$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b21e6afa-432c-3e97-bccc-d3b40c10dec0.roa File: b21e6afa-432c-3e97-bccc-d3b40c10dec0.roa (raw, json) Hash identifier: XuJDZZEHPW+KsSh+8FXfUUdOfBvS5XRF3yRPiJHPTkY= Subject key identifier: 3A:EE:CC:31:03:8C:3F:A8:1D:14:51:46:49:57:A2:15:15:18:3A:14 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E59BDB31D05E4E9C91916600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b21e6afa-432c-3e97-bccc-d3b40c10dec0.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 396552 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:db:31:d0:5e:4e:9c:91:91:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=a1b90125-5f29-4c69-84cb-215f3aa426e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5a:ce:25:6a:c9:ae:e5:08:36:8c:b1:1b:60: 52:bc:42:31:00:7d:26:9a:01:e3:46:ea:8a:89:e2: f4:73:1c:7b:4e:3e:17:cf:63:1f:f2:70:4d:53:f5: cd:dd:ef:9d:26:0e:ee:3b:85:26:bb:3a:0d:74:82: a9:77:c3:55:d8:a7:e0:7e:50:d3:15:d0:75:fd:f0: d8:37:c3:4f:f0:ab:77:91:3c:83:1c:4d:df:e0:e8: 1d:6c:8a:d8:af:c3:bd:9e:79:de:24:0b:f9:d8:14: 7c:2c:b8:4d:6e:e1:f6:a2:7b:ff:aa:9e:92:4c:f3: cf:ff:da:7e:4d:a3:a5:7c:d5:cb:6d:de:ce:e9:46: 41:e5:6f:3e:ae:7f:66:17:c0:1a:a6:a4:82:f1:66: 8e:a2:b4:83:e1:33:35:47:b7:c1:17:f1:02:0d:a1: d0:7c:c7:1b:cd:71:b7:16:a2:95:aa:b8:b0:19:c9: bc:12:26:9a:93:be:04:43:7e:6b:ef:86:b0:a7:5a: 47:93:0a:3a:4b:91:d8:d9:7b:91:46:4d:50:ba:8a: 5a:0f:12:6e:d0:99:e0:a5:02:38:36:a0:43:b4:cf: 80:26:ec:11:cc:34:3a:04:4b:55:c9:d3:e6:4d:8f: 0a:34:42:d9:42:7e:50:0f:86:74:dd:8b:99:42:34: 41:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EE:CC:31:03:8C:3F:A8:1D:14:51:46:49:57:A2:15:15:18:3A:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b21e6afa-432c-3e97-bccc-d3b40c10dec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:28:4c:76:be:0a:7a:3d:7a:70:02:ad:c5:54:8d:3b:d8:2c: d8:cc:61:ba:99:3b:7a:dc:3c:45:d4:1b:3b:d4:8c:d8:32:1e: 9b:33:2d:db:bc:4d:8d:e8:db:e6:c6:a2:fd:32:e5:f5:73:1a: f4:62:52:28:b2:f4:41:db:00:bd:aa:fd:dd:7f:70:70:9f:d9: 38:62:8d:fa:ed:6b:74:0d:33:54:ff:8f:55:4c:8a:64:ca:c2: 00:e7:02:f1:cf:98:7b:2e:05:f9:24:fe:b1:96:3b:b1:a6:2d: 29:28:74:1e:08:4a:cb:7d:fc:ff:a1:ab:b3:f6:9d:ed:a5:22: 40:a0:15:43:3c:5c:a4:76:89:19:93:26:42:81:01:cd:90:9e: 15:59:84:20:4e:21:64:52:f0:7e:41:24:ed:41:18:8f:7d:33: ef:6f:e1:23:9e:86:db:53:d8:5c:b0:56:fd:ba:eb:89:76:a7: 45:4a:9e:d5:22:73:c2:1a:4f:09:a1:2a:cc:5e:de:25:70:18: be:3b:65:d4:39:dd:e0:5e:49:a6:8a:8a:ac:70:76:03:45:ea: ca:42:81:e0:4c:04:1f:20:a1:9e:9c:8b:a5:5e:bf:eb:bf:47: 34:2b:3a:62:cf:c1:76:46:4c:53:ab:25:63:e7:f7:9f:cc:36: ab:5f:56:13 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjlm9sx0F5OnJGRZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk YTFiOTAxMjUtNWYyOS00YzY5LTg0Y2ItMjE1ZjNhYTQyNmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFrOJWrJruUINoyxG2BSvEIxAH0mmgHjRuqK ieL0cxx7Tj4Xz2Mf8nBNU/XN3e+dJg7uO4UmuzoNdIKpd8NV2KfgflDTFdB1/fDY N8NP8Kt3kTyDHE3f4OgdbIrYr8O9nnneJAv52BR8LLhNbuH2onv/qp6STPPP/9p+ TaOlfNXLbd7O6UZB5W8+rn9mF8AapqSC8WaOorSD4TM1R7fBF/ECDaHQfMcbzXG3 FqKVqriwGcm8Eiaak74EQ35r74awp1pHkwo6S5HY2XuRRk1QuopaDxJu0JngpQI4 NqBDtM+AJuwRzDQ6BEtVydPmTY8KNELZQn5QD4Z03YuZQjRBqQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDruzDEDjD+oHRRRRklXohUVGDoUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjIxZTZhZmEtNDMyYy0z ZTk3LWJjY2MtZDNiNDBjMTBkZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQASKEx2vgp6PXpwAq3FVI072CzYzGG6mTt63DxF 1Bs71IzYMh6bMy3bvE2N6NvmxqL9MuX1cxr0YlIosvRB2wC9qv3df3Bwn9k4Yo36 7Wt0DTNU/49VTIpkysIA5wLxz5h7LgX5JP6xljuxpi0pKHQeCErLffz/oauz9p3t pSJAoBVDPFykdokZkyZCgQHNkJ4VWYQgTiFkUvB+QSTtQRiPfTPvb+EjnobbU9hc sFb9uuuJdqdFSp7VInPCGk8JoSrMXt4lcBi+O2XUOd3gXkmmioqscHYDRerKQoHg TAQfIKGenIulXr/rv0c0Kzpiz8F2RkxTqyVj5/efzDarX1YT -----END CERTIFICATE-----Generated at Mon Apr 28 00:18:15 2025 by rpki-client