$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/005da65d-6cff-3e56-8b54-a46847b3c730.roa File: 005da65d-6cff-3e56-8b54-a46847b3c730.roa (raw, json) Hash identifier: bSkZKA0E+lX7DltpAefZUCCAhgUo9cNlg0HFt3mmPLM= Subject key identifier: 27:15:49:5A:BF:F2:26:29:47:22:8F:66:35:84:E3:EF:67:28:87:8B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A2DB242353775992E4E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/005da65d-6cff-3e56-8b54-a46847b3c730.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 397194 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:2d:b2:42:35:37:75:99:2e:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=431672c6-1483-4a77-aafb-67d94b751b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:09:41:d7:a5:bd:93:b3:02:7a:d6:39:84:20: 1e:06:19:da:57:5e:b4:71:8a:03:02:4e:f2:c3:78: 6d:44:85:28:70:6a:70:8a:bd:af:f9:19:98:ec:b9: 1f:85:bc:76:91:26:97:02:86:8d:e6:25:4f:55:d8: e4:c0:20:96:37:32:87:19:fe:e9:5f:e5:ca:03:08: 5c:af:44:dd:b6:89:30:10:e4:00:80:31:68:3d:f2: 3c:af:92:f9:60:93:3d:c3:cf:0c:3e:5b:2e:64:e3: 16:7a:dc:5a:2d:ab:df:a5:bf:e2:1b:61:6b:02:f7: 15:46:02:dd:27:41:0a:4e:ac:39:42:02:d1:1f:1c: c9:c5:65:c0:ab:34:55:55:44:41:92:dc:13:9e:72: 71:9a:67:90:4f:59:dd:ea:23:92:57:f8:26:76:1b: 43:c5:fc:5a:bb:d5:cd:22:73:fb:0e:d4:3e:bf:9d: a1:9c:50:b5:8c:e9:98:3a:a9:3f:38:9f:da:ef:9c: b0:cc:d6:2c:a7:35:04:c9:d2:98:a9:b3:f4:0a:d7: 80:46:7e:45:49:4c:64:a4:72:65:d3:a3:d0:5f:f7: f0:39:15:b9:9f:4b:65:1b:0f:99:85:68:12:5e:5a: 33:a1:bd:f2:8e:ca:81:b9:d4:85:43:bb:d4:5f:fa: 68:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:15:49:5A:BF:F2:26:29:47:22:8F:66:35:84:E3:EF:67:28:87:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/005da65d-6cff-3e56-8b54-a46847b3c730.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:17:96:01:6f:5b:29:74:c2:ae:5b:9b:a5:05:ce:fc:30:a5: 10:4a:b6:c2:4d:02:70:c8:0f:2c:6f:f9:66:12:5f:3e:f2:3b: 5f:43:c6:14:2c:b6:ed:ac:c9:7d:61:26:d9:34:ab:b9:c0:a0: 35:4d:57:35:94:63:3d:dd:9d:1e:ed:a0:c7:4a:f8:7c:ac:f5: 82:08:e4:99:12:07:a4:c7:bd:8c:5b:be:92:e2:e9:14:1e:36: a7:bf:07:d0:8f:ae:a2:be:db:df:3d:c9:21:14:21:ea:8e:94: 0f:27:68:5d:bb:30:f3:67:09:e6:c1:f0:72:ce:2f:4e:2d:85: 3c:6e:cd:0b:e7:ee:ab:d3:cc:f1:94:03:ce:b7:06:7e:b0:a5: 34:e8:49:f1:72:95:8b:ec:fb:02:f2:78:e6:a8:3e:7b:cd:3e: bd:b0:8b:87:08:1f:c2:f4:0c:a0:16:f4:db:7f:ba:8a:28:1e: d7:07:0f:0f:73:bb:91:82:b9:0d:9f:7e:38:09:c0:7a:46:b8: 09:b3:35:2a:f8:93:00:0b:0e:18:ef:e2:d4:a7:ec:37:62:3d: 5c:9f:84:59:96:8d:19:66:da:ce:81:3b:3a:06:8a:5d:55:1a: ad:df:f7:11:cc:d0:d4:ac:54:c0:cd:e7:c4:8a:20:70:72:9d: 02:d6:b1:f0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSi2yQjU3dZkuTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NDMxNjcyYzYtMTQ4My00YTc3LWFhZmItNjdkOTRiNzUxYjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAlB16W9k7MCetY5hCAeBhnaV160cYoDAk7y w3htRIUocGpwir2v+RmY7Lkfhbx2kSaXAoaN5iVPVdjkwCCWNzKHGf7pX+XKAwhc r0TdtokwEOQAgDFoPfI8r5L5YJM9w88MPlsuZOMWetxaLavfpb/iG2FrAvcVRgLd J0EKTqw5QgLRHxzJxWXAqzRVVURBktwTnnJxmmeQT1nd6iOSV/gmdhtDxfxau9XN InP7DtQ+v52hnFC1jOmYOqk/OJ/a75ywzNYspzUEydKYqbP0CteARn5FSUxkpHJl 06PQX/fwORW5n0tlGw+ZhWgSXlozob3yjsqBudSFQ7vUX/posQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCcVSVq/8iYpRyKPZjWE4+9nKIeLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDA1ZGE2NWQtNmNmZi0z ZTU2LThiNTQtYTQ2ODQ3YjNjNzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA+F5YBb1spdMKuW5ulBc78MKUQSrbCTQJwyA8s b/lmEl8+8jtfQ8YULLbtrMl9YSbZNKu5wKA1TVc1lGM93Z0e7aDHSvh8rPWCCOSZ Egekx72MW76S4ukUHjanvwfQj66ivtvfPckhFCHqjpQPJ2hduzDzZwnmwfByzi9O LYU8bs0L5+6r08zxlAPOtwZ+sKU06EnxcpWL7PsC8njmqD57zT69sIuHCB/C9Ayg FvTbf7qKKB7XBw8Pc7uRgrkNn344CcB6RrgJszUq+JMACw4Y7+LUp+w3Yj1cn4RZ lo0ZZtrOgTs6BopdVRqt3/cRzNDUrFTAzefEiiBwcp0C1rHw -----END CERTIFICATE-----Generated at Sun May 11 08:32:24 2025 by rpki-client