$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2d29b5a-61db-3a4f-97db-87e7ff925c90.roa File: a2d29b5a-61db-3a4f-97db-87e7ff925c90.roa (raw, json) Hash identifier: 5vdAODN09ZOa+5uuvr4VCMa4LC5HBd4cDG/sXgw4rYY= Subject key identifier: E8:72:FD:DB:4C:DA:B4:A1:3D:5A:8E:02:DE:6A:DF:DE:77:73:0A:02 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E59BE0C8F7135712A0931280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2d29b5a-61db-3a4f-97db-87e7ff925c90.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 396604 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:e0:c8:f7:13:57:12:a0:93:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=d11af703-772d-4b78-b835-33b25057b9af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:13:6b:96:68:cd:cf:76:c9:5a:fb:f9:2e:91: 49:b6:f6:57:d7:22:80:b6:0e:cd:7f:47:6d:97:d4: b4:cd:05:06:bd:99:92:da:85:9e:29:60:56:5f:e6: a2:60:50:e6:8e:bd:c6:f2:c4:8c:8f:b6:83:31:e4: 60:51:f1:94:c6:14:2e:28:76:1b:9e:08:57:40:5e: d3:c7:9d:6d:82:d6:a9:16:e3:d0:0f:b1:e3:53:1e: 46:9c:5f:3d:15:14:43:81:39:d0:97:c8:50:35:4a: a2:7f:00:7d:39:93:cd:04:31:d8:22:d1:19:a0:50: 65:f9:98:eb:b3:6d:f7:b7:93:a1:ba:18:26:2f:c6: 87:e8:c7:57:bb:0f:15:2a:73:ab:3e:84:9f:a4:24: b8:62:09:2b:cb:54:e8:89:c2:43:75:43:d8:48:5d: 74:db:10:8c:b5:89:4e:86:e1:c1:83:42:71:7b:3b: 41:ba:83:80:72:23:21:20:b7:26:f1:a6:ba:15:d5: ce:88:da:df:de:b1:4a:c1:5a:3b:6c:b3:e4:67:37: 44:60:f6:cc:cc:4a:3f:5b:41:c3:9c:27:cf:03:c2: d5:fb:81:b3:6f:60:8a:65:13:b2:a3:c3:4b:10:25: 52:d5:46:f1:1e:ad:5a:7a:b1:a9:0b:80:47:6f:1e: a3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:72:FD:DB:4C:DA:B4:A1:3D:5A:8E:02:DE:6A:DF:DE:77:73:0A:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2d29b5a-61db-3a4f-97db-87e7ff925c90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:9b:ed:a5:4d:ca:87:f1:ec:1a:97:21:dc:2e:39:fd:3f:b1: f3:72:5b:28:4e:50:86:e8:d2:c5:d8:fc:05:42:18:31:99:a1: 92:8a:11:4a:eb:d8:80:df:9c:48:ed:64:35:83:0c:db:71:74: b6:6c:98:a9:31:7a:e5:ef:f6:80:9c:f0:29:42:79:42:70:5d: 8e:5c:5a:3e:79:e1:9f:19:3b:dd:34:e3:47:79:92:33:b8:4f: dc:8f:74:c1:95:c9:f6:8c:3e:d3:19:98:bc:12:14:48:24:51: c6:3b:5a:cd:9a:fd:da:aa:1c:68:f0:26:6f:0c:2b:da:a5:07: a0:81:8e:3e:1a:fa:f3:85:1f:5f:12:85:c2:85:c2:5f:f6:83: 45:90:2d:08:1c:64:54:e7:0b:3c:62:aa:44:bf:41:a7:5a:d4: ac:0b:c3:b8:f4:99:18:30:5a:ac:6b:4c:9c:fb:9c:18:51:3f: a2:25:a1:27:ac:7c:a7:cb:6e:8d:d7:a4:7a:59:50:10:ba:46: 10:05:1d:b1:b4:a7:65:5b:13:50:11:3d:e5:1e:2b:7c:18:74: fb:03:e8:64:b3:0c:3f:cc:95:88:43:32:60:c6:79:7a:8b:74: d8:3f:9a:a2:7e:50:93:f5:04:6d:4c:ff:81:72:e8:1e:3b:73: 05:15:2a:10 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjlm+DI9xNXEqCTEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZDExYWY3MDMtNzcyZC00Yjc4LWI4MzUtMzNiMjUwNTdiOWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshNrlmjNz3bJWvv5LpFJtvZX1yKAtg7Nf0dt l9S0zQUGvZmS2oWeKWBWX+aiYFDmjr3G8sSMj7aDMeRgUfGUxhQuKHYbnghXQF7T x51tgtapFuPQD7HjUx5GnF89FRRDgTnQl8hQNUqifwB9OZPNBDHYItEZoFBl+Zjr s233t5OhuhgmL8aH6MdXuw8VKnOrPoSfpCS4Ygkry1ToicJDdUPYSF102xCMtYlO huHBg0JxeztBuoOAciMhILcm8aa6FdXOiNrf3rFKwVo7bLPkZzdEYPbMzEo/W0HD nCfPA8LV+4Gzb2CKZROyo8NLECVS1UbxHq1aerGpC4BHbx6jCwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOhy/dtM2rShPVqOAt5q3953cwoCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTJkMjliNWEtNjFkYi0z YTRmLTk3ZGItODdlN2ZmOTI1YzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAhm+2lTcqH8ewalyHcLjn9P7HzclsoTlCG6NLF 2PwFQhgxmaGSihFK69iA35xI7WQ1gwzbcXS2bJipMXrl7/aAnPApQnlCcF2OXFo+ eeGfGTvdNONHeZIzuE/cj3TBlcn2jD7TGZi8EhRIJFHGO1rNmv3aqhxo8CZvDCva pQeggY4+GvrzhR9fEoXChcJf9oNFkC0IHGRU5ws8YqpEv0GnWtSsC8O49JkYMFqs a0yc+5wYUT+iJaEnrHyny26N16R6WVAQukYQBR2xtKdlWxNQET3lHit8GHT7A+hk sww/zJWIQzJgxnl6i3TYP5qiflCT9QRtTP+BcugeO3MFFSoQ -----END CERTIFICATE-----Generated at Sat Apr 12 01:33:39 2025 by rpki-client