$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0984f23a-aa69-33c7-92de-c85b6af33615.roa File: 0984f23a-aa69-33c7-92de-c85b6af33615.roa (raw, json) Hash identifier: U8G0nftRHmhH5vRDAm8MocV+PWJXv4nquo7Jqvat3fc= Subject key identifier: 36:6D:27:96:FE:D7:E3:64:BC:FA:0B:50:CE:15:49:09:80:CB:FF:F1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A324163709A1711D08000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0984f23a-aa69-33c7-92de-c85b6af33615.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396610 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:32:41:63:70:9a:17:11:d0:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=2aa0b4fb-433d-4e7c-a4d0-8f1afda0df0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e1:25:30:74:5b:48:ed:d4:46:73:57:40:b1: 43:91:8b:aa:59:51:60:62:52:7a:0c:1d:e7:78:c6: 59:5a:81:ec:a1:4c:a1:68:b5:60:0c:fb:47:4a:be: 68:0a:d2:63:d8:f7:49:3d:4f:cd:42:7a:ec:8b:e7: b7:c5:5f:bc:c0:8b:f7:5e:ba:f8:b8:02:c9:82:50: 4f:81:4e:8a:10:f4:fa:f7:f4:d6:1b:84:49:4b:83: 3a:77:0f:76:f8:95:b7:32:66:c5:93:29:04:7f:a8: 7b:1e:39:41:34:20:8f:be:2b:a2:f1:07:05:e2:4c: e7:d2:49:3d:c6:ff:82:39:05:bf:01:8d:ac:d8:c0: df:9a:17:1d:9f:e8:56:e1:d6:6a:87:69:50:68:8d: d5:04:2b:4b:25:75:a4:57:0b:3b:b3:74:40:97:ec: 6a:d1:f5:ab:7c:4b:05:c1:d5:c8:b4:b2:95:36:7f: 6e:e8:91:1a:d6:e3:ee:66:01:70:59:2d:94:e1:44: b0:0c:60:57:4a:e5:3b:46:52:42:a5:df:a6:bb:ef: d8:05:b6:e4:8c:eb:1f:e3:67:25:0e:b6:21:01:4e: a0:97:a3:c9:7d:f0:50:cd:9a:53:74:03:3d:84:1b: ed:6a:d5:2f:80:60:59:6f:a2:1a:ab:56:d6:87:2b: b6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:6D:27:96:FE:D7:E3:64:BC:FA:0B:50:CE:15:49:09:80:CB:FF:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0984f23a-aa69-33c7-92de-c85b6af33615.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:26:96:8b:8d:08:58:b7:d6:fc:82:9e:94:5d:6d:77:89:8a: e0:bb:92:bb:c1:82:b0:d9:4d:a8:10:8f:0d:3e:27:ae:aa:fe: 12:f6:66:8c:c5:34:a7:6e:cf:74:56:c8:a4:71:01:7d:0e:10: f7:c9:1e:a9:a9:92:25:48:b6:35:fc:e1:af:6c:48:5b:96:99: c5:7f:b8:0f:dc:5f:90:dd:35:2d:94:33:ee:69:49:43:6d:de: 4f:4f:c4:4f:84:89:10:79:28:1e:64:51:44:7f:5e:de:3f:ad: 0e:6f:d3:89:cf:13:cb:ac:a4:d8:e9:c1:a0:a2:89:c6:07:7e: 01:84:23:f2:01:b8:2f:fc:75:7e:1e:90:42:62:11:17:57:13: 42:b5:1a:17:16:c3:81:e1:02:7a:5e:2b:f0:b9:6d:28:55:7f: 05:3c:90:80:55:7e:2c:5d:66:f3:3e:04:f5:85:64:65:8e:f0: 56:17:1d:44:67:03:f1:45:1b:4b:39:de:f0:e6:0b:cf:e8:7c: f3:d0:71:ff:7a:f2:bc:00:10:6c:c7:76:a9:5d:07:3e:96:73: a5:05:c6:b8:bb:68:0f:dd:ed:d7:15:99:72:ac:8d:f8:e9:98: d9:fd:63:a9:e5:d4:f6:34:46:3f:dd:8a:5c:93:5a:71:3d:48: 9e:66:78:9f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSjJBY3CaFxHQgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MmFhMGI0ZmItNDMzZC00ZTdjLWE0ZDAtOGYxYWZkYTBkZjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeElMHRbSO3URnNXQLFDkYuqWVFgYlJ6DB3n eMZZWoHsoUyhaLVgDPtHSr5oCtJj2PdJPU/NQnrsi+e3xV+8wIv3Xrr4uALJglBP gU6KEPT69/TWG4RJS4M6dw92+JW3MmbFkykEf6h7HjlBNCCPviui8QcF4kzn0kk9 xv+COQW/AY2s2MDfmhcdn+hW4dZqh2lQaI3VBCtLJXWkVws7s3RAl+xq0fWrfEsF wdXItLKVNn9u6JEa1uPuZgFwWS2U4USwDGBXSuU7RlJCpd+mu+/YBbbkjOsf42cl DrYhAU6gl6PJffBQzZpTdAM9hBvtatUvgGBZb6Iaq1bWhyu2wQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDZtJ5b+1+NkvPoLUM4VSQmAy//xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDk4NGYyM2EtYWE2OS0z M2M3LTkyZGUtYzg1YjZhZjMzNjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBGJpaLjQhYt9b8gp6UXW13iYrgu5K7wYKw2U2o EI8NPieuqv4S9maMxTSnbs90VsikcQF9DhD3yR6pqZIlSLY1/OGvbEhblpnFf7gP 3F+Q3TUtlDPuaUlDbd5PT8RPhIkQeSgeZFFEf17eP60Ob9OJzxPLrKTY6cGgoonG B34BhCPyAbgv/HV+HpBCYhEXVxNCtRoXFsOB4QJ6XivwuW0oVX8FPJCAVX4sXWbz PgT1hWRljvBWFx1EZwPxRRtLOd7w5gvP6Hzz0HH/evK8ABBsx3apXQc+lnOlBca4 u2gP3e3XFZlyrI346ZjZ/WOp5dT2NEY/3Ypck1pxPUieZnif -----END CERTIFICATE-----Generated at Sun May 11 05:26:54 2025 by rpki-client