$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19c9c592-59fb-3320-8350-0573f714f80c.roa File: 19c9c592-59fb-3320-8350-0573f714f80c.roa (raw, json) Hash identifier: tFwmrh5S8rjSIUc7QFexrBAw/Tji7muBm+NFH9sFqA8= Subject key identifier: F9:10:D5:08:8B:75:70:AC:E1:FF:FF:10:00:FD:0C:AD:4E:97:E1:78 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4DD047770875658168200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19c9c592-59fb-3320-8350-0573f714f80c.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 396600 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:dd:04:77:70:87:56:58:16:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=c594f072-cc19-417c-ad1d-2b58bebf317d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:35:73:d3:b3:78:8a:41:62:57:71:87:83:3b: 32:e8:bc:66:7a:48:a2:7c:46:88:85:d5:d9:d0:68: 16:d0:03:f3:53:b7:34:61:81:11:f2:d2:50:42:09: 8d:12:88:cf:03:bb:fa:86:8d:3e:f6:1a:06:b2:a9: c2:78:bb:1f:81:1b:b5:0c:a8:45:a2:98:a7:ff:e9: c0:d8:07:d8:4c:4c:a1:72:db:22:da:ab:bf:71:c3: ae:e5:bf:be:a4:05:b9:6e:ca:f8:b2:ee:14:88:05: a2:82:41:57:65:42:ba:29:62:c4:d2:8f:57:26:aa: e6:fa:17:5e:e1:ac:92:dd:e3:fc:25:f3:3d:fb:6b: 14:3d:d4:b8:0b:2f:20:54:44:c6:13:e9:d6:98:78: 5b:71:e3:8a:e6:3f:3f:8f:b2:e0:f0:25:f2:9e:50: 90:de:b7:41:3e:13:25:94:8a:07:1e:78:0a:cf:55: 63:78:33:2b:03:39:e3:4e:95:c8:6d:85:e8:4a:89: b4:1a:a7:bd:4c:1d:d1:da:86:45:d6:f8:67:d2:c8: b0:eb:44:44:e8:dc:2b:c0:4d:83:38:12:58:ce:d0: 41:3d:c1:e9:b8:7c:2b:3d:f7:69:80:2b:65:bf:b4: 94:a2:df:54:47:c7:30:41:4b:dd:bb:18:a3:a6:6f: 38:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:10:D5:08:8B:75:70:AC:E1:FF:FF:10:00:FD:0C:AD:4E:97:E1:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19c9c592-59fb-3320-8350-0573f714f80c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:ce:ea:b3:ac:60:b3:18:8e:54:2b:50:1e:cd:a0:4e:5b:8b: e0:34:49:ea:e2:f9:83:36:a0:13:77:7b:76:bd:64:e5:95:75: 0e:91:0d:e7:0b:a1:56:db:fb:3e:04:cd:6c:4e:51:a3:8e:32: ba:63:be:cc:2a:1d:15:f2:65:cb:24:a4:7a:5a:a3:aa:0e:6e: 23:cb:69:32:e0:76:ad:24:dc:3c:f9:c4:d9:d3:02:18:91:22: a1:57:e3:5a:9c:9b:97:2d:a5:68:25:89:e0:c7:5d:a9:a1:bd: 06:fa:9e:27:16:72:ef:54:3a:3f:c2:f9:87:91:0d:af:13:8d: 7a:6e:a2:85:c4:a8:28:a4:28:76:52:31:19:40:a6:98:fa:4f: af:db:ca:53:b2:e5:83:48:f1:22:92:11:c1:c0:d6:b9:b9:08: 11:93:9a:37:15:93:49:ba:bd:93:14:87:b8:bc:04:4f:d4:a6: 1f:ac:5d:c6:a8:77:96:34:5c:dc:fb:4c:a2:4c:3e:18:c0:cd: 06:2d:a5:df:d8:52:be:37:ec:ec:e7:3e:3f:2c:60:50:53:c0: 0f:db:4b:53:9c:de:85:10:22:7e:4b:b8:be:02:9d:ad:51:a9: fd:f9:ba:35:d5:66:e4:68:5a:3d:1e:50:dc:e2:c5:68:d1:b2: 86:07:a3:23 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1N0Ed3CHVlgWggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk YzU5NGYwNzItY2MxOS00MTdjLWFkMWQtMmI1OGJlYmYzMTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizVz07N4ikFiV3GHgzsy6LxmekiifEaIhdXZ 0GgW0APzU7c0YYER8tJQQgmNEojPA7v6ho0+9hoGsqnCeLsfgRu1DKhFopin/+nA 2AfYTEyhctsi2qu/ccOu5b++pAW5bsr4su4UiAWigkFXZUK6KWLE0o9XJqrm+hde 4ayS3eP8JfM9+2sUPdS4Cy8gVETGE+nWmHhbceOK5j8/j7Lg8CXynlCQ3rdBPhMl lIoHHngKz1VjeDMrAznjTpXIbYXoSom0Gqe9TB3R2oZF1vhn0siw60RE6NwrwE2D OBJYztBBPcHpuHwrPfdpgCtlv7SUot9UR8cwQUvduxijpm84SwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPkQ1QiLdXCs4f//EAD9DK1Ol+F4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTljOWM1OTItNTlmYi0z MzIwLTgzNTAtMDU3M2Y3MTRmODBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA1zuqzrGCzGI5UK1AezaBOW4vgNEnq4vmDNqAT d3t2vWTllXUOkQ3nC6FW2/s+BM1sTlGjjjK6Y77MKh0V8mXLJKR6WqOqDm4jy2ky 4HatJNw8+cTZ0wIYkSKhV+NanJuXLaVoJYngx12pob0G+p4nFnLvVDo/wvmHkQ2v E416bqKFxKgopCh2UjEZQKaY+k+v28pTsuWDSPEikhHBwNa5uQgRk5o3FZNJur2T FIe4vARP1KYfrF3GqHeWNFzc+0yiTD4YwM0GLaXf2FK+N+zs5z4/LGBQU8AP20tT nN6FECJ+S7i+Ap2tUan9+bo11WbkaFo9HlDc4sVo0bKGB6Mj -----END CERTIFICATE-----Generated at Sun May 11 05:29:30 2025 by rpki-client