$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8dd5d61d-9fc3-3c20-9ca0-760e1c327525.roa File: 8dd5d61d-9fc3-3c20-9ca0-760e1c327525.roa (raw, json) Hash identifier: 7yjpOnGlM2aldFHfzThCqqWTBzvl+umffehaJlF81vM= Subject key identifier: 5B:C9:62:A7:45:92:CC:0C:19:95:7F:73:76:9B:31:44:92:D9:2C:12 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584975446CCC00487355922B0400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8dd5d61d-9fc3-3c20-9ca0-760e1c327525.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 40717 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:6c:cc:00:48:73:55:92:2b:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=c09cb033-eca3-4a35-a6a8-32b9d06d51eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d7:81:6c:e1:78:a8:8c:c6:ea:13:ae:45:74: f9:0b:55:95:1e:d0:ac:8c:c9:4c:83:2b:d9:23:5a: 31:9c:2c:e0:7f:a4:3c:ed:77:60:ed:e7:38:9b:a3: 13:39:f5:59:be:34:de:08:4e:80:be:10:36:a4:da: 85:9b:6a:32:8a:5e:a4:34:20:9a:f1:a0:12:b7:e9: 7b:8d:80:0e:2a:38:14:dc:db:f1:17:78:1b:56:23: d8:e8:4e:a6:f4:6f:7d:17:e7:52:2c:e4:be:b2:3e: 81:76:55:04:52:0e:59:8e:70:20:5d:cc:54:50:69: 9e:3f:d6:bc:ff:4a:40:80:99:00:49:fd:60:81:b7: a9:cc:d9:d2:0f:44:ce:e1:28:e2:bb:a8:74:f7:96: 61:64:b8:d3:f2:9c:2c:ed:63:e4:58:06:e5:42:9e: a6:81:1b:c9:7d:7e:e0:99:0b:11:9a:e2:0a:b2:aa: 7b:47:30:5e:7b:82:07:ac:4b:35:ab:93:05:28:9a: e9:9a:b7:b0:b5:ac:0a:42:bb:7e:dc:b1:5e:f8:ce: 1a:3e:6d:d1:1c:18:f8:92:60:03:3e:72:80:9a:eb: 20:76:24:02:5b:97:77:2d:4b:b4:3b:20:7e:58:e8: 4d:fa:9c:3b:c0:75:1e:da:60:bd:55:08:00:63:6d: 86:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C9:62:A7:45:92:CC:0C:19:95:7F:73:76:9B:31:44:92:D9:2C:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8dd5d61d-9fc3-3c20-9ca0-760e1c327525.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:20:3d:60:87:e8:cf:93:53:73:af:01:f5:5d:06:26:aa:93: 23:6d:a6:30:6e:81:d7:38:cd:71:a3:9a:0f:91:b4:6f:9b:76: dc:fe:b7:4e:25:5b:97:9a:98:16:cb:7b:89:40:18:82:e0:6d: f4:31:1b:75:23:85:3e:66:0e:dc:51:59:58:9c:70:e7:d9:f6: af:17:05:44:1d:5b:94:81:1e:b8:9d:76:24:24:a8:08:eb:a3: 9c:44:5d:06:f7:89:9c:76:c0:2b:91:81:9d:c7:1f:23:60:18: c8:b2:3c:a1:48:a4:c2:ed:1b:64:2c:7e:d1:ef:ca:f4:78:67: dc:bb:68:f5:43:1c:d2:09:4d:14:e8:f5:87:f6:4f:9b:8e:cf: 35:38:a8:d2:1f:1d:4f:bd:43:09:76:62:47:0e:ce:38:0e:8e: 90:e5:e7:d8:13:a8:01:00:03:b5:56:e3:aa:76:76:f7:bd:3f: ed:c8:b9:40:b6:76:6f:35:95:b4:14:b2:43:b9:0d:32:67:51: a2:42:c8:b1:e7:a4:6c:0d:2b:59:bc:be:e1:93:ae:fd:3c:56: e3:99:3a:57:fb:5c:2f:5b:f7:b5:eb:4c:f0:fe:de:ea:ad:54: 34:f1:85:1c:b2:95:55:3c:3a:35:61:15:c0:86:32:06:64:b1: 75:5d:c8:9b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEl1RGzMAEhzVZIrBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk YzA5Y2IwMzMtZWNhMy00YTM1LWE2YTgtMzJiOWQwNmQ1MWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NeBbOF4qIzG6hOuRXT5C1WVHtCsjMlMgyvZ I1oxnCzgf6Q87Xdg7ec4m6MTOfVZvjTeCE6AvhA2pNqFm2oyil6kNCCa8aASt+l7 jYAOKjgU3NvxF3gbViPY6E6m9G99F+dSLOS+sj6BdlUEUg5ZjnAgXcxUUGmeP9a8 /0pAgJkASf1ggbepzNnSD0TO4Sjiu6h095ZhZLjT8pws7WPkWAblQp6mgRvJfX7g mQsRmuIKsqp7RzBee4IHrEs1q5MFKJrpmrewtawKQrt+3LFe+M4aPm3RHBj4kmAD PnKAmusgdiQCW5d3LUu0OyB+WOhN+pw7wHUe2mC9VQgAY22G1wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFvJYqdFkswMGZV/c3abMUSS2SwSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGRkNWQ2MWQtOWZjMy0z YzIwLTljYTAtNzYwZTFjMzI3NTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBiID1gh+jPk1NzrwH1XQYmqpMjbaYwboHXOM1x o5oPkbRvm3bc/rdOJVuXmpgWy3uJQBiC4G30MRt1I4U+Zg7cUVlYnHDn2favFwVE HVuUgR64nXYkJKgI66OcRF0G94mcdsArkYGdxx8jYBjIsjyhSKTC7RtkLH7R78r0 eGfcu2j1QxzSCU0U6PWH9k+bjs81OKjSHx1PvUMJdmJHDs44Do6Q5efYE6gBAAO1 VuOqdnb3vT/tyLlAtnZvNZW0FLJDuQ0yZ1GiQsix56RsDStZvL7hk679PFbjmTpX +1wvW/e160zw/t7qrVQ08YUcspVVPDo1YRXAhjIGZLF1Xcib -----END CERTIFICATE-----Generated at Mon Apr 28 15:39:17 2025 by rpki-client