$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1e64ed-f8f8-3418-912f-fafdd05f2139.roa File: cf1e64ed-f8f8-3418-912f-fafdd05f2139.roa (raw, json) Hash identifier: MWt97UXYZn1uvDg6GVE8ZPUcQDptmc4yqtmqUp0lx6k= Subject key identifier: FD:4C:CD:90:44:D5:84:1E:43:36:D1:4A:25:3E:78:AD:92:C0:47:88 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848F926878FBDCE388FD26D5C70 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1e64ed-f8f8-3418-912f-fafdd05f2139.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 396579 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:87:8f:bd:ce:38:8f:d2:6d:5c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=8823943d-b06d-4c10-b26e-6650772afeb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c6:cb:9e:c4:65:e4:d0:68:86:28:ce:74:09: 65:b0:a4:9c:7d:42:09:0e:74:2a:73:d5:94:a5:fa: 39:b5:b1:f7:06:4a:19:e5:cd:bd:88:64:d6:80:dc: 6f:ab:da:13:af:4b:58:c0:83:84:a3:e6:c7:99:3e: ec:ff:68:6d:3d:17:8f:59:58:a0:61:5d:d0:49:92: 6f:54:9a:6b:55:5d:bb:76:81:c3:f7:a7:60:12:ea: 09:97:9f:25:b2:da:2d:b7:1f:34:e2:e9:24:ff:22: 30:9c:4f:94:80:3b:21:4a:6a:b2:9a:17:24:9b:04: d3:c2:07:44:c7:16:70:10:5a:ef:d6:5b:57:d1:ed: 41:4d:c4:fa:87:70:da:09:75:79:99:47:11:2e:34: 5a:2e:18:6f:0b:18:99:d7:c7:47:cf:a5:ba:de:34: dc:1f:c2:70:2d:09:47:00:59:d1:7c:2e:3c:e1:ef: 4e:56:56:a9:86:92:63:12:d4:83:3d:37:7c:4b:65: 2b:33:f4:6e:e6:5f:b8:a2:96:db:92:4b:92:31:8e: a7:3d:16:10:f4:37:76:2f:17:c4:8a:3f:2e:97:bf: 45:a0:9f:dd:d2:30:dd:fa:b8:b6:d2:a8:21:a0:fe: 3b:8c:99:69:8c:a7:36:29:08:22:5e:ab:36:3c:3e: 4a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4C:CD:90:44:D5:84:1E:43:36:D1:4A:25:3E:78:AD:92:C0:47:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1e64ed-f8f8-3418-912f-fafdd05f2139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:35:2e:f9:15:00:66:89:3f:e8:f3:77:a5:aa:49:7d:c5:d6: 9b:d6:14:34:23:08:5a:cd:bf:c8:9f:d2:f1:c2:ad:7a:04:3f: e9:90:f6:54:e9:0c:85:b1:3c:b6:78:21:38:67:07:b8:b3:06: d5:17:9a:a0:95:b6:79:61:1c:4f:3e:fb:72:da:26:c6:72:f8: 8a:41:8d:a8:0d:23:4e:28:f0:51:c7:4e:79:a6:c2:3f:46:4a: 27:8f:8e:e8:13:df:ca:3e:8c:d6:bb:ff:c5:60:3c:be:60:52: ac:d7:9e:12:54:e5:31:8c:17:32:82:0b:24:da:cc:4e:a0:5f: 7e:43:f7:92:9f:da:8b:62:21:11:0e:ae:03:d4:99:30:f1:64: 87:eb:7d:fa:5a:fe:db:90:0e:87:e4:02:07:5b:d0:8e:81:fc: 1f:f0:57:95:86:92:1a:f7:09:fb:9b:ac:f8:25:70:30:f3:f1: 9a:da:e3:e7:de:ed:9a:bb:ca:68:05:e1:41:b0:13:dd:79:1c: eb:fb:2c:06:fd:cd:d5:c1:3f:00:9a:4d:74:2f:ad:2d:08:19: 4b:b4:30:3d:41:98:70:8f:21:3c:61:a4:ec:e9:eb:ff:59:e7: 75:4e:0e:55:9c:83:51:41:09:ef:3e:a7:d7:41:3a:3e:fd:e9: d2:f5:52:df -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEj5JoePvc44j9JtXHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ODgyMzk0M2QtYjA2ZC00YzEwLWIyNmUtNjY1MDc3MmFmZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMbLnsRl5NBohijOdAllsKScfUIJDnQqc9WU pfo5tbH3BkoZ5c29iGTWgNxvq9oTr0tYwIOEo+bHmT7s/2htPRePWVigYV3QSZJv VJprVV27doHD96dgEuoJl58lstottx804ukk/yIwnE+UgDshSmqymhckmwTTwgdE xxZwEFrv1ltX0e1BTcT6h3DaCXV5mUcRLjRaLhhvCxiZ18dHz6W63jTcH8JwLQlH AFnRfC484e9OVlaphpJjEtSDPTd8S2UrM/Ru5l+4opbbkkuSMY6nPRYQ9Dd2LxfE ij8ul79FoJ/d0jDd+ri20qghoP47jJlpjKc2KQgiXqs2PD5K9QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFP1MzZBE1YQeQzbRSiU+eK2SwEeIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2YxZTY0ZWQtZjhmOC0z NDE4LTkxMmYtZmFmZGQwNWYyMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBLNS75FQBmiT/o83elqkl9xdab1hQ0Iwhazb/I n9Lxwq16BD/pkPZU6QyFsTy2eCE4Zwe4swbVF5qglbZ5YRxPPvty2ibGcviKQY2o DSNOKPBRx055psI/Rkonj47oE9/KPozWu//FYDy+YFKs154SVOUxjBcyggsk2sxO oF9+Q/eSn9qLYiERDq4D1Jkw8WSH6336Wv7bkA6H5AIHW9COgfwf8FeVhpIa9wn7 m6z4JXAw8/Ga2uPn3u2au8poBeFBsBPdeRzr+ywG/c3VwT8Amk10L60tCBlLtDA9 QZhwjyE8YaTs6ev/Wed1Tg5VnINRQQnvPqfXQTo+/enS9VLf -----END CERTIFICATE-----Generated at Fri Apr 11 23:48:26 2025 by rpki-client