$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/024a5c41-d92d-3811-9c6d-965d3cce87f0.roa File: 024a5c41-d92d-3811-9c6d-965d3cce87f0.roa (raw, json) Hash identifier: wQocKHQZEg9iZtwVgrYxdjS7ek68s5uF984l3wkrRDY= Subject key identifier: 2F:6F:3B:6B:D0:76:52:72:F3:65:90:F6:A7:7D:B7:F7:BF:E1:28:CF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4D3AC2BA2FFF3B9459280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/024a5c41-d92d-3811-9c6d-965d3cce87f0.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 396544 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:d3:ac:2b:a2:ff:f3:b9:45:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=7995f23b-b53f-4d00-9f64-b4ded88f0261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a4:66:00:0f:ec:43:0b:94:c5:0d:4b:6d:41: 4a:44:dc:3e:aa:56:f6:73:83:90:b2:b8:7b:76:f5: 98:9f:59:53:e1:da:40:8a:00:20:bf:4b:22:cf:03: 52:24:8a:1f:fa:ab:34:98:36:83:e1:ea:94:80:6e: ff:8c:33:54:92:bb:58:5f:4f:08:72:50:c6:ed:bd: 6e:2c:10:24:3a:15:ae:79:a1:14:7d:b7:33:08:0d: e3:6b:6a:87:18:ca:a8:76:a2:69:7e:b0:08:a0:f3: 63:a8:ad:59:df:87:76:df:1a:c8:15:41:c0:0a:e0: c7:42:b2:06:a8:0d:2e:68:32:74:b8:94:ff:87:d9: 33:c9:19:ca:66:df:b0:bb:ae:07:62:0d:9f:28:c3: e4:50:9d:6e:55:2e:a7:89:f4:ee:be:04:3a:ec:fe: 8d:af:92:ff:fb:4b:2b:cf:9a:22:e0:2d:00:51:9a: f7:cd:6c:33:4c:8e:c1:d0:2a:4b:8b:5c:6b:42:16: 2f:70:62:e0:40:8d:ac:9c:aa:74:85:c0:0c:4a:fb: 7c:69:51:c1:f3:57:bb:26:96:a2:db:c1:3d:b6:9a: bb:d5:68:e4:70:b5:61:07:1f:7d:3c:b4:05:90:a3: 32:fe:1e:f7:2a:eb:56:41:78:77:7b:5f:74:ef:6f: e0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:6F:3B:6B:D0:76:52:72:F3:65:90:F6:A7:7D:B7:F7:BF:E1:28:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/024a5c41-d92d-3811-9c6d-965d3cce87f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:84:bd:38:5c:7f:c3:1f:3b:68:4d:55:ad:0f:7f:e6:dc:ef: e0:14:ce:49:ed:e1:e0:28:3a:73:e9:41:3b:1d:de:77:8a:d0: af:b8:a7:d6:21:5b:61:d9:61:01:0c:58:bc:0f:cd:dc:fe:36: 64:ba:44:9a:56:25:30:5a:b8:c6:2a:6a:fc:ff:e5:31:f7:3c: 27:e4:33:3c:14:39:79:e5:2d:09:f7:ee:f9:43:2b:47:d7:16: 22:33:f2:2c:66:4a:9f:a0:9a:b7:63:76:9c:1a:76:f4:fa:4c: 1f:e1:0b:e5:8e:fa:c4:10:c0:6a:a0:0b:78:87:c0:bd:80:ea: 0e:0b:55:1c:3c:9e:5d:fd:94:31:22:8f:17:9a:63:24:c1:ac: 16:7a:1b:f1:ab:b8:74:1d:38:47:f3:48:d8:63:95:6e:ae:9c: 5d:e7:3e:8b:2a:45:39:85:82:73:14:76:57:8c:4a:79:55:b0: 80:ec:83:e3:26:3a:3e:46:1c:89:6c:1f:6b:7e:c5:64:91:fb: b5:13:08:e5:18:3c:05:59:5d:60:9c:a7:55:9a:46:11:8d:75: 1d:5b:12:25:40:26:7f:b4:4a:e4:84:c2:6c:c4:46:80:4a:7b: 42:e5:6f:e3:1a:5e:7e:8e:cf:ee:15:61:00:0a:e5:8e:b7:9e: b4:fd:da:04 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1NOsK6L/87lFkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk Nzk5NWYyM2ItYjUzZi00ZDAwLTlmNjQtYjRkZWQ4OGYwMjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKRmAA/sQwuUxQ1LbUFKRNw+qlb2c4OQsrh7 dvWYn1lT4dpAigAgv0sizwNSJIof+qs0mDaD4eqUgG7/jDNUkrtYX08IclDG7b1u LBAkOhWueaEUfbczCA3ja2qHGMqodqJpfrAIoPNjqK1Z34d23xrIFUHACuDHQrIG qA0uaDJ0uJT/h9kzyRnKZt+wu64HYg2fKMPkUJ1uVS6nifTuvgQ67P6Nr5L/+0sr z5oi4C0AUZr3zWwzTI7B0CpLi1xrQhYvcGLgQI2snKp0hcAMSvt8aVHB81e7Jpai 28E9tpq71WjkcLVhBx99PLQFkKMy/h73KutWQXh3e19072/gUwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFC9vO2vQdlJy82WQ9qd9t/e/4SjPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDI0YTVjNDEtZDkyZC0z ODExLTljNmQtOTY1ZDNjY2U4N2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBnhL04XH/DHztoTVWtD3/m3O/gFM5J7eHgKDpz 6UE7Hd53itCvuKfWIVth2WEBDFi8D83c/jZkukSaViUwWrjGKmr8/+Ux9zwn5DM8 FDl55S0J9+75QytH1xYiM/IsZkqfoJq3Y3acGnb0+kwf4QvljvrEEMBqoAt4h8C9 gOoOC1UcPJ5d/ZQxIo8XmmMkwawWehvxq7h0HThH80jYY5Vurpxd5z6LKkU5hYJz FHZXjEp5VbCA7IPjJjo+RhyJbB9rfsVkkfu1EwjlGDwFWV1gnKdVmkYRjXUdWxIl QCZ/tErkhMJsxEaASntC5W/jGl5+js/uFWEACuWOt560/doE -----END CERTIFICATE-----Generated at Sun May 11 08:21:51 2025 by rpki-client