E296DFD7228 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a09a28bf-d9c9-33fd-820a-99762c1beb00.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 396596 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:95:bd:91:9f:3e:29:6d:fd:72:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=00ef26e5-5661-4ecd-9ff0-602eada12251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:74:d0:6a:af:d5:65:7f:ca:f2:30:56:60:9e: c3:d5:f3:1e:4e:61:e4:c6:fe:1d:ae:0f:5f:7f:47: a9:4d:17:75:b5:5d:ed:48:c7:2a:a0:8a:dd:d6:3a: 8c:c9:6c:31:96:1c:9d:fb:63:41:57:2c:50:d6:38: df:68:48:31:7e:21:09:a9:b6:ee:e8:ee:82:a0:39: 3d:bb:48:21:6f:c0:97:70:85:6f:d3:c4:40:e7:9d: c7:45:8a:4a:41:d6:9e:c9:03:c2:8b:85:ef:c4:e4: 3b:e3:b4:ba:9e:24:73:8d:21:07:c0:4c:f9:e1:24: 5f:34:44:11:64:58:72:f9:8d:18:ba:c2:3a:1d:83: 2b:f2:43:ae:f8:f7:54:77:e9:f2:0d:ff:a2:21:a0: 88:b9:b0:61:a1:42:cb:46:74:61:a0:40:c5:87:13: 75:f6:a1:12:f8:ce:58:5a:92:50:11:58:f1:90:39: 7f:71:cb:da:66:24:41:7f:ba:2e:68:1b:76:51:c8: ca:d6:12:eb:46:f9:37:db:f7:1c:be:ec:52:66:eb: 2d:0f:86:6a:62:73:aa:34:59:34:50:c2:a0:ef:6a: 6b:4d:67:49:da:f4:71:ea:3c:5e:2a:2f:93:cb:8c: 82:5b:48:35:d9:4a:7b:00:66:5c:ff:b5:0d:84:31: df:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A6:BD:1E:E3:C9:5F:4E:C5:07:98:FB:58:21:8D:DB:5F:83:C6:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a09a28bf-d9c9-33fd-820a-99762c1beb00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:a7:0d:72:b1:a4:e7:48:74:ce:43:63:0d:86:1b:57:7d:9a: 7f:5d:2b:04:91:ec:ed:cb:50:fa:4c:57:22:e0:aa:fb:09:9d: 06:88:6e:36:b5:03:c7:6e:4d:02:6e:3c:0a:47:72:e6:a4:37: 85:6f:2a:8a:e6:5a:82:6e:46:00:51:8f:e1:b0:86:c3:8b:a4: b1:72:89:05:40:ea:12:80:2e:a1:d8:d0:63:19:1b:47:f8:2d: d4:a1:bf:01:94:2f:8f:58:30:2d:bf:32:5b:a9:a9:e9:43:9b: f7:2a:44:ec:b8:9f:ce:82:d9:c7:86:d3:a6:cb:6a:44:b4:38: 6b:a1:8b:9a:75:8c:da:e6:c3:98:7f:b1:2b:f3:b9:7d:24:e1: 39:b7:29:73:28:20:05:91:ba:a4:6a:ae:40:08:d3:fd:51:da: d8:64:c5:b8:f6:bc:6c:7d:93:42:c3:d6:d5:1b:b2:f0:52:20: 8b:68:88:6f:50:a3:ea:c4:80:8a:96:99:ff:d1:a4:51:b4:d0: 19:35:d0:88:80:dd:ff:ad:7c:6a:a8:d3:2e:e8:03:32:6a:69: 04:91:26:8b:d6:e8:f7:eb:28:d9:4c:65:f9:a7:3a:13:4b:56: a2:3a:14:97:60:c7:37:5a:32:c6:7b:f7:93:7d:77:34:24:c9: 63:2e:a5:34 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkZQZW9kZ8+KW39cigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk MDBlZjI2ZTUtNTY2MS00ZWNkLTlmZjAtNjAyZWFkYTEyMjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXTQaq/VZX/K8jBWYJ7D1fMeTmHkxv4drg9f f0epTRd1tV3tSMcqoIrd1jqMyWwxlhyd+2NBVyxQ1jjfaEgxfiEJqbbu6O6CoDk9 u0ghb8CXcIVv08RA553HRYpKQdaeyQPCi4XvxOQ747S6niRzjSEHwEz54SRfNEQR ZFhy+Y0YusI6HYMr8kOu+PdUd+nyDf+iIaCIubBhoULLRnRhoEDFhxN19qES+M5Y WpJQEVjxkDl/ccvaZiRBf7ouaBt2UcjK1hLrRvk32/ccvuxSZustD4ZqYnOqNFk0 UMKg72prTWdJ2vRx6jxeKi+Ty4yCW0g12Up7AGZc/7UNhDHfNwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFD2mvR7jyV9OxQeY+1ghjdtfg8Y3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTA5YTI4YmYtZDljOS0z M2ZkLTgyMGEtOTk3NjJjMWJlYjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBVpw1ysaTnSHTOQ2MNhhtXfZp/XSsEkezty1D6 TFci4Kr7CZ0GiG42tQPHbk0CbjwKR3LmpDeFbyqK5lqCbkYAUY/hsIbDi6SxcokF QOoSgC6h2NBjGRtH+C3Uob8BlC+PWDAtvzJbqanpQ5v3KkTsuJ/OgtnHhtOmy2pE tDhroYuadYza5sOYf7Er87l9JOE5tylzKCAFkbqkaq5ACNP9UdrYZMW49rxsfZNC w9bVG7LwUiCLaIhvUKPqxICKlpn/0aRRtNAZNdCIgN3/rXxqqNMu6AMyamkEkSaL 1uj36yjZTGX5pzoTS1aiOhSXYMc3WjLGe/eTfXc0JMljLqU0 -----END CERTIFICATE-----Generated at Fri Apr 11 23:56:52 2025 by rpki-client