$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d68a0241-4cc6-33ab-8d87-5fc2d7ff5318.roa File: d68a0241-4cc6-33ab-8d87-5fc2d7ff5318.roa (raw, json) Hash identifier: 4parX+B+Ijj3CHn6pGUwHF1c/LBSYjeWcoEnV77oZSk= Subject key identifier: C3:23:16:CB:87:A4:12:E0:5E:1D:F3:AA:20:1B:BD:54:AC:BA:51:32 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584961B9AB6BDAD23DD80DFA5BE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d68a0241-4cc6-33ab-8d87-5fc2d7ff5318.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 211369 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:ab:6b:da:d2:3d:d8:0d:fa:5b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=71fd5f4d-cf2b-4c35-ba35-e069d0a06947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:52:37:1c:6b:72:f4:98:1d:b9:f1:81:1c:93: b5:ce:0a:65:16:ef:1b:17:b3:2a:11:53:0e:7f:46: ee:51:b8:7b:21:ad:4a:88:10:a1:bc:a9:cb:26:48: 50:1b:10:6a:f1:f3:bf:f0:17:c4:ef:c6:cf:c5:c8: 2d:55:bf:48:54:68:b8:82:62:5f:b1:42:73:32:12: 28:83:89:f4:4a:6d:25:96:1e:b4:38:38:a3:ec:ea: 49:dd:d5:45:62:50:fb:b9:a7:c9:64:9a:d8:94:36: fa:05:d6:06:d3:9e:ed:16:be:9d:4f:cd:b9:3b:e6: bc:7c:1a:55:4b:fd:a9:16:d9:73:3c:e5:a1:50:47: 39:5d:96:c4:69:39:05:2e:cd:db:01:41:46:13:ec: 23:e9:3e:d4:f1:81:a0:c1:cf:d7:57:22:83:bb:51: 03:0b:bc:c6:ba:b4:e4:23:78:d3:e7:6e:1a:88:c5: c5:bd:1a:61:e5:ee:d2:be:01:19:bf:da:e7:42:99: 2e:8e:d3:3b:45:f3:ff:e4:ac:fa:78:e8:9f:84:b3: 11:f5:59:15:b1:72:ac:e3:bb:60:5b:5e:38:84:42: f2:10:06:cc:69:a2:e4:80:9b:cb:97:cc:4a:8b:2b: 9c:04:d3:b6:ca:65:c0:b4:6d:64:8d:ee:a4:27:f3: be:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:23:16:CB:87:A4:12:E0:5E:1D:F3:AA:20:1B:BD:54:AC:BA:51:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d68a0241-4cc6-33ab-8d87-5fc2d7ff5318.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:f5:5c:44:d4:43:06:f6:54:d3:fd:d2:c6:2c:ab:7b:08:11: 30:58:e8:19:df:e9:57:24:d2:c9:08:d5:a9:16:ef:c7:f5:a1: ba:db:56:6b:11:66:f5:5f:ad:eb:80:8f:69:28:64:eb:96:71: 34:4c:93:37:37:4c:16:a8:80:a5:3b:ac:b5:43:12:2b:52:02: aa:d2:42:34:41:6d:a9:57:9b:4a:59:ff:ba:6c:8c:f1:64:e3: 39:14:1f:a0:28:f2:62:72:84:f6:d4:ba:b9:9d:83:fc:39:a0: 42:91:0b:ef:3f:81:06:84:ae:dd:94:b2:f6:fc:30:f7:f9:ce: 16:cf:6b:80:c7:94:0d:b0:c2:81:e7:5b:c3:cc:18:af:17:e5: 8b:34:3a:26:0f:54:96:68:cf:ff:07:3f:95:f7:1c:f2:98:85: b4:c9:c1:64:76:f3:b6:51:39:34:a2:7e:d4:a3:34:67:4e:b8: c2:ba:10:33:2f:fb:3f:90:cf:33:0a:29:ca:cb:34:4b:61:a1: 86:b6:17:54:73:a9:f1:f6:d5:69:30:ea:a1:66:57:dd:b7:13: bd:ce:36:6f:90:29:1f:24:0d:8c:1d:af:42:05:4d:fa:d3:1b: 33:6c:57:9d:26:d6:74:4e:7e:f2:04:79:cd:ea:71:6f:c2:79: c1:8e:de:ca -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWElhuatr2tI92A36W+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk NzFmZDVmNGQtY2YyYi00YzM1LWJhMzUtZTA2OWQwYTA2OTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVI3HGty9JgdufGBHJO1zgplFu8bF7MqEVMO f0buUbh7Ia1KiBChvKnLJkhQGxBq8fO/8BfE78bPxcgtVb9IVGi4gmJfsUJzMhIo g4n0Sm0llh60ODij7OpJ3dVFYlD7uafJZJrYlDb6BdYG057tFr6dT825O+a8fBpV S/2pFtlzPOWhUEc5XZbEaTkFLs3bAUFGE+wj6T7U8YGgwc/XVyKDu1EDC7zGurTk I3jT524aiMXFvRph5e7SvgEZv9rnQpkujtM7RfP/5Kz6eOifhLMR9VkVsXKs47tg W144hELyEAbMaaLkgJvLl8xKiyucBNO2ymXAtG1kje6kJ/O+5wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMMjFsuHpBLgXh3zqiAbvVSsulEyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDY4YTAyNDEtNGNjNi0z M2FiLThkODctNWZjMmQ3ZmY1MzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAr9VxE1EMG9lTT/dLGLKt7CBEwWOgZ3+lXJNLJ CNWpFu/H9aG621ZrEWb1X63rgI9pKGTrlnE0TJM3N0wWqIClO6y1QxIrUgKq0kI0 QW2pV5tKWf+6bIzxZOM5FB+gKPJicoT21Lq5nYP8OaBCkQvvP4EGhK7dlLL2/DD3 +c4Wz2uAx5QNsMKB51vDzBivF+WLNDomD1SWaM//Bz+V9xzymIW0ycFkdvO2UTk0 on7UozRnTrjCuhAzL/s/kM8zCinKyzRLYaGGthdUc6nx9tVpMOqhZlfdtxO9zjZv kCkfJA2MHa9CBU360xszbFedJtZ0Tn7yBHnN6nFvwnnBjt7K -----END CERTIFICATE-----Generated at Fri Apr 11 22:35:19 2025 by rpki-client