$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7e3efed-8193-3f3d-b0b2-865fd36afff3.roa File: c7e3efed-8193-3f3d-b0b2-865fd36afff3.roa (raw, json) Hash identifier: x1YXsInOBSzcMfkX96ahVEkAfbnBvFpxmKEGLNrZalg= Subject key identifier: 7B:E5:98:E1:4A:77:51:46:95:FC:F0:0F:49:F9:7D:DF:E8:9E:A4:68 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848E59BDF950821F50919934900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7e3efed-8193-3f3d-b0b2-865fd36afff3.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 396580 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:df:95:08:21:f5:09:19:93:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=e70f1e6d-5ed4-4b2b-9545-fb53501b0e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c0:01:e5:37:0f:58:46:09:aa:0e:ca:fb:6b: df:a9:f4:a0:28:36:a4:cb:d9:22:45:18:93:a6:6a: 83:fe:4d:eb:35:19:73:24:9b:08:c4:ac:e2:9a:ef: 90:67:ec:e2:75:ac:be:2a:62:8e:80:b5:08:ed:79: d3:09:13:7f:3a:c8:cc:87:c8:7e:33:4d:14:44:8e: 76:eb:e4:37:6b:e5:d4:ac:9f:28:c8:69:29:40:9a: 42:b6:f8:33:43:49:08:1a:b0:25:fe:48:c3:0d:0a: 4f:3b:e4:04:0b:14:2e:57:fe:55:0a:fb:61:e3:98: ed:5c:60:75:b6:cc:3c:ae:e8:c6:05:a3:01:81:76: 9a:f1:82:fd:4e:3d:d4:b7:4d:5b:2e:12:ea:7b:3b: 27:fc:0b:ed:e5:04:79:34:ea:39:c5:5b:80:eb:99: bd:68:24:0d:ca:2c:a5:3e:b5:70:ba:77:df:70:0f: 0d:5f:c8:6f:eb:90:38:3d:7d:e9:b5:68:25:f6:f1: 76:5f:58:cf:a1:a9:58:43:3d:16:01:36:07:7b:0b: 38:61:1c:27:f4:82:09:aa:d8:ef:e2:2e:5a:31:4a: c6:1e:4d:22:cf:6a:20:26:03:78:28:db:85:02:ab: 57:58:54:c0:0d:c4:0f:65:45:78:75:27:0b:b2:3b: 1a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E5:98:E1:4A:77:51:46:95:FC:F0:0F:49:F9:7D:DF:E8:9E:A4:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7e3efed-8193-3f3d-b0b2-865fd36afff3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:9d:80:65:77:0a:eb:d8:9d:f6:72:c3:4a:9d:f0:06:b4:8e: 09:96:b5:a0:36:73:98:96:02:35:0e:c4:7f:05:18:f3:0c:27: 4c:fb:1c:30:ae:be:81:34:5b:dd:8a:06:40:bf:e9:2f:a5:ba: 08:7a:23:71:5f:39:92:93:d7:c8:0e:b8:5d:6c:64:b7:f2:55: db:31:c4:e9:31:89:7f:14:08:2c:1e:9b:b3:2a:b7:34:e9:7c: fa:52:a0:93:e2:d2:bf:cd:06:eb:3e:44:a6:e9:6b:6d:3c:91: df:83:95:04:98:87:4e:47:6a:2d:38:4c:92:e8:72:4a:86:a7: 93:34:34:ae:26:68:ea:4e:98:49:0c:aa:1f:dc:4f:bc:6d:1f: 0a:3f:14:6a:31:53:84:27:d8:55:b3:2e:02:9d:92:51:bc:73: 6e:2b:71:89:07:ef:e6:66:75:92:4b:69:5c:6e:8e:5c:2c:87: 5b:b9:b5:e1:3c:52:3b:16:4b:af:d6:fd:53:a3:bf:62:d7:6e: c8:8b:fc:dc:14:c0:0a:22:49:04:f3:5b:56:f8:6a:e5:12:1b: f9:85:7a:48:16:b6:20:cf:8c:cb:53:d0:7f:e5:2b:79:f8:c4: 4f:20:bc:cb:5f:ea:6d:da:b5:d7:0e:00:b6:fd:cd:fb:ce:8e: 7f:b1:87:52 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjlm9+VCCH1CRmTSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZTcwZjFlNmQtNWVkNC00YjJiLTk1NDUtZmI1MzUwMWIwZTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcAB5TcPWEYJqg7K+2vfqfSgKDaky9kiRRiT pmqD/k3rNRlzJJsIxKzimu+QZ+ziday+KmKOgLUI7XnTCRN/OsjMh8h+M00URI52 6+Q3a+XUrJ8oyGkpQJpCtvgzQ0kIGrAl/kjDDQpPO+QECxQuV/5VCvth45jtXGB1 tsw8rujGBaMBgXaa8YL9Tj3Ut01bLhLqezsn/Avt5QR5NOo5xVuA65m9aCQNyiyl PrVwunffcA8NX8hv65A4PX3ptWgl9vF2X1jPoalYQz0WATYHews4YRwn9IIJqtjv 4i5aMUrGHk0iz2ogJgN4KNuFAqtXWFTADcQPZUV4dScLsjsalQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHvlmOFKd1FGlfzwD0n5fd/onqRoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzdlM2VmZWQtODE5My0z ZjNkLWIwYjItODY1ZmQzNmFmZmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAYnYBldwrr2J32csNKnfAGtI4JlrWgNnOYlgI1 DsR/BRjzDCdM+xwwrr6BNFvdigZAv+kvpboIeiNxXzmSk9fIDrhdbGS38lXbMcTp MYl/FAgsHpuzKrc06Xz6UqCT4tK/zQbrPkSm6WttPJHfg5UEmIdOR2otOEyS6HJK hqeTNDSuJmjqTphJDKof3E+8bR8KPxRqMVOEJ9hVsy4CnZJRvHNuK3GJB+/mZnWS S2lcbo5cLIdbubXhPFI7Fkuv1v1To79i127Ii/zcFMAKIkkE81tW+GrlEhv5hXpI FrYgz4zLU9B/5St5+MRPILzLX+pt2rXXDgC2/c37zo5/sYdS -----END CERTIFICATE-----Generated at Sun Apr 27 22:59:06 2025 by rpki-client