$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0009b2c7-120a-3c60-ac76-01f19f3f3a0f.roa File: 0009b2c7-120a-3c60-ac76-01f19f3f3a0f.roa (raw, json) Hash identifier: dkgWfN44tShxJ9zAwT9ox3csVcmDrW0RTg1Rk+Ak6ME= Subject key identifier: B2:35:D6:E2:74:8C:F9:26:14:D0:E1:9F:28:FD:42:7C:2A:AE:77:24 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4D7B568E08B1719E63780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0009b2c7-120a-3c60-ac76-01f19f3f3a0f.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 397204 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:d7:b5:68:e0:8b:17:19:e6:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=173ca64f-5e34-45bc-8206-8738d66f1f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:16:a4:7a:62:a6:17:f3:b5:0b:e5:05:58:af: 4c:be:a8:65:bc:3b:b1:b2:c5:87:4f:53:dd:c6:16: e4:43:11:0d:e8:f7:16:25:2b:68:5f:d3:da:15:05: e1:68:0c:4f:38:b7:df:d3:a1:c5:56:cc:80:42:e4: ee:95:3d:bc:bf:e9:36:2b:c0:3f:6e:30:8f:2e:1d: 76:c8:79:ce:65:bf:39:44:b6:73:28:d2:d3:72:f4: d8:89:0c:00:af:f4:80:94:80:d4:a8:7c:f1:04:8f: 3a:e6:72:3c:04:9f:33:66:17:97:18:47:d8:6e:ab: f2:f6:c1:c1:79:86:5a:23:3b:a3:9f:87:17:d5:82: 02:39:51:cd:e7:8d:74:1b:06:29:f9:6d:25:72:e3: c8:e3:d8:91:cb:5c:9b:69:de:44:67:e4:ae:24:cd: 97:67:cf:89:7a:97:88:57:8b:04:11:20:91:7e:ff: 20:d0:82:ba:65:83:16:bc:43:c3:8b:59:71:c1:93: 28:a4:aa:fd:97:ae:50:27:35:ea:81:0b:35:fe:a1: 1b:bf:fb:5e:ce:ca:47:40:89:86:51:eb:a7:dd:63: 22:fa:45:d7:c1:7a:c9:da:4b:28:17:c3:b6:b9:ac: d2:20:47:c0:a1:fa:d1:92:79:63:21:79:59:87:25: 75:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:35:D6:E2:74:8C:F9:26:14:D0:E1:9F:28:FD:42:7C:2A:AE:77:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0009b2c7-120a-3c60-ac76-01f19f3f3a0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:f2:ad:32:e2:d4:a7:77:67:5e:9d:8f:1d:d1:ee:f2:87:e8: f8:3a:14:ca:6d:9b:25:bc:2e:36:3e:ef:ce:4d:a6:82:4e:82: 17:f8:f7:91:0e:4a:71:69:2a:67:cf:10:d6:53:da:e4:4a:46: a0:2f:be:6c:90:39:0d:91:33:82:43:28:ce:0b:5b:ce:1b:55: f9:d6:1e:16:84:a5:f2:5b:d9:27:ad:ae:6d:da:5f:9c:15:bc: 4d:8b:97:e1:16:1d:e7:a2:c7:fe:1a:e3:90:b9:14:c9:d3:de: 60:8c:e3:27:0d:0b:47:44:40:65:3b:01:8a:87:ce:5f:93:36: dd:f6:42:1c:5f:5b:ea:79:af:15:d3:f6:ba:5a:4f:07:17:7e: 95:42:bf:bc:88:45:35:cc:9f:70:a6:54:d3:89:82:a7:b6:b8: fa:fd:53:17:08:13:00:33:5e:7e:39:ec:e7:1f:31:dc:ad:42: 8b:fc:e6:8e:71:b2:7c:42:60:3e:62:fc:dc:6b:df:81:68:f9: a1:c7:a3:71:d7:e7:fc:6d:48:49:22:c0:08:7d:12:dd:36:ad: e0:bc:a1:e4:f7:42:7b:fe:13:68:aa:c0:e0:89:b7:95:ef:ed: 91:cf:04:2c:f1:ed:ba:6e:83:97:fc:0d:3a:b6:ce:ec:f2:cd: 8f:8a:2b:44 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1Ne1aOCLFxnmN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk MTczY2E2NGYtNWUzNC00NWJjLTgyMDYtODczOGQ2NmYxZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBakemKmF/O1C+UFWK9MvqhlvDuxssWHT1Pd xhbkQxEN6PcWJStoX9PaFQXhaAxPOLff06HFVsyAQuTulT28v+k2K8A/bjCPLh12 yHnOZb85RLZzKNLTcvTYiQwAr/SAlIDUqHzxBI865nI8BJ8zZheXGEfYbqvy9sHB eYZaIzujn4cX1YICOVHN5410GwYp+W0lcuPI49iRy1ybad5EZ+SuJM2XZ8+JepeI V4sEESCRfv8g0IK6ZYMWvEPDi1lxwZMopKr9l65QJzXqgQs1/qEbv/tezspHQImG Ueun3WMi+kXXwXrJ2ksoF8O2uazSIEfAofrRknljIXlZhyV18wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLI11uJ0jPkmFNDhnyj9QnwqrnckMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDAwOWIyYzctMTIwYS0z YzYwLWFjNzYtMDFmMTlmM2YzYTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBU8q0y4tSnd2denY8d0e7yh+j4OhTKbZslvC42 Pu/OTaaCToIX+PeRDkpxaSpnzxDWU9rkSkagL75skDkNkTOCQyjOC1vOG1X51h4W hKXyW9knra5t2l+cFbxNi5fhFh3nosf+GuOQuRTJ095gjOMnDQtHREBlOwGKh85f kzbd9kIcX1vqea8V0/a6Wk8HF36VQr+8iEU1zJ9wplTTiYKntrj6/VMXCBMAM15+ OeznHzHcrUKL/OaOcbJ8QmA+Yvzca9+BaPmhx6Nx1+f8bUhJIsAIfRLdNq3gvKHk 90J7/hNoqsDgibeV7+2RzwQs8e26boOX/A06ts7s8s2PiitE -----END CERTIFICATE-----Generated at Sun May 11 05:32:12 2025 by rpki-client