$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ca5ee824-d35b-357a-a812-50300fae06e0.roa File: ca5ee824-d35b-357a-a812-50300fae06e0.roa (raw, json) Hash identifier: FKU3Qh+2fN1eDHMH8pnu4kC5aKCJPZQr/ixnpN6BOOA= Subject key identifier: 99:69:63:E3:C0:D3:23:90:E9:B7:FB:1D:A8:D4:06:5E:BB:B2:A2:97 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584919419722D2B83CFECB0EDEA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ca5ee824-d35b-357a-a812-50300fae06e0.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 396541 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:97:22:d2:b8:3c:fe:cb:0e:de:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=40c4f91c-4d58-4cd3-8482-eebf4f41e2a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:55:d4:33:92:5f:9c:72:c5:61:c2:a9:b9:c6: 38:0d:32:3b:81:21:d3:68:ed:38:23:81:9e:e9:14: af:5f:2d:ab:78:52:10:10:d0:35:7d:67:37:e0:22: 20:b0:55:d1:fe:94:41:cc:65:bb:fd:7c:63:49:f3: 45:27:18:76:08:0e:04:70:29:8c:f1:2b:ac:f1:fa: 0b:80:22:c2:da:1d:24:7b:18:d7:11:0d:f2:da:b4: e4:3e:1b:bf:ca:a0:51:3d:49:bb:1c:21:20:bf:48: f8:61:cf:a2:7b:23:64:9b:5c:dc:f2:89:00:0b:3d: b1:26:84:df:3d:34:dc:a1:ff:e7:e8:a6:bf:c8:8c: a3:a8:48:88:98:e5:ae:ca:15:84:11:d3:b3:bd:9a: 24:c0:cb:66:ea:26:d9:4c:c0:c9:d4:3b:df:50:66: f2:3e:69:f4:24:ec:d5:d3:a4:55:fe:48:e9:63:56: 87:44:f5:65:19:cf:9e:aa:4b:b6:e3:f8:6b:dd:75: ac:1c:de:bc:32:89:61:a8:1d:76:9e:0a:83:ac:82: 76:97:2a:f3:4b:17:86:0b:8e:9f:54:15:30:49:c4: 87:8d:db:40:6b:7a:f2:49:06:2a:c8:06:56:86:48: a0:6e:67:8a:52:5c:c0:29:e1:dd:ab:5d:d9:64:d7: ae:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:69:63:E3:C0:D3:23:90:E9:B7:FB:1D:A8:D4:06:5E:BB:B2:A2:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ca5ee824-d35b-357a-a812-50300fae06e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:65:31:62:e6:c8:5a:4a:11:d0:a4:a5:7e:2d:c2:0d:7a:fb: 7c:7b:79:35:8d:bd:04:1f:97:ff:2f:c4:c7:36:08:4e:80:9c: e9:f6:fe:3a:a2:48:40:b7:b2:b0:63:9c:38:b9:d7:3a:47:d2: fe:40:57:d4:a4:d3:ce:ea:ec:d5:3f:2d:44:92:81:4f:cd:02: 02:f1:33:f3:bf:35:0c:a1:0c:3f:b1:66:20:33:f2:38:c6:e5: 14:79:fc:6a:78:b7:6b:31:61:db:d6:80:b0:08:e3:0c:54:91: 81:41:b1:19:f7:6e:77:02:4c:b7:36:ae:94:f1:3b:9f:0b:0b: 27:28:c4:b0:f1:c5:3f:98:42:9a:2b:cc:b9:f6:6c:27:81:f7: d9:59:21:a1:4d:fb:b7:9e:06:92:6c:cc:36:99:f9:1d:ce:5b: 48:78:78:ab:5e:f1:69:fc:44:f5:14:80:4a:ea:ea:72:ca:52: 0e:77:6a:d6:84:c9:21:7a:4b:5c:e1:da:79:0f:b1:aa:da:8b: fb:99:3e:97:81:c2:74:33:44:87:98:c2:17:de:e3:a5:44:42: c6:76:12:be:0d:e2:19:35:20:2d:11:57:04:3d:d8:95:c8:72: 02:c7:17:cd:d4:2e:e4:7c:7b:93:83:e2:7b:98:99:c4:f7:55: 38:64:10:82 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkZQZci0rg8/ssO3qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk NDBjNGY5MWMtNGQ1OC00Y2QzLTg0ODItZWViZjRmNDFlMmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFXUM5JfnHLFYcKpucY4DTI7gSHTaO04I4Ge 6RSvXy2reFIQENA1fWc34CIgsFXR/pRBzGW7/XxjSfNFJxh2CA4EcCmM8Sus8foL gCLC2h0kexjXEQ3y2rTkPhu/yqBRPUm7HCEgv0j4Yc+ieyNkm1zc8okACz2xJoTf PTTcof/n6Ka/yIyjqEiImOWuyhWEEdOzvZokwMtm6ibZTMDJ1DvfUGbyPmn0JOzV 06RV/kjpY1aHRPVlGc+eqku24/hr3XWsHN68MolhqB12ngqDrIJ2lyrzSxeGC46f VBUwScSHjdtAa3rySQYqyAZWhkigbmeKUlzAKeHdq13ZZNeu3wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJlpY+PA0yOQ6bf7HajUBl67sqKXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2E1ZWU4MjQtZDM1Yi0z NTdhLWE4MTItNTAzMDBmYWUwNmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBlZTFi5shaShHQpKV+LcINevt8e3k1jb0EH5f/ L8THNghOgJzp9v46okhAt7KwY5w4udc6R9L+QFfUpNPO6uzVPy1EkoFPzQIC8TPz vzUMoQw/sWYgM/I4xuUUefxqeLdrMWHb1oCwCOMMVJGBQbEZ9253Aky3Nq6U8Tuf CwsnKMSw8cU/mEKaK8y59mwngffZWSGhTfu3ngaSbMw2mfkdzltIeHirXvFp/ET1 FIBK6upyylIOd2rWhMkhektc4dp5D7Gq2ov7mT6XgcJ0M0SHmMIX3uOlRELGdhK+ DeIZNSAtEVcEPdiVyHICxxfN1C7kfHuTg+J7mJnE91U4ZBCC -----END CERTIFICATE-----Generated at Fri Apr 11 23:53:02 2025 by rpki-client