$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd80dce9-2df3-34c1-b119-c78ea1cf244c.roa File: dd80dce9-2df3-34c1-b119-c78ea1cf244c.roa (raw, json) Hash identifier: xa/InIfmJzY9AFdBqAIrjN6PTndrUSxmRHltts3k8ZU= Subject key identifier: 39:9A:DA:C0:CC:C2:28:E0:F0:7C:DF:73:16:4F:1F:89:6B:1D:DF:08 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E59BDDE3E4531B130252ECC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd80dce9-2df3-34c1-b119-c78ea1cf244c.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 396544 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:dd:e3:e4:53:1b:13:02:52:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=6e0cd605-73a4-4792-a197-17b66b45a280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9a:3b:f3:25:e9:8d:9c:25:61:98:0b:b2:eb: c4:31:6a:07:76:d2:68:1a:22:51:da:18:6d:fa:7d: bc:59:71:6e:81:7f:13:08:ee:b5:40:a0:29:91:db: e4:65:dd:d5:32:9e:5b:c3:08:38:1e:e0:26:34:9d: 75:c7:5a:fb:f5:94:85:2c:2c:0d:7d:62:e3:d1:c1: ad:f3:9d:91:d2:68:1f:1e:b5:ee:c8:ca:57:4b:5b: c7:34:56:6e:62:08:3e:b1:75:e7:22:56:97:d5:75: 1c:06:17:80:a9:f4:ef:30:65:4c:aa:0a:4f:46:6a: 69:b6:b7:e3:c0:d2:71:d2:e8:b5:9d:0f:e4:8c:42: 40:2f:bd:71:eb:94:90:39:f3:64:f5:d0:b7:7f:23: 4c:24:df:c4:fd:ec:1d:6f:99:85:34:39:e3:b2:67: d6:56:97:3e:0a:50:d7:a6:1b:fb:b9:5d:f6:fc:98: fc:27:0c:8c:b8:0e:50:d5:37:ee:e4:35:7c:18:95: 42:9e:99:d5:7e:3e:08:b6:50:58:42:61:6b:1d:1a: d6:90:df:32:21:62:dd:47:58:5e:33:3a:c6:21:8f: 10:4e:64:01:a2:98:93:63:e7:97:94:bd:55:37:c0: b6:d4:4d:88:f1:27:0b:fe:6d:ab:b8:97:71:5a:53: da:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9A:DA:C0:CC:C2:28:E0:F0:7C:DF:73:16:4F:1F:89:6B:1D:DF:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd80dce9-2df3-34c1-b119-c78ea1cf244c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:a1:ac:d6:c2:45:11:7f:d3:1f:8b:a3:2f:47:d3:e8:c9:9f: f7:ab:a6:d6:06:76:31:ca:bb:d8:33:bf:52:ba:0e:ec:21:db: fc:b1:6c:7f:e8:32:97:a5:d6:13:73:38:5a:c5:05:7d:88:43: 8e:01:e3:c9:7f:a7:9c:1b:1f:3f:49:19:c5:3c:30:d8:eb:1a: a7:ab:fb:5b:66:ac:89:db:df:c2:94:ff:82:53:7d:75:5d:3e: 62:3b:6a:97:c1:44:b4:e7:4e:a5:98:66:e0:a8:1a:39:37:b6: df:fe:37:4a:f1:0e:35:c8:e1:94:db:a6:7a:1b:c4:87:c4:29: 8c:21:36:1c:ad:71:d9:4d:f4:60:7a:6c:5d:21:da:05:64:e7: 94:e0:5d:7a:84:ce:ae:33:b3:8b:67:1d:f3:19:79:87:14:f4: a9:03:cd:52:db:25:6c:25:90:d0:80:17:7d:eb:54:eb:2c:04: f0:bb:bb:7b:6b:1c:fb:68:78:0d:61:89:fa:0a:1f:8c:ea:e9: e6:04:7a:c6:5a:06:93:03:d4:fd:0a:fe:f5:da:ad:b3:95:28: 6a:6a:08:dc:3b:88:b2:d4:a0:fe:a5:0f:bd:0b:46:d6:ee:ca: 81:5b:70:f2:ce:29:e3:65:24:7e:d9:32:78:72:1a:05:e9:2e: 62:fa:0d:f5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjlm93j5FMbEwJS7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk NmUwY2Q2MDUtNzNhNC00NzkyLWExOTctMTdiNjZiNDVhMjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZo78yXpjZwlYZgLsuvEMWoHdtJoGiJR2hht +n28WXFugX8TCO61QKApkdvkZd3VMp5bwwg4HuAmNJ11x1r79ZSFLCwNfWLj0cGt 852R0mgfHrXuyMpXS1vHNFZuYgg+sXXnIlaX1XUcBheAqfTvMGVMqgpPRmpptrfj wNJx0ui1nQ/kjEJAL71x65SQOfNk9dC3fyNMJN/E/ewdb5mFNDnjsmfWVpc+ClDX phv7uV32/Jj8JwyMuA5Q1Tfu5DV8GJVCnpnVfj4ItlBYQmFrHRrWkN8yIWLdR1he MzrGIY8QTmQBopiTY+eXlL1VN8C21E2I8ScL/m2ruJdxWlPaxwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDma2sDMwijg8HzfcxZPH4lrHd8IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGQ4MGRjZTktMmRmMy0z NGMxLWIxMTktYzc4ZWExY2YyNDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB1oazWwkURf9Mfi6MvR9PoyZ/3q6bWBnYxyrvY M79Sug7sIdv8sWx/6DKXpdYTczhaxQV9iEOOAePJf6ecGx8/SRnFPDDY6xqnq/tb ZqyJ29/ClP+CU311XT5iO2qXwUS0506lmGbgqBo5N7bf/jdK8Q41yOGU26Z6G8SH xCmMITYcrXHZTfRgemxdIdoFZOeU4F16hM6uM7OLZx3zGXmHFPSpA81S2yVsJZDQ gBd961TrLATwu7t7axz7aHgNYYn6Ch+M6unmBHrGWgaTA9T9Cv712q2zlShqagjc O4iy1KD+pQ+9C0bW7sqBW3DyzinjZSR+2TJ4choF6S5i+g31 -----END CERTIFICATE-----Generated at Fri Apr 11 23:37:48 2025 by rpki-client