$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0591d2a4-65c6-3a0e-9f86-ff30114fced4.roa File: 0591d2a4-65c6-3a0e-9f86-ff30114fced4.roa (raw, json) Hash identifier: q6DkGU+3vdoVxboXkRddQIp+TAaaAkIrFDqnJWXiTZg= Subject key identifier: 2E:10:8A:5A:F3:D8:E1:05:93:A6:EB:65:4E:1F:2C:BE:F9:61:FB:79 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A2B447E9FF1E4D6876E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0591d2a4-65c6-3a0e-9f86-ff30114fced4.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396577 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:2b:44:7e:9f:f1:e4:d6:87:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=e8f93f49-be41-4ff8-b1b8-4dfc837f873a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2b:24:cf:7a:81:17:70:10:4a:c2:2d:3c:7a: fa:94:df:f6:e9:f9:eb:76:09:ca:d1:ad:f7:fa:b3: 13:01:52:82:d5:11:ac:72:07:ba:eb:e2:56:32:ce: fe:03:d1:06:12:61:7f:3e:94:ea:5b:cb:7d:fc:07: a8:ea:99:cf:a0:10:37:f0:06:20:33:1d:fc:79:80: 06:0c:fe:d4:73:b8:fa:1c:92:7b:b8:5c:6d:76:59: 76:4f:72:b2:c8:b9:1a:3e:e5:7d:64:d2:20:81:43: 8c:f7:a9:5d:28:2f:d7:8e:49:36:48:60:f1:d9:88: 75:e1:66:ae:5e:1d:7f:1f:03:fa:4b:80:e5:20:f8: bc:33:19:d2:26:4f:cc:cc:f2:50:ca:bf:f3:0d:53: b3:ee:b2:c7:08:29:82:0e:53:6e:37:10:23:a1:29: 36:72:15:6c:61:13:a5:82:86:41:68:de:6b:b2:6a: ff:03:31:e6:bc:7a:54:b3:99:f6:83:eb:b1:c3:42: c3:05:86:7e:1a:30:17:2c:a8:b4:0e:95:89:78:f6: 70:ce:09:55:d8:77:22:65:97:25:59:a4:43:ce:8a: 4b:e3:4b:ec:17:ea:1f:37:43:44:92:80:71:27:33: 3b:30:ab:d3:56:ec:1d:e9:cd:9a:94:e2:5b:9c:8e: 5c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:10:8A:5A:F3:D8:E1:05:93:A6:EB:65:4E:1F:2C:BE:F9:61:FB:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0591d2a4-65c6-3a0e-9f86-ff30114fced4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:82:7e:4c:ea:79:aa:ef:65:91:d8:78:3a:9f:dd:5d:f2:d2: 0f:f1:4f:63:89:54:e3:f6:b3:ac:d1:b3:c7:2f:26:a6:51:8e: 55:3f:cd:6a:32:29:7b:04:10:15:ce:cb:03:55:43:da:b1:8c: 28:b3:7a:3c:b7:54:15:48:74:aa:81:b6:7d:68:f6:0e:0b:b6: 42:aa:0d:3f:cc:dc:86:df:19:d1:12:7a:04:6f:38:19:b2:dd: ae:cc:cc:65:82:62:9c:4e:3c:8c:b7:1a:d6:4b:26:23:2f:5f: 5b:0b:e0:c9:d0:5e:0e:fa:c7:67:b6:af:4f:16:e8:4a:95:73: 34:63:c2:51:cb:86:95:26:44:45:ab:32:18:59:3b:e9:4d:e1: 9e:ca:58:d1:12:78:dc:4c:f9:5a:8e:fd:1f:36:3c:8a:cf:72: 31:1c:2f:f4:60:30:d8:45:76:4e:90:4b:2e:d0:fd:2c:05:5c: 56:1c:75:c8:87:73:11:d6:b7:b6:f5:6e:d0:10:49:c5:7a:7c: 53:f1:4b:5b:0f:76:81:2d:cd:7b:ba:0e:30:34:8f:d4:44:53: 11:f0:4a:7c:88:e3:62:25:10:5e:90:63:1b:1f:a7:6f:44:fa: 86:55:f5:e1:8b:a7:67:af:4b:47:90:c9:b0:3c:9b:a7:11:0d: 4e:6f:2c:ac -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSitEfp/x5NaHbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZThmOTNmNDktYmU0MS00ZmY4LWIxYjgtNGRmYzgzN2Y4NzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Cskz3qBF3AQSsItPHr6lN/26fnrdgnK0a33 +rMTAVKC1RGscge66+JWMs7+A9EGEmF/PpTqW8t9/Aeo6pnPoBA38AYgMx38eYAG DP7Uc7j6HJJ7uFxtdll2T3KyyLkaPuV9ZNIggUOM96ldKC/Xjkk2SGDx2Yh14Wau Xh1/HwP6S4DlIPi8MxnSJk/MzPJQyr/zDVOz7rLHCCmCDlNuNxAjoSk2chVsYROl goZBaN5rsmr/AzHmvHpUs5n2g+uxw0LDBYZ+GjAXLKi0DpWJePZwzglV2HciZZcl WaRDzopL40vsF+ofN0NEkoBxJzM7MKvTVuwd6c2alOJbnI5cfwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFC4Qilrz2OEFk6brZU4fLL75Yft5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDU5MWQyYTQtNjVjNi0z YTBlLTlmODYtZmYzMDExNGZjZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAtgn5M6nmq72WR2Hg6n91d8tIP8U9jiVTj9rOs 0bPHLyamUY5VP81qMil7BBAVzssDVUPasYwos3o8t1QVSHSqgbZ9aPYOC7ZCqg0/ zNyG3xnREnoEbzgZst2uzMxlgmKcTjyMtxrWSyYjL19bC+DJ0F4O+sdntq9PFuhK lXM0Y8JRy4aVJkRFqzIYWTvpTeGeyljREnjcTPlajv0fNjyKz3IxHC/0YDDYRXZO kEsu0P0sBVxWHHXIh3MR1re29W7QEEnFenxT8UtbD3aBLc17ug4wNI/URFMR8Ep8 iONiJRBekGMbH6dvRPqGVfXhi6dnr0tHkMmwPJunEQ1Obyys -----END CERTIFICATE-----Generated at Sun May 11 05:33:49 2025 by rpki-client