$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a3feb23-c9a7-37f7-a255-b73be9dbdb5e.roa File: 2a3feb23-c9a7-37f7-a255-b73be9dbdb5e.roa (raw, json) Hash identifier: R3yOODWstZzCkyvWgfXjA+0Oa9dtD4KfaAa72IXZzac= Subject key identifier: 72:45:C1:7D:44:61:4A:67:48:80:2C:CC:FA:7C:51:F7:C4:64:26:FD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A2DD580279C8B2E282C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a3feb23-c9a7-37f7-a255-b73be9dbdb5e.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396592 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:2d:d5:80:27:9c:8b:2e:28:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=27e05d3c-ae6b-4621-a441-ab99a96940b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7c:03:1b:15:e9:4e:a6:78:f6:1b:b1:f9:20: 14:19:f3:d8:e7:3f:51:07:a4:22:e1:d4:58:09:11: d0:cb:6c:5d:84:47:90:fc:8f:71:26:53:cd:3a:62: 30:b7:dd:ca:db:3b:78:55:ec:9a:14:06:3e:29:71: dd:4a:aa:01:b9:7e:74:c4:90:56:ec:df:b7:09:7d: ce:2f:56:65:20:37:b2:50:49:ab:bb:fa:b5:c1:97: 79:b6:c7:36:61:35:6c:02:ed:d1:80:56:df:40:4f: 56:ca:67:e0:dc:4d:48:ff:20:ac:f8:92:5b:88:57: c7:d9:c6:05:00:f3:10:83:37:6b:22:61:e7:d6:50: 8d:fc:ac:8e:29:01:d0:a5:7d:1a:0b:f3:72:f0:bd: 42:1d:2e:fe:6c:f4:9c:66:2d:1b:b5:54:19:c6:f3: ef:c5:86:d3:e5:f1:a6:b3:7d:e0:88:91:84:dd:36: 96:4a:c9:29:1d:ab:9b:7f:d8:19:58:a5:09:bb:24: 97:d8:58:f9:63:5a:77:71:3b:9f:31:d0:e8:0c:3d: 80:2b:7d:57:05:8c:e4:31:87:4f:a4:57:cf:95:1c: 6d:a6:48:44:fd:2b:f6:17:b6:6f:25:6f:82:c5:70: 3f:08:c9:db:14:c7:da:4b:1c:1c:89:65:47:17:85: fd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:45:C1:7D:44:61:4A:67:48:80:2C:CC:FA:7C:51:F7:C4:64:26:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a3feb23-c9a7-37f7-a255-b73be9dbdb5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:61:65:29:04:74:da:21:d9:e0:f7:68:03:80:26:5b:dd:8c: 50:46:0f:55:1f:1b:fc:ff:98:55:c0:57:1f:a5:6f:5d:8e:4e: 73:6c:41:64:28:a6:4e:e7:6a:23:42:65:dc:87:f0:0d:00:ea: f9:bf:77:41:37:ba:ae:8d:fc:7b:4f:1f:f9:0b:9b:11:43:f3: 9f:eb:d9:9f:2d:4c:e9:32:bb:6f:a8:78:96:23:a6:8c:15:07: e4:c2:b1:a6:4e:64:48:65:bf:66:9a:51:a3:f5:d0:5f:09:a6: 20:2c:d5:eb:23:fa:e9:5e:7f:fb:bf:6f:f6:d9:63:6e:aa:bc: 57:cb:54:6a:03:12:41:ac:0b:44:a8:24:c0:70:bc:e7:1a:86: b5:e3:54:f4:9e:58:7a:79:c7:d6:5d:fa:0b:a5:0d:e7:62:3e: d7:30:10:7c:86:a2:3c:a4:c6:59:14:81:0b:16:22:af:f4:c0: f5:31:97:9c:4f:cf:61:09:27:92:91:8b:17:cb:bb:55:63:9d: 6a:a4:4d:8a:2d:89:92:55:e5:50:6f:83:22:34:16:e2:91:29: b9:95:7c:36:0c:bb:2e:2f:93:77:60:25:b3:90:5c:d4:cb:22: ff:4d:3c:99:fa:db:c7:1f:79:d5:d5:93:4a:ea:e2:5f:c4:7b: 25:32:32:26 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSi3VgCeciy4oLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MjdlMDVkM2MtYWU2Yi00NjIxLWE0NDEtYWI5OWE5Njk0MGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XwDGxXpTqZ49hux+SAUGfPY5z9RB6Qi4dRY CRHQy2xdhEeQ/I9xJlPNOmIwt93K2zt4VeyaFAY+KXHdSqoBuX50xJBW7N+3CX3O L1ZlIDeyUEmru/q1wZd5tsc2YTVsAu3RgFbfQE9Wymfg3E1I/yCs+JJbiFfH2cYF APMQgzdrImHn1lCN/KyOKQHQpX0aC/Ny8L1CHS7+bPScZi0btVQZxvPvxYbT5fGm s33giJGE3TaWSskpHaubf9gZWKUJuySX2Fj5Y1p3cTufMdDoDD2AK31XBYzkMYdP pFfPlRxtpkhE/Sv2F7ZvJW+CxXA/CMnbFMfaSxwciWVHF4X96wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHJFwX1EYUpnSIAszPp8UffEZCb9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmEzZmViMjMtYzlhNy0z N2Y3LWEyNTUtYjczYmU5ZGJkYjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBPYWUpBHTaIdng92gDgCZb3YxQRg9VHxv8/5hV wFcfpW9djk5zbEFkKKZO52ojQmXch/ANAOr5v3dBN7qujfx7Tx/5C5sRQ/Of69mf LUzpMrtvqHiWI6aMFQfkwrGmTmRIZb9mmlGj9dBfCaYgLNXrI/rpXn/7v2/22WNu qrxXy1RqAxJBrAtEqCTAcLznGoa141T0nlh6ecfWXfoLpQ3nYj7XMBB8hqI8pMZZ FIELFiKv9MD1MZecT89hCSeSkYsXy7tVY51qpE2KLYmSVeVQb4MiNBbikSm5lXw2 DLsuL5N3YCWzkFzUyyL/TTyZ+tvHH3nV1ZNK6uJfxHslMjIm -----END CERTIFICATE-----Generated at Sun May 11 05:23:35 2025 by rpki-client