$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fbd00fee-993d-315d-a007-4fc883a54f09.roa File: fbd00fee-993d-315d-a007-4fc883a54f09.roa (raw, json) Hash identifier: yqWY7gL40wVhXZa3Kr4sDnBn4fTw/nV024rGWnY32YU= Subject key identifier: DC:F3:DD:DC:51:89:74:6C:59:F3:90:81:F9:54:C7:06:0A:8E:87:E2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848D211130D199DFA7E05BAEDC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fbd00fee-993d-315d-a007-4fc883a54f09.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 396545 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:13:0d:19:9d:fa:7e:05:ba:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=07d839eb-3342-4987-b23c-87d6dc902cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ea:58:f3:b1:85:af:26:0f:84:3f:14:28:7b: 28:41:1a:c9:f8:c5:7e:47:a1:77:6d:a4:07:1c:63: b7:11:48:ad:17:2b:2a:db:9f:b7:ae:2b:b6:e1:e4: 99:3c:5c:74:cb:2e:81:f6:d4:3c:5b:28:5e:9e:fe: 17:73:a4:fa:4d:eb:50:bf:11:33:4d:6a:af:9b:ae: ba:c2:4e:5d:33:ad:ca:9f:11:94:c8:a3:41:08:4d: 79:bf:8c:37:07:eb:59:a7:3c:bd:52:71:30:64:1b: 78:eb:7d:95:73:a5:34:ef:21:35:67:f0:52:6f:24: 1d:b5:ae:51:25:a6:d9:db:04:ab:ed:35:cb:1c:02: 63:f1:e7:08:79:6b:93:a8:89:42:fd:8f:4f:5e:e8: 16:eb:3c:c3:00:8f:5a:f5:d5:ca:a7:8f:da:e9:bb: 91:5e:2f:13:61:2e:db:92:1f:b6:3e:31:25:14:2e: 43:f7:80:47:3c:f8:48:98:9c:c3:06:60:fe:74:8e: 69:f5:0e:fd:3d:bd:cc:06:f5:f6:d8:f1:79:ca:ef: 14:f4:03:b0:58:11:83:1f:64:99:f7:93:65:67:e0: 73:71:07:3d:41:42:e4:bb:32:b9:d6:2f:7e:7a:fb: c2:7f:de:b0:c8:dd:5a:31:62:cb:b4:77:94:4c:8a: 30:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F3:DD:DC:51:89:74:6C:59:F3:90:81:F9:54:C7:06:0A:8E:87:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fbd00fee-993d-315d-a007-4fc883a54f09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:10:f9:08:ed:9d:e6:45:3c:02:6a:56:12:26:91:ea:73:b6: ae:bc:07:f5:55:2a:c8:48:67:c9:ad:43:cd:42:10:a9:27:50: 03:a6:1e:22:d4:63:4f:ab:02:cb:78:75:0b:af:85:26:f1:27: a4:f4:7a:40:5d:02:f5:68:a5:17:5e:d3:0a:5a:c3:d3:2b:df: e5:e7:76:47:10:21:9f:b0:82:00:b0:5a:35:8e:1e:7f:df:ac: ad:59:2a:b1:33:e3:54:17:66:5b:c3:e8:bc:e6:ec:bf:7e:62: ca:27:31:66:68:92:46:a2:03:3f:f6:b9:62:cd:37:df:46:13: 13:29:4a:af:29:2a:b4:f3:17:1a:cd:50:9d:8e:25:a1:6d:07: 73:8b:80:55:5c:1f:e9:08:42:3d:59:6a:e7:d4:cf:41:f8:b1: 22:bb:cc:fb:44:9a:9f:00:8b:58:af:91:ba:14:30:97:7b:c4: cd:37:78:cb:76:12:f4:bb:40:f8:ec:23:33:be:f9:48:34:6e: d9:7d:d4:e5:60:5f:90:59:57:6c:ae:1f:9b:70:0e:27:b3:04: bd:7f:12:bd:8f:d9:a7:4f:57:57:cd:51:87:87:da:75:6b:e5: c1:11:7e:da:4e:2c:5c:88:e7:91:16:05:a9:a9:73:06:8a:48: b5:01:69:d4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjSERMNGZ36fgW67cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MDdkODM5ZWItMzM0Mi00OTg3LWIyM2MtODdkNmRjOTAyY2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgupY87GFryYPhD8UKHsoQRrJ+MV+R6F3baQH HGO3EUitFysq25+3riu24eSZPFx0yy6B9tQ8Wyhenv4Xc6T6TetQvxEzTWqvm666 wk5dM63KnxGUyKNBCE15v4w3B+tZpzy9UnEwZBt4632Vc6U07yE1Z/BSbyQdta5R JabZ2wSr7TXLHAJj8ecIeWuTqIlC/Y9PXugW6zzDAI9a9dXKp4/a6buRXi8TYS7b kh+2PjElFC5D94BHPPhImJzDBmD+dI5p9Q79Pb3MBvX22PF5yu8U9AOwWBGDH2SZ 95NlZ+BzcQc9QULkuzK51i9+evvCf96wyN1aMWLLtHeUTIowNwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNzz3dxRiXRsWfOQgflUxwYKjofiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmJkMDBmZWUtOTkzZC0z MTVkLWEwMDctNGZjODgzYTU0ZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBgEPkI7Z3mRTwCalYSJpHqc7auvAf1VSrISGfJ rUPNQhCpJ1ADph4i1GNPqwLLeHULr4Um8Sek9HpAXQL1aKUXXtMKWsPTK9/l53ZH ECGfsIIAsFo1jh5/36ytWSqxM+NUF2Zbw+i85uy/fmLKJzFmaJJGogM/9rlizTff RhMTKUqvKSq08xcazVCdjiWhbQdzi4BVXB/pCEI9WWrn1M9B+LEiu8z7RJqfAItY r5G6FDCXe8TNN3jLdhL0u0D47CMzvvlING7ZfdTlYF+QWVdsrh+bcA4nswS9fxK9 j9mnT1dXzVGHh9p1a+XBEX7aTixciOeRFgWpqXMGiki1AWnU -----END CERTIFICATE-----Generated at Sun Apr 27 17:47:22 2025 by rpki-client