$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a747e9d-7d3e-3408-8911-e50e24f0b6db.roa File: 1a747e9d-7d3e-3408-8911-e50e24f0b6db.roa (raw, json) Hash identifier: z5CotlZ6MkKJF5sCKIGSpgdfReKCbZY6mfu1u7vzZIM= Subject key identifier: A8:22:BB:B2:0B:97:8D:61:83:22:CC:14:17:E8:CE:69:4A:11:AC:9D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A2EF5593539A4A860C080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a747e9d-7d3e-3408-8911-e50e24f0b6db.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396592 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:2e:f5:59:35:39:a4:a8:60:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=e977b862-8f4f-451b-92d7-1d60f4b5aaa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c7:e6:54:8d:e9:3f:8a:19:52:18:1d:a3:cd: f4:fa:a1:45:af:f6:18:99:99:b8:44:c9:c0:61:dc: 97:ec:2e:ed:5f:76:34:4a:dd:92:47:f1:73:e7:bd: 56:32:2e:bf:35:b8:8c:74:5b:35:8d:e0:eb:8d:44: 8e:94:54:57:b6:d8:10:fa:4e:01:e0:d1:7d:c9:f2: f1:dd:2d:ea:f1:19:3f:fc:2f:db:5f:66:67:a5:5e: 40:48:c1:df:82:f0:11:6e:02:9a:be:eb:6e:84:8b: b3:27:53:56:9a:a0:8c:0c:85:40:7f:1e:bf:87:1e: 10:55:0d:5a:bc:b0:3c:cc:80:d5:73:f9:e6:73:8b: be:b9:c5:29:37:ec:7b:49:f1:ae:36:cd:4f:b8:05: 91:2e:80:23:86:a3:98:0d:d1:9b:d1:13:cd:dd:50: be:1c:4c:2a:0b:bf:20:67:b6:66:3c:3a:b0:c4:00: c4:42:85:62:5b:08:32:d4:33:9b:99:b9:d7:2e:f9: 40:77:9d:c0:a5:49:95:d1:ec:64:1d:e8:48:38:a5: 37:24:27:86:29:4f:27:39:74:60:26:b2:a1:79:27: bb:89:19:ea:5e:ca:6c:c2:08:8a:15:fe:4b:76:b9: 59:e0:4c:ed:67:94:2b:d9:10:fe:71:6d:1d:be:d8: 43:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:22:BB:B2:0B:97:8D:61:83:22:CC:14:17:E8:CE:69:4A:11:AC:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1a747e9d-7d3e-3408-8911-e50e24f0b6db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:d6:59:28:6c:2d:9f:ba:2b:c8:58:56:ec:65:09:c4:1f:d7: 65:f4:cb:27:8e:33:0c:0a:f6:b8:40:f4:30:56:06:95:e0:fe: 2c:10:e5:c1:f7:82:d7:a3:15:63:a5:5d:2d:59:c3:c7:bc:17: b9:aa:c4:2c:e0:43:e0:20:4e:c3:0d:a3:d0:95:e1:a7:d1:cd: 5f:bc:81:12:c9:b8:f8:f5:82:01:37:cb:3e:03:3f:c7:08:8c: ae:55:48:12:dd:ea:74:f9:6e:dc:f3:7e:f2:a5:20:82:ae:8b: c6:30:df:40:b1:a5:44:4d:cd:46:e2:b0:c1:87:1a:6b:2e:e2: 90:ce:4c:bf:48:e7:2a:28:bc:c9:a0:b3:4a:75:75:f9:4a:9d: de:86:2e:6b:b5:d5:e0:b7:5f:37:75:4f:1a:f0:6b:6c:05:3d: 84:ee:7f:39:04:4a:c5:5f:6e:33:0c:3f:7f:e3:0b:1b:b9:35: 66:e7:ee:25:63:ac:98:25:46:a7:9a:e1:60:a3:41:bf:84:00: 5e:92:e8:f2:fd:a8:2f:4c:41:26:2c:54:a2:eb:58:c4:a9:e7: 82:ac:b4:ff:41:21:ea:e8:e3:2a:47:ef:fa:3c:9e:c6:9e:3d: 46:61:59:99:c2:65:2b:cc:2c:92:a5:a6:63:05:4d:04:7a:c5: d3:e0:b5:38 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSi71WTU5pKhgwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZTk3N2I4NjItOGY0Zi00NTFiLTkyZDctMWQ2MGY0YjVhYWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18fmVI3pP4oZUhgdo830+qFFr/YYmZm4RMnA YdyX7C7tX3Y0St2SR/Fz571WMi6/NbiMdFs1jeDrjUSOlFRXttgQ+k4B4NF9yfLx 3S3q8Rk//C/bX2ZnpV5ASMHfgvARbgKavutuhIuzJ1NWmqCMDIVAfx6/hx4QVQ1a vLA8zIDVc/nmc4u+ucUpN+x7SfGuNs1PuAWRLoAjhqOYDdGb0RPN3VC+HEwqC78g Z7ZmPDqwxADEQoViWwgy1DObmbnXLvlAd53ApUmV0exkHehIOKU3JCeGKU8nOXRg JrKheSe7iRnqXspswgiKFf5LdrlZ4EztZ5Qr2RD+cW0dvthDkQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKgiu7ILl41hgyLMFBfozmlKEaydMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWE3NDdlOWQtN2QzZS0z NDA4LTg5MTEtZTUwZTI0ZjBiNmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBS1lkobC2fuivIWFbsZQnEH9dl9MsnjjMMCva4 QPQwVgaV4P4sEOXB94LXoxVjpV0tWcPHvBe5qsQs4EPgIE7DDaPQleGn0c1fvIES ybj49YIBN8s+Az/HCIyuVUgS3ep0+W7c837ypSCCrovGMN9AsaVETc1G4rDBhxpr LuKQzky/SOcqKLzJoLNKdXX5Sp3ehi5rtdXgt183dU8a8GtsBT2E7n85BErFX24z DD9/4wsbuTVm5+4lY6yYJUanmuFgo0G/hABekujy/agvTEEmLFSi61jEqeeCrLT/ QSHq6OMqR+/6PJ7Gnj1GYVmZwmUrzCySpaZjBU0EesXT4LU4 -----END CERTIFICATE-----Generated at Sun May 11 05:38:47 2025 by rpki-client