$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b99dd4a8-503c-32d4-9964-02e419491b81.roa File: b99dd4a8-503c-32d4-9964-02e419491b81.roa (raw, json) Hash identifier: H/aX0pYWPno4pkChkYPK6MS/ep8UsBX+bomTTCkM1Cg= Subject key identifier: C5:8B:BC:20:61:54:02:78:A9:71:FE:12:18:52:62:6A:66:1E:E8:45 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E59BD9B399FC6B7734F8FBE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b99dd4a8-503c-32d4-9964-02e419491b81.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 396564 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:d9:b3:99:fc:6b:77:34:f8:fb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=bb3dd48a-8892-44fa-96e4-073cfa0b7c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b5:e7:ef:a5:83:11:cb:db:a0:13:72:a0:10: b1:eb:0d:d1:be:b5:7a:2a:40:71:6b:ed:d9:d5:90: 9c:69:b6:ce:32:87:9b:7c:0b:5b:57:1a:67:a3:38: 87:4d:4f:23:72:fe:62:5c:8d:e5:d6:47:98:46:8c: 23:37:78:ca:fd:40:6f:b4:e6:c8:8c:cd:f7:7a:e9: ec:0c:5b:a3:5f:f5:16:b9:78:1a:9e:c7:7d:1f:0a: d2:02:88:bd:6e:5f:c4:e9:ab:b2:24:4d:da:b7:92: d0:8f:63:c9:b7:0e:3e:8d:10:c1:40:ed:0a:dd:97: 8c:b0:af:81:9d:f8:1a:3b:1e:54:88:1d:40:7e:2a: 63:00:e7:0c:f4:43:50:6d:8a:67:f5:74:b6:fa:a3: 2b:96:52:71:45:b1:d1:ad:c1:f0:93:a8:26:21:7b: 1f:f0:16:1c:c0:12:d4:ec:1d:d9:63:aa:ab:d0:32: 72:0b:9b:6b:ca:ac:f8:10:d1:14:98:de:c3:b5:73: f6:65:2a:b3:8b:6f:70:7d:e7:0f:b2:c3:71:14:ae: 11:72:8e:e7:a3:53:51:df:0a:db:e0:04:da:b1:ab: e0:4b:22:8a:c8:78:e3:2f:d4:00:2b:d6:c1:8b:b9: 8c:de:4c:bb:0c:23:c0:12:fa:48:32:cd:9a:e1:51: ac:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8B:BC:20:61:54:02:78:A9:71:FE:12:18:52:62:6A:66:1E:E8:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b99dd4a8-503c-32d4-9964-02e419491b81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:1a:48:44:4d:ad:8a:30:31:69:45:83:fb:ca:10:8b:14:3f: 2e:cc:cf:76:99:dd:76:58:b6:8e:47:7a:cc:7e:a4:3d:fe:86: 30:aa:b9:99:0e:13:e1:ab:54:47:c5:52:9a:47:66:52:b6:e3: 25:9d:4a:95:a9:69:ed:57:fa:ae:1f:0e:54:48:5e:ea:5a:b6: 18:53:74:13:4c:9b:15:dc:65:81:a9:12:1d:8f:e5:27:a5:3a: 20:7b:3d:2c:a3:49:46:8a:4b:93:b2:81:7a:b6:27:48:ed:9c: 8d:48:ec:cd:8c:60:1f:3d:b4:80:91:2c:13:64:26:34:20:13: d3:57:7e:5b:47:c0:b9:9e:10:38:84:77:2f:98:14:59:4c:2a: eb:44:b2:aa:dc:c8:45:95:0a:d8:e3:d6:26:6b:51:fe:fd:37: 41:6a:7b:08:3a:00:46:bc:43:fd:25:a6:61:b6:61:fc:1c:0b: 21:7d:b6:3d:9b:65:ff:f9:e7:dd:82:4b:dc:72:d6:65:bc:39: 3d:5e:b1:00:bd:b6:fa:5c:11:6c:86:24:45:10:44:1e:07:3e: d4:a6:be:ac:e3:2b:9a:92:a0:5d:44:18:32:06:17:8d:7e:9e: 99:a3:2f:6d:f3:7e:f5:49:20:29:e8:81:82:54:61:73:a2:28: 67:f5:b7:ba -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjlm9mzmfxrdzT4++AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk YmIzZGQ0OGEtODg5Mi00NGZhLTk2ZTQtMDczY2ZhMGI3YzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurXn76WDEcvboBNyoBCx6w3RvrV6KkBxa+3Z 1ZCcabbOMoebfAtbVxpnoziHTU8jcv5iXI3l1keYRowjN3jK/UBvtObIjM33euns DFujX/UWuXgansd9HwrSAoi9bl/E6auyJE3at5LQj2PJtw4+jRDBQO0K3ZeMsK+B nfgaOx5UiB1AfipjAOcM9ENQbYpn9XS2+qMrllJxRbHRrcHwk6gmIXsf8BYcwBLU 7B3ZY6qr0DJyC5tryqz4ENEUmN7DtXP2ZSqzi29wfecPssNxFK4Rco7no1NR3wrb 4ATasavgSyKKyHjjL9QAK9bBi7mM3ky7DCPAEvpIMs2a4VGsMQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMWLvCBhVAJ4qXH+EhhSYmpmHuhFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjk5ZGQ0YTgtNTAzYy0z MmQ0LTk5NjQtMDJlNDE5NDkxYjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAoGkhETa2KMDFpRYP7yhCLFD8uzM92md12WLaO R3rMfqQ9/oYwqrmZDhPhq1RHxVKaR2ZStuMlnUqVqWntV/quHw5USF7qWrYYU3QT TJsV3GWBqRIdj+UnpTogez0so0lGikuTsoF6tidI7ZyNSOzNjGAfPbSAkSwTZCY0 IBPTV35bR8C5nhA4hHcvmBRZTCrrRLKq3MhFlQrY49Yma1H+/TdBansIOgBGvEP9 JaZhtmH8HAshfbY9m2X/+efdgkvcctZlvDk9XrEAvbb6XBFshiRFEEQeBz7Upr6s 4yuakqBdRBgyBheNfp6Zoy9t8371SSAp6IGCVGFzoihn9be6 -----END CERTIFICATE-----Generated at Fri Apr 11 23:49:59 2025 by rpki-client