$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b35eb4d8-0103-311a-b7ef-4256a2052aee.roa File: b35eb4d8-0103-311a-b7ef-4256a2052aee.roa (raw, json) Hash identifier: l1SuCw1Ym9WHeXECa7n0qsfXDPlzI1xm2ylrSJdfaqc= Subject key identifier: 31:DD:65:24:C5:22:B0:24:88:D6:6F:71:96:C9:67:02:B8:CA:72:B0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849754470C94FA9C60C9641A7E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b35eb4d8-0103-311a-b7ef-4256a2052aee.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 396570 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:70:c9:4f:a9:c6:0c:96:41:a7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=fee0e844-cd17-4939-a21c-8b88ec26b0fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4f:ac:d8:50:af:5d:d2:c8:a8:06:5d:bf:37: 9a:73:d1:2d:3b:ad:34:5b:a1:37:4f:a3:fe:a5:ce: 25:01:4a:c7:23:97:04:b0:01:2f:c6:23:bd:5c:43: f5:39:09:a1:1b:e1:ab:d8:62:a4:49:bb:23:7d:95: f1:f0:29:7e:17:f2:45:2f:44:8f:80:ff:3b:03:b4: ed:4e:fb:d1:f4:ae:b7:21:b0:7a:c2:0f:28:df:85: 8e:cf:da:8d:2c:d3:0c:e0:ad:63:68:70:6e:71:83: 16:47:3a:93:e7:5b:1f:40:18:7f:47:78:62:42:f6: de:29:4f:cf:9e:bf:b1:09:25:8b:8b:00:2a:36:01: 4b:d5:54:34:b4:d4:b8:c7:1b:98:0e:f7:d7:ca:be: 4d:49:c0:85:41:53:05:f2:39:a5:65:e1:82:e0:aa: 8b:92:05:a4:3f:61:c1:af:7c:98:53:e9:8f:29:9c: e8:fc:cd:30:cf:9d:1f:8e:85:23:4b:a4:cb:0a:79: 76:f2:ba:72:5a:89:95:dd:0f:c1:77:a2:ce:a2:a8: 93:a8:41:8d:b2:5a:c4:11:35:f0:e8:11:90:a4:48: 31:59:aa:56:14:8d:5b:5a:18:81:2b:9e:47:a2:e6: f0:61:5d:86:54:da:40:e1:b8:f0:38:1c:c8:72:57: 3f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DD:65:24:C5:22:B0:24:88:D6:6F:71:96:C9:67:02:B8:CA:72:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b35eb4d8-0103-311a-b7ef-4256a2052aee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:eb:b0:e5:c7:b3:41:3e:0c:5a:bb:23:1e:45:87:ba:98:d1: 81:4a:b6:9a:2f:10:71:c2:b4:0e:7a:87:3c:e0:6f:ed:55:2f: ee:01:09:ef:85:74:fe:c5:1e:68:7c:84:d5:5b:b1:c5:ee:90: 12:65:4a:5d:5e:7b:58:58:b5:6b:c4:2d:59:99:95:f7:ae:e6: 1b:5c:4b:c1:36:7a:fc:59:00:5a:72:af:38:90:77:ab:ee:13: 71:c5:70:2a:18:6d:92:0d:75:36:8e:a1:67:c1:46:bb:c3:87: 5b:52:02:d4:ff:85:14:da:1a:44:35:d6:68:89:c4:6e:f3:1c: db:b5:3e:ba:54:9b:fd:d2:60:57:f0:fa:5f:e8:2f:f3:06:96: 6f:6e:e3:b1:09:5f:bd:6b:e2:7d:49:f2:d0:7f:05:a4:6f:0a: 96:a9:6a:d2:0f:f1:61:b8:e9:b8:86:a4:6b:23:5c:8a:ac:4f: c4:71:6a:18:d0:b4:b1:2c:7d:40:72:d3:db:bd:a8:f8:d0:9a: 28:a5:e0:f9:af:26:50:f1:b2:b2:1b:ee:3e:34:35:d6:15:4c: e5:f2:e8:c3:b3:61:28:20:7f:5e:45:2b:34:54:c6:8c:9e:21: e3:14:3a:e4:99:9e:78:af:75:f0:e4:3f:ad:51:cb:b8:83:ef: 06:c2:b9:c1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEl1RHDJT6nGDJZBp+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk ZmVlMGU4NDQtY2QxNy00OTM5LWEyMWMtOGI4OGVjMjZiMGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0+s2FCvXdLIqAZdvzeac9EtO600W6E3T6P+ pc4lAUrHI5cEsAEvxiO9XEP1OQmhG+Gr2GKkSbsjfZXx8Cl+F/JFL0SPgP87A7Tt TvvR9K63IbB6wg8o34WOz9qNLNMM4K1jaHBucYMWRzqT51sfQBh/R3hiQvbeKU/P nr+xCSWLiwAqNgFL1VQ0tNS4xxuYDvfXyr5NScCFQVMF8jmlZeGC4KqLkgWkP2HB r3yYU+mPKZzo/M0wz50fjoUjS6TLCnl28rpyWomV3Q/Bd6LOoqiTqEGNslrEETXw 6BGQpEgxWapWFI1bWhiBK55HoubwYV2GVNpA4bjwOBzIclc/pQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDHdZSTFIrAkiNZvcZbJZwK4ynKwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjM1ZWI0ZDgtMDEwMy0z MTFhLWI3ZWYtNDI1NmEyMDUyYWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAu67Dlx7NBPgxauyMeRYe6mNGBSraaLxBxwrQO eoc84G/tVS/uAQnvhXT+xR5ofITVW7HF7pASZUpdXntYWLVrxC1ZmZX3ruYbXEvB Nnr8WQBacq84kHer7hNxxXAqGG2SDXU2jqFnwUa7w4dbUgLU/4UU2hpENdZoicRu 8xzbtT66VJv90mBX8Ppf6C/zBpZvbuOxCV+9a+J9SfLQfwWkbwqWqWrSD/FhuOm4 hqRrI1yKrE/EcWoY0LSxLH1ActPbvaj40JoopeD5ryZQ8bKyG+4+NDXWFUzl8ujD s2EoIH9eRSs0VMaMniHjFDrkmZ54r3Xw5D+tUcu4g+8GwrnB -----END CERTIFICATE-----Generated at Sat Apr 12 02:16:05 2025 by rpki-client