$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b8d580d-1adf-3325-96ec-121ffd843302.roa File: 2b8d580d-1adf-3325-96ec-121ffd843302.roa (raw, json) Hash identifier: o/m1ypnc9O+RY5IGJvqHFJ54PRVEagiMpmyDrwdZKxE= Subject key identifier: 60:5E:3C:6E:DF:88:00:F4:2E:4B:78:5D:AD:D0:D2:26:AF:DF:96:3B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A2FE8C21F0E3D45BC8BC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b8d580d-1adf-3325-96ec-121ffd843302.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396599 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:2f:e8:c2:1f:0e:3d:45:bc:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=b4142fff-f49f-4d11-9f97-d3e0dd105557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9f:25:ae:fb:85:28:82:81:da:20:4c:02:f8: 23:6c:c2:b5:95:51:93:f3:c3:fa:57:63:70:8c:b4: 2f:ce:b1:be:96:68:69:a8:f9:e7:ec:61:ef:98:fa: b6:19:eb:d8:80:e4:39:99:b6:43:30:d7:8e:5e:63: ff:ec:98:3a:16:a6:96:ad:83:e3:2b:fa:2c:39:63: 83:99:5f:56:fc:f2:dd:92:92:f1:1b:e8:aa:a0:a2: 19:ee:ca:8c:ca:da:6e:3e:ab:18:8b:aa:72:76:1b: d7:6b:8c:e0:23:d1:b8:32:03:a6:6a:4a:01:53:84: 04:54:46:54:7f:4f:a9:2e:33:89:40:ad:5c:7a:29: a2:92:9d:4e:fd:4a:ed:19:bc:64:e9:93:3e:80:e8: 3c:7f:04:89:fc:82:68:16:8d:07:80:62:80:43:20: 19:9d:77:47:39:d6:9b:e0:a1:59:0f:44:cf:9b:0a: 30:85:41:39:a1:10:05:c2:7b:1b:2c:34:4e:42:69: 01:2f:94:94:0d:32:e2:f7:3b:b0:bd:0d:d4:5a:9d: 6a:28:e9:dd:2e:aa:38:a0:88:88:9f:c0:31:ca:b4: ef:f9:f1:c5:a9:c6:14:42:67:a1:30:4e:a3:3e:2a: d7:4e:00:42:b7:a3:36:da:26:28:21:0e:a4:18:9d: 8e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:5E:3C:6E:DF:88:00:F4:2E:4B:78:5D:AD:D0:D2:26:AF:DF:96:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b8d580d-1adf-3325-96ec-121ffd843302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:07:c2:03:dd:f8:c1:6f:2c:2c:0b:db:e8:b8:82:68:e9:02: a4:23:a9:6d:df:1a:41:5d:16:81:15:ef:4e:0c:5b:aa:7f:09: b5:2b:16:5b:6b:d7:2e:a7:21:87:72:e4:58:66:3a:eb:f7:dd: bc:dd:f7:6f:54:5b:a4:bf:43:e5:af:c5:51:b2:cb:43:e5:14: 03:f8:18:05:49:25:a7:7a:aa:ca:49:b7:65:d4:51:7b:00:fb: 77:79:cd:f0:73:e6:73:78:6e:03:8a:6d:6f:3d:c7:ad:86:26: 49:2a:db:ac:54:e6:b6:05:47:35:17:5b:60:dc:f9:02:8c:01: a7:ff:f0:87:14:9f:52:a2:65:94:47:8a:db:a3:06:e3:30:ec: 30:02:41:d1:8c:ce:30:25:3f:bb:f1:7e:f3:86:f4:95:98:0d: 0f:f0:71:72:60:24:21:4b:22:95:97:9a:77:5c:2d:7b:34:4d: c3:ba:d8:04:84:5f:1c:d1:07:86:00:74:cd:0f:ce:cb:fb:a3: 93:0f:59:6b:0c:90:d8:7a:41:cd:18:17:7e:11:4f:ed:38:e1: 44:6f:95:e8:35:d4:d2:9d:3a:0b:c0:21:da:69:65:0a:9c:d5: dd:e9:a8:d3:b0:cb:c8:91:b9:3a:20:10:96:81:02:5b:af:39: 45:39:c4:91 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSi/owh8OPUW8i8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YjQxNDJmZmYtZjQ5Zi00ZDExLTlmOTctZDNlMGRkMTA1NTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm58lrvuFKIKB2iBMAvgjbMK1lVGT88P6V2Nw jLQvzrG+lmhpqPnn7GHvmPq2GevYgOQ5mbZDMNeOXmP/7Jg6FqaWrYPjK/osOWOD mV9W/PLdkpLxG+iqoKIZ7sqMytpuPqsYi6pydhvXa4zgI9G4MgOmakoBU4QEVEZU f0+pLjOJQK1ceimikp1O/UrtGbxk6ZM+gOg8fwSJ/IJoFo0HgGKAQyAZnXdHOdab 4KFZD0TPmwowhUE5oRAFwnsbLDROQmkBL5SUDTLi9zuwvQ3UWp1qKOndLqo4oIiI n8AxyrTv+fHFqcYUQmehME6jPirXTgBCt6M22iYoIQ6kGJ2OtwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGBePG7fiAD0Lkt4Xa3Q0iav35Y7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmI4ZDU4MGQtMWFkZi0z MzI1LTk2ZWMtMTIxZmZkODQzMzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQANB8ID3fjBbywsC9vouIJo6QKkI6lt3xpBXRaB Fe9ODFuqfwm1KxZba9cupyGHcuRYZjrr99283fdvVFukv0Plr8VRsstD5RQD+BgF SSWneqrKSbdl1FF7APt3ec3wc+ZzeG4Dim1vPcethiZJKtusVOa2BUc1F1tg3PkC jAGn//CHFJ9SomWUR4rbowbjMOwwAkHRjM4wJT+78X7zhvSVmA0P8HFyYCQhSyKV l5p3XC17NE3DutgEhF8c0QeGAHTND87L+6OTD1lrDJDYekHNGBd+EU/tOOFEb5Xo NdTSnToLwCHaaWUKnNXd6ajTsMvIkbk6IBCWgQJbrzlFOcSR -----END CERTIFICATE-----Generated at Sun May 11 06:15:18 2025 by rpki-client