$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f3027de9-614c-371c-9569-5e050888e60d.roa File: f3027de9-614c-371c-9569-5e050888e60d.roa (raw, json) Hash identifier: j8zLAAAgEKSIUybNE2FyHNRNX4M0SS2g/eat8sPXaoI= Subject key identifier: B6:08:95:34:C1:2F:67:ED:FC:95:0E:9D:B4:1B:23:87:DB:FB:D5:95 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849194197A235E8FA9748E59EF0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f3027de9-614c-371c-9569-5e050888e60d.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 396616 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:97:a2:35:e8:fa:97:48:e5:9e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=ed325152-6b9c-4cc2-8a1e-ed8739cdc345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9f:e9:40:90:bc:9c:be:20:81:81:7e:79:66: b5:7b:ab:cb:41:ba:eb:c0:87:4a:c8:51:7f:00:f7: 37:77:94:0a:0e:f7:cf:8e:64:65:15:e6:dd:c1:d3: bf:1a:df:eb:9d:34:97:41:4c:42:90:59:03:96:d1: e7:85:a1:5e:e6:05:a4:6d:81:c5:d2:de:9a:af:ce: fa:9f:2c:8d:2c:aa:8e:e4:6e:2e:65:bd:3b:f8:bd: 02:32:e4:21:da:74:e0:1c:66:ed:12:68:fc:03:a6: 56:d6:f1:36:cf:98:c2:a9:a5:02:d4:8d:e9:43:64: 1a:5c:cd:09:10:b1:07:e6:cd:78:a2:10:d9:f1:ba: b4:50:55:4f:be:e4:0b:87:ad:6a:9d:3a:0c:4e:59: 3d:a9:e0:93:ae:8e:7e:ba:e3:b7:40:f9:d2:8d:40: 2f:3e:96:4d:9f:09:9b:50:10:b7:74:79:a3:33:ff: ff:d4:e9:c6:97:cd:53:a1:c8:2d:9a:48:ed:22:95: 55:6b:c5:d6:e6:3a:6c:6a:e9:95:5b:0b:5d:7d:0e: 53:d3:fc:5f:5c:32:55:df:16:39:7c:b2:c0:e2:73: e8:ef:8d:8d:71:8f:cc:f9:f8:5b:22:9a:36:6c:8c: 63:04:c5:63:42:c6:10:84:6a:02:a0:a3:a8:ea:e1: 50:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:08:95:34:C1:2F:67:ED:FC:95:0E:9D:B4:1B:23:87:DB:FB:D5:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f3027de9-614c-371c-9569-5e050888e60d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:c7:a4:77:aa:8d:1a:01:4f:8e:d9:1d:7a:74:8f:e1:d4:52: 50:ec:73:8a:db:a8:a7:7c:16:da:3d:47:86:f0:f2:ee:be:ae: e0:d6:b7:37:79:1e:26:3b:46:2d:b8:23:5c:7e:e2:3f:1c:e1: c9:52:bb:27:ea:79:9a:4c:1a:c6:5c:96:07:82:66:a3:e4:91: 93:e0:a5:ad:cd:8c:36:f1:e8:1d:5e:1b:6f:34:1b:be:92:13: 14:98:d9:78:36:bd:60:16:87:e4:f7:8c:64:74:33:f3:4e:5a: 08:4d:bc:fa:75:4e:5e:ee:8b:77:5c:43:e9:e9:8b:65:61:9b: bf:57:a3:00:f4:56:31:56:f8:4a:3d:95:b3:2a:75:fd:d6:28: 68:80:ed:3e:7b:4d:43:a8:35:a8:b0:3c:4e:49:14:ec:3d:ba: 54:24:24:74:94:a3:c9:9d:5d:bb:e2:e8:dc:8d:9f:40:12:8c: 67:ae:2e:7e:f3:83:79:8f:1f:09:cb:84:2b:37:6f:2e:7e:50: 30:1c:89:ef:5b:de:bd:8e:61:c5:02:37:7d:c3:39:80:6d:07: bd:d9:b9:12:ad:2f:31:01:e5:62:72:e3:33:a3:18:9d:dd:06: c8:8b:01:6d:04:32:f7:52:60:1e:67:51:f0:39:48:4f:da:42: 0b:3c:74:48 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkZQZeiNej6l0jlnvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk ZWQzMjUxNTItNmI5Yy00Y2MyLThhMWUtZWQ4NzM5Y2RjMzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5/pQJC8nL4ggYF+eWa1e6vLQbrrwIdKyFF/ APc3d5QKDvfPjmRlFebdwdO/Gt/rnTSXQUxCkFkDltHnhaFe5gWkbYHF0t6ar876 nyyNLKqO5G4uZb07+L0CMuQh2nTgHGbtEmj8A6ZW1vE2z5jCqaUC1I3pQ2QaXM0J ELEH5s14ohDZ8bq0UFVPvuQLh61qnToMTlk9qeCTro5+uuO3QPnSjUAvPpZNnwmb UBC3dHmjM///1OnGl81TocgtmkjtIpVVa8XW5jpsaumVWwtdfQ5T0/xfXDJV3xY5 fLLA4nPo742NcY/M+fhbIpo2bIxjBMVjQsYQhGoCoKOo6uFQcwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLYIlTTBL2ft/JUOnbQbI4fb+9WVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjMwMjdkZTktNjE0Yy0z NzFjLTk1NjktNWUwNTA4ODhlNjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA9x6R3qo0aAU+O2R16dI/h1FJQ7HOK26infBba PUeG8PLuvq7g1rc3eR4mO0YtuCNcfuI/HOHJUrsn6nmaTBrGXJYHgmaj5JGT4KWt zYw28egdXhtvNBu+khMUmNl4Nr1gFofk94xkdDPzTloITbz6dU5e7ot3XEPp6Ytl YZu/V6MA9FYxVvhKPZWzKnX91ihogO0+e01DqDWosDxOSRTsPbpUJCR0lKPJnV27 4ujcjZ9AEoxnri5+84N5jx8Jy4QrN28uflAwHInvW969jmHFAjd9wzmAbQe92bkS rS8xAeVicuMzoxid3QbIiwFtBDL3UmAeZ1HwOUhP2kILPHRI -----END CERTIFICATE-----Generated at Mon Apr 28 02:00:21 2025 by rpki-client