$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/52268dca-9d4a-36a6-945b-46458ff1d01b.roa File: 52268dca-9d4a-36a6-945b-46458ff1d01b.roa (raw, json) Hash identifier: OWhDNeunAGxdJWBU7NCNUVOWFWcmekTfkj+Fl0G5eEI= Subject key identifier: 3B:A3:9C:A8:F2:7F:51:FF:CF:55:39:02:78:15:D9:11:19:5C:22:D7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E59BE2131194289EA81432C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/52268dca-9d4a-36a6-945b-46458ff1d01b.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 396550 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:e2:13:11:94:28:9e:a8:14:32:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=dd0c0e36-056f-4492-9281-840c642cd487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b9:3c:76:0f:5c:ce:18:83:d2:30:04:be:ad: c4:1f:6e:d9:f5:b5:4f:b3:cb:37:f6:c8:8e:f3:29: 8f:43:a8:c8:0e:46:e7:49:c9:5e:b5:3e:c9:96:98: 82:bc:f7:1b:8f:60:28:5a:6e:2b:82:c8:e8:1b:70: 4c:02:de:e7:15:a0:1b:ff:e3:03:72:52:11:28:c8: db:b6:73:b6:22:93:4e:f1:3e:39:9e:68:05:01:68: f0:97:af:22:0b:4c:9e:fe:7a:d6:ac:04:e2:07:2c: 8a:08:63:f3:0f:43:7c:2d:5c:7e:66:ed:30:de:04: 4f:2e:00:8d:d4:e9:ba:95:61:78:34:4f:c4:5f:c0: 46:83:4f:4f:7b:e9:75:13:25:52:12:ee:4d:2f:de: 72:60:c2:0b:57:c7:2b:ee:6c:ad:59:8d:23:cd:25: 84:b5:ab:a8:6c:a8:b9:cd:02:f3:00:fc:c0:9d:6d: 7d:0e:7d:56:2e:71:a0:7f:d0:31:7e:20:9f:60:21: 79:15:2f:d3:5f:0f:71:90:ad:8f:0a:82:27:8e:96: 1f:9e:a7:a5:39:e6:1d:eb:4b:c1:71:47:6c:88:ba: cb:d8:76:81:8d:61:d6:aa:dd:36:c8:80:da:f4:38: 99:e5:27:95:56:34:00:ee:13:e5:f4:f3:b4:02:6e: 94:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A3:9C:A8:F2:7F:51:FF:CF:55:39:02:78:15:D9:11:19:5C:22:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/52268dca-9d4a-36a6-945b-46458ff1d01b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:37:01:3a:72:58:f5:96:84:d4:44:6a:97:f9:33:66:1a:67: 37:79:23:63:b9:65:e0:22:f2:55:88:27:c1:22:57:da:60:09: 69:c3:82:27:08:ca:71:95:dc:58:18:7f:84:28:79:ee:4b:ef: 7b:d0:d4:d1:3c:45:0a:04:70:24:47:13:fa:9a:40:e4:73:bc: c2:9c:23:3a:cf:7d:d5:e4:19:0b:c1:df:8d:6d:9a:19:f4:38: 0a:a4:ff:c8:b6:33:67:67:d9:b9:cf:03:3e:71:9e:5f:c5:27: 6e:46:66:94:71:71:96:93:ec:11:db:79:3e:dd:f5:6a:fa:97: 4f:a3:57:20:87:1b:17:2c:10:b0:00:bb:6e:f4:76:e8:a5:97: 22:67:fa:a8:57:60:ca:e0:85:3a:ed:27:8c:51:f6:34:f1:ff: 91:74:17:ab:0d:50:00:68:c5:b9:91:9e:90:1b:2b:e7:96:34: 27:62:7c:42:de:56:ad:8d:25:0a:9d:42:01:ec:bd:b0:f2:c0: 46:4a:bb:55:ce:29:43:52:70:1a:7a:14:7d:e1:b1:3f:d7:78: 54:e4:06:59:af:46:0a:26:30:b1:5a:65:6b:90:96:ef:d2:5b: b9:80:11:07:34:89:e8:c0:19:a3:4e:47:04:7c:4f:d7:80:e5: fa:5f:bb:10 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjlm+ITEZQonqgUMsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZGQwYzBlMzYtMDU2Zi00NDkyLTkyODEtODQwYzY0MmNkNDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrk8dg9czhiD0jAEvq3EH27Z9bVPs8s39siO 8ymPQ6jIDkbnScletT7JlpiCvPcbj2AoWm4rgsjoG3BMAt7nFaAb/+MDclIRKMjb tnO2IpNO8T45nmgFAWjwl68iC0ye/nrWrATiByyKCGPzD0N8LVx+Zu0w3gRPLgCN 1Om6lWF4NE/EX8BGg09Pe+l1EyVSEu5NL95yYMILV8cr7mytWY0jzSWEtauobKi5 zQLzAPzAnW19Dn1WLnGgf9AxfiCfYCF5FS/TXw9xkK2PCoInjpYfnqelOeYd60vB cUdsiLrL2HaBjWHWqt02yIDa9DiZ5SeVVjQA7hPl9PO0Am6UmQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDujnKjyf1H/z1U5AngV2REZXCLXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTIyNjhkY2EtOWQ0YS0z NmE2LTk0NWItNDY0NThmZjFkMDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA4NwE6clj1loTURGqX+TNmGmc3eSNjuWXgIvJV iCfBIlfaYAlpw4InCMpxldxYGH+EKHnuS+970NTRPEUKBHAkRxP6mkDkc7zCnCM6 z33V5BkLwd+NbZoZ9DgKpP/ItjNnZ9m5zwM+cZ5fxSduRmaUcXGWk+wR23k+3fVq +pdPo1cghxsXLBCwALtu9HbopZciZ/qoV2DK4IU67SeMUfY08f+RdBerDVAAaMW5 kZ6QGyvnljQnYnxC3latjSUKnUIB7L2w8sBGSrtVzilDUnAaehR94bE/13hU5AZZ r0YKJjCxWmVrkJbv0lu5gBEHNInowBmjTkcEfE/XgOX6X7sQ -----END CERTIFICATE-----Generated at Mon Apr 28 07:12:29 2025 by rpki-client