$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bceabade-34a5-3fd7-aa22-752619bc3467.roa File: bceabade-34a5-3fd7-aa22-752619bc3467.roa (raw, json) Hash identifier: BDCLwX0VEZ0u1RwOqCrwqRw8ze4qRnmWoOWwNOB/9mE= Subject key identifier: C3:AA:54:BF:DF:56:1E:87:B2:B2:CD:4C:4F:BE:77:1E:9D:1A:59:3F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E59BD553175732DE80F9D880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bceabade-34a5-3fd7-aa22-752619bc3467.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 396593 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:d5:53:17:57:32:de:80:f9:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=ba4f804f-e71c-4cea-9e65-d1f5377e90a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:38:39:9d:e9:f7:80:46:62:61:d3:00:d1:e0: 62:32:8f:43:64:fa:a5:d9:c4:0c:45:99:d3:fd:2a: eb:f3:2a:7c:80:3f:d2:48:31:ea:c0:22:40:3b:64: a9:dd:16:eb:22:3c:4e:f7:02:18:45:a7:80:70:41: fc:e9:b8:c8:de:e3:bb:3b:02:74:73:1f:58:71:8e: bb:ed:34:fb:ea:fa:d4:68:b5:13:ed:f7:ce:cf:70: 83:ee:8d:84:81:ed:7b:b1:48:bc:40:1a:86:03:fc: b4:88:4f:b5:61:1a:01:89:13:1d:32:0e:7c:1f:9d: af:89:a5:b4:45:59:71:89:f0:73:b0:4f:dd:c6:71: 8c:33:41:d5:b2:be:88:70:16:24:39:29:3a:d2:36: ee:6d:42:dd:1b:df:6b:9d:a7:01:43:e6:7a:d7:30: be:81:e4:95:47:b1:43:ab:e5:c9:a3:c4:0c:44:b2: e7:f7:ba:81:ee:43:ef:32:de:e0:97:03:dc:30:28: 95:8f:6e:d1:ca:ce:31:ee:b8:d6:02:1f:88:64:dd: f5:3a:4d:b7:b7:2b:2b:4e:6d:d1:ac:a9:04:38:18: c2:3e:6c:cc:38:aa:e0:45:5c:1f:91:2b:75:99:05: e2:c0:19:68:ba:95:35:e2:e2:fd:3f:6b:c4:c3:f0: fe:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AA:54:BF:DF:56:1E:87:B2:B2:CD:4C:4F:BE:77:1E:9D:1A:59:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bceabade-34a5-3fd7-aa22-752619bc3467.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ad:c1:a7:fd:45:4d:88:6f:09:64:8a:eb:eb:a5:28:d4:fe: 4b:75:f6:4f:ea:cb:be:c3:d6:75:ad:33:8f:44:ad:eb:6e:b8: 3c:fe:ec:7f:30:c5:da:53:3b:d7:db:71:d6:6f:06:70:d3:98: a5:61:9a:cd:ee:3d:bf:8f:76:31:c2:04:36:f9:52:3b:b7:2e: fd:d3:68:0b:4f:0a:3c:ad:1e:d0:14:78:5a:69:d4:c9:91:91: 6b:dd:61:cf:97:59:f6:d8:06:20:ce:be:70:f2:28:6a:3d:2d: 44:cb:94:6b:3c:ed:c6:c2:c2:53:1c:9f:ed:5f:56:38:c4:80: 33:12:e9:60:ee:0a:0b:1b:bb:f6:0a:0f:30:6c:98:b1:5f:be: d3:a8:0b:c8:5d:20:4a:5a:ae:3b:b1:dd:00:7e:74:ed:13:4e: 45:bc:92:64:58:cd:a3:5b:2e:6f:4f:62:da:df:41:6a:67:a8: 08:b3:07:1c:3a:dd:cf:4b:1c:23:2d:a0:92:7d:2a:aa:b0:1d: d2:a1:b2:bc:88:81:4f:dd:fd:c2:d1:47:a2:da:62:eb:12:80: d3:37:b8:2a:59:ff:13:7a:26:63:c0:07:f7:74:2c:7b:12:b5: ac:b8:b6:38:b2:0b:d9:1e:f7:65:a4:c5:7f:24:ba:e6:b4:e7: 18:6d:07:4b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjlm9VTF1cy3oD52IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk YmE0ZjgwNGYtZTcxYy00Y2VhLTllNjUtZDFmNTM3N2U5MGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDg5nen3gEZiYdMA0eBiMo9DZPql2cQMRZnT /Srr8yp8gD/SSDHqwCJAO2Sp3RbrIjxO9wIYRaeAcEH86bjI3uO7OwJ0cx9YcY67 7TT76vrUaLUT7ffOz3CD7o2Ege17sUi8QBqGA/y0iE+1YRoBiRMdMg58H52viaW0 RVlxifBzsE/dxnGMM0HVsr6IcBYkOSk60jbubULdG99rnacBQ+Z61zC+geSVR7FD q+XJo8QMRLLn97qB7kPvMt7glwPcMCiVj27Rys4x7rjWAh+IZN31Ok23tysrTm3R rKkEOBjCPmzMOKrgRVwfkSt1mQXiwBloupU14uL9P2vEw/D+QwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMOqVL/fVh6HsrLNTE++dx6dGlk/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmNlYWJhZGUtMzRhNS0z ZmQ3LWFhMjItNzUyNjE5YmMzNDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBErcGn/UVNiG8JZIrr66Uo1P5LdfZP6su+w9Z1 rTOPRK3rbrg8/ux/MMXaUzvX23HWbwZw05ilYZrN7j2/j3YxwgQ2+VI7ty7902gL Two8rR7QFHhaadTJkZFr3WHPl1n22AYgzr5w8ihqPS1Ey5RrPO3GwsJTHJ/tX1Y4 xIAzEulg7goLG7v2Cg8wbJixX77TqAvIXSBKWq47sd0AfnTtE05FvJJkWM2jWy5v T2La30FqZ6gIswccOt3PSxwjLaCSfSqqsB3SobK8iIFP3f3C0Uei2mLrEoDTN7gq Wf8TeiZjwAf3dCx7ErWsuLY4sgvZHvdlpMV/JLrmtOcYbQdL -----END CERTIFICATE-----Generated at Sun Apr 27 17:51:57 2025 by rpki-client