$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ceaf848a-a95c-37a9-b202-2ac941822059.roa File: ceaf848a-a95c-37a9-b202-2ac941822059.roa (raw, json) Hash identifier: YYjZQFm8MR00CxxhPj4yGC+L4+xZ/PFv8H8cv/riuUs= Subject key identifier: F6:68:63:86:A9:25:BC:8D:63:7F:B0:3A:98:32:CB:05:EE:11:AB:DC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848D2110BD142E6321697B4D5F0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ceaf848a-a95c-37a9-b202-2ac941822059.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 397207 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:0b:d1:42:e6:32:16:97:b4:d5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=0172a200-1193-4748-94f3-32d9f0da128c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cf:54:14:9b:9b:17:9a:8d:f7:ab:7f:a6:49: 68:d9:a4:e9:9a:f7:23:dd:ad:6d:ab:79:12:64:39: e2:39:85:76:a3:00:24:19:c5:c4:a1:0b:04:94:79: e1:07:a4:91:e0:d1:00:07:16:11:91:d3:02:11:25: 55:80:89:a4:b7:d0:b9:57:35:ad:57:e3:c3:47:ab: 69:1d:66:9f:b2:36:ee:d9:d5:03:5f:8e:0e:d0:3e: d6:77:e3:bc:05:76:21:b9:93:c6:2c:08:00:9c:74: 00:35:f5:64:9c:1e:01:63:ef:1c:32:18:2c:f8:60: 09:f5:6b:c2:e6:44:e6:45:b5:41:eb:c5:59:d9:15: 7b:44:e8:da:ac:40:81:f3:c7:86:ba:c0:e7:c6:3c: 14:7f:d5:53:24:38:1f:e4:6f:45:c8:a6:17:7b:c0: 81:a3:55:bf:ff:e7:d0:d9:26:68:a0:a6:28:c7:fe: 2f:04:46:bb:b4:82:c7:1f:97:a9:6c:42:8d:8a:e0: 80:26:74:c3:fd:bb:7a:c5:0e:58:05:2c:20:25:27: c4:17:9b:e8:34:da:da:8c:a1:af:fb:28:69:5a:dc: 7d:dc:0f:29:30:c2:37:33:ac:ec:ec:43:27:b5:85: 81:b9:f9:f5:21:b2:97:2e:0a:24:5e:0e:2a:e8:a4: d0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:68:63:86:A9:25:BC:8D:63:7F:B0:3A:98:32:CB:05:EE:11:AB:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ceaf848a-a95c-37a9-b202-2ac941822059.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:f8:fd:4d:85:de:e9:73:57:05:7f:a2:f1:67:60:e7:d0:9d: 19:eb:38:63:7c:78:c0:fc:7a:cd:b3:a0:db:0e:7a:67:13:89: a9:d7:53:7d:c6:0b:da:97:db:79:91:1d:07:88:6e:d8:5d:27: 61:b7:e2:5c:88:d1:24:23:1c:a5:6f:d3:56:a5:35:de:54:e1: b1:07:65:f8:eb:42:14:f0:12:6f:98:84:e7:9c:ca:81:01:78: 9b:89:25:ef:32:13:3d:c8:21:cc:51:02:07:54:a0:bf:53:8b: cd:56:b0:30:1f:30:f7:4e:6e:8c:03:06:68:06:6c:dc:c1:52: 82:dc:56:9c:4e:4e:f3:ca:6e:4d:f2:d9:be:f9:7d:c0:eb:86: 2c:f4:36:67:82:99:7a:a5:78:5a:f3:78:c4:0b:b7:8f:ca:8d: cc:03:88:ee:8b:5e:cc:1c:25:b8:20:13:8c:19:d9:12:d1:e5: dc:89:7d:6d:30:3e:dd:30:6c:c6:9f:f2:19:53:59:e8:56:05: 53:6f:bb:67:19:df:ca:19:ca:6b:e8:a8:a6:43:4d:ea:a3:f2: b9:94:e8:90:e4:b6:5e:7b:cb:79:36:61:be:0d:e1:6c:a5:d4: 70:41:24:ad:5b:47:b0:2c:db:9a:b5:87:db:ab:7d:f4:53:47: aa:e1:0f:df -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjSEQvRQuYyFpe01fAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MDE3MmEyMDAtMTE5My00NzQ4LTk0ZjMtMzJkOWYwZGExMjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc9UFJubF5qN96t/pklo2aTpmvcj3a1tq3kS ZDniOYV2owAkGcXEoQsElHnhB6SR4NEABxYRkdMCESVVgImkt9C5VzWtV+PDR6tp HWafsjbu2dUDX44O0D7Wd+O8BXYhuZPGLAgAnHQANfVknB4BY+8cMhgs+GAJ9WvC 5kTmRbVB68VZ2RV7ROjarECB88eGusDnxjwUf9VTJDgf5G9FyKYXe8CBo1W//+fQ 2SZooKYox/4vBEa7tILHH5epbEKNiuCAJnTD/bt6xQ5YBSwgJSfEF5voNNrajKGv +yhpWtx93A8pMMI3M6zs7EMntYWBufn1IbKXLgokXg4q6KTQLQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPZoY4apJbyNY3+wOpgyywXuEavcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2VhZjg0OGEtYTk1Yy0z N2E5LWIyMDItMmFjOTQxODIyMDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBo+P1Nhd7pc1cFf6LxZ2Dn0J0Z6zhjfHjA/HrN s6DbDnpnE4mp11N9xgval9t5kR0HiG7YXSdht+JciNEkIxylb9NWpTXeVOGxB2X4 60IU8BJvmITnnMqBAXibiSXvMhM9yCHMUQIHVKC/U4vNVrAwHzD3Tm6MAwZoBmzc wVKC3FacTk7zym5N8tm++X3A64Ys9DZngpl6pXha83jEC7ePyo3MA4jui17MHCW4 IBOMGdkS0eXciX1tMD7dMGzGn/IZU1noVgVTb7tnGd/KGcpr6KimQ03qo/K5lOiQ 5LZee8t5NmG+DeFspdRwQSStW0ewLNuatYfbq330U0eq4Q/f -----END CERTIFICATE-----Generated at Fri Apr 11 23:52:07 2025 by rpki-client