$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d089be51-2e47-3fcf-865b-d671d76f71f2.roa File: d089be51-2e47-3fcf-865b-d671d76f71f2.roa (raw, json) Hash identifier: 1Qptpko/PUxZaJ7daIByvZyyHo2P+SUSa1XjFVkZu18= Subject key identifier: E5:38:3A:98:3E:19:2F:B8:BE:BF:64:15:95:31:FC:E0:A8:4A:43:42 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584961B9A567370D724019A49FC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d089be51-2e47-3fcf-865b-d671d76f71f2.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 397212 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:a5:67:37:0d:72:40:19:a4:9f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=d21927a9-7841-4a8e-af25-6d56e742bdbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1f:a2:f2:d3:16:b0:e3:01:11:df:55:af:29: 68:47:fc:a7:1b:3b:90:85:23:c1:65:9a:b5:5f:1a: 43:84:0b:83:8b:92:f5:6f:d3:9e:28:0e:74:98:32: 56:12:a8:30:77:81:27:9a:5c:06:f9:08:cd:e1:1e: 90:31:af:48:28:72:c9:42:54:33:9d:7b:63:78:f3: 49:bd:02:a7:e7:15:cd:05:4f:9a:ad:62:33:60:06: 4d:a8:59:62:61:0a:b1:34:76:85:a3:d6:0a:5d:cb: 89:fa:89:40:21:2e:21:0e:4d:58:ef:52:d4:97:fd: 7d:4e:1f:78:23:13:b1:82:4a:a4:79:ea:25:a2:33: 2a:6b:93:96:c9:af:9d:72:52:ec:9d:c6:c9:76:8d: 86:33:4a:a5:55:61:e4:52:b1:cb:a1:49:a7:01:65: 2c:38:8e:99:68:27:07:a3:af:6e:12:e2:90:d1:9e: ca:6a:b9:8a:20:88:60:18:e3:3b:49:ea:d5:8d:c4: b3:52:95:8f:1c:94:04:bf:22:0d:96:77:71:14:30: d1:b6:e5:a7:12:c9:1d:22:c3:53:c4:9a:a2:d4:72: c8:78:c0:b7:87:5a:23:bc:84:3b:21:a1:52:fe:da: 51:bf:c9:9d:ae:52:28:42:1d:4f:43:1c:0a:fb:88: 31:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:38:3A:98:3E:19:2F:B8:BE:BF:64:15:95:31:FC:E0:A8:4A:43:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d089be51-2e47-3fcf-865b-d671d76f71f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:bf:a6:42:56:97:0a:31:7d:bb:46:e5:05:f2:b3:d3:16:5f: 9f:bd:1f:26:87:a3:72:3f:81:25:5a:ae:2a:31:38:45:eb:85: 43:ec:b3:8d:0e:9a:57:f6:0c:2b:4a:e8:4e:15:0d:e4:24:d8: 40:1b:62:cc:6b:c9:b4:7c:e5:71:2e:7a:92:50:f0:f6:c3:7d: fd:b7:3c:c0:97:e2:1f:e3:75:04:2c:8b:55:13:81:29:00:f7: 03:b2:8f:c3:e3:43:af:36:b2:d0:3f:95:38:ba:33:1c:7b:c4: 66:97:83:d7:c6:f9:d0:b2:5e:d9:c0:b2:68:48:e2:a6:89:db: bd:fc:8b:99:a8:51:5a:54:eb:9a:5b:8a:f4:c1:d4:78:f0:a7: ce:84:50:a6:8f:4a:b1:ae:d9:83:98:45:a8:18:1c:97:c7:8d: a7:d0:da:6c:64:38:ab:00:59:c3:ac:4f:5b:ae:f6:1c:b6:d8: cb:f9:5a:e2:b0:0a:0f:0e:65:80:86:16:cf:88:bd:22:e8:de: 32:54:10:52:8a:0e:ba:54:1e:b7:1d:26:2f:95:a4:f3:d0:d1: bc:be:95:1c:00:c7:a1:0a:fa:e3:fe:8f:a6:68:10:29:f8:3b: c0:0d:4b:34:23:b6:a8:70:3e:9f:5e:28:67:6f:03:7c:0e:a5: 9a:d7:e7:86 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWElhuaVnNw1yQBmkn8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk ZDIxOTI3YTktNzg0MS00YThlLWFmMjUtNmQ1NmU3NDJiZGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzR+i8tMWsOMBEd9VryloR/ynGzuQhSPBZZq1 XxpDhAuDi5L1b9OeKA50mDJWEqgwd4EnmlwG+QjN4R6QMa9IKHLJQlQznXtjePNJ vQKn5xXNBU+arWIzYAZNqFliYQqxNHaFo9YKXcuJ+olAIS4hDk1Y71LUl/19Th94 IxOxgkqkeeolojMqa5OWya+dclLsncbJdo2GM0qlVWHkUrHLoUmnAWUsOI6ZaCcH o69uEuKQ0Z7KarmKIIhgGOM7SerVjcSzUpWPHJQEvyINlndxFDDRtuWnEskdIsNT xJqi1HLIeMC3h1ojvIQ7IaFS/tpRv8mdrlIoQh1PQxwK+4gxIwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOU4Opg+GS+4vr9kFZUx/OCoSkNCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDA4OWJlNTEtMmU0Ny0z ZmNmLTg2NWItZDY3MWQ3NmY3MWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAkv6ZCVpcKMX27RuUF8rPTFl+fvR8mh6NyP4El Wq4qMThF64VD7LONDppX9gwrSuhOFQ3kJNhAG2LMa8m0fOVxLnqSUPD2w339tzzA l+If43UELItVE4EpAPcDso/D40OvNrLQP5U4ujMce8Rml4PXxvnQsl7ZwLJoSOKm idu9/IuZqFFaVOuaW4r0wdR48KfOhFCmj0qxrtmDmEWoGByXx42n0NpsZDirAFnD rE9brvYcttjL+VrisAoPDmWAhhbPiL0i6N4yVBBSig66VB63HSYvlaTz0NG8vpUc AMehCvrj/o+maBAp+DvADUs0I7aocD6fXihnbwN8DqWa1+eG -----END CERTIFICATE-----Generated at Sat Apr 12 02:10:42 2025 by rpki-client