$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dc8eaf1a-ae70-3f88-8297-1b31c6bf4d00.roa File: dc8eaf1a-ae70-3f88-8297-1b31c6bf4d00.roa (raw, json) Hash identifier: AA2jG44MmixNRO65w0yH0khfTu71H9ei6mp4PjpPC88= Subject key identifier: 09:A7:F8:E5:49:9A:C9:48:B7:39:74:E2:A9:A3:C0:E0:49:87:1E:F1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E59BDC1F3CCBA62F5A455B40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dc8eaf1a-ae70-3f88-8297-1b31c6bf4d00.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 396616 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:dc:1f:3c:cb:a6:2f:5a:45:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=d0f5cd24-b45e-4849-b8e9-27f3232c4b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:54:cd:4b:b4:cb:b4:ed:ae:d9:7a:69:e8:69: e0:9c:c9:e4:3e:24:c6:51:8d:5e:4e:2d:9f:c0:73: 5d:fe:44:3e:96:e7:60:61:c2:0e:dc:8d:e3:4c:7c: 78:88:91:23:b7:56:b0:a7:71:79:3a:bc:32:e5:2e: 82:87:84:c2:6f:c3:ec:d9:b5:c6:d2:b2:d7:60:7d: f6:52:e6:bf:e1:c2:ec:8d:37:cc:f6:09:28:5e:f4: c6:df:d3:4c:07:af:53:80:93:ef:53:84:26:cb:99: 97:f9:2f:8e:31:89:38:5a:c6:d4:39:76:39:ba:0a: 78:f4:22:fc:0a:61:28:cb:cf:ae:40:12:88:c0:c6: d4:56:97:b1:20:e9:2d:85:48:ae:cb:91:84:a7:e5: cd:f7:90:41:f4:94:87:ab:c2:91:e9:83:a9:c6:49: ae:33:f0:ba:22:7d:24:10:11:d9:11:8c:10:42:76: 76:a4:ac:c4:cc:01:89:80:22:f1:df:2e:02:d7:de: 01:86:ed:9c:e1:26:d8:18:18:08:ff:bb:db:cc:95: 22:49:8b:8b:9c:dd:63:8c:0f:8a:b8:b3:8d:b1:7c: c2:23:f9:55:22:1f:ac:0d:e5:13:b5:be:f8:ed:a0: 6f:19:93:a0:fe:4e:f9:a2:9e:9b:20:29:f3:31:9b: c1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A7:F8:E5:49:9A:C9:48:B7:39:74:E2:A9:A3:C0:E0:49:87:1E:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dc8eaf1a-ae70-3f88-8297-1b31c6bf4d00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:82:31:a1:0e:fb:52:6a:e7:b7:a7:1f:63:06:3b:94:7c:ec: 84:21:3c:b1:00:a2:dd:ab:f8:4e:ee:61:7f:45:92:70:d1:05: ee:5b:e9:41:f0:12:56:68:23:f7:f8:f2:63:8e:05:2f:cf:35: 25:b9:58:ae:66:12:d7:3c:6f:78:ce:55:7a:63:62:4d:cf:48: a1:6a:a3:2b:5c:31:55:ec:74:58:d1:b0:7d:02:0a:a0:a9:12: 69:9a:b4:01:f9:9e:5e:cd:d0:a7:40:08:f1:e3:08:b3:bb:16: 9d:db:5e:f5:64:b8:97:3d:2d:21:ba:81:fc:2d:79:3f:68:ac: e2:2f:de:1b:9d:ae:e5:4e:ba:a0:30:3c:38:7b:e0:da:11:12: fe:0b:9e:32:66:7c:8f:e8:78:02:fe:39:bd:99:5a:51:55:10: a0:12:e9:59:15:39:47:ca:de:0d:ee:a2:b4:a8:04:0c:a1:44: de:27:20:8b:d6:c2:54:ab:fe:d7:81:bf:88:58:6c:f3:30:9a: 4c:c3:40:30:a8:f8:8f:e8:ee:78:df:e3:d9:94:03:67:44:c2: 8d:30:4a:7a:5d:f5:e7:f0:53:db:4e:b6:28:31:2b:f9:97:1b: ac:d5:bc:47:12:0a:4e:53:be:df:57:67:e1:57:1d:3e:02:df: a8:27:92:07 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjlm9wfPMumL1pFW0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZDBmNWNkMjQtYjQ1ZS00ODQ5LWI4ZTktMjdmMzIzMmM0YjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVTNS7TLtO2u2Xpp6GngnMnkPiTGUY1eTi2f wHNd/kQ+ludgYcIO3I3jTHx4iJEjt1awp3F5Orwy5S6Ch4TCb8Ps2bXG0rLXYH32 Uua/4cLsjTfM9gkoXvTG39NMB69TgJPvU4Qmy5mX+S+OMYk4WsbUOXY5ugp49CL8 CmEoy8+uQBKIwMbUVpexIOkthUiuy5GEp+XN95BB9JSHq8KR6YOpxkmuM/C6In0k EBHZEYwQQnZ2pKzEzAGJgCLx3y4C194Bhu2c4SbYGBgI/7vbzJUiSYuLnN1jjA+K uLONsXzCI/lVIh+sDeUTtb747aBvGZOg/k75op6bICnzMZvBmQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAmn+OVJmslItzl04qmjwOBJhx7xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGM4ZWFmMWEtYWU3MC0z Zjg4LTgyOTctMWIzMWM2YmY0ZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCFgjGhDvtSaue3px9jBjuUfOyEITyxAKLdq/hO 7mF/RZJw0QXuW+lB8BJWaCP3+PJjjgUvzzUluViuZhLXPG94zlV6Y2JNz0ihaqMr XDFV7HRY0bB9AgqgqRJpmrQB+Z5ezdCnQAjx4wizuxad2171ZLiXPS0huoH8LXk/ aKziL94bna7lTrqgMDw4e+DaERL+C54yZnyP6HgC/jm9mVpRVRCgEulZFTlHyt4N 7qK0qAQMoUTeJyCL1sJUq/7Xgb+IWGzzMJpMw0AwqPiP6O543+PZlANnRMKNMEp6 XfXn8FPbTrYoMSv5lxus1bxHEgpOU77fV2fhVx0+At+oJ5IH -----END CERTIFICATE-----Generated at Sun Apr 13 00:50:40 2025 by rpki-client