$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4ab9c91-5278-3fcd-9b6f-6b2c9b5db42a.roa File: c4ab9c91-5278-3fcd-9b6f-6b2c9b5db42a.roa (raw, json) Hash identifier: hqSTPXek64V7mK7XeCTId9GuJiV/zGwFFjtn/hQshiw= Subject key identifier: 09:7A:C2:17:CF:18:B0:58:E1:17:2E:1E:B1:82:92:30:83:3E:DA:F6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E59BE225845BA2F02EF76FC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4ab9c91-5278-3fcd-9b6f-6b2c9b5db42a.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 396602 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:e2:25:84:5b:a2:f0:2e:f7:6f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=84b2f7d5-e007-4eee-8f13-79a1cf4fc27f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e0:39:70:e5:34:cc:e4:78:dd:6d:83:2e:1f: 22:87:f1:36:3b:51:85:80:dd:40:8f:e6:1e:98:f8: bc:24:fb:9e:32:62:6f:a8:bb:5c:70:22:a1:65:4f: 54:66:2d:46:5e:1a:15:88:ed:d2:4b:c1:f0:17:d5: 44:5a:39:d0:e3:10:9f:13:c3:de:c4:9e:72:17:5d: 8f:1b:ea:65:45:30:08:0f:b8:95:12:c1:5e:b1:85: cc:a2:f3:c4:a1:be:98:07:9a:00:bd:8a:c1:da:a4: 27:b9:c6:09:e4:01:5c:a8:fa:a5:46:33:ba:56:6e: 94:3c:a2:90:a4:4b:d5:ff:63:1c:03:39:4c:7d:4e: 3f:bf:3b:bd:b2:0e:ef:1f:3e:44:39:d8:25:e2:d7: 34:b7:07:b3:a6:c1:49:6b:2d:74:fc:46:cf:12:e8: 47:62:ab:3d:aa:10:cf:95:30:23:46:97:9f:b2:af: 4f:14:97:95:09:69:a3:5c:da:7d:fa:05:e6:7d:48: d6:df:e8:8b:a7:5e:16:9d:9f:c2:9d:4b:4c:f8:ec: fb:70:20:76:4f:54:93:9c:1e:f4:ea:a8:e9:21:43: 7c:9d:ed:4f:89:9c:87:28:04:72:18:4b:2b:8d:7f: d6:1a:b3:50:54:41:92:e5:80:51:3b:74:c3:8d:59: 60:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7A:C2:17:CF:18:B0:58:E1:17:2E:1E:B1:82:92:30:83:3E:DA:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4ab9c91-5278-3fcd-9b6f-6b2c9b5db42a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d4:5e:56:f0:09:fd:15:7e:5d:68:7d:b7:9d:07:55:04:37: f2:47:33:12:ff:96:a1:2c:2d:04:56:96:cc:72:3c:fd:dd:24: 6c:aa:bf:ab:27:45:03:64:ff:7e:ff:53:1b:fd:f1:8f:5d:6e: 7a:36:ff:6c:db:e2:56:1b:59:9c:d9:89:9a:58:cb:c9:42:07: 65:1f:ae:dc:db:6b:da:16:ee:d9:3b:91:13:15:31:99:b9:ca: cb:99:1a:8a:0a:e6:b8:ba:43:87:75:f9:51:c7:78:40:e5:dc: 34:00:20:83:57:d0:a2:0a:0b:3e:54:b0:c9:0a:d0:f8:d3:36: f4:d4:ad:a5:a1:c5:55:a3:1b:f9:df:9e:20:46:80:0c:fb:c8: a5:eb:eb:94:87:9d:7a:9e:8d:ab:14:00:e5:4c:cf:a1:cc:24: f5:83:92:d1:94:9f:1c:30:91:97:50:f8:e4:91:3d:c8:6b:77: d0:c9:06:78:2a:a8:68:7d:9d:82:25:31:1e:ac:74:ca:bd:6d: e8:3f:af:c1:df:2f:22:d1:f1:c2:aa:0b:d5:ea:9c:0d:1f:51: 3e:5c:eb:d6:67:84:80:9c:aa:7d:c2:25:c8:fa:5f:5e:b1:58: b1:4c:06:5c:4a:25:ab:18:72:ae:38:93:9b:a8:f6:aa:90:5e: 67:ff:3e:34 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjlm+IlhFui8C73b8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ODRiMmY3ZDUtZTAwNy00ZWVlLThmMTMtNzlhMWNmNGZjMjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuA5cOU0zOR43W2DLh8ih/E2O1GFgN1Aj+Ye mPi8JPueMmJvqLtccCKhZU9UZi1GXhoViO3SS8HwF9VEWjnQ4xCfE8PexJ5yF12P G+plRTAID7iVEsFesYXMovPEob6YB5oAvYrB2qQnucYJ5AFcqPqlRjO6Vm6UPKKQ pEvV/2McAzlMfU4/vzu9sg7vHz5EOdgl4tc0twezpsFJay10/EbPEuhHYqs9qhDP lTAjRpefsq9PFJeVCWmjXNp9+gXmfUjW3+iLp14WnZ/CnUtM+Oz7cCB2T1STnB70 6qjpIUN8ne1PiZyHKARyGEsrjX/WGrNQVEGS5YBRO3TDjVlgywIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAl6whfPGLBY4RcuHrGCkjCDPtr2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzRhYjljOTEtNTI3OC0z ZmNkLTliNmYtNmIyYzliNWRiNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA61F5W8An9FX5daH23nQdVBDfyRzMS/5ahLC0E VpbMcjz93SRsqr+rJ0UDZP9+/1Mb/fGPXW56Nv9s2+JWG1mc2YmaWMvJQgdlH67c 22vaFu7ZO5ETFTGZucrLmRqKCua4ukOHdflRx3hA5dw0ACCDV9CiCgs+VLDJCtD4 0zb01K2locVVoxv5354gRoAM+8il6+uUh516no2rFADlTM+hzCT1g5LRlJ8cMJGX UPjkkT3Ia3fQyQZ4KqhofZ2CJTEerHTKvW3oP6/B3y8i0fHCqgvV6pwNH1E+XOvW Z4SAnKp9wiXI+l9esVixTAZcSiWrGHKuOJObqPaqkF5n/z40 -----END CERTIFICATE-----Generated at Sat Apr 12 02:13:33 2025 by rpki-client