$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/46863d66-e131-38f2-b346-22fc1d4eae81.roa File: 46863d66-e131-38f2-b346-22fc1d4eae81.roa (raw, json) Hash identifier: eL/8liJ4dNk8DPmLuk7zs/wYOLuU+KhfM7zv36nXUhU= Subject key identifier: 57:3A:64:19:12:3A:C0:8E:99:23:73:FB:DC:33:26:81:99:3F:0C:FA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E59BD7FD9B3C0ACB011FF600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/46863d66-e131-38f2-b346-22fc1d4eae81.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 397203 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:d7:fd:9b:3c:0a:cb:01:1f:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=2fc3fa8a-5b26-47a4-97d1-df227a0b666d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bb:94:36:f7:17:c3:21:32:aa:9c:2b:97:03: 19:f4:57:e0:24:f3:4b:4c:29:5f:e4:4d:e1:55:c4: 11:b4:c6:32:2b:bf:a6:d8:f5:07:d7:07:62:b5:50: c3:02:8b:9e:64:04:26:e4:dd:e5:b8:1f:8a:e4:9f: 92:64:b4:b7:5f:1e:6e:39:d8:b6:83:4a:03:22:8c: c9:5c:d4:93:83:1c:57:da:56:cd:7d:b0:dd:cf:7f: c3:81:02:79:a2:1e:2e:b3:15:63:19:11:57:34:2b: 52:27:11:d9:85:e7:23:b9:fc:fd:9c:fd:57:fc:c8: 66:64:6c:ce:13:91:02:bf:de:86:7c:e0:40:67:c8: 23:df:ce:9b:78:0d:d1:13:6b:99:3f:bf:18:17:e8: a1:02:cc:79:14:52:09:8f:6d:4b:c6:33:b7:f9:6f: 69:d7:7d:fb:e8:6e:0d:a0:0e:28:a2:0a:1e:98:dd: ce:1a:f5:3b:9f:04:96:0a:67:b3:95:11:13:3c:25: dc:ec:59:53:39:55:d5:2f:3d:e7:a9:04:e4:ca:08: 9e:a5:e8:4e:ac:a5:53:e6:46:27:39:dc:ba:5f:5d: e3:19:7f:29:4a:93:9b:7a:ec:67:7c:db:56:40:6d: 3b:bc:c3:29:55:a5:57:15:90:5e:61:bf:72:6a:d8: 07:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3A:64:19:12:3A:C0:8E:99:23:73:FB:DC:33:26:81:99:3F:0C:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/46863d66-e131-38f2-b346-22fc1d4eae81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:24:e0:91:22:9f:db:48:40:c5:da:f0:c7:44:bf:8f:d6:ae: b1:9e:d8:2f:40:d1:bb:1e:d0:83:1a:9f:15:24:6e:e3:6c:72: 3f:68:bf:69:3f:bb:1f:51:ca:95:bb:4a:9a:c4:34:60:18:90: 14:0c:e3:ef:6a:c2:cf:51:7b:29:07:d0:d1:e2:6c:7a:3d:d8: 09:09:38:4d:cc:6e:0d:ee:5a:84:95:c5:a1:64:d2:05:55:85: b6:a7:3e:b8:b8:7f:7b:5c:43:a7:1f:a0:00:08:63:7f:43:3b: ac:4e:00:47:3a:b0:1d:8e:19:06:b5:85:fb:38:6b:34:12:2f: 79:37:33:73:a7:e9:72:ca:99:f8:41:c8:12:2e:d8:b7:de:79: 2e:7b:31:e4:63:92:30:7d:72:cd:bd:1d:4b:33:a9:26:3a:a5: 9f:54:26:e7:df:1b:4c:9b:fb:9d:59:0f:89:6b:f2:d4:aa:4d: 32:cb:9d:7a:8a:59:d8:25:7a:4a:9c:cc:12:d0:db:2f:ff:ba: 9c:a0:d5:48:f2:04:cc:10:ee:f9:ec:26:96:f5:38:65:03:74: 77:dd:f7:92:5d:00:96:1b:34:9f:b1:71:15:4f:99:16:62:0c: 07:81:14:84:32:93:2b:98:db:ee:5e:fd:7f:4c:99:ef:38:e0: 74:70:da:02 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjlm9f9mzwKywEf9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk MmZjM2ZhOGEtNWIyNi00N2E0LTk3ZDEtZGYyMjdhMGI2NjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7uUNvcXwyEyqpwrlwMZ9FfgJPNLTClf5E3h VcQRtMYyK7+m2PUH1wditVDDAoueZAQm5N3luB+K5J+SZLS3Xx5uOdi2g0oDIozJ XNSTgxxX2lbNfbDdz3/DgQJ5oh4usxVjGRFXNCtSJxHZhecjufz9nP1X/MhmZGzO E5ECv96GfOBAZ8gj386beA3RE2uZP78YF+ihAsx5FFIJj21LxjO3+W9p13376G4N oA4oogoemN3OGvU7nwSWCmezlRETPCXc7FlTOVXVLz3nqQTkygiepehOrKVT5kYn Ody6X13jGX8pSpObeuxnfNtWQG07vMMpVaVXFZBeYb9yatgHHQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFc6ZBkSOsCOmSNz+9wzJoGZPwz6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDY4NjNkNjYtZTEzMS0z OGYyLWIzNDYtMjJmYzFkNGVhZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBFJOCRIp/bSEDF2vDHRL+P1q6xntgvQNG7HtCD Gp8VJG7jbHI/aL9pP7sfUcqVu0qaxDRgGJAUDOPvasLPUXspB9DR4mx6PdgJCThN zG4N7lqElcWhZNIFVYW2pz64uH97XEOnH6AACGN/QzusTgBHOrAdjhkGtYX7OGs0 Ei95NzNzp+lyypn4QcgSLti33nkuezHkY5IwfXLNvR1LM6kmOqWfVCbn3xtMm/ud WQ+Ja/LUqk0yy516ilnYJXpKnMwS0Nsv/7qcoNVI8gTMEO757CaW9ThlA3R33feS XQCWGzSfsXEVT5kWYgwHgRSEMpMrmNvuXv1/TJnvOOB0cNoC -----END CERTIFICATE-----Generated at Mon Apr 28 07:19:59 2025 by rpki-client