$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ab4a4aa-8676-3198-b0fd-78a51471db2a.roa File: 2ab4a4aa-8676-3198-b0fd-78a51471db2a.roa (raw, json) Hash identifier: D2aipmwieTs5V/ACinpMlZsg4dhxieEG9Zn7pR0CKGc= Subject key identifier: 8D:5D:B2:38:D3:A4:8C:0E:42:BC:E2:E8:F6:50:AE:81:F1:A6:6B:A6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E59BD40F708EFFD21CD77AF8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ab4a4aa-8676-3198-b0fd-78a51471db2a.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 397211 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:d4:0f:70:8e:ff:d2:1c:d7:7a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=efcd1aca-1f41-45ab-9b2d-c9ac2d083a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f7:6b:06:2d:75:5a:a9:c8:8b:2d:91:48:ad: 4a:53:ca:2d:54:c1:6c:5b:0a:d1:74:78:07:ea:a3: bf:e5:05:44:0a:c1:17:e0:b8:af:c8:08:a4:c6:e8: 23:77:64:34:78:3e:31:58:6f:0e:09:6d:c9:3d:3f: d9:01:a5:76:6c:8a:a5:92:e6:3f:55:37:5c:ca:b1: f8:1d:1e:54:bb:50:73:e5:a2:fd:f9:70:c3:34:e6: cc:eb:04:f0:09:c6:e1:2c:85:96:0e:4e:f5:16:12: fc:fb:f1:04:9a:e8:fa:b8:de:92:96:f1:3b:1b:6c: 0e:22:66:c0:bf:5e:15:2c:51:5a:71:7c:fa:f9:7f: 79:ca:1b:16:55:bb:82:5b:c2:63:62:b8:3c:e3:9c: 8e:fd:63:2c:d2:5a:46:7b:59:45:1b:84:94:54:5b: e3:89:86:7f:c4:90:0d:46:d4:92:95:44:fd:5a:11: 18:18:16:47:bb:8e:5a:8e:fe:d4:3f:72:17:58:13: 24:a6:4d:7a:a5:99:b6:51:62:27:fd:00:1f:5d:18: eb:35:41:fb:eb:94:55:2c:ad:6a:5e:24:2e:b3:95: 4c:2e:27:46:d4:0d:86:43:b5:1b:45:69:9f:33:e7: 89:16:8d:b3:af:99:e4:05:4b:67:a4:b6:b1:9d:37: d6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5D:B2:38:D3:A4:8C:0E:42:BC:E2:E8:F6:50:AE:81:F1:A6:6B:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ab4a4aa-8676-3198-b0fd-78a51471db2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:f6:09:05:d5:b4:b7:ac:9a:a0:ad:1a:2e:af:00:52:c4:74: f0:ea:57:46:95:b1:76:49:75:24:e2:54:4f:96:46:f3:c4:2e: 37:5d:2b:12:47:05:3c:2b:07:1e:9a:9a:8e:92:8e:87:d5:74: a3:b8:ae:24:4b:0d:8b:38:5e:fa:de:fe:b3:0b:68:4b:07:35: 47:64:29:35:0d:55:75:cc:1e:25:33:d6:05:61:c2:15:83:9b: 1e:bb:3a:1c:8f:30:e2:68:f3:7b:56:d6:8d:61:02:af:87:70: 69:73:ae:36:0c:99:f4:9c:30:f2:94:ad:9f:98:48:81:39:e3: 4a:7d:fd:c6:87:91:9b:a7:bb:57:6a:78:b2:45:18:03:62:c9: ac:ad:ce:31:dd:a3:b2:9b:0c:00:62:4e:15:69:d9:44:84:a4: 61:ed:49:fe:47:ef:29:d0:9a:7b:8c:83:4c:5f:41:72:44:39: 79:47:44:52:0d:58:d2:a9:2e:0b:7e:c6:9c:3c:d7:07:a6:78: 3b:5d:6e:10:9f:a3:3c:63:08:9f:8e:32:67:8c:21:09:c7:8e: bc:cb:55:c4:90:0e:70:cf:06:91:93:c3:ab:f7:b7:69:b5:af: 1f:49:1b:4e:a6:01:48:17:e3:f3:f5:03:d0:26:75:bd:1b:22: bb:11:d8:4c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjlm9QPcI7/0hzXevgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZWZjZDFhY2EtMWY0MS00NWFiLTliMmQtYzlhYzJkMDgzYTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/drBi11WqnIiy2RSK1KU8otVMFsWwrRdHgH 6qO/5QVECsEX4LivyAikxugjd2Q0eD4xWG8OCW3JPT/ZAaV2bIqlkuY/VTdcyrH4 HR5Uu1Bz5aL9+XDDNObM6wTwCcbhLIWWDk71FhL8+/EEmuj6uN6SlvE7G2wOImbA v14VLFFacXz6+X95yhsWVbuCW8JjYrg845yO/WMs0lpGe1lFG4SUVFvjiYZ/xJAN RtSSlUT9WhEYGBZHu45ajv7UP3IXWBMkpk16pZm2UWIn/QAfXRjrNUH765RVLK1q XiQus5VMLidG1A2GQ7UbRWmfM+eJFo2zr5nkBUtnpLaxnTfWIQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFI1dsjjTpIwOQrzi6PZQroHxpmumMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmFiNGE0YWEtODY3Ni0z MTk4LWIwZmQtNzhhNTE0NzFkYjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA39gkF1bS3rJqgrRourwBSxHTw6ldGlbF2SXUk 4lRPlkbzxC43XSsSRwU8KwcempqOko6H1XSjuK4kSw2LOF763v6zC2hLBzVHZCk1 DVV1zB4lM9YFYcIVg5seuzocjzDiaPN7VtaNYQKvh3Bpc642DJn0nDDylK2fmEiB OeNKff3Gh5Gbp7tXaniyRRgDYsmsrc4x3aOymwwAYk4VadlEhKRh7Un+R+8p0Jp7 jINMX0FyRDl5R0RSDVjSqS4LfsacPNcHpng7XW4Qn6M8YwifjjJnjCEJx468y1XE kA5wzwaRk8Or97dpta8fSRtOpgFIF+Pz9QPQJnW9GyK7EdhM -----END CERTIFICATE-----Generated at Sun Apr 27 17:57:44 2025 by rpki-client