$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b036b9f0-9075-3a63-85b6-7e561c473f3c.roa File: b036b9f0-9075-3a63-85b6-7e561c473f3c.roa (raw, json) Hash identifier: WYSze5lov9mdgAb+Y4yOE45E4ZJdKLY/VE2ql8Q9Lnw= Subject key identifier: EF:ED:8F:A7:8A:24:97:5D:EA:85:B7:A4:62:49:A3:7D:B9:89:8E:91 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848F9268B95346DEF0F17A16540 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b036b9f0-9075-3a63-85b6-7e561c473f3c.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 396569 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:8b:95:34:6d:ef:0f:17:a1:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=89e7e62c-0845-4831-9ff1-6e846488c33b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dc:5f:b9:f0:06:ab:51:42:44:20:60:31:86: 4d:59:f3:d6:7a:46:41:c9:72:1b:f3:5b:07:d6:19: 80:de:09:f5:9b:3b:96:f7:62:64:dc:ca:86:50:40: 24:8f:2a:d3:ef:c7:b3:e8:fc:90:d4:49:f6:77:75: e2:3d:4f:6c:21:1d:c0:50:59:fa:5d:40:64:b5:fa: 75:18:1b:d5:ca:a6:1a:bb:2c:00:4b:45:6e:2a:54: 71:31:d5:23:5e:bd:1a:fa:c6:c1:95:af:30:b5:29: c8:9a:cc:30:59:06:47:a4:b3:ff:30:cd:48:b2:26: 51:56:60:9f:2b:d0:4a:31:73:cc:6f:1f:35:33:1b: cc:df:a7:bb:65:07:8f:60:db:1b:ea:e4:cf:ef:42: d6:42:56:9e:23:46:3a:4b:38:72:90:3d:15:c0:c7: dd:17:50:7c:48:60:8e:84:89:33:9d:09:7e:7a:ec: 8a:6a:80:1e:20:53:05:5d:b8:8d:8e:cc:c1:af:f5: 77:1a:f3:d3:43:e2:f5:63:cf:2e:cf:17:7b:96:21: 65:c6:ba:9e:84:3f:89:22:ec:c1:33:9b:b9:96:c4: 3a:da:c7:91:35:f4:6c:9f:fb:52:f3:68:4f:98:ee: de:ab:1d:39:ce:fa:f1:a6:cc:72:31:a4:06:6a:07: 68:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:ED:8F:A7:8A:24:97:5D:EA:85:B7:A4:62:49:A3:7D:B9:89:8E:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b036b9f0-9075-3a63-85b6-7e561c473f3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:3a:a1:af:91:f4:0b:c6:22:14:1b:79:16:53:cc:d3:11:36: 51:bd:2b:e8:14:24:0e:0c:ad:07:a4:a3:1b:0f:8e:35:0c:31: e8:ba:b7:ad:78:35:00:b1:c3:7e:2c:51:f0:fb:e3:fe:60:bb: 54:9a:bc:76:c5:73:bf:d1:20:c5:81:d7:96:39:a0:1e:30:3a: f0:44:45:c0:39:fa:a9:78:78:c1:69:7b:49:8e:12:8e:4b:61: d6:ce:f4:5b:cc:b1:b5:b1:24:3e:17:f1:e1:25:b7:0e:bd:68: e8:e7:a8:b4:1e:2d:9f:c5:c0:83:3a:df:d7:81:31:05:bd:33: d6:c6:18:18:e6:28:b1:31:07:15:e2:f0:ca:3f:6c:5d:9c:2c: 53:6a:34:84:23:21:b5:87:a3:93:26:51:b5:92:23:60:8a:13: b1:b8:7e:18:67:35:51:7a:58:8b:41:33:26:4b:fc:df:e5:58: 42:2c:14:59:a7:a9:4c:4c:ac:46:b5:7c:29:3a:a6:b6:17:86: f8:26:f9:5f:87:cb:8c:52:e4:4e:a3:f5:25:a1:7e:aa:53:12: 3e:ee:96:40:9c:87:7f:93:de:a2:66:7f:a7:28:72:76:9a:58: f0:41:8a:5d:de:c6:26:7d:54:ca:2a:8a:0d:41:28:e9:90:fb: 71:00:4d:01 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEj5JouVNG3vDxehZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ODllN2U2MmMtMDg0NS00ODMxLTlmZjEtNmU4NDY0ODhjMzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9xfufAGq1FCRCBgMYZNWfPWekZByXIb81sH 1hmA3gn1mzuW92Jk3MqGUEAkjyrT78ez6PyQ1En2d3XiPU9sIR3AUFn6XUBktfp1 GBvVyqYauywAS0VuKlRxMdUjXr0a+sbBla8wtSnImswwWQZHpLP/MM1IsiZRVmCf K9BKMXPMbx81MxvM36e7ZQePYNsb6uTP70LWQlaeI0Y6SzhykD0VwMfdF1B8SGCO hIkznQl+euyKaoAeIFMFXbiNjszBr/V3GvPTQ+L1Y88uzxd7liFlxrqehD+JIuzB M5u5lsQ62seRNfRsn/tS82hPmO7eqx05zvrxpsxyMaQGagdoYwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFO/tj6eKJJdd6oW3pGJJo325iY6RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjAzNmI5ZjAtOTA3NS0z YTYzLTg1YjYtN2U1NjFjNDczZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAPOqGvkfQLxiIUG3kWU8zTETZRvSvoFCQODK0H pKMbD441DDHoureteDUAscN+LFHw++P+YLtUmrx2xXO/0SDFgdeWOaAeMDrwREXA OfqpeHjBaXtJjhKOS2HWzvRbzLG1sSQ+F/HhJbcOvWjo56i0Hi2fxcCDOt/XgTEF vTPWxhgY5iixMQcV4vDKP2xdnCxTajSEIyG1h6OTJlG1kiNgihOxuH4YZzVReliL QTMmS/zf5VhCLBRZp6lMTKxGtXwpOqa2F4b4Jvlfh8uMUuROo/UloX6qUxI+7pZA nId/k96iZn+nKHJ2mljwQYpd3sYmfVTKKooNQSjpkPtxAE0B -----END CERTIFICATE-----Generated at Sun Apr 13 00:33:51 2025 by rpki-client