$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a1f5a5e-6e2d-3d6a-a9d3-5d0ed67e6b3d.roa File: 1a1f5a5e-6e2d-3d6a-a9d3-5d0ed67e6b3d.roa (raw, json) Hash identifier: 6DzICXLeZ+03C8lcVa7XD3vPYVqNtHcBYK+yX4lSIvc= Subject key identifier: 69:A0:5A:B8:B2:74:E7:98:D4:92:F7:BF:7A:69:B2:44:62:EC:05:70 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A32DF25A202E3944966C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a1f5a5e-6e2d-3d6a-a9d3-5d0ed67e6b3d.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396551 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:32:df:25:a2:02:e3:94:49:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=c8bc4c41-d349-4729-a2ba-ad31ff905f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:80:27:83:c8:d3:38:d9:59:e4:99:35:ba:86: 63:ef:9a:d1:a5:bc:08:8e:6f:b5:46:c1:51:9f:30: 46:86:c7:cd:e2:17:a6:b5:55:f1:04:f6:02:7f:35: 1c:85:cb:75:f3:19:ba:f1:7a:0c:14:05:04:0f:74: d8:9f:87:9c:11:e6:c2:6c:d9:7d:92:d4:7f:24:03: f9:d7:bf:f0:e1:c1:bd:04:ec:b5:f2:e4:33:cc:58: 37:c3:9c:4b:a1:c7:2a:cb:81:7e:a4:2f:2a:df:03: d3:74:61:4c:ce:eb:1d:08:5c:90:e2:3b:1d:25:0f: 9c:91:26:f8:61:0e:96:b5:81:46:20:ac:f1:6d:8e: 8a:67:59:39:52:4f:54:a1:7b:ae:21:fb:cd:c6:6d: e4:01:4d:fc:b5:de:2c:1c:d0:96:ec:87:f0:18:0e: 0d:6b:54:95:c9:5f:c9:08:80:6d:5c:ed:95:ea:95: 55:a9:2e:e0:aa:ef:07:91:e6:c4:47:c7:5b:7e:61: 4e:ae:94:57:94:70:df:47:c6:79:35:70:2a:85:05: 3d:9f:ac:d5:83:58:8c:38:ba:b7:97:b8:84:75:5f: 2d:57:1e:8e:06:71:b4:47:f7:1c:9a:06:c2:db:74: 8f:3d:e2:82:03:04:b0:ca:f3:7d:b0:75:2a:3f:42: 49:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A0:5A:B8:B2:74:E7:98:D4:92:F7:BF:7A:69:B2:44:62:EC:05:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a1f5a5e-6e2d-3d6a-a9d3-5d0ed67e6b3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:cd:7d:03:f6:be:16:79:4a:1e:be:30:90:86:1f:fd:ea:51: cb:84:ac:d5:f1:73:48:c3:cd:6c:94:7c:17:86:55:92:e2:eb: a0:d2:7f:16:ee:a3:eb:26:64:1a:0a:5f:31:61:d2:6a:49:9c: 15:28:0b:c8:5f:a0:b6:4f:90:bb:e9:13:dd:f8:8b:6d:0b:a2: 93:f4:6a:71:88:dd:6d:6f:d0:06:76:f6:b4:dd:bb:04:e3:cb: c1:d1:f9:af:2f:4b:46:71:82:fc:a8:39:8c:cf:bb:93:2b:d5: 09:87:eb:f9:58:f0:5d:23:09:c6:c5:2b:c7:63:e2:a0:61:c5: 49:8c:83:47:be:d2:e8:c9:da:7a:a7:92:0d:d8:d3:fb:0c:34: 6d:94:42:c4:8c:13:95:7c:7c:ed:5f:91:25:91:ac:69:a7:dd: 76:48:a2:90:a0:71:77:6c:64:1b:1a:e3:31:31:30:78:e2:f2: 51:f2:77:6e:58:47:c2:2c:04:0a:c7:8c:19:2b:c7:86:14:ac: c2:29:72:ff:62:6d:e5:40:c6:b2:57:0e:07:e2:0f:8c:ef:25: f0:03:39:bb:80:52:b6:0d:e3:fd:eb:cc:92:0f:0b:c6:7b:80: 57:5d:fa:e4:cf:42:8a:58:bf:b6:6b:6b:59:fa:a0:7c:ba:47: 57:62:2e:02 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSjLfJaIC45RJZsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YzhiYzRjNDEtZDM0OS00NzI5LWEyYmEtYWQzMWZmOTA1ZjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoAng8jTONlZ5Jk1uoZj75rRpbwIjm+1RsFR nzBGhsfN4hemtVXxBPYCfzUchct18xm68XoMFAUED3TYn4ecEebCbNl9ktR/JAP5 17/w4cG9BOy18uQzzFg3w5xLoccqy4F+pC8q3wPTdGFMzusdCFyQ4jsdJQ+ckSb4 YQ6WtYFGIKzxbY6KZ1k5Uk9UoXuuIfvNxm3kAU38td4sHNCW7IfwGA4Na1SVyV/J CIBtXO2V6pVVqS7gqu8HkebER8dbfmFOrpRXlHDfR8Z5NXAqhQU9n6zVg1iMOLq3 l7iEdV8tVx6OBnG0R/ccmgbC23SPPeKCAwSwyvN9sHUqP0JJdwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGmgWriydOeY1JL3v3ppskRi7AVwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWExZjVhNWUtNmUyZC0z ZDZhLWE5ZDMtNWQwZWQ2N2U2YjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAAzX0D9r4WeUoevjCQhh/96lHLhKzV8XNIw81s lHwXhlWS4uug0n8W7qPrJmQaCl8xYdJqSZwVKAvIX6C2T5C76RPd+IttC6KT9Gpx iN1tb9AGdva03bsE48vB0fmvL0tGcYL8qDmMz7uTK9UJh+v5WPBdIwnGxSvHY+Kg YcVJjINHvtLoydp6p5IN2NP7DDRtlELEjBOVfHztX5Elkaxpp912SKKQoHF3bGQb GuMxMTB44vJR8nduWEfCLAQKx4wZK8eGFKzCKXL/Ym3lQMayVw4H4g+M7yXwAzm7 gFK2DeP968ySDwvGe4BXXfrkz0KKWL+2a2tZ+qB8ukdXYi4C -----END CERTIFICATE-----Generated at Sun May 11 05:23:41 2025 by rpki-client