$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da08faf4-e7a9-3dfe-b4d9-331f323f76a4.roa File: da08faf4-e7a9-3dfe-b4d9-331f323f76a4.roa (raw, json) Hash identifier: Rb2/4F2OmJnF8kodEyG6Vmk0LzNgQrPBgHCNfzWTAoQ= Subject key identifier: A0:0C:D7:9E:9D:4F:2B:69:50:3B:33:C2:96:47:15:3A:7B:EB:85:0C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848D2110915FD13C47FF2D67100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da08faf4-e7a9-3dfe-b4d9-331f323f76a4.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 396603 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:09:15:fd:13:c4:7f:f2:d6:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=72c8dab5-d10b-4c2d-af88-bc01245d7fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8a:1b:9c:d5:19:3c:7a:74:46:98:eb:60:3e: 99:5e:ce:1d:f1:fe:38:84:9f:73:2f:c6:8d:a5:8a: 72:db:68:ad:82:dd:88:ae:13:0f:52:e7:75:2a:46: 72:d3:cb:52:ce:d3:4b:1f:18:23:fa:0e:0e:ad:dd: 11:a8:f6:a6:8e:3f:d5:77:de:6f:f6:7d:0b:25:68: d7:20:70:8c:65:84:c2:c7:bf:0b:03:1e:cc:7a:7a: 9c:4e:ea:10:e0:db:b6:2f:21:30:63:b4:da:66:72: 18:28:c0:ec:aa:fd:82:1a:cb:94:fb:56:d6:41:44: b9:fd:77:6a:99:b4:e7:23:d2:3b:e4:0a:58:f7:03: 02:29:e0:8c:6c:24:49:02:8d:b2:54:41:60:1b:c2: 14:99:4b:eb:f8:5b:55:d0:4a:45:91:b5:db:e2:45: 29:9f:9e:f9:2b:69:43:79:cb:54:55:90:31:8d:66: 79:82:b7:91:21:da:a7:85:7d:ec:f6:45:e6:4f:47: ab:54:fe:fc:21:59:23:42:94:bd:18:40:93:d1:f2: 58:da:08:81:0a:4f:45:bf:76:e5:5b:34:a2:88:e8: e1:e2:3f:a0:ee:02:19:2a:6d:40:d4:1e:91:af:31: 12:34:b8:a0:4b:f1:4d:b7:b3:1c:f6:ba:49:46:45: 64:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0C:D7:9E:9D:4F:2B:69:50:3B:33:C2:96:47:15:3A:7B:EB:85:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da08faf4-e7a9-3dfe-b4d9-331f323f76a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:d8:40:1f:80:61:2b:cb:81:1d:f1:e7:b5:8a:18:78:74:87: 8a:a1:d9:85:53:df:6e:86:e1:13:86:b2:89:23:aa:10:90:0a: ce:24:bf:77:9f:c9:4d:52:ce:ed:25:b8:aa:5e:91:cf:b9:24: 7a:72:36:43:2d:43:89:a9:bb:bf:65:65:28:c2:6f:1f:d6:ed: 18:51:6a:dc:cf:ba:5d:c3:fe:51:95:99:de:ce:1a:16:b2:e3: be:a6:18:36:42:f5:84:4b:81:35:fe:4d:67:35:6d:14:2c:82: c4:e5:8b:77:ba:1b:c0:0f:e3:cb:af:07:b4:c3:48:ae:63:3b: 4c:05:0f:c7:33:86:b3:4f:3a:1d:34:2c:3b:4f:42:2c:2a:52: 25:1f:a9:79:e3:09:d8:65:12:8a:90:c5:b1:90:ab:5f:f3:ae: a0:13:f3:10:db:9e:0b:db:7a:24:5c:31:66:58:da:66:8d:6f: 0a:09:38:52:4e:fb:b0:76:59:43:69:aa:08:ac:25:f2:5d:e3: 50:31:b5:d0:de:5d:90:27:8b:6e:29:01:f2:03:46:0d:12:d7: 80:ad:f6:87:3f:1d:76:61:bc:2a:9a:3d:7d:ea:ef:f0:de:d2: 24:c5:f7:ed:e7:4c:0f:f6:b7:b6:89:eb:eb:2a:1a:71:66:b7: 13:71:17:5d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjSEQkV/RPEf/LWcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NzJjOGRhYjUtZDEwYi00YzJkLWFmODgtYmMwMTI0NWQ3ZmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYobnNUZPHp0RpjrYD6ZXs4d8f44hJ9zL8aN pYpy22itgt2IrhMPUud1KkZy08tSztNLHxgj+g4Ord0RqPamjj/Vd95v9n0LJWjX IHCMZYTCx78LAx7MenqcTuoQ4Nu2LyEwY7TaZnIYKMDsqv2CGsuU+1bWQUS5/Xdq mbTnI9I75ApY9wMCKeCMbCRJAo2yVEFgG8IUmUvr+FtV0EpFkbXb4kUpn575K2lD ectUVZAxjWZ5greRIdqnhX3s9kXmT0erVP78IVkjQpS9GECT0fJY2giBCk9Fv3bl WzSiiOjh4j+g7gIZKm1A1B6RrzESNLigS/FNt7Mc9rpJRkVkFwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKAM156dTytpUDszwpZHFTp764UMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGEwOGZhZjQtZTdhOS0z ZGZlLWI0ZDktMzMxZjMyM2Y3NmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCP2EAfgGEry4Ed8ee1ihh4dIeKodmFU99uhuET hrKJI6oQkArOJL93n8lNUs7tJbiqXpHPuSR6cjZDLUOJqbu/ZWUowm8f1u0YUWrc z7pdw/5RlZnezhoWsuO+phg2QvWES4E1/k1nNW0ULILE5Yt3uhvAD+PLrwe0w0iu YztMBQ/HM4azTzodNCw7T0IsKlIlH6l54wnYZRKKkMWxkKtf866gE/MQ254L23ok XDFmWNpmjW8KCThSTvuwdllDaaoIrCXyXeNQMbXQ3l2QJ4tuKQHyA0YNEteArfaH Px12Ybwqmj196u/w3tIkxfft50wP9re2ievrKhpxZrcTcRdd -----END CERTIFICATE-----Generated at Mon Apr 28 01:59:26 2025 by rpki-client