$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0816879c-5947-3951-97dc-a4dabd51b462.roa File: 0816879c-5947-3951-97dc-a4dabd51b462.roa (raw, json) Hash identifier: bUlRQjyKJhZLHeORqmWAkzx7d5NoWzfPt3lgaqUU7Ck= Subject key identifier: FC:10:FC:DF:27:C9:2C:AE:FD:25:1A:53:B9:F3:58:CD:B4:9D:51:39 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A2FFF881ED800A6470880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0816879c-5947-3951-97dc-a4dabd51b462.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396580 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:2f:ff:88:1e:d8:00:a6:47:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=5c63f208-b56a-483f-85cc-1f4187adbc03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:76:5a:4c:0f:09:fc:60:93:7a:aa:c7:f6:31: be:b6:d7:b2:e5:f6:0e:66:29:4a:9a:6d:1b:a2:85: d5:bd:22:e4:55:1a:e9:0e:15:10:0c:01:c0:da:42: 07:91:69:27:ee:d0:1b:aa:df:af:a6:44:c4:b4:e9: d7:b7:60:70:8d:a9:88:1c:6d:c7:33:97:29:0e:47: 30:e8:8e:55:3c:83:45:82:1d:bf:64:96:fa:14:ce: 6f:96:ab:be:70:52:ca:0f:61:1a:c6:ed:81:20:10: 9c:8a:3f:e1:38:38:e8:7a:fb:c5:a1:36:c9:8a:ca: 13:18:06:cc:44:33:d9:70:70:38:78:b6:90:70:db: 73:cf:12:19:6f:1e:70:50:62:66:f1:f1:ed:a6:b0: 57:d1:39:16:af:27:a2:f0:3a:5c:2a:a6:27:47:59: 91:a9:4c:a3:0c:aa:54:7f:b3:4d:26:b3:e6:8e:29: bc:7b:25:4b:a5:1f:7e:03:40:e1:d8:34:5d:33:92: 50:7e:22:89:35:30:06:40:f1:8a:2c:b1:51:3e:87: d8:1f:2c:72:28:c6:c8:50:9e:18:91:62:33:6b:4a: c7:1d:14:68:41:c1:cb:43:25:43:e7:b5:71:77:a0: a9:7b:bc:ff:b7:f6:76:19:de:49:06:50:62:93:e7: 64:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:10:FC:DF:27:C9:2C:AE:FD:25:1A:53:B9:F3:58:CD:B4:9D:51:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0816879c-5947-3951-97dc-a4dabd51b462.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:fa:e3:b9:17:1d:0a:1d:08:f1:56:14:d3:00:0b:a1:f2:ac: 24:74:02:44:62:1b:3d:7a:18:e6:91:7b:13:a8:25:49:90:0b: b2:a5:8b:78:9b:3c:2f:dc:de:21:25:1a:b3:bb:7b:2e:e9:dc: 40:c0:f1:53:a4:e7:e5:61:b5:18:da:48:b7:60:0a:8e:84:6e: db:f5:7e:94:b0:c0:b6:22:19:56:39:cf:28:d7:31:da:91:76: a3:8b:f9:81:14:0a:00:e3:fd:e9:09:8a:58:d0:56:90:7a:fe: 66:88:d8:70:85:ed:09:a1:ff:11:d5:a2:96:cb:c7:13:69:c0: 57:93:04:b9:fd:f1:aa:10:ee:ba:fb:d8:3b:90:26:ca:2e:24: 58:0b:fc:e7:0d:ae:6a:04:f7:46:3e:03:7f:fd:10:67:ee:22: 1d:00:7f:e4:5a:c7:30:10:fd:18:48:4c:33:66:9c:44:14:63: c4:59:df:2c:9e:26:47:d0:8d:58:57:24:ed:b1:16:df:2f:49: df:56:4d:7b:ac:b0:06:76:66:fe:42:65:f6:e8:8d:c4:67:09: 55:77:27:65:8f:70:92:02:d0:bc:76:98:c2:c9:98:6b:f7:0b: e0:00:dc:b3:39:75:03:92:0c:70:0f:bf:c0:c8:ab:67:d1:77: 31:70:34:03 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSi//iB7YAKZHCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NWM2M2YyMDgtYjU2YS00ODNmLTg1Y2MtMWY0MTg3YWRiYzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XZaTA8J/GCTeqrH9jG+ttey5fYOZilKmm0b ooXVvSLkVRrpDhUQDAHA2kIHkWkn7tAbqt+vpkTEtOnXt2BwjamIHG3HM5cpDkcw 6I5VPINFgh2/ZJb6FM5vlqu+cFLKD2Eaxu2BIBCcij/hODjoevvFoTbJisoTGAbM RDPZcHA4eLaQcNtzzxIZbx5wUGJm8fHtprBX0TkWryei8DpcKqYnR1mRqUyjDKpU f7NNJrPmjim8eyVLpR9+A0Dh2DRdM5JQfiKJNTAGQPGKLLFRPofYHyxyKMbIUJ4Y kWIza0rHHRRoQcHLQyVD57Vxd6Cpe7z/t/Z2Gd5JBlBik+dkAwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPwQ/N8nySyu/SUaU7nzWM20nVE5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDgxNjg3OWMtNTk0Ny0z OTUxLTk3ZGMtYTRkYWJkNTFiNDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAk+uO5Fx0KHQjxVhTTAAuh8qwkdAJEYhs9ehjm kXsTqCVJkAuypYt4mzwv3N4hJRqzu3su6dxAwPFTpOflYbUY2ki3YAqOhG7b9X6U sMC2IhlWOc8o1zHakXaji/mBFAoA4/3pCYpY0FaQev5miNhwhe0Jof8R1aKWy8cT acBXkwS5/fGqEO66+9g7kCbKLiRYC/znDa5qBPdGPgN//RBn7iIdAH/kWscwEP0Y SEwzZpxEFGPEWd8sniZH0I1YVyTtsRbfL0nfVk17rLAGdmb+QmX26I3EZwlVdydl j3CSAtC8dpjCyZhr9wvgANyzOXUDkgxwD7/AyKtn0XcxcDQD -----END CERTIFICATE-----Generated at Sun May 11 06:36:21 2025 by rpki-client