$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0214da0-08fe-312f-ac14-78ada0560a35.roa File: d0214da0-08fe-312f-ac14-78ada0560a35.roa (raw, json) Hash identifier: V8fjtVjzrvVPNbOMu8ag5+0UQNx3sKfRMVEAtSXR5qc= Subject key identifier: 11:FD:31:CE:8B:35:07:38:0B:D1:25:8D:D5:86:9D:A0:EB:82:F4:67 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848F92689BADFD618122D1D6840 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0214da0-08fe-312f-ac14-78ada0560a35.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 396552 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:89:ba:df:d6:18:12:2d:1d:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=5ab8c076-49ca-4076-8cf3-7807f5ed1452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:99:57:f0:a6:e5:c3:9d:f5:46:27:92:0f:78: f0:79:94:44:f8:91:78:ac:ce:a2:03:e6:1d:32:5f: ee:91:1f:96:48:56:38:4d:c3:9b:02:e2:fc:cb:4c: 73:1c:b6:bc:16:ff:d0:1c:9c:1b:5a:58:b1:f5:21: 8f:d5:14:98:df:e2:c8:4b:a2:78:6f:63:6c:25:4e: 2f:76:9f:c8:fe:ed:3a:18:f4:26:16:a6:e1:c5:66: 32:a6:74:f6:ba:4f:e5:a4:a6:e7:3d:ff:b0:bc:82: d6:b4:da:28:3b:11:f4:5c:7d:0c:78:70:d8:ab:5d: 37:1d:8a:22:9d:32:b4:29:05:f3:63:d3:b6:03:33: d6:3d:61:d6:f1:ef:4b:d8:1a:d0:23:c6:e4:7c:47: 91:2b:5a:93:03:71:7d:b9:fc:ba:13:f2:f7:c7:34: 75:60:7a:ce:93:42:29:95:3f:f7:c5:01:b0:df:80: 71:cf:99:2b:c6:36:bc:88:ef:19:69:6a:7a:b5:69: e6:a0:f3:e0:6d:c0:5a:fc:80:1e:1a:53:bb:22:37: f9:5b:5c:0d:93:bc:37:de:d1:81:c7:b8:49:e8:eb: 27:d5:cb:e8:20:03:67:77:b3:5d:b0:95:b4:34:23: b8:5c:9d:7c:de:9c:8a:e6:41:ea:80:d4:a9:40:42: 10:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FD:31:CE:8B:35:07:38:0B:D1:25:8D:D5:86:9D:A0:EB:82:F4:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0214da0-08fe-312f-ac14-78ada0560a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:46:02:c0:21:10:3f:30:cc:8c:9b:18:09:1d:9e:8a:a1:c7: 43:66:2c:22:41:b8:8d:82:df:fa:94:b3:75:f2:79:f8:36:8c: d4:b7:07:f7:3f:64:b7:e1:ab:f5:bd:9b:82:37:1f:9f:3d:93: 9f:d8:52:05:cc:82:92:e2:60:63:14:f2:05:f4:56:8e:0e:8d: 00:99:5b:99:b8:00:9d:0b:1a:39:a4:d4:a9:4d:52:05:71:53: fc:29:f2:99:44:d4:b2:59:20:bc:05:4f:71:3b:e7:3c:65:e2: df:01:7f:91:6b:50:b9:b7:bc:4b:cb:c2:f3:a5:0e:9d:69:4d: 40:17:e6:a9:d5:90:0e:14:1d:81:f8:8b:ed:1b:89:06:ac:03: 5d:26:4c:5d:3c:ad:93:ea:c1:ac:eb:3e:be:15:94:0a:57:0b: af:b7:11:df:39:9c:1d:c9:ad:3d:6f:6a:0c:50:5d:a5:85:21: ca:75:bf:82:4d:45:28:4b:49:25:e9:d5:51:38:a6:c7:60:24: 08:6b:67:31:ff:28:75:82:0a:3a:07:2d:5b:e0:ff:3a:3c:aa: 33:30:ba:25:d8:11:0a:ff:3f:57:df:0f:e6:42:fc:1c:dc:e5: 17:98:59:7a:63:22:7c:ce:72:3e:41:17:2c:61:66:02:fd:25: a7:ec:cf:98 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEj5Jom639YYEi0daEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NWFiOGMwNzYtNDljYS00MDc2LThjZjMtNzgwN2Y1ZWQxNDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJlX8Kblw531RieSD3jweZRE+JF4rM6iA+Yd Ml/ukR+WSFY4TcObAuL8y0xzHLa8Fv/QHJwbWlix9SGP1RSY3+LIS6J4b2NsJU4v dp/I/u06GPQmFqbhxWYypnT2uk/lpKbnPf+wvILWtNooOxH0XH0MeHDYq103HYoi nTK0KQXzY9O2AzPWPWHW8e9L2BrQI8bkfEeRK1qTA3F9ufy6E/L3xzR1YHrOk0Ip lT/3xQGw34Bxz5krxja8iO8ZaWp6tWnmoPPgbcBa/IAeGlO7Ijf5W1wNk7w33tGB x7hJ6Osn1cvoIANnd7NdsJW0NCO4XJ183pyK5kHqgNSpQEIQbQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBH9Mc6LNQc4C9EljdWGnaDrgvRnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDAyMTRkYTAtMDhmZS0z MTJmLWFjMTQtNzhhZGEwNTYwYTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA8RgLAIRA/MMyMmxgJHZ6KocdDZiwiQbiNgt/6 lLN18nn4NozUtwf3P2S34av1vZuCNx+fPZOf2FIFzIKS4mBjFPIF9FaODo0AmVuZ uACdCxo5pNSpTVIFcVP8KfKZRNSyWSC8BU9xO+c8ZeLfAX+Ra1C5t7xLy8LzpQ6d aU1AF+ap1ZAOFB2B+IvtG4kGrANdJkxdPK2T6sGs6z6+FZQKVwuvtxHfOZwdya09 b2oMUF2lhSHKdb+CTUUoS0kl6dVROKbHYCQIa2cx/yh1ggo6By1b4P86PKozMLol 2BEK/z9X3w/mQvwc3OUXmFl6YyJ8znI+QRcsYWYC/SWn7M+Y -----END CERTIFICATE-----Generated at Sat Apr 12 00:14:24 2025 by rpki-client