$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a887a1c7-caec-37b2-b1cd-1a478b99d72c.roa File: a887a1c7-caec-37b2-b1cd-1a478b99d72c.roa (raw, json) Hash identifier: 4vrR9v6EpDiqPKXjYC0pM6jm5yeICULZ+DLDm/x1A3Q= Subject key identifier: 50:3C:FC:5D:6A:B8:00:22:FE:62:83:88:85:E6:2E:4C:D6:6E:A9:77 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848F9268D91B5E3C38FEC7EBE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a887a1c7-caec-37b2-b1cd-1a478b99d72c.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 397204 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:8d:91:b5:e3:c3:8f:ec:7e:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=9bb79843-992f-4190-84c1-be8f96e56e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d9:b6:23:78:fe:4f:20:23:26:79:89:90:ac: 4f:d7:86:cb:6a:c7:03:6e:32:8e:61:37:a9:bd:9d: 4c:ea:60:19:34:0c:66:6a:3f:a5:82:96:d6:12:35: db:48:3c:4d:fb:19:53:57:dc:63:0c:fe:99:1e:36: c3:58:4b:a8:76:8a:4b:39:6c:78:2f:0c:7a:0e:bb: 89:28:b4:f9:76:30:db:78:84:01:48:7b:7f:33:ed: cc:36:4b:01:29:6d:14:37:a8:4b:fc:44:08:08:af: 6f:60:83:1c:a3:94:9d:7a:c9:51:de:ad:77:a6:60: 35:31:56:81:43:2e:76:43:06:00:68:a5:08:fe:66: e0:b8:9e:bc:59:95:08:96:0f:fb:64:09:24:e4:a2: 1b:86:9c:c5:b0:8c:44:69:2c:02:64:7d:34:bd:02: e7:c9:28:df:48:c2:00:e1:a9:02:3b:bd:2e:89:b1: 41:87:01:0d:0d:89:b0:07:7b:1b:9d:f3:1d:aa:fe: f9:89:3b:5a:af:3e:a1:8b:96:3d:a8:9a:e9:e7:82: e9:5e:c7:28:cb:39:0f:8b:f3:91:82:43:89:67:93: a2:47:21:af:eb:0c:1a:1a:0e:f3:66:d2:11:c7:2f: 6d:e8:38:ac:1a:bd:cd:0c:5b:64:03:27:91:4a:38: 52:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:3C:FC:5D:6A:B8:00:22:FE:62:83:88:85:E6:2E:4C:D6:6E:A9:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a887a1c7-caec-37b2-b1cd-1a478b99d72c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:d7:54:0b:57:b1:7a:ae:76:9b:f9:0e:d6:a3:fe:c4:ec:da: 27:09:f0:ab:12:f0:22:25:87:5d:a0:33:02:b9:f2:d5:e2:bf: 51:16:7f:7d:fa:80:2a:0d:f6:ba:90:4d:58:38:7e:ff:41:30: 1e:52:8e:aa:e8:9c:ab:d5:a1:76:c3:51:7f:4a:ec:45:fb:5d: b5:59:38:ff:e0:8f:ec:ad:d7:e4:2b:a9:df:02:ab:34:51:a8: e2:13:74:90:d8:26:b2:9a:0e:3b:7c:ca:dc:5d:0b:53:81:57: ae:47:d0:f0:02:f4:73:69:2c:8d:66:6b:17:60:5a:1d:9b:a2: 3e:f4:9a:b4:9f:a5:1b:04:b1:a2:4a:8c:81:65:ba:c7:d3:a4: 9c:7c:ab:96:a9:44:85:e3:e5:d8:02:02:d6:c9:b6:c0:8c:5d: 3a:3a:e6:62:e4:6d:cf:b6:f3:7b:a6:7d:cb:9f:4c:7e:0e:8e: 04:a6:d0:a7:68:21:1b:14:bb:45:36:8a:ea:44:47:e2:35:e4: 45:11:1e:82:e1:85:83:da:c8:91:0d:5e:3b:d5:b3:d8:83:2f: 98:57:e1:c7:97:22:60:48:83:16:c6:08:1a:03:e6:e6:8f:d6: cf:6c:d5:cf:75:db:54:33:13:7b:72:30:e3:8b:9e:b7:77:66: a2:95:0a:2b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEj5Jo2RtePDj+x+voAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk OWJiNzk4NDMtOTkyZi00MTkwLTg0YzEtYmU4Zjk2ZTU2ZTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9m2I3j+TyAjJnmJkKxP14bLascDbjKOYTep vZ1M6mAZNAxmaj+lgpbWEjXbSDxN+xlTV9xjDP6ZHjbDWEuodopLOWx4Lwx6DruJ KLT5djDbeIQBSHt/M+3MNksBKW0UN6hL/EQICK9vYIMco5SdeslR3q13pmA1MVaB Qy52QwYAaKUI/mbguJ68WZUIlg/7ZAkk5KIbhpzFsIxEaSwCZH00vQLnySjfSMIA 4akCO70uibFBhwENDYmwB3sbnfMdqv75iTtarz6hi5Y9qJrp54LpXscoyzkPi/OR gkOJZ5OiRyGv6wwaGg7zZtIRxy9t6DisGr3NDFtkAyeRSjhSOQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFA8/F1quAAi/mKDiIXmLkzWbql3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTg4N2ExYzctY2FlYy0z N2IyLWIxY2QtMWE0NzhiOTlkNzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAb11QLV7F6rnab+Q7Wo/7E7NonCfCrEvAiJYdd oDMCufLV4r9RFn99+oAqDfa6kE1YOH7/QTAeUo6q6Jyr1aF2w1F/SuxF+121WTj/ 4I/srdfkK6nfAqs0UajiE3SQ2Caymg47fMrcXQtTgVeuR9DwAvRzaSyNZmsXYFod m6I+9Jq0n6UbBLGiSoyBZbrH06ScfKuWqUSF4+XYAgLWybbAjF06OuZi5G3PtvN7 pn3Ln0x+Do4EptCnaCEbFLtFNorqREfiNeRFER6C4YWD2siRDV471bPYgy+YV+HH lyJgSIMWxggaA+bmj9bPbNXPddtUMxN7cjDji563d2ailQor -----END CERTIFICATE-----Generated at Fri Apr 11 23:49:40 2025 by rpki-client