$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/38a85f41-7d00-368f-a88b-da675a578c44.roa File: 38a85f41-7d00-368f-a88b-da675a578c44.roa (raw, json) Hash identifier: NvkojDMpYtlMMmT7BUAHCYwjNaHvG3qt04tskVcP2o8= Subject key identifier: D1:D9:C4:FA:19:54:BE:A3:B8:55:56:16:46:26:0D:80:AD:BE:03:67 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848D21116F66201E3C9D1563B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/38a85f41-7d00-368f-a88b-da675a578c44.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 396565 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:16:f6:62:01:e3:c9:d1:56:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=4995de7b-f107-470d-92b7-c466b996b203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fd:38:18:31:38:6b:dd:dd:e9:7a:41:50:a2: 96:29:7a:4e:29:3e:80:cf:69:8b:71:bf:d5:a0:0e: e5:b6:4b:c8:1f:f0:1f:43:1f:5f:c9:32:eb:65:1e: 24:e9:69:fc:6d:d4:9e:44:28:7d:0f:d9:8b:f3:c4: 7f:39:5a:3c:a0:dd:12:9b:21:b3:35:92:90:39:8b: 25:c4:2e:12:aa:e2:13:bd:5f:5d:67:bb:2d:3c:03: 0c:e2:8f:8b:2a:ef:7e:73:fc:f2:50:51:62:76:17: 57:37:aa:ac:8b:46:0c:9f:86:68:9f:22:43:00:87: 21:95:09:db:16:44:cd:9c:f1:d4:11:9c:56:cc:c6: 2b:a3:6e:60:4f:13:87:23:b6:f1:3b:2a:f2:23:54: ec:59:ec:b0:60:dc:60:af:05:b0:4b:87:fb:7e:94: 16:80:7e:59:6c:d5:c4:eb:5b:7f:f7:f8:bd:17:8d: ee:2c:2e:3d:26:0f:bc:c4:41:18:b3:33:6f:7c:1c: 83:e5:b4:17:1c:60:1c:20:c9:1e:32:2d:50:5f:41: 1d:4f:96:98:33:9c:19:63:a1:01:ca:e0:c1:a9:9d: fa:61:45:20:81:97:c6:ed:7b:e5:d0:26:bd:74:06: f2:ff:51:4a:58:0e:e8:ac:28:51:27:74:f0:8b:3b: fb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D9:C4:FA:19:54:BE:A3:B8:55:56:16:46:26:0D:80:AD:BE:03:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/38a85f41-7d00-368f-a88b-da675a578c44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:4c:a7:7d:21:83:f8:b5:b1:b0:0b:b2:cc:4d:72:c6:c6:88: a8:c2:9b:ba:46:3e:7d:11:c6:b7:e4:18:96:2b:49:64:07:d6: f6:74:64:a0:56:7f:b2:25:6d:d8:fa:2c:08:40:92:3d:da:f9: cf:c5:bb:53:21:18:79:b3:d3:09:90:cc:1a:27:71:3a:a6:91: 6d:67:22:bc:c4:8d:6d:1b:78:e3:cd:d1:2d:9c:d1:af:9c:22: e9:2b:0c:c9:cb:4c:34:91:85:19:2c:09:72:e7:9b:07:5f:06: e4:56:a1:20:96:c8:ee:07:d7:24:60:bd:73:f1:e9:c6:a2:d1: 75:f5:1b:62:20:c0:03:09:90:ba:dd:4b:a3:90:56:18:cd:ac: 6f:43:6c:1b:66:69:c9:12:f9:ce:f7:05:5d:c2:35:00:9d:18: 9a:70:88:e0:c0:e6:01:2a:71:4a:a0:e2:02:22:ae:df:2b:f7: 14:54:59:69:6f:71:1d:e2:c0:58:d5:7d:f2:a1:c6:f7:19:d8: 20:18:b4:df:b3:7a:33:08:14:29:94:98:06:7a:26:c9:12:fb: 4c:58:9f:9a:3c:32:5c:21:e1:09:4f:59:77:c6:0a:e7:3a:dd: db:3d:d2:c3:36:a3:d5:cf:3c:3f:85:19:95:54:b5:09:4e:0b: c5:04:fb:33 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjSERb2YgHjydFWO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NDk5NWRlN2ItZjEwNy00NzBkLTkyYjctYzQ2NmI5OTZiMjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2f04GDE4a93d6XpBUKKWKXpOKT6Az2mLcb/V oA7ltkvIH/AfQx9fyTLrZR4k6Wn8bdSeRCh9D9mL88R/OVo8oN0SmyGzNZKQOYsl xC4SquITvV9dZ7stPAMM4o+LKu9+c/zyUFFidhdXN6qsi0YMn4ZonyJDAIchlQnb FkTNnPHUEZxWzMYro25gTxOHI7bxOyryI1TsWeywYNxgrwWwS4f7fpQWgH5ZbNXE 61t/9/i9F43uLC49Jg+8xEEYszNvfByD5bQXHGAcIMkeMi1QX0EdT5aYM5wZY6EB yuDBqZ36YUUggZfG7Xvl0Ca9dAby/1FKWA7orChRJ3Twizv7nQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNHZxPoZVL6juFVWFkYmDYCtvgNnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzhhODVmNDEtN2QwMC0z NjhmLWE4OGItZGE2NzVhNTc4YzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA2TKd9IYP4tbGwC7LMTXLGxoiowpu6Rj59Eca3 5BiWK0lkB9b2dGSgVn+yJW3Y+iwIQJI92vnPxbtTIRh5s9MJkMwaJ3E6ppFtZyK8 xI1tG3jjzdEtnNGvnCLpKwzJy0w0kYUZLAly55sHXwbkVqEglsjuB9ckYL1z8enG otF19RtiIMADCZC63UujkFYYzaxvQ2wbZmnJEvnO9wVdwjUAnRiacIjgwOYBKnFK oOICIq7fK/cUVFlpb3Ed4sBY1X3yocb3GdggGLTfs3ozCBQplJgGeibJEvtMWJ+a PDJcIeEJT1l3xgrnOt3bPdLDNqPVzzw/hRmVVLUJTgvFBPsz -----END CERTIFICATE-----Generated at Mon Apr 28 02:06:22 2025 by rpki-client