$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f7cfe155-8cc8-3219-be3e-aee8cb78b505.roa File: f7cfe155-8cc8-3219-be3e-aee8cb78b505.roa (raw, json) Hash identifier: KyuVNvtnImUB/YAAYQRet5ln6/rBA+w3asXqOed1peo= Subject key identifier: D7:37:80:09:C8:CE:63:FD:CD:75:61:F2:99:78:20:41:A2:94:2E:0B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848F92687376B27117A11823F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f7cfe155-8cc8-3219-be3e-aee8cb78b505.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 396827 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:87:37:6b:27:11:7a:11:82:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=22c04240-d729-40bb-8439-da4bd8a72ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f7:10:cb:43:1b:71:c5:e4:6e:c5:12:c6:82: f6:ba:32:74:9f:f7:4e:ce:08:80:02:71:b0:77:7e: ac:4c:f5:23:af:e5:0f:c5:32:95:c2:eb:16:36:49: d6:b9:78:64:61:df:b3:75:56:40:d9:be:b3:cb:46: 86:73:8e:88:60:78:bf:97:2e:d5:9a:a3:25:38:9b: d0:fe:ec:38:fb:92:8e:bc:e2:ac:2d:30:b8:9c:a3: f8:b5:23:84:92:37:0b:7e:9d:cd:94:3d:b9:1f:f3: e5:a5:a8:9f:49:d6:03:93:6a:c5:51:5b:4f:21:8b: 30:04:0d:be:f7:51:38:91:d2:0d:0b:c7:ea:b2:91: af:78:3a:aa:44:0e:ec:30:6d:de:74:1b:c6:3e:0f: 9e:e5:1a:af:50:b5:85:bb:6e:73:77:22:a0:d8:44: f2:2e:4b:96:a9:53:8b:7d:b1:5b:c0:d6:30:42:c2: 27:45:14:4d:9d:68:01:36:bb:01:66:f9:c9:d8:f0: a9:73:d8:63:8e:40:7b:67:29:79:f9:1b:d5:2a:34: 02:2a:94:35:9a:07:d7:38:c9:40:fb:98:a5:b4:d1: 9d:b7:1a:11:84:89:7e:6a:12:d8:16:56:6e:84:4c: 55:5a:c3:06:84:f9:f5:b7:4b:0c:51:83:65:29:49: e7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:37:80:09:C8:CE:63:FD:CD:75:61:F2:99:78:20:41:A2:94:2E:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f7cfe155-8cc8-3219-be3e-aee8cb78b505.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:0d:9b:35:19:65:6c:b2:38:b8:38:5a:2f:95:e4:90:7e:d4: 44:c0:06:50:cc:44:fe:b2:88:ae:7b:98:9a:bc:3c:50:4f:69: a6:e0:9b:71:26:1f:ea:8d:0c:02:a5:1c:d6:07:2c:46:01:2f: 37:ac:38:b5:a3:b6:6e:9b:eb:e6:8b:01:07:6d:1a:62:0a:18: 09:8a:87:e4:a8:fc:fa:a2:ad:3c:84:de:62:22:82:4a:24:4d: dc:af:f5:db:91:09:09:1f:5f:bd:73:05:f6:af:aa:e4:84:4a: 8e:a4:37:df:98:4a:57:4d:38:51:1c:f6:8e:85:4d:b9:8b:5f: c2:eb:0f:d5:a3:38:46:d1:4d:fc:a4:7f:84:5b:c3:d1:69:b2: d1:fb:4d:9d:21:3c:1e:49:13:24:62:8a:08:78:ba:67:bb:42: 77:b9:96:90:69:87:24:c4:e3:60:02:df:65:2c:c1:a3:ed:21: e6:a6:95:f8:ca:29:9d:6f:52:bf:46:9f:2a:9c:9e:ce:e9:16: ad:f7:6f:12:aa:be:39:1b:24:5c:6d:21:c2:80:4a:20:2e:9b: cd:fc:a8:03:bb:ec:33:25:1e:cd:76:49:f9:43:e7:63:48:7d: 9a:98:00:af:d2:eb:85:e8:28:20:0f:c6:12:a5:51:d3:a1:62: 65:2c:73:3a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEj5Joc3aycRehGCP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MjJjMDQyNDAtZDcyOS00MGJiLTg0MzktZGE0YmQ4YTcyZWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fcQy0MbccXkbsUSxoL2ujJ0n/dOzgiAAnGw d36sTPUjr+UPxTKVwusWNknWuXhkYd+zdVZA2b6zy0aGc46IYHi/ly7VmqMlOJvQ /uw4+5KOvOKsLTC4nKP4tSOEkjcLfp3NlD25H/PlpaifSdYDk2rFUVtPIYswBA2+ 91E4kdINC8fqspGveDqqRA7sMG3edBvGPg+e5RqvULWFu25zdyKg2ETyLkuWqVOL fbFbwNYwQsInRRRNnWgBNrsBZvnJ2PCpc9hjjkB7Zyl5+RvVKjQCKpQ1mgfXOMlA +5iltNGdtxoRhIl+ahLYFlZuhExVWsMGhPn1t0sMUYNlKUnnKQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNc3gAnIzmP9zXVh8pl4IEGilC4LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjdjZmUxNTUtOGNjOC0z MjE5LWJlM2UtYWVlOGNiNzhiNTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAQDZs1GWVssji4OFovleSQftREwAZQzET+soiu e5iavDxQT2mm4JtxJh/qjQwCpRzWByxGAS83rDi1o7Zum+vmiwEHbRpiChgJiofk qPz6oq08hN5iIoJKJE3cr/XbkQkJH1+9cwX2r6rkhEqOpDffmEpXTThRHPaOhU25 i1/C6w/VozhG0U38pH+EW8PRabLR+02dITweSRMkYooIeLpnu0J3uZaQaYckxONg At9lLMGj7SHmppX4yimdb1K/Rp8qnJ7O6Rat928Sqr45GyRcbSHCgEogLpvN/KgD u+wzJR7Ndkn5Q+djSH2amACv0uuF6CggD8YSpVHToWJlLHM6 -----END CERTIFICATE-----Generated at Fri Apr 11 23:54:20 2025 by rpki-client