$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaef397a-8d41-3de4-a846-0161071f4f81.roa File: aaef397a-8d41-3de4-a846-0161071f4f81.roa (raw, json) Hash identifier: q2YyaG2pRduZvGLkafsEbZ4Ww4PC1f0clAgPwLL4DYo= Subject key identifier: AD:88:B7:48:F9:93:AF:8E:BB:03:0C:98:67:88:19:A1:77:81:23:B9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848D2110A799232ECCA6B5DFA10 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaef397a-8d41-3de4-a846-0161071f4f81.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 397195 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:0a:79:92:32:ec:ca:6b:5d:fa:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=6a9c4759-ca37-4b21-94d0-a5e89aa553c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:72:05:c7:bf:8b:66:cb:1d:9f:47:bf:77:22: 17:c1:19:eb:1c:21:08:91:7c:1f:9c:97:3e:eb:43: 84:15:16:78:54:57:09:1c:2c:b1:22:25:62:7b:ea: 35:36:db:52:6a:b6:62:bd:7d:d7:56:99:f4:1d:76: 7f:2c:f3:4a:20:e9:b9:76:a6:c7:03:99:87:f3:79: 28:d6:3e:35:ba:e1:04:66:ad:68:26:81:82:35:4d: b5:83:f5:cc:f5:58:97:db:6a:76:e2:93:86:76:4c: 63:6d:90:72:25:9b:f0:a4:93:8a:1d:37:6b:84:22: 3c:5a:4d:80:4c:e7:89:99:75:3e:14:b7:c9:9f:53: a6:64:cd:f7:8a:e5:f0:07:33:d7:d5:a1:a1:a9:53: 11:ec:c8:c6:77:ae:2e:59:d6:f1:58:c5:83:fd:75: 23:0c:2b:f8:df:04:5c:d8:87:2b:78:f7:0e:76:da: ac:41:79:d7:01:7d:07:84:73:d1:3e:2d:ba:d1:10: a3:c0:bc:66:9d:5f:09:51:99:54:0f:73:5b:64:f3: 92:13:be:55:d0:0f:1c:de:68:99:b3:cb:21:ec:ed: 86:4a:09:f3:c2:ef:54:d1:15:8e:f2:7d:9d:71:15: 76:3a:b5:22:03:59:68:51:aa:e8:2e:f8:8c:c1:f5: 17:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:88:B7:48:F9:93:AF:8E:BB:03:0C:98:67:88:19:A1:77:81:23:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaef397a-8d41-3de4-a846-0161071f4f81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:1c:57:20:4e:1b:37:a4:29:ba:15:5a:c8:63:9d:7f:79:62: a0:19:9a:db:19:b8:c3:23:3e:ec:b5:6f:94:fe:24:3a:53:eb: 62:1f:f5:73:9f:76:e8:79:ed:57:4d:ce:39:b0:83:30:b5:aa: 60:ee:a3:e4:ac:c7:71:10:d0:b3:4b:4f:14:96:19:8e:08:89: f1:24:4d:b1:8c:f6:53:6a:53:e5:14:91:93:59:41:1b:57:c3: 8b:12:21:54:5f:5e:ed:1f:15:ac:7e:b7:cb:f9:d2:1e:ee:87: d1:70:6c:16:ac:25:7e:8c:d0:e8:29:44:19:38:83:4e:55:2b: 26:f1:e6:11:0b:ac:06:e5:36:d0:b4:f1:86:6a:13:37:8c:76: 20:04:22:b7:da:f7:19:64:de:c7:74:d1:b1:1b:93:e3:f5:ec: ff:b7:40:1e:53:f3:f6:9a:58:c5:3c:12:32:37:97:6e:81:ba: 77:d7:93:41:eb:e3:e3:93:2c:d9:2b:6a:40:e3:d7:ff:79:52: 7c:ea:cb:2b:9a:18:6a:db:06:d8:95:f2:0d:de:f9:69:9d:02: dc:b2:de:24:e0:94:88:2f:3f:6b:4f:4a:1b:c0:7d:44:82:a0: 4b:53:02:c8:e6:82:89:47:40:56:95:2b:3c:bf:00:f8:83:fe: da:a7:db:27 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjSEQp5kjLsymtd+hAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NmE5YzQ3NTktY2EzNy00YjIxLTk0ZDAtYTVlODlhYTU1M2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03IFx7+LZssdn0e/dyIXwRnrHCEIkXwfnJc+ 60OEFRZ4VFcJHCyxIiVie+o1NttSarZivX3XVpn0HXZ/LPNKIOm5dqbHA5mH83ko 1j41uuEEZq1oJoGCNU21g/XM9ViX22p24pOGdkxjbZByJZvwpJOKHTdrhCI8Wk2A TOeJmXU+FLfJn1OmZM33iuXwBzPX1aGhqVMR7MjGd64uWdbxWMWD/XUjDCv43wRc 2IcrePcOdtqsQXnXAX0HhHPRPi260RCjwLxmnV8JUZlUD3NbZPOSE75V0A8c3miZ s8sh7O2GSgnzwu9U0RWO8n2dcRV2OrUiA1loUaroLviMwfUXPwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFK2It0j5k6+OuwMMmGeIGaF3gSO5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWFlZjM5N2EtOGQ0MS0z ZGU0LWE4NDYtMDE2MTA3MWY0ZjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCDHFcgThs3pCm6FVrIY51/eWKgGZrbGbjDIz7s tW+U/iQ6U+tiH/Vzn3boee1XTc45sIMwtapg7qPkrMdxENCzS08UlhmOCInxJE2x jPZTalPlFJGTWUEbV8OLEiFUX17tHxWsfrfL+dIe7ofRcGwWrCV+jNDoKUQZOINO VSsm8eYRC6wG5TbQtPGGahM3jHYgBCK32vcZZN7HdNGxG5Pj9ez/t0AeU/P2mljF PBIyN5dugbp315NB6+PjkyzZK2pA49f/eVJ86ssrmhhq2wbYlfIN3vlpnQLcst4k 4JSILz9rT0obwH1EgqBLUwLI5oKJR0BWlSs8vwD4g/7ap9sn -----END CERTIFICATE-----Generated at Sun Apr 27 23:01:06 2025 by rpki-client