$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cbd8546d-0b75-3ab3-8b8a-32f1d856e7f0.roa File: cbd8546d-0b75-3ab3-8b8a-32f1d856e7f0.roa (raw, json) Hash identifier: YVb5HMmpqAAXjGjg7gXBAOpqlTlO2OdWe1Ssam93pZw= Subject key identifier: AC:A8:84:D8:C7:4E:B1:62:C1:5A:E7:B0:88:C1:AB:5A:F7:6F:66:71 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848D2110BA32F0620C12166B7E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cbd8546d-0b75-3ab3-8b8a-32f1d856e7f0.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 20431 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:0b:a3:2f:06:20:c1:21:66:b7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=ffc01f35-11d6-4049-ae58-628c2fe6ef98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:de:ce:6a:95:a7:1e:29:97:b6:59:09:60:14: 51:2b:9c:5c:dd:43:92:a5:27:68:04:85:86:fd:18: 48:a0:e2:26:78:95:24:a0:b1:9a:12:04:83:6e:32: a4:70:d5:61:d3:25:e5:fc:5e:30:12:fc:63:96:3b: 94:33:80:3d:7c:e4:20:1b:4e:5e:29:ca:57:9c:08: b7:27:22:bd:e3:a4:49:03:46:14:1b:25:9f:9b:57: 05:99:3f:55:9f:df:81:2a:e4:04:1b:17:08:db:f5: 7c:6c:65:9e:55:25:ab:85:f1:b9:30:db:0c:85:47: 5e:60:e8:a4:5b:84:04:05:2d:30:b3:3d:be:a0:a8: 50:07:3c:19:60:f9:be:a0:98:37:7d:c9:61:84:86: e2:64:26:97:4a:0d:3c:59:45:bf:a4:46:4c:f9:96: 94:a7:16:c4:ea:36:78:ce:cb:f8:ac:5a:6d:fa:d6: 1f:24:fe:08:9c:a6:43:e4:9a:3a:dd:e0:4a:87:71: 6c:84:c1:bb:98:79:14:19:1d:7c:34:25:e9:bb:f8: 73:29:8e:d6:73:53:df:ae:8a:16:dd:23:07:de:d2: a5:19:87:d2:9d:4c:15:14:d5:88:32:1e:eb:f8:50: b5:f5:01:41:9c:02:f7:5b:e8:21:7e:aa:41:32:bf: 20:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A8:84:D8:C7:4E:B1:62:C1:5A:E7:B0:88:C1:AB:5A:F7:6F:66:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cbd8546d-0b75-3ab3-8b8a-32f1d856e7f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:fc:c0:a5:18:5b:56:f5:c4:90:07:b1:7d:fc:e7:84:41:1b: e3:80:a4:e6:a4:77:8f:3b:30:12:fe:f6:2a:70:0a:9f:6f:60: 9b:ba:bd:95:46:18:8d:e8:4b:1c:fb:2a:1c:72:89:73:fe:11: 22:c1:db:d5:e1:cf:18:aa:a5:e2:01:78:d9:b4:6c:3e:33:76: b2:d7:76:06:5b:75:ff:5e:91:a9:8c:df:6f:15:e7:50:0f:12: 0a:83:03:e9:c5:62:a4:52:61:6d:c0:39:59:ef:15:cf:ea:d6: ae:e6:2e:70:3e:81:04:b9:45:64:c3:36:a6:4e:f2:56:2f:c1: b9:3e:9d:bf:5c:bb:60:ad:1f:97:bd:bd:97:ef:47:91:c1:49: dd:9c:94:49:48:14:1b:65:c1:b6:9e:53:68:b7:30:c2:52:23: 2e:9a:94:fd:af:73:aa:d9:33:63:2c:2a:35:3b:60:af:8c:ba: cb:d9:5d:92:6b:01:ee:2b:36:c2:73:0c:11:2d:6b:6f:d8:2c: b6:9b:99:8c:8a:3e:8c:20:2e:73:0c:2a:8c:99:3f:12:61:e0: 7b:a6:b8:89:b1:7b:8f:5a:8f:66:9a:61:ae:c1:de:d2:8c:f9: 38:a1:87:cc:35:2a:d2:69:4e:b0:13:20:bd:47:a3:e5:ea:ad: c8:c6:78:55 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjSEQujLwYgwSFmt+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZmZjMDFmMzUtMTFkNi00MDQ5LWFlNTgtNjI4YzJmZTZlZjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt7OapWnHimXtlkJYBRRK5xc3UOSpSdoBIWG /RhIoOImeJUkoLGaEgSDbjKkcNVh0yXl/F4wEvxjljuUM4A9fOQgG05eKcpXnAi3 JyK946RJA0YUGyWfm1cFmT9Vn9+BKuQEGxcI2/V8bGWeVSWrhfG5MNsMhUdeYOik W4QEBS0wsz2+oKhQBzwZYPm+oJg3fclhhIbiZCaXSg08WUW/pEZM+ZaUpxbE6jZ4 zsv4rFpt+tYfJP4InKZD5Jo63eBKh3FshMG7mHkUGR18NCXpu/hzKY7Wc1PfrooW 3SMH3tKlGYfSnUwVFNWIMh7r+FC19QFBnAL3W+ghfqpBMr8g9wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKyohNjHTrFiwVrnsIjBq1r3b2ZxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2JkODU0NmQtMGI3NS0z YWIzLThiOGEtMzJmMWQ4NTZlN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAH/MClGFtW9cSQB7F9/OeEQRvjgKTmpHePOzAS /vYqcAqfb2Cbur2VRhiN6Esc+yoccolz/hEiwdvV4c8YqqXiAXjZtGw+M3ay13YG W3X/XpGpjN9vFedQDxIKgwPpxWKkUmFtwDlZ7xXP6tau5i5wPoEEuUVkwzamTvJW L8G5Pp2/XLtgrR+Xvb2X70eRwUndnJRJSBQbZcG2nlNotzDCUiMumpT9r3Oq2TNj LCo1O2CvjLrL2V2SawHuKzbCcwwRLWtv2Cy2m5mMij6MIC5zDCqMmT8SYeB7priJ sXuPWo9mmmGuwd7SjPk4oYfMNSrSaU6wEyC9R6Pl6q3IxnhV -----END CERTIFICATE-----Generated at Sat Apr 12 02:13:29 2025 by rpki-client