$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1ed2970-2690-38aa-b433-78dfcb1be478.roa File: c1ed2970-2690-38aa-b433-78dfcb1be478.roa (raw, json) Hash identifier: hmASRlumf7szOoT7WU2O9v7QbTHvubNmGkN5DmxP0Xw= Subject key identifier: A4:3E:1B:D2:78:F4:4B:12:7F:0E:D6:F1:CA:BF:91:16:D0:5A:51:EE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584919419628F0DE828C2DB38800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1ed2970-2690-38aa-b433-78dfcb1be478.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 396546 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:96:28:f0:de:82:8c:2d:b3:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=3c127112-5428-4d21-8381-ab46d526802c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b0:b0:d0:43:07:23:7c:c3:f9:15:6a:b6:2a: 18:39:55:5d:f6:57:96:9e:36:ac:07:46:51:b0:47: 6d:29:ca:2e:f1:7d:56:00:3e:c0:1b:26:62:08:89: 96:fc:a8:07:f6:1e:76:80:2d:dd:77:8d:22:43:8d: b9:1e:19:37:6e:58:82:48:4c:f0:a4:4d:ff:d3:2c: bb:ca:36:c4:b6:99:b7:c2:d9:0f:f1:18:aa:97:e2: 22:e6:5f:dc:73:b7:1e:70:ea:34:a0:3f:49:7f:92: 9a:6b:55:80:bd:d8:dc:d0:b2:15:5d:f7:c4:fc:df: c3:84:2d:c3:68:a8:12:5a:00:69:2c:26:09:59:f5: db:fd:2b:bb:86:4a:6b:b4:e3:41:a7:95:46:fc:28: 73:b2:26:91:b4:00:f3:2d:07:0b:d5:59:af:5a:7d: 8a:47:fd:a0:6d:e7:65:cd:bd:c0:f0:3f:f3:e2:72: d7:09:13:74:b9:db:34:b2:9c:eb:d4:8d:a5:b1:22: 92:ed:e3:57:c1:ba:1b:56:eb:fe:03:07:57:76:e0: 67:f1:07:ac:a2:34:b5:22:92:52:95:88:e9:ab:f3: d3:eb:99:66:8d:36:47:23:cc:41:ab:63:38:fd:47: 1f:4f:84:2a:52:9c:a7:3c:96:e3:eb:82:08:01:13: 84:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:3E:1B:D2:78:F4:4B:12:7F:0E:D6:F1:CA:BF:91:16:D0:5A:51:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1ed2970-2690-38aa-b433-78dfcb1be478.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:34:b5:81:ca:32:23:b6:cb:c0:66:59:7b:a8:b5:6a:6e:16: e8:e1:18:8e:61:3b:7e:4c:e0:69:4d:d5:ae:6c:28:70:b7:b8: c0:00:8f:29:3b:d2:86:7a:26:68:7c:b9:83:60:85:6f:46:52: e8:5e:2e:88:f2:9f:ec:10:66:a1:fc:7a:53:a8:1f:72:52:f7: bc:84:0c:cf:45:a1:f8:e5:d1:3b:31:b3:56:42:39:d1:a2:f2: 07:4b:7b:7c:b3:07:1b:dd:c1:b6:09:03:81:81:d5:85:6e:be: 59:4c:e2:7e:35:4d:87:66:f9:c2:d6:e0:8f:84:3f:ba:11:23: a8:5f:a7:74:15:7d:d4:44:e2:de:9a:70:73:1a:90:39:83:03: 4b:93:ea:bb:c4:4a:6c:b0:4d:8a:d6:5e:00:89:5e:01:f8:73: ad:f7:27:1f:87:71:84:66:1f:0e:2b:d4:c2:ee:88:72:14:f4: e0:9e:9f:47:ee:4d:4e:4c:ab:12:8b:29:ef:db:e2:90:af:3d: 8f:c5:6e:2b:73:87:c7:83:6e:f7:5c:90:4a:72:7f:dc:c8:95: 55:58:33:70:e9:fa:36:79:48:94:1b:39:f6:37:e4:43:d0:ae: e3:e9:47:3b:2d:f7:fb:64:17:f2:54:6e:2a:b3:70:87:64:ce: d3:37:12:d9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkZQZYo8N6CjC2ziAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk M2MxMjcxMTItNTQyOC00ZDIxLTgzODEtYWI0NmQ1MjY4MDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7Cw0EMHI3zD+RVqtioYOVVd9leWnjasB0ZR sEdtKcou8X1WAD7AGyZiCImW/KgH9h52gC3dd40iQ425Hhk3bliCSEzwpE3/0yy7 yjbEtpm3wtkP8Riql+Ii5l/cc7cecOo0oD9Jf5Kaa1WAvdjc0LIVXffE/N/DhC3D aKgSWgBpLCYJWfXb/Su7hkprtONBp5VG/ChzsiaRtADzLQcL1VmvWn2KR/2gbedl zb3A8D/z4nLXCRN0uds0spzr1I2lsSKS7eNXwbobVuv+AwdXduBn8QesojS1IpJS lYjpq/PT65lmjTZHI8xBq2M4/UcfT4QqUpynPJbj64IIAROEHwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKQ+G9J49EsSfw7W8cq/kRbQWlHuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzFlZDI5NzAtMjY5MC0z OGFhLWI0MzMtNzhkZmNiMWJlNDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBjNLWByjIjtsvAZll7qLVqbhbo4RiOYTt+TOBp TdWubChwt7jAAI8pO9KGeiZofLmDYIVvRlLoXi6I8p/sEGah/HpTqB9yUve8hAzP RaH45dE7MbNWQjnRovIHS3t8swcb3cG2CQOBgdWFbr5ZTOJ+NU2HZvnC1uCPhD+6 ESOoX6d0FX3UROLemnBzGpA5gwNLk+q7xEpssE2K1l4AiV4B+HOt9ycfh3GEZh8O K9TC7ohyFPTgnp9H7k1OTKsSiynv2+KQrz2PxW4rc4fHg273XJBKcn/cyJVVWDNw 6fo2eUiUGzn2N+RD0K7j6Uc7Lff7ZBfyVG4qs3CHZM7TNxLZ -----END CERTIFICATE-----Generated at Sat Apr 12 01:14:59 2025 by rpki-client