$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/023560ec-8731-3bb1-ad71-8107d4de8d69.roa File: 023560ec-8731-3bb1-ad71-8107d4de8d69.roa (raw, json) Hash identifier: GqThpgiJ27G9AlCUXFMiR4t61zpj2jZZi0UItW81dHE= Subject key identifier: BB:8B:CF:71:A4:28:5F:55:25:30:61:57:A9:B3:73:5D:B4:27:51:32 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A2B695627A1D71D55AE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/023560ec-8731-3bb1-ad71-8107d4de8d69.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 36629 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:2b:69:56:27:a1:d7:1d:55:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=817167c7-d88f-499d-a756-32dd69bf0306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4e:e1:3f:ac:00:9e:e7:4a:e2:42:ef:32:c8: 77:25:be:eb:f0:1f:a0:6a:7e:cd:f1:42:c5:04:7a: 69:3c:9c:81:e7:7a:ed:d9:b3:a3:a9:3e:bc:be:95: 40:f7:2d:96:6e:aa:1c:d4:99:66:40:8a:4a:53:52: d7:8f:8c:c6:02:fe:ac:53:f4:87:21:2f:06:bc:57: 96:48:06:fd:d6:fc:f7:e4:eb:ce:38:94:03:e7:d6: 51:c7:97:77:44:ee:57:fa:65:92:58:f2:1b:eb:1b: a0:e4:c0:6d:0a:d8:0c:53:71:4d:cf:89:c7:93:a9: 66:fe:b6:31:c1:a8:01:77:b8:99:b9:67:b8:8d:cc: a2:7b:87:e2:c8:dc:47:96:59:aa:a2:17:f2:1f:97: 2c:19:dd:50:e6:7c:f4:89:8d:08:b6:85:4f:0c:b5: 28:87:06:41:ca:89:2d:4f:b1:8d:96:0a:d4:3f:01: 15:bf:89:7e:5d:7d:3c:86:16:bb:67:8d:e9:34:1d: 4a:78:eb:44:3e:f2:ee:74:7f:08:a5:dd:fa:73:06: a7:d1:43:22:7f:02:f2:a8:9f:ab:a8:db:56:b3:2a: 20:1d:7e:d8:ee:c4:be:c6:ee:11:d1:60:ba:90:39: b2:47:60:58:b9:bd:dc:91:2e:1c:e8:3e:e2:db:3e: 3e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8B:CF:71:A4:28:5F:55:25:30:61:57:A9:B3:73:5D:B4:27:51:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/023560ec-8731-3bb1-ad71-8107d4de8d69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:f6:1a:8b:2b:63:78:c4:fc:98:00:c8:56:63:ec:7c:e7:51: 92:4b:5b:4f:59:15:1c:fa:fb:d8:4e:d3:ea:c8:9c:73:34:47: 8b:10:5a:d4:45:b1:6c:62:29:88:c5:34:23:9c:b5:12:42:5a: a9:dc:b9:9f:dd:b3:26:15:42:73:00:39:6d:1a:13:b4:2f:1b: a9:ac:0a:06:75:45:1c:c1:ca:c5:6e:c2:e9:cf:ad:1d:77:fa: 3b:fd:cf:ac:aa:a4:59:b0:a1:4e:bc:2f:a6:fe:b7:02:f8:12: d9:fc:3d:90:1d:5a:80:2e:8d:c5:bf:7d:ab:67:8a:35:f9:85: 7a:a2:8e:7a:42:b5:76:20:1a:f8:33:cf:c0:e5:86:b0:e0:90: 45:9b:1e:af:2a:e9:fa:98:36:02:af:4d:4f:19:ce:9d:5e:02: 5c:cc:29:60:72:d4:31:e6:9e:58:72:1f:9d:af:21:ee:91:64: 83:df:f6:8e:7c:07:a1:86:db:c0:d6:65:60:2d:7e:2b:c3:43: 35:7a:0b:1a:06:05:17:1c:b8:10:2c:2c:21:97:b1:53:ea:27: 19:60:29:d3:71:a1:27:a3:8e:5c:7d:0e:dc:32:e0:9c:44:6c: c2:da:ea:3a:fd:26:e4:0d:e2:83:2a:66:a5:46:61:7c:b6:c2: 75:75:ab:26 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSitpVieh1x1VroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ODE3MTY3YzctZDg4Zi00OTlkLWE3NTYtMzJkZDY5YmYwMzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE7hP6wAnudK4kLvMsh3Jb7r8B+gan7N8ULF BHppPJyB53rt2bOjqT68vpVA9y2Wbqoc1JlmQIpKU1LXj4zGAv6sU/SHIS8GvFeW SAb91vz35OvOOJQD59ZRx5d3RO5X+mWSWPIb6xug5MBtCtgMU3FNz4nHk6lm/rYx wagBd7iZuWe4jcyie4fiyNxHllmqohfyH5csGd1Q5nz0iY0ItoVPDLUohwZByokt T7GNlgrUPwEVv4l+XX08hha7Z43pNB1KeOtEPvLudH8Ipd36cwan0UMifwLyqJ+r qNtWsyogHX7Y7sS+xu4R0WC6kDmyR2BYub3ckS4c6D7i2z4+bwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLuLz3GkKF9VJTBhV6mzc120J1EyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDIzNTYwZWMtODczMS0z YmIxLWFkNzEtODEwN2Q0ZGU4ZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBY9hqLK2N4xPyYAMhWY+x851GSS1tPWRUc+vvY TtPqyJxzNEeLEFrURbFsYimIxTQjnLUSQlqp3Lmf3bMmFUJzADltGhO0LxuprAoG dUUcwcrFbsLpz60dd/o7/c+sqqRZsKFOvC+m/rcC+BLZ/D2QHVqALo3Fv32rZ4o1 +YV6oo56QrV2IBr4M8/A5Yaw4JBFmx6vKun6mDYCr01PGc6dXgJczClgctQx5p5Y ch+dryHukWSD3/aOfAehhtvA1mVgLX4rw0M1egsaBgUXHLgQLCwhl7FT6icZYCnT caEno45cfQ7cMuCcRGzC2uo6/SbkDeKDKmalRmF8tsJ1dasm -----END CERTIFICATE-----Generated at Sun May 11 07:27:19 2025 by rpki-client