$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68f3b0b0-21d9-39f5-892b-6cfe7d425596.roa File: 68f3b0b0-21d9-39f5-892b-6cfe7d425596.roa (raw, json) Hash identifier: RpQqaSslYn2mzklQ9B3hUwGKEibAThHoDX6VpIbf6aw= Subject key identifier: 49:70:50:36:A3:54:E3:8C:E2:A7:EC:08:94:5E:4D:45:27:EE:4D:38 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848F92689FC72D0A10300A8FB60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68f3b0b0-21d9-39f5-892b-6cfe7d425596.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 396578 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:89:fc:72:d0:a1:03:00:a8:fb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=007bf6c3-6a98-4268-9f13-b07970e384e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:30:21:0f:86:8a:90:ef:13:e4:fc:d9:e0:3e: e0:5c:89:c4:52:8c:a0:ec:9a:fd:d5:1d:bc:7a:d5: 75:de:c2:0e:fa:cb:c6:14:68:7d:d9:e8:23:78:07: c2:58:5b:fa:b0:65:3b:e2:f4:99:37:5e:8b:b0:5e: c9:4c:1b:c8:05:d0:8d:a2:33:a9:b7:d4:a2:a5:9c: 37:fb:6c:7a:a5:d5:d4:10:76:22:07:bc:03:c6:87: 43:2b:7c:9f:41:2c:8d:27:ec:37:67:2d:a6:0e:92: 3f:8d:a9:85:d8:e1:8a:fd:50:29:3c:db:8b:5c:c8: 7b:a3:d5:61:d7:49:ed:6c:81:28:b8:22:6a:6e:b7: 91:89:54:f2:57:8e:b2:e0:07:2c:7d:df:f1:34:ed: c9:28:08:2d:0e:f8:6a:bf:cf:fb:e7:ec:4a:d4:49: 62:77:64:94:5e:18:8d:2a:69:dc:59:26:40:e8:da: dc:d2:33:39:8a:bd:d1:46:95:41:99:4e:f6:05:3b: f0:0f:d8:b9:78:2c:12:a0:ee:b4:d5:57:db:12:a7: 87:3c:ab:06:90:a0:70:bb:e3:dc:9e:09:e7:bc:ee: 1c:1e:5e:2a:51:2d:2a:60:47:eb:fd:15:3e:b3:9d: ec:c4:79:ad:4b:aa:7d:b9:52:04:9d:8c:05:79:75: 09:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:70:50:36:A3:54:E3:8C:E2:A7:EC:08:94:5E:4D:45:27:EE:4D:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/68f3b0b0-21d9-39f5-892b-6cfe7d425596.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:f6:0c:d5:7c:50:64:43:1a:0a:60:c3:8d:c2:43:2f:3e:7c: d1:d9:5e:c7:c6:36:e6:32:64:55:81:72:54:fe:04:6a:e7:fc: e6:f7:33:04:94:54:a5:25:6e:ba:c2:29:82:e1:94:75:90:90: b4:c2:01:ea:0b:fa:d7:94:93:04:49:3f:a6:0a:a6:c2:d2:79: f7:e4:f9:a9:3a:7c:94:bd:d2:21:c8:5e:61:e4:75:f0:04:22: 86:d7:71:9b:72:ce:f6:fd:e0:10:67:9b:f5:cf:33:a3:c8:df: b1:10:54:89:29:fd:9a:ed:d0:07:89:8c:32:2b:81:7f:e4:06: b6:aa:20:3d:b4:78:8f:55:d0:74:31:9d:0c:87:ed:67:c6:b3: 51:4b:fe:78:c5:2b:ef:77:50:72:1c:e4:c2:37:d9:28:e7:14: e5:cc:38:a8:83:93:48:19:48:2d:cc:2a:ba:d4:13:24:13:64: 63:9c:a7:b8:9f:9a:9b:dd:fc:2c:97:bb:30:bf:17:63:50:50: 27:62:d6:69:c6:b9:53:15:15:77:70:c3:13:89:2a:60:7a:80: 19:4b:91:1c:df:ea:99:fc:77:5e:58:b2:b0:52:2b:aa:53:a4: ca:36:c3:52:7f:26:d0:7d:69:ee:fb:70:71:cb:5b:90:e4:40: 44:48:b9:8f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEj5Jon8ctChAwCo+2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MDA3YmY2YzMtNmE5OC00MjY4LTlmMTMtYjA3OTcwZTM4NGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TAhD4aKkO8T5PzZ4D7gXInEUoyg7Jr91R28 etV13sIO+svGFGh92egjeAfCWFv6sGU74vSZN16LsF7JTBvIBdCNojOpt9SipZw3 +2x6pdXUEHYiB7wDxodDK3yfQSyNJ+w3Zy2mDpI/jamF2OGK/VApPNuLXMh7o9Vh 10ntbIEouCJqbreRiVTyV46y4Acsfd/xNO3JKAgtDvhqv8/75+xK1Elid2SUXhiN KmncWSZA6Nrc0jM5ir3RRpVBmU72BTvwD9i5eCwSoO601VfbEqeHPKsGkKBwu+Pc ngnnvO4cHl4qUS0qYEfr/RU+s53sxHmtS6p9uVIEnYwFeXUJEQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFElwUDajVOOM4qfsCJReTUUn7k04MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjhmM2IwYjAtMjFkOS0z OWY1LTg5MmItNmNmZTdkNDI1NTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAH9gzVfFBkQxoKYMONwkMvPnzR2V7HxjbmMmRV gXJU/gRq5/zm9zMElFSlJW66wimC4ZR1kJC0wgHqC/rXlJMEST+mCqbC0nn35Pmp OnyUvdIhyF5h5HXwBCKG13Gbcs72/eAQZ5v1zzOjyN+xEFSJKf2a7dAHiYwyK4F/ 5Aa2qiA9tHiPVdB0MZ0Mh+1nxrNRS/54xSvvd1ByHOTCN9ko5xTlzDiog5NIGUgt zCq61BMkE2RjnKe4n5qb3fwsl7swvxdjUFAnYtZpxrlTFRV3cMMTiSpgeoAZS5Ec 3+qZ/HdeWLKwUiuqU6TKNsNSfybQfWnu+3Bxy1uQ5EBESLmP -----END CERTIFICATE-----Generated at Sun Apr 27 17:47:24 2025 by rpki-client