$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cafd18e4-756a-3743-bb03-ea11c8166322.roa File: cafd18e4-756a-3743-bb03-ea11c8166322.roa (raw, json) Hash identifier: N8afytIeHdA5QetsJz0LCLlkBSZOIfeNCmxUGjXLZvU= Subject key identifier: 8B:77:D1:20:0B:F3:EE:99:94:A0:3C:73:64:E0:05:A2:7F:EB:5B:F8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858497544717CC1BC953F4CA7F8C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cafd18e4-756a-3743-bb03-ea11c8166322.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 396597 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:71:7c:c1:bc:95:3f:4c:a7:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=5a1c0936-a3b9-45bf-a58a-5fe1e3ed2064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8b:90:03:3f:2e:a3:c7:b6:c5:14:4a:12:db: 0e:19:8c:dd:d3:9f:94:3b:d2:c9:71:32:e0:94:e4: 4d:83:2f:9c:3e:be:e3:76:c1:83:67:03:36:75:ed: de:4a:fc:3c:29:d7:68:e8:ad:a0:09:19:d5:3c:3a: b0:21:a4:4b:55:e9:1e:6a:6e:6d:ba:a1:3a:e7:9c: ba:9d:02:3b:2a:b3:1b:a7:3d:de:64:29:be:f2:1a: 9d:02:5e:ff:91:92:9e:86:b4:eb:40:ed:86:33:a6: bd:12:fa:60:c4:66:78:3e:81:1e:9b:97:45:ff:07: 7e:ad:1e:b9:9f:da:92:9d:6f:a0:28:cc:4c:0e:1f: d3:8c:3b:d4:0e:d3:85:de:64:d2:3e:a2:ba:3a:09: 7d:d7:e9:89:f3:66:16:20:30:ae:1d:ab:93:3c:67: 77:f3:84:77:64:2a:9f:8d:a9:0f:be:ed:cd:14:6f: f0:b8:91:a2:dd:72:62:e9:a9:60:3f:bf:16:23:da: 28:9b:e0:b2:2d:d5:f5:3b:e8:89:36:b7:2c:ab:f0: cb:fa:cc:9a:ca:23:90:e6:99:b3:17:b9:6c:89:53: 9c:a0:67:70:9a:7c:ef:8a:3e:6d:d7:17:05:2d:29: 4c:21:8f:d5:f1:a9:19:6a:56:d1:f0:96:a7:ea:d0: a9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:77:D1:20:0B:F3:EE:99:94:A0:3C:73:64:E0:05:A2:7F:EB:5B:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cafd18e4-756a-3743-bb03-ea11c8166322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:b1:08:80:63:13:2d:f9:37:f6:2c:0d:7b:18:6e:d4:3a:89: 47:a3:da:9c:27:e6:61:df:a0:f1:cc:73:be:2b:26:d7:cd:6e: 7c:82:07:03:f2:61:e3:c1:1d:8f:3a:b7:b3:96:83:6d:54:f3: 2a:84:f1:11:d8:9a:0c:f8:5b:b7:3d:c4:43:80:c7:a7:88:bf: 08:3d:95:45:80:b9:2d:f2:c3:e8:a8:31:56:eb:c1:1b:de:3c: 47:23:51:2a:82:72:18:ae:d3:13:33:59:d1:86:70:86:39:63: 70:0b:b4:d0:76:2e:78:26:dd:ce:1a:5c:2e:3b:3b:7b:96:76: d9:e7:ba:73:c2:20:f1:3f:df:b5:93:c0:d7:17:4f:ab:74:3f: 72:45:d9:38:5d:5d:42:be:ef:b1:68:ef:03:1d:79:fb:c9:8b: 06:ae:c3:14:c5:fc:0f:92:aa:d2:67:82:1f:db:f9:6f:ab:7c: aa:94:fe:37:7d:ac:4a:62:5c:57:52:75:4a:3f:bb:3c:34:4d: 15:2a:3a:12:55:4e:9a:cf:4d:84:3b:d1:12:12:fc:02:a0:cc: ba:7a:6f:2a:d7:00:61:00:3d:a7:35:c9:c2:86:a6:61:d4:d6: 48:1e:53:31:6f:ff:ab:fa:be:65:45:1f:09:4e:78:e7:c2:aa: 28:e1:9a:be -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEl1RHF8wbyVP0yn+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk NWExYzA5MzYtYTNiOS00NWJmLWE1OGEtNWZlMWUzZWQyMDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4uQAz8uo8e2xRRKEtsOGYzd05+UO9LJcTLg lORNgy+cPr7jdsGDZwM2de3eSvw8Kddo6K2gCRnVPDqwIaRLVekeam5tuqE655y6 nQI7KrMbpz3eZCm+8hqdAl7/kZKehrTrQO2GM6a9EvpgxGZ4PoEem5dF/wd+rR65 n9qSnW+gKMxMDh/TjDvUDtOF3mTSPqK6Ogl91+mJ82YWIDCuHauTPGd384R3ZCqf jakPvu3NFG/wuJGi3XJi6algP78WI9oom+CyLdX1O+iJNrcsq/DL+syayiOQ5pmz F7lsiVOcoGdwmnzvij5t1xcFLSlMIY/V8akZalbR8Jan6tCp/wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIt30SAL8+6ZlKA8c2TgBaJ/61v4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2FmZDE4ZTQtNzU2YS0z NzQzLWJiMDMtZWExMWM4MTY2MzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCMsQiAYxMt+Tf2LA17GG7UOolHo9qcJ+Zh36Dx zHO+KybXzW58ggcD8mHjwR2POrezloNtVPMqhPER2JoM+Fu3PcRDgMeniL8IPZVF gLkt8sPoqDFW68Eb3jxHI1EqgnIYrtMTM1nRhnCGOWNwC7TQdi54Jt3OGlwuOzt7 lnbZ57pzwiDxP9+1k8DXF0+rdD9yRdk4XV1Cvu+xaO8DHXn7yYsGrsMUxfwPkqrS Z4If2/lvq3yqlP43faxKYlxXUnVKP7s8NE0VKjoSVU6az02EO9ESEvwCoMy6em8q 1wBhAD2nNcnChqZh1NZIHlMxb/+r+r5lRR8JTnjnwqoo4Zq+ -----END CERTIFICATE-----Generated at Sat Apr 12 00:23:11 2025 by rpki-client