$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b63c2f9f-4f33-3497-bf0c-d59818d043fc.roa File: b63c2f9f-4f33-3497-bf0c-d59818d043fc.roa (raw, json) Hash identifier: nMbSLXwe9twQ2YhfTbN2FXfZTx6OsKMB6z8GPa4kGWM= Subject key identifier: B4:44:88:67:97:30:50:D3:45:C8:3C:BF:9D:B4:A0:1C:86:5B:29:4D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584975446D4234E38F2D46910F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b63c2f9f-4f33-3497-bf0c-d59818d043fc.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 396564 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:6d:42:34:e3:8f:2d:46:91:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=1f54294b-85d4-4b95-92b9-3c9715818a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a0:ac:8b:b3:c3:d7:f4:89:30:80:d5:58:85: 0b:27:53:25:9a:05:a4:f6:57:c8:95:4c:92:ed:78: 36:46:28:33:7f:d5:d0:05:51:12:43:99:38:a2:57: e6:27:af:2c:93:59:8a:9b:5f:5a:23:54:2b:a0:19: 2c:ce:28:0d:c6:2c:06:b1:89:23:02:3f:d3:e2:54: d8:e2:ff:dd:c9:4c:b5:ce:f4:d1:48:ee:74:b9:cd: e7:7e:4a:bc:2f:67:b8:0b:78:bb:ab:a8:22:8a:ae: 82:d3:2f:f1:82:1f:d2:cf:b5:6c:45:92:8b:33:2e: 61:a9:e1:64:80:8a:8d:cb:ab:c2:1b:2d:5a:82:db: b3:57:bf:eb:7b:e7:9a:85:2e:f1:10:65:3b:2c:86: ae:69:f0:13:4d:1e:58:6e:44:cb:a8:3c:51:69:59: 2f:ca:76:4a:5e:a7:cf:71:32:b0:61:9c:f9:09:4b: 5a:29:67:a1:02:e4:d1:67:03:f0:f0:0d:b4:fb:81: 38:3b:1a:a6:22:f0:d8:1c:64:0a:a9:58:a0:77:43: e0:cc:be:88:1d:a6:a5:92:f4:20:5d:38:62:4b:f6: 69:65:ec:f0:13:ea:ee:30:3b:2b:1c:a3:41:49:79: e5:f7:24:32:15:e8:09:03:ef:48:67:bd:28:0a:14: 91:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:44:88:67:97:30:50:D3:45:C8:3C:BF:9D:B4:A0:1C:86:5B:29:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b63c2f9f-4f33-3497-bf0c-d59818d043fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:a3:04:c1:5f:1b:7f:8e:91:b4:4b:a1:c6:95:cf:f0:02:12: 9d:1f:61:62:65:fc:4f:aa:b7:c5:57:6a:91:22:2e:5e:2c:66: 2c:c9:45:c8:c6:c1:b9:d6:07:17:5a:fc:31:42:4b:be:dd:03: dd:8a:6b:e4:30:51:91:7a:b1:43:08:7b:df:c4:f0:78:c7:8e: 86:cd:96:14:41:05:da:bb:46:5b:c6:e4:b3:00:ff:bc:35:6c: 7f:8e:f1:ab:63:38:58:64:67:38:04:7d:f3:2a:f1:71:3f:a7: 4f:df:1a:a2:50:82:7a:dc:f3:5f:8b:c1:26:15:f3:a2:d3:b5: ec:52:76:32:f8:94:bc:30:10:34:bb:44:87:a3:e2:e9:6e:a5: 3b:a4:b6:38:fe:5e:80:c3:e4:ce:c7:de:92:ec:11:e4:b8:fb: 71:3a:ac:33:12:c5:42:5c:28:2e:9b:09:0c:39:94:fa:b0:2a: 87:cf:60:de:06:ae:88:88:13:c8:25:bf:db:af:85:5d:00:18: 04:53:18:15:d9:83:e1:7c:87:02:3d:ce:88:4c:e8:00:2c:5a: 5b:5d:74:60:1d:37:3c:d7:1c:99:e2:ed:6c:3c:fd:da:8d:91: 2a:ae:e0:66:de:e9:0c:05:4f:d5:88:64:d1:43:c9:56:b2:7f: 93:71:f9:1c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEl1RG1CNOOPLUaRDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk MWY1NDI5NGItODVkNC00Yjk1LTkyYjktM2M5NzE1ODE4YTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKCsi7PD1/SJMIDVWIULJ1MlmgWk9lfIlUyS 7Xg2Rigzf9XQBVESQ5k4olfmJ68sk1mKm19aI1QroBkszigNxiwGsYkjAj/T4lTY 4v/dyUy1zvTRSO50uc3nfkq8L2e4C3i7q6giiq6C0y/xgh/Sz7VsRZKLMy5hqeFk gIqNy6vCGy1agtuzV7/re+eahS7xEGU7LIauafATTR5YbkTLqDxRaVkvynZKXqfP cTKwYZz5CUtaKWehAuTRZwPw8A20+4E4OxqmIvDYHGQKqVigd0PgzL6IHaalkvQg XThiS/ZpZezwE+ruMDsrHKNBSXnl9yQyFegJA+9IZ70oChSRaQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLREiGeXMFDTRcg8v520oByGWylNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjYzYzJmOWYtNGYzMy0z NDk3LWJmMGMtZDU5ODE4ZDA0M2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAXowTBXxt/jpG0S6HGlc/wAhKdH2FiZfxPqrfF V2qRIi5eLGYsyUXIxsG51gcXWvwxQku+3QPdimvkMFGRerFDCHvfxPB4x46GzZYU QQXau0ZbxuSzAP+8NWx/jvGrYzhYZGc4BH3zKvFxP6dP3xqiUIJ63PNfi8EmFfOi 07XsUnYy+JS8MBA0u0SHo+LpbqU7pLY4/l6Aw+TOx96S7BHkuPtxOqwzEsVCXCgu mwkMOZT6sCqHz2DeBq6IiBPIJb/br4VdABgEUxgV2YPhfIcCPc6ITOgALFpbXXRg HTc81xyZ4u1sPP3ajZEqruBm3ukMBU/ViGTRQ8lWsn+Tcfkc -----END CERTIFICATE-----Generated at Tue Apr 15 19:53:49 2025 by rpki-client