$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc0cfba4-2ba6-317d-931e-3bb47c49738a.roa File: fc0cfba4-2ba6-317d-931e-3bb47c49738a.roa (raw, json) Hash identifier: O+21bNdQ0jNhKN3egMyIfGhK3rAjPUwTfHr01jrFdCo= Subject key identifier: 33:F1:F0:35:99:8B:1E:B2:E0:26:60:59:D9:8D:61:13:A5:42:6A:72 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584961B9A654208A14F707E61000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc0cfba4-2ba6-317d-931e-3bb47c49738a.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 36619 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:a6:54:20:8a:14:f7:07:e6:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=4b2e41ea-ecf5-430f-ab1a-a7d683ba01cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ae:1a:f6:42:49:54:53:9f:16:5f:3d:88:3e: eb:1a:01:a5:91:ff:1f:42:13:60:55:71:54:e8:18: 50:34:6e:50:1b:b0:92:83:fe:83:0b:12:0a:f5:a8: 76:b6:7a:c6:c6:69:77:1a:06:95:b5:e5:68:6e:39: 03:a9:6c:ce:5e:0b:41:0d:2b:8a:7c:c3:a6:74:d1: 81:d6:10:4b:e2:89:8d:b4:f3:aa:f5:cd:6e:ac:ba: b1:8d:9b:b8:61:63:a9:91:a1:6e:36:89:b7:21:3d: 32:41:96:11:19:2c:13:2b:ac:32:e7:e6:c8:d3:a2: a3:e4:64:9c:be:17:df:32:a4:fc:22:fc:69:cf:36: 39:76:b1:4c:4c:68:46:2d:e4:8d:85:7e:54:02:3d: f1:5e:5a:dc:f9:20:e6:a4:e6:57:62:74:10:82:a0: 11:f5:29:9e:2f:af:41:49:0c:1e:01:0c:73:01:e1: 4b:45:b5:d1:a0:f1:61:0e:c5:8e:ba:21:00:e0:c7: b5:36:77:6d:c2:a7:c8:d8:a5:4e:54:c1:6d:77:21: 3c:85:fc:d0:9f:10:bc:c8:ce:64:86:22:e5:af:77: 9f:6c:3a:af:f6:3b:5b:2c:2c:45:0f:e7:24:0b:c9: 7c:6d:06:1a:a8:d0:2e:b8:ef:cc:eb:fc:a1:6a:53: 8b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F1:F0:35:99:8B:1E:B2:E0:26:60:59:D9:8D:61:13:A5:42:6A:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc0cfba4-2ba6-317d-931e-3bb47c49738a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:2e:d3:a9:3d:d0:c2:6c:80:fb:e3:57:44:1b:1a:dd:0b:09: 83:47:e6:e2:c0:e2:cc:f2:65:a7:aa:d3:e2:d4:51:3a:a8:0a: d1:cf:97:6a:c9:a4:b3:8c:a4:16:db:98:63:a7:ae:98:72:ca: 5e:31:94:00:38:a2:64:21:47:39:5d:d6:00:26:3c:a7:d3:94: ef:32:30:8b:5e:87:e9:cb:8f:70:e1:8e:7d:e3:cf:57:52:e9: 3c:81:68:4b:46:eb:aa:9d:d2:7c:79:46:7e:4b:52:4a:bd:2a: 03:3f:4b:aa:5a:d3:f3:9e:11:fb:03:8a:c7:e4:63:3b:82:da: 65:b7:86:bf:06:ba:25:06:65:1c:da:1c:af:da:70:a0:84:a4: 44:2b:cf:61:4e:f9:b4:25:91:c9:47:ec:7f:9a:c4:40:83:be: 5f:ff:89:0d:e8:80:73:78:58:70:71:d4:4d:1f:20:25:00:12: 84:84:13:38:4e:2a:e7:a7:b3:63:17:ef:79:2b:0d:12:d0:77: a7:b8:b6:e4:f6:66:5a:72:5a:1b:74:f1:da:a4:55:52:c7:6a: 8f:75:18:15:68:de:0b:7f:8b:eb:30:b4:1b:df:20:2b:3c:32: 32:e9:d3:dd:df:d3:dd:30:5d:c0:e2:a4:2c:d0:e2:d7:f9:31: f2:71:0b:a4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWElhuaZUIIoU9wfmEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk NGIyZTQxZWEtZWNmNS00MzBmLWFiMWEtYTdkNjgzYmEwMWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp64a9kJJVFOfFl89iD7rGgGlkf8fQhNgVXFU 6BhQNG5QG7CSg/6DCxIK9ah2tnrGxml3GgaVteVobjkDqWzOXgtBDSuKfMOmdNGB 1hBL4omNtPOq9c1urLqxjZu4YWOpkaFuNom3IT0yQZYRGSwTK6wy5+bI06Kj5GSc vhffMqT8IvxpzzY5drFMTGhGLeSNhX5UAj3xXlrc+SDmpOZXYnQQgqAR9SmeL69B SQweAQxzAeFLRbXRoPFhDsWOuiEA4Me1NndtwqfI2KVOVMFtdyE8hfzQnxC8yM5k hiLlr3efbDqv9jtbLCxFD+ckC8l8bQYaqNAuuO/M6/yhalOLMQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDPx8DWZix6y4CZgWdmNYROlQmpyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmMwY2ZiYTQtMmJhNi0z MTdkLTkzMWUtM2JiNDdjNDk3MzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAALtOpPdDCbID741dEGxrdCwmDR+biwOLM8mWn qtPi1FE6qArRz5dqyaSzjKQW25hjp66YcspeMZQAOKJkIUc5XdYAJjyn05TvMjCL Xofpy49w4Y59489XUuk8gWhLRuuqndJ8eUZ+S1JKvSoDP0uqWtPznhH7A4rH5GM7 gtplt4a/BrolBmUc2hyv2nCghKREK89hTvm0JZHJR+x/msRAg75f/4kN6IBzeFhw cdRNHyAlABKEhBM4Tirnp7NjF+95Kw0S0HenuLbk9mZaclobdPHapFVSx2qPdRgV aN4Lf4vrMLQb3yArPDIy6dPd39PdMF3A4qQs0OLX+THycQuk -----END CERTIFICATE-----Generated at Sun Apr 27 18:18:19 2025 by rpki-client