$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fe0f37de-abc7-37fa-a7a0-8a1536cecc01.roa File: fe0f37de-abc7-37fa-a7a0-8a1536cecc01.roa (raw, json) Hash identifier: yAbPdQ8x7xXoq9WQDy3EzWXdE2DhIXex8hyQ1FajxAI= Subject key identifier: F5:C7:D0:CC:69:36:1D:5B:13:18:51:44:AE:45:47:9B:70:A3:88:E0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848F9268A7AC65D83B72F40DFC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fe0f37de-abc7-37fa-a7a0-8a1536cecc01.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 36618 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:8a:7a:c6:5d:83:b7:2f:40:df:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=b7d2a322-525b-4089-9e89-f20e802c4cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2a:13:90:29:e7:a7:05:a3:f7:3b:42:29:ec: d9:93:e9:e0:3c:06:bc:b9:26:c4:ef:97:96:70:a2: 54:2f:76:a0:5e:7b:5c:c9:ee:fd:32:c5:86:81:1a: 16:fa:16:50:9b:8d:cf:8e:75:7e:a8:10:fe:06:35: 7e:df:04:4a:29:8a:7b:1c:3c:4f:9e:21:76:fc:36: a9:61:22:b5:9b:88:85:0e:5e:38:10:40:26:38:09: 14:72:ca:a7:15:c7:7d:19:51:a4:94:23:1c:fd:c8: c3:c9:c4:30:28:83:9f:fc:0f:73:89:02:8b:fb:aa: 3b:ba:f8:e2:e2:92:07:3e:47:68:fc:f4:70:36:de: e0:ac:2b:a2:70:4d:4d:ae:a8:93:21:40:9e:f2:93: 8f:9d:2d:3e:1c:5f:2c:74:a5:10:ce:f5:98:5c:52: 3a:94:ab:45:13:9e:48:5a:77:f6:c5:c3:21:fa:da: 33:a3:9c:c2:65:7f:61:de:fe:be:49:98:dd:c4:80: be:e4:19:27:a7:82:b5:b4:4d:36:3d:da:5e:b0:71: 33:44:0d:11:5a:c4:d0:3d:5c:75:b9:9f:6e:ef:56: 46:91:57:bd:77:0d:02:cc:ae:1b:9a:57:14:17:a0: ce:fc:b7:bf:68:7a:5c:b6:f0:4b:e4:22:2d:db:84: 6a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C7:D0:CC:69:36:1D:5B:13:18:51:44:AE:45:47:9B:70:A3:88:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fe0f37de-abc7-37fa-a7a0-8a1536cecc01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:91:e9:a9:09:04:33:a4:36:3f:16:46:85:60:4d:97:47:1b: c8:e1:48:5d:3e:44:0e:6e:f3:ff:5d:62:b9:1a:18:ec:41:85: 94:59:2a:ef:e2:9d:17:37:d5:ba:c8:07:9b:40:7b:ef:15:f5: b8:19:f0:1e:92:b5:64:02:89:a4:b7:94:1f:f7:4d:1b:ae:ae: 8b:fc:d8:fa:93:cd:ee:b2:e8:d1:4c:88:c3:ba:69:a8:73:c0: d2:11:c9:ba:e2:b2:82:1f:eb:30:79:6d:0b:1b:fe:69:05:4a: 3d:21:21:d8:fc:f9:d7:d6:9e:80:8b:c3:fd:ae:b8:87:13:13: 46:d3:f1:bd:9c:13:cc:e5:6c:52:ed:c9:3d:03:78:90:f9:3c: b7:76:47:22:70:3a:5d:03:8d:57:1b:29:a7:79:d7:33:fa:a1: 98:4c:87:d6:d6:98:eb:b8:72:5f:28:4a:ca:6e:48:47:86:71: 1b:df:bc:89:37:0f:bf:25:02:72:ff:0c:da:ec:e8:2e:9f:01: 77:71:f9:4f:fe:60:c7:36:96:ab:8f:bd:a2:7f:bc:78:11:bf: 81:c8:13:84:9e:92:61:22:e7:87:4f:f0:0e:9a:87:46:4b:b4: d1:83:6b:b9:57:74:85:24:d2:d4:97:7c:b5:69:96:94:75:c4: ba:30:d3:d8 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEj5Jop6xl2Dty9A38AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YjdkMmEzMjItNTI1Yi00MDg5LTllODktZjIwZTgwMmM0Y2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCoTkCnnpwWj9ztCKezZk+ngPAa8uSbE75eW cKJUL3agXntcye79MsWGgRoW+hZQm43PjnV+qBD+BjV+3wRKKYp7HDxPniF2/Dap YSK1m4iFDl44EEAmOAkUcsqnFcd9GVGklCMc/cjDycQwKIOf/A9ziQKL+6o7uvji 4pIHPkdo/PRwNt7grCuicE1NrqiTIUCe8pOPnS0+HF8sdKUQzvWYXFI6lKtFE55I Wnf2xcMh+tozo5zCZX9h3v6+SZjdxIC+5Bknp4K1tE02PdpesHEzRA0RWsTQPVx1 uZ9u71ZGkVe9dw0CzK4bmlcUF6DO/Le/aHpctvBL5CIt24Rq0QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPXH0MxpNh1bExhRRK5FR5two4jgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmUwZjM3ZGUtYWJjNy0z N2ZhLWE3YTAtOGExNTM2Y2VjYzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBNkempCQQzpDY/FkaFYE2XRxvI4UhdPkQObvP/ XWK5GhjsQYWUWSrv4p0XN9W6yAebQHvvFfW4GfAekrVkAomkt5Qf900brq6L/Nj6 k83usujRTIjDummoc8DSEcm64rKCH+sweW0LG/5pBUo9ISHY/PnX1p6Ai8P9rriH ExNG0/G9nBPM5WxS7ck9A3iQ+Ty3dkcicDpdA41XGymnedcz+qGYTIfW1pjruHJf KErKbkhHhnEb37yJNw+/JQJy/wza7OgunwF3cflP/mDHNparj72if7x4Eb+ByBOE npJhIueHT/AOmodGS7TRg2u5V3SFJNLUl3y1aZaUdcS6MNPY -----END CERTIFICATE-----Generated at Fri Apr 11 23:44:04 2025 by rpki-client