$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f3b3ee01-11d0-36b7-9108-0326e2379669.roa File: f3b3ee01-11d0-36b7-9108-0326e2379669.roa (raw, json) Hash identifier: MptO7ljE2W5BRux0RGxxpZs2yBPKywQG3uD5yvszbms= Subject key identifier: CD:AB:80:59:3B:D4:A6:B7:B8:5C:18:E3:70:14:27:49:61:17:D9:D8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E59BE0FA48927563F31F1740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f3b3ee01-11d0-36b7-9108-0326e2379669.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 396613 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:e0:fa:48:92:75:63:f3:1f:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=406231f0-bc78-4ead-8dc2-cc2a6944822e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:29:05:d3:8a:fb:01:5d:2b:2d:2e:1c:b9:6f: f1:ff:d9:29:d4:1e:65:17:35:ee:21:6c:91:c9:42: cf:43:da:52:40:50:84:a9:26:de:dd:02:34:32:fb: 22:86:11:a1:b6:ab:85:4d:42:69:14:07:32:bc:1d: fe:31:c5:26:91:16:1a:c8:71:ba:89:21:eb:2e:3c: 08:c6:79:9e:8a:3b:77:56:01:d4:f0:a9:33:3c:f5: 61:9d:e2:f8:07:6b:1f:83:c2:d5:84:61:48:9a:44: 54:3c:e2:ea:d0:17:61:93:d7:2b:09:9f:14:15:df: 79:a7:a5:ee:65:ed:57:05:d8:a2:ae:a6:aa:a5:75: 4b:2a:64:81:81:c6:26:64:3c:76:9c:9d:0b:a3:4b: 4b:ea:f1:22:0c:3e:09:e8:64:76:08:8f:96:ef:0c: 33:97:ae:79:9c:15:03:2d:d2:87:1c:fa:9b:cb:c7: 08:e8:b3:5c:e4:a8:f2:bd:d6:1d:15:48:00:93:ed: 4b:f2:97:ce:06:21:29:8c:09:92:26:60:5a:33:00: 63:e4:61:7a:10:d4:0f:f8:f2:b9:15:12:87:8f:de: 1a:5a:1c:ca:3b:08:73:c5:b5:22:59:be:04:1a:91: f8:0d:1d:f8:1b:5f:31:23:41:b9:8a:5d:54:8d:27: b3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AB:80:59:3B:D4:A6:B7:B8:5C:18:E3:70:14:27:49:61:17:D9:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f3b3ee01-11d0-36b7-9108-0326e2379669.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:96:22:34:1b:04:40:fd:a6:74:20:16:af:34:a1:b9:f6:64: 94:92:b8:52:5c:3f:7e:4f:61:53:1e:29:f0:87:99:86:b0:f4: 28:d5:54:e6:e8:8c:16:a7:68:7b:b6:ea:69:9f:9e:e3:ea:72: d9:f0:67:04:a2:90:e4:bb:f2:41:46:f5:cf:f0:4f:a8:c2:bc: ee:03:8a:97:fd:20:76:27:f7:26:3e:58:57:a9:50:e7:85:19: 88:6f:e0:40:d0:6e:f7:8d:99:8b:ec:52:8e:3f:c2:23:8e:db: de:06:a2:bc:24:84:82:12:13:26:a2:dd:e2:e4:8e:cc:b3:18: 11:9b:dc:a9:90:b0:a5:e3:15:f8:c7:07:f8:ea:d8:f8:9d:5e: b7:ab:51:1c:2f:8b:06:f7:f7:37:25:f2:dc:d5:f5:90:67:7f: eb:6b:c2:41:35:e5:0f:11:83:91:be:48:5a:84:bc:0f:f5:95: 5a:34:09:ad:5e:ed:fc:c0:d7:58:f6:f5:c0:e9:c8:29:46:68: 6c:ed:77:30:97:cd:a8:fb:4f:df:6f:09:88:37:e7:54:c4:b6: 86:73:df:17:d4:40:80:cd:bf:5d:7b:d4:1d:11:ca:cc:74:87: be:6d:8f:38:6a:55:cb:19:bf:61:93:80:40:64:e2:e1:e8:bf: b4:07:16:69 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjlm+D6SJJ1Y/MfF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk NDA2MjMxZjAtYmM3OC00ZWFkLThkYzItY2MyYTY5NDQ4MjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CkF04r7AV0rLS4cuW/x/9kp1B5lFzXuIWyR yULPQ9pSQFCEqSbe3QI0MvsihhGhtquFTUJpFAcyvB3+McUmkRYayHG6iSHrLjwI xnmeijt3VgHU8KkzPPVhneL4B2sfg8LVhGFImkRUPOLq0Bdhk9crCZ8UFd95p6Xu Ze1XBdiirqaqpXVLKmSBgcYmZDx2nJ0Lo0tL6vEiDD4J6GR2CI+W7wwzl655nBUD LdKHHPqby8cI6LNc5KjyvdYdFUgAk+1L8pfOBiEpjAmSJmBaMwBj5GF6ENQP+PK5 FRKHj94aWhzKOwhzxbUiWb4EGpH4DR34G18xI0G5il1UjSez8wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFM2rgFk71Ka3uFwY43AUJ0lhF9nYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjNiM2VlMDEtMTFkMC0z NmI3LTkxMDgtMDMyNmUyMzc5NjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB9liI0GwRA/aZ0IBavNKG59mSUkrhSXD9+T2FT Hinwh5mGsPQo1VTm6IwWp2h7tuppn57j6nLZ8GcEopDku/JBRvXP8E+owrzuA4qX /SB2J/cmPlhXqVDnhRmIb+BA0G73jZmL7FKOP8IjjtveBqK8JISCEhMmot3i5I7M sxgRm9ypkLCl4xX4xwf46tj4nV63q1EcL4sG9/c3JfLc1fWQZ3/ra8JBNeUPEYOR vkhahLwP9ZVaNAmtXu38wNdY9vXA6cgpRmhs7Xcwl82o+0/fbwmIN+dUxLaGc98X 1ECAzb9de9QdEcrMdIe+bY84alXLGb9hk4BAZOLh6L+0BxZp -----END CERTIFICATE-----Generated at Fri Apr 11 23:50:13 2025 by rpki-client