$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a3e9aa4-8d6e-3712-8d35-b8a8d9fe91a3.roa File: 2a3e9aa4-8d6e-3712-8d35-b8a8d9fe91a3.roa (raw, json) Hash identifier: XEIW+kWHwCImuYSbiufQy7O/V4fMSUj/vRekKgYdJ9w= Subject key identifier: 56:06:17:C6:2B:8E:8E:CE:4A:55:CF:6B:E7:DA:81:B7:C4:34:AE:36 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A2D99DD8AA6DE6A382100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a3e9aa4-8d6e-3712-8d35-b8a8d9fe91a3.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396585 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:2d:99:dd:8a:a6:de:6a:38:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=c7eecda3-5bb8-4759-9253-e462a8a803e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6a:c9:03:f6:b8:fd:64:f2:28:dc:3e:3d:8e: b1:d9:e7:fe:fe:14:87:87:41:92:5b:fb:2c:87:fd: 0e:50:b9:bf:f9:85:85:b8:d5:cb:f1:f6:4f:f2:5a: 20:eb:3c:b2:50:35:67:23:69:da:3e:ba:9c:11:45: 9d:4b:31:a4:bc:20:0f:39:56:e3:50:17:3d:af:05: 86:d6:bb:7f:24:85:85:a9:5c:a3:18:a5:f5:18:da: 2d:dd:6e:ba:97:b8:75:03:59:55:1b:54:1a:24:48: a4:43:90:af:5a:a0:d5:b2:5a:07:78:2d:24:34:07: 38:58:a8:4b:e5:63:c2:43:85:a9:3c:73:d5:3e:fe: 90:1f:cf:b8:8a:f6:c8:9c:3e:d9:c4:1e:d5:d4:ea: 0e:1e:02:41:aa:5d:5b:46:b5:f9:2c:14:7e:1b:0f: d4:cb:88:94:cb:0e:85:37:63:6c:d7:2f:f6:e5:f9: 21:44:32:db:b4:5c:07:df:83:d9:3a:54:0d:3c:2a: 16:3b:ee:7d:3f:75:1b:ba:f6:55:06:c1:8e:48:65: ac:4d:ff:7b:44:4d:0b:c7:dd:72:ad:72:4a:e6:1c: 41:85:d7:29:d0:c3:c3:51:79:ab:cb:16:2e:9a:a0: 8e:2e:63:2c:c4:f4:db:20:49:4c:c2:52:75:45:49: 28:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:06:17:C6:2B:8E:8E:CE:4A:55:CF:6B:E7:DA:81:B7:C4:34:AE:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a3e9aa4-8d6e-3712-8d35-b8a8d9fe91a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:b3:0e:f6:dd:08:35:24:91:fd:a8:d1:d4:df:46:d1:90:08: 71:6e:a9:8e:88:07:df:32:61:5a:2b:d4:79:92:10:4c:70:dc: 90:d3:68:c9:27:81:e7:1c:c4:3c:b5:d0:4d:4b:90:83:ce:be: 17:f2:d5:1a:c0:d8:e6:08:91:e6:3e:40:32:16:47:6b:0d:25: 80:1e:50:5a:7d:68:64:ec:95:6b:fd:04:4a:29:b4:26:f0:03: 46:c6:1d:2b:51:4a:9b:0b:95:8c:12:b0:90:d9:77:6f:ff:1b: e4:ca:32:b4:d6:58:53:ba:8f:f6:75:28:7e:a2:c1:d7:68:d9: 93:58:c2:51:d8:ba:d0:22:7f:2c:41:3e:95:de:12:21:ab:2f: a3:23:3d:bf:9a:45:e7:7f:7a:29:c8:01:c6:39:89:33:67:72: a4:24:cd:4b:30:2f:9d:1e:fb:11:69:5d:23:e3:44:67:fc:6f: 7b:8b:e9:81:f4:72:c4:33:1f:ba:77:56:57:0d:6b:5a:a2:41: 32:ef:6c:c8:50:64:1b:34:4e:1a:55:9c:20:68:ef:1d:61:f6: 30:9c:db:be:96:d4:47:7b:15:05:67:3e:af:c7:04:64:cb:16: 3d:2c:d0:76:25:fb:d5:ff:cf:c1:6a:a8:16:86:77:a9:22:ec: be:86:c8:28 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSi2Z3Yqm3mo4IQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YzdlZWNkYTMtNWJiOC00NzU5LTkyNTMtZTQ2MmE4YTgwM2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmrJA/a4/WTyKNw+PY6x2ef+/hSHh0GSW/ss h/0OULm/+YWFuNXL8fZP8log6zyyUDVnI2naPrqcEUWdSzGkvCAPOVbjUBc9rwWG 1rt/JIWFqVyjGKX1GNot3W66l7h1A1lVG1QaJEikQ5CvWqDVsloHeC0kNAc4WKhL 5WPCQ4WpPHPVPv6QH8+4ivbInD7ZxB7V1OoOHgJBql1bRrX5LBR+Gw/Uy4iUyw6F N2Ns1y/25fkhRDLbtFwH34PZOlQNPCoWO+59P3UbuvZVBsGOSGWsTf97RE0Lx91y rXJK5hxBhdcp0MPDUXmryxYumqCOLmMsxPTbIElMwlJ1RUko6QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFYGF8Yrjo7OSlXPa+fagbfENK42MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmEzZTlhYTQtOGQ2ZS0z NzEyLThkMzUtYjhhOGQ5ZmU5MWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQADsw723Qg1JJH9qNHU30bRkAhxbqmOiAffMmFa K9R5khBMcNyQ02jJJ4HnHMQ8tdBNS5CDzr4X8tUawNjmCJHmPkAyFkdrDSWAHlBa fWhk7JVr/QRKKbQm8ANGxh0rUUqbC5WMErCQ2Xdv/xvkyjK01lhTuo/2dSh+osHX aNmTWMJR2LrQIn8sQT6V3hIhqy+jIz2/mkXnf3opyAHGOYkzZ3KkJM1LMC+dHvsR aV0j40Rn/G97i+mB9HLEMx+6d1ZXDWtaokEy72zIUGQbNE4aVZwgaO8dYfYwnNu+ ltRHexUFZz6vxwRkyxY9LNB2JfvV/8/BaqgWhnepIuy+hsgo -----END CERTIFICATE-----Generated at Sun May 11 05:37:42 2025 by rpki-client