$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dec07eb3-f04d-3a4c-9d52-6f2927472a05.roa File: dec07eb3-f04d-3a4c-9d52-6f2927472a05.roa (raw, json) Hash identifier: TeSlVcCpvCkl1A4Wy+RnDmQoMWAaMSuDjiUJk7uFTFA= Subject key identifier: BB:86:81:B8:38:74:5F:C0:B5:5E:C5:C9:B3:43:22:7B:50:6C:7E:B1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584919419597AB091B6EA9659980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dec07eb3-f04d-3a4c-9d52-6f2927472a05.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 397196 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:95:97:ab:09:1b:6e:a9:65:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=d167e95b-7ed7-441e-bd5b-d119b2cf242b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:eb:83:5d:b6:3b:70:3f:8c:8d:99:37:66:a6: 85:a8:c1:d3:37:61:8a:28:a9:fc:fe:9f:65:52:5f: 6b:0c:83:24:f4:0c:51:19:71:6c:c6:02:72:56:af: 46:79:de:c9:bf:01:9a:de:c8:24:a4:5a:ce:93:f6: be:cb:21:db:6f:a8:13:f6:96:5c:5f:80:04:6e:5e: ca:ff:b5:08:63:c4:7a:5c:2b:3f:17:a8:4b:21:97: 0e:89:38:6a:2c:48:2c:46:bd:b7:63:eb:5f:0e:06: d6:e5:27:37:58:6a:c6:c7:de:74:c5:f7:10:27:2d: 85:df:e5:cf:77:5e:d3:c7:be:a9:8f:5c:31:39:96: 18:77:e2:4a:06:4f:bb:36:79:f4:13:33:7f:47:e8: 6b:c2:36:84:3f:94:ce:d3:e4:8f:a7:73:66:0d:a2: 30:f5:55:69:60:3b:11:be:a7:bd:4a:8e:33:74:f9: de:06:b2:59:7c:64:6b:0b:bf:71:df:c8:e0:c9:13: 76:d7:cf:93:1a:67:08:a1:b7:73:4f:db:1d:18:51: af:fa:eb:fe:10:a2:71:04:cf:e0:5a:d0:63:c2:e8: b6:b0:25:bc:3f:72:c5:89:c3:c3:32:cb:0f:a7:4a: 6a:e2:19:79:94:68:ae:74:36:c7:c6:bd:71:54:49: af:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:86:81:B8:38:74:5F:C0:B5:5E:C5:C9:B3:43:22:7B:50:6C:7E:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dec07eb3-f04d-3a4c-9d52-6f2927472a05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:23:89:91:72:f4:7e:99:4c:f6:1f:1a:b3:a1:69:5a:a6:80: 67:36:12:73:99:59:ee:94:6e:4c:ab:b2:28:bc:d5:07:2d:e8: 5b:e4:5c:90:53:5e:58:67:2b:f8:e9:d1:2c:32:72:f1:ee:f6: 1a:87:41:5f:4d:ef:bd:40:af:ab:04:ce:f4:de:dd:f1:b8:dc: 94:e5:0d:05:2c:f6:78:2e:20:12:7a:55:59:06:e6:7a:7c:33: 09:b8:48:a8:9e:78:a0:7d:9b:06:01:8e:89:43:7b:5b:c4:09: 2b:57:d7:f5:c9:47:28:d4:e1:b2:58:f8:a7:45:3f:5b:7a:f9: 2b:21:60:24:70:f3:5a:ba:d3:7c:77:46:f5:fd:90:67:72:41: fc:e1:5c:1b:40:00:88:b0:a6:a3:f6:15:ee:ef:35:0f:20:ba: 04:e1:ff:3b:bc:12:ae:3f:5d:5e:73:ce:b8:46:f1:54:e4:86: ac:ff:19:78:b0:4f:55:74:c0:43:78:8d:bd:da:41:9b:c4:93: 74:ce:46:b2:34:e7:00:00:c0:f2:dc:51:20:36:b8:fb:75:97: d7:08:50:75:7f:97:ad:ed:32:6e:b6:1b:9d:ea:48:e5:f1:63: c2:a4:11:fb:d5:d3:da:4b:0e:b4:21:e2:79:27:12:d0:a9:c3: 9e:da:88:7b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkZQZWXqwkbbqllmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk ZDE2N2U5NWItN2VkNy00NDFlLWJkNWItZDExOWIyY2YyNDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OuDXbY7cD+MjZk3ZqaFqMHTN2GKKKn8/p9l Ul9rDIMk9AxRGXFsxgJyVq9Ged7JvwGa3sgkpFrOk/a+yyHbb6gT9pZcX4AEbl7K /7UIY8R6XCs/F6hLIZcOiThqLEgsRr23Y+tfDgbW5Sc3WGrGx950xfcQJy2F3+XP d17Tx76pj1wxOZYYd+JKBk+7Nnn0EzN/R+hrwjaEP5TO0+SPp3NmDaIw9VVpYDsR vqe9So4zdPneBrJZfGRrC79x38jgyRN218+TGmcIobdzT9sdGFGv+uv+EKJxBM/g WtBjwui2sCW8P3LFicPDMssPp0pq4hl5lGiudDbHxr1xVEmv6wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLuGgbg4dF/AtV7FybNDIntQbH6xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGVjMDdlYjMtZjA0ZC0z YTRjLTlkNTItNmYyOTI3NDcyYTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBNI4mRcvR+mUz2HxqzoWlapoBnNhJzmVnulG5M q7IovNUHLehb5FyQU15YZyv46dEsMnLx7vYah0FfTe+9QK+rBM703t3xuNyU5Q0F LPZ4LiASelVZBuZ6fDMJuEionnigfZsGAY6JQ3tbxAkrV9f1yUco1OGyWPinRT9b evkrIWAkcPNautN8d0b1/ZBnckH84VwbQACIsKaj9hXu7zUPILoE4f87vBKuP11e c864RvFU5Ias/xl4sE9VdMBDeI292kGbxJN0zkayNOcAAMDy3FEgNrj7dZfXCFB1 f5et7TJuthud6kjl8WPCpBH71dPaSw60IeJ5JxLQqcOe2oh7 -----END CERTIFICATE-----Generated at Fri Apr 11 23:39:39 2025 by rpki-client