$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/06740993-4d98-39ea-b0ad-37f3fe051c91.roa File: 06740993-4d98-39ea-b0ad-37f3fe051c91.roa (raw, json) Hash identifier: YC93B+eDVu+sAfvFsRWo8wUWUQk/BIKukXRNRncoMbc= Subject key identifier: 13:9E:07:9F:B5:24:0A:CF:F0:5E:57:07:02:EF:32:78:53:7F:F5:3D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848F92688D5017106F99B451100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/06740993-4d98-39ea-b0ad-37f3fe051c91.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 396547 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:88:d5:01:71:06:f9:9b:45:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=5d5e9c41-e7d6-431c-8d4f-db53ef01fac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b9:75:92:70:dc:88:96:da:9c:a7:d7:41:b5: 9e:53:75:a6:92:c5:6e:63:f8:7b:58:8e:ab:41:dc: e2:68:07:2b:62:7a:18:26:0a:93:cf:b1:7e:76:48: 5f:c9:44:ef:7e:e1:4e:65:82:32:8c:41:ec:7d:fe: 6f:6d:c3:86:57:7b:df:eb:4e:b7:cd:69:fa:75:14: 46:55:f6:06:2e:c9:10:38:fd:e1:f6:b8:28:bb:4f: 81:02:d3:a0:f2:9f:4d:4c:00:ac:a8:f9:9a:d7:c7: 44:06:18:aa:81:30:96:a4:31:0c:52:d0:1c:a2:79: 0a:5f:66:04:35:28:7f:23:0a:91:13:fb:30:28:e7: 62:cc:b2:e1:79:fc:17:fb:9b:6d:da:18:54:a1:40: e7:08:50:fa:1a:0b:bb:fa:ff:d7:4a:30:50:3d:8f: 46:e3:43:1b:0f:3d:a2:68:8b:1a:ae:91:45:1a:95: e7:8f:31:90:78:c0:8c:49:5a:32:c1:df:0d:00:0a: fe:73:0f:e8:f7:06:f9:84:c4:85:03:c8:3d:e3:65: 40:82:54:c5:e8:fb:cf:68:62:ae:83:55:8e:de:30: 9a:38:c4:ff:3b:6c:f2:91:fa:b4:fc:33:6d:a5:ac: 85:c3:97:ee:31:ea:82:59:f1:9e:1c:6f:02:4e:df: 03:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:9E:07:9F:B5:24:0A:CF:F0:5E:57:07:02:EF:32:78:53:7F:F5:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/06740993-4d98-39ea-b0ad-37f3fe051c91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:5a:d6:85:9d:c9:16:7d:a3:66:c0:40:de:f1:6b:7c:6e:42: 60:bf:32:dd:af:9d:15:7d:79:d2:8c:1b:c3:d9:2d:7c:06:3f: e0:d4:b1:a5:1c:0d:cb:ee:16:e3:27:8d:47:c1:60:80:ee:5f: dc:f4:51:5b:15:1c:1d:b8:e4:3a:85:57:b1:4a:00:f0:4b:1f: e3:8e:c6:05:34:9b:13:45:59:94:a6:c0:7f:0c:1f:e1:8d:96: 22:68:f4:5b:a5:e7:0d:6d:9f:11:45:de:83:83:9a:b1:2c:99: 4c:bd:9d:c3:d5:7c:7a:47:bd:d2:5a:ce:0a:72:3f:84:8e:b5: 1c:32:e0:45:ca:3f:1e:64:60:07:60:1b:1e:d2:41:60:a9:a8: 12:f8:0f:17:c9:aa:6f:01:5b:d1:1c:1d:21:fa:0a:3e:87:4a: 62:75:b1:44:fe:8d:47:62:80:bc:6d:7e:89:b2:0b:98:fc:b6: a6:d5:1b:1f:63:50:ea:16:ab:cf:e2:1c:2a:a6:17:f1:c3:90: 9b:7e:ff:23:80:b2:6d:bc:3d:33:b5:ee:00:f3:99:c1:ea:73: 6e:18:6f:d8:9e:d6:90:c1:b1:99:05:27:8f:6b:55:76:a7:ed: f9:63:dc:ee:61:15:71:d9:e2:99:ab:1f:b5:82:ca:a6:01:a1: 99:03:bb:67 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEj5JojVAXEG+ZtFEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NWQ1ZTljNDEtZTdkNi00MzFjLThkNGYtZGI1M2VmMDFmYWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLl1knDciJbanKfXQbWeU3WmksVuY/h7WI6r QdziaAcrYnoYJgqTz7F+dkhfyUTvfuFOZYIyjEHsff5vbcOGV3vf6063zWn6dRRG VfYGLskQOP3h9rgou0+BAtOg8p9NTACsqPma18dEBhiqgTCWpDEMUtAconkKX2YE NSh/IwqRE/swKOdizLLhefwX+5tt2hhUoUDnCFD6Ggu7+v/XSjBQPY9G40MbDz2i aIsarpFFGpXnjzGQeMCMSVoywd8NAAr+cw/o9wb5hMSFA8g942VAglTF6PvPaGKu g1WO3jCaOMT/O2zykfq0/DNtpayFw5fuMeqCWfGeHG8CTt8DCQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBOeB5+1JArP8F5XBwLvMnhTf/U9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDY3NDA5OTMtNGQ5OC0z OWVhLWIwYWQtMzdmM2ZlMDUxYzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCBWtaFnckWfaNmwEDe8Wt8bkJgvzLdr50VfXnS jBvD2S18Bj/g1LGlHA3L7hbjJ41HwWCA7l/c9FFbFRwduOQ6hVexSgDwSx/jjsYF NJsTRVmUpsB/DB/hjZYiaPRbpecNbZ8RRd6Dg5qxLJlMvZ3D1Xx6R73SWs4Kcj+E jrUcMuBFyj8eZGAHYBse0kFgqagS+A8XyapvAVvRHB0h+go+h0pidbFE/o1HYoC8 bX6JsguY/Lam1RsfY1DqFqvP4hwqphfxw5Cbfv8jgLJtvD0zte4A85nB6nNuGG/Y ntaQwbGZBSePa1V2p+35Y9zuYRVx2eKZqx+1gsqmAaGZA7tn -----END CERTIFICATE-----Generated at Sun May 11 07:26:16 2025 by rpki-client