$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de52b7a4-19ad-3cee-94da-ade3459a4dd4.roa File: de52b7a4-19ad-3cee-94da-ade3459a4dd4.roa (raw, json) Hash identifier: cIkz6o2BXQ44cEM2vvmYpW5iCGYjpElFCP4Y21RBvU8= Subject key identifier: 31:B7:D7:28:6B:66:2D:C0:A2:4C:44:B9:BE:3E:FC:8D:85:2F:92:4D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E59BD5A1B1007B8EF6CE7640 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de52b7a4-19ad-3cee-94da-ade3459a4dd4.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 396573 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:d5:a1:b1:00:7b:8e:f6:ce:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=421f9904-faca-47c5-9586-80f3df80aa62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:14:79:91:39:e2:41:fe:a3:91:1c:dd:c3:47: 11:4d:94:d0:27:d6:0a:74:e6:18:b6:a3:ca:ee:8d: df:8a:e7:f5:e5:c6:d5:aa:cb:f9:39:4f:b3:f6:3c: ce:58:d5:de:b9:72:f5:6f:2e:61:a5:b1:70:42:6b: 68:e0:9e:06:3d:0e:3e:57:75:be:3c:2b:cb:14:b8: ce:d5:18:1a:3c:c7:51:33:f6:28:76:b5:e4:ae:2f: 20:56:4c:8e:19:34:4c:d3:4d:c5:3a:e9:71:6c:e4: aa:f5:e8:d7:9d:14:1e:58:12:d7:f2:a7:ef:d1:6f: 7e:c4:bb:3c:6f:eb:05:fb:e5:61:58:20:e5:01:4b: 54:37:3d:77:f5:50:96:a0:d2:16:f5:e0:27:28:7f: 95:ac:ed:92:cf:c2:9c:db:71:b0:3a:99:2f:1e:db: 63:81:78:dd:d1:15:2e:e2:26:f9:2b:63:bf:78:e8: c6:b3:f3:11:56:f9:36:0b:d3:9e:26:f5:48:c8:aa: 1d:35:2c:f3:77:9e:b7:b3:c0:50:f1:ac:f8:81:bd: 0b:0d:e3:82:99:91:47:c6:70:4a:29:a9:1a:d8:86: 9b:07:7a:e8:a3:3f:86:f4:72:65:6c:b6:80:f3:b6: e6:a2:2c:68:24:6b:ac:54:c4:39:df:a6:cb:64:d2: 8a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B7:D7:28:6B:66:2D:C0:A2:4C:44:B9:BE:3E:FC:8D:85:2F:92:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de52b7a4-19ad-3cee-94da-ade3459a4dd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:60:a4:8f:ce:c1:14:51:00:4d:43:39:f4:67:71:17:4d:91: c6:a7:73:d1:13:69:1b:07:24:5f:2d:6e:03:3d:69:a5:65:c1: d2:03:3b:ff:c6:2d:df:4f:64:80:7c:66:a8:7d:2a:71:2b:fc: f0:49:f7:e8:1c:99:4b:13:3a:7c:c7:6e:6e:db:2f:c3:21:dd: 23:80:0e:38:70:7c:1f:f9:d2:8c:55:a7:86:d4:80:ea:60:e9: fc:99:cc:1f:0f:6e:52:eb:cf:fc:84:7b:04:84:67:d7:d1:60: 4b:b3:f1:40:80:0e:09:41:a6:81:93:01:70:49:1b:d3:c6:60: 06:a4:6a:87:73:7c:40:af:ba:10:82:62:62:e7:ab:98:de:4d: e7:f8:8b:f0:5d:6c:c2:4f:fc:99:10:27:db:a4:6d:70:df:de: ce:aa:40:d8:58:57:e1:ab:98:53:be:e6:86:f1:14:ae:e6:bb: d6:c0:07:f6:a3:68:82:c1:65:7b:8c:43:91:32:be:b0:1d:d6: 67:38:88:ee:3e:2b:ad:e5:6a:3b:a7:2f:af:fb:66:64:62:c6: 34:58:9c:f0:cf:7a:52:68:aa:ef:c9:5d:eb:8f:12:ee:fa:53: e4:3e:f0:f9:40:62:c3:35:62:eb:2e:e8:f2:ec:a9:8f:5c:d0: d3:f4:07:f5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjlm9WhsQB7jvbOdkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk NDIxZjk5MDQtZmFjYS00N2M1LTk1ODYtODBmM2RmODBhYTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRR5kTniQf6jkRzdw0cRTZTQJ9YKdOYYtqPK 7o3fiuf15cbVqsv5OU+z9jzOWNXeuXL1by5hpbFwQmto4J4GPQ4+V3W+PCvLFLjO 1RgaPMdRM/YodrXkri8gVkyOGTRM003FOulxbOSq9ejXnRQeWBLX8qfv0W9+xLs8 b+sF++VhWCDlAUtUNz139VCWoNIW9eAnKH+VrO2Sz8Kc23GwOpkvHttjgXjd0RUu 4ib5K2O/eOjGs/MRVvk2C9OeJvVIyKodNSzzd563s8BQ8az4gb0LDeOCmZFHxnBK Kaka2IabB3rooz+G9HJlbLaA87bmoixoJGusVMQ536bLZNKK1QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDG31yhrZi3AokxEub4+/I2FL5JNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGU1MmI3YTQtMTlhZC0z Y2VlLTk0ZGEtYWRlMzQ1OWE0ZGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA2YKSPzsEUUQBNQzn0Z3EXTZHGp3PRE2kbByRf LW4DPWmlZcHSAzv/xi3fT2SAfGaofSpxK/zwSffoHJlLEzp8x25u2y/DId0jgA44 cHwf+dKMVaeG1IDqYOn8mcwfD25S68/8hHsEhGfX0WBLs/FAgA4JQaaBkwFwSRvT xmAGpGqHc3xAr7oQgmJi56uY3k3n+IvwXWzCT/yZECfbpG1w397OqkDYWFfhq5hT vuaG8RSu5rvWwAf2o2iCwWV7jEORMr6wHdZnOIjuPiut5Wo7py+v+2ZkYsY0WJzw z3pSaKrvyV3rjxLu+lPkPvD5QGLDNWLrLujy7KmPXNDT9Af1 -----END CERTIFICATE-----Generated at Fri Apr 11 22:30:49 2025 by rpki-client