$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e8afa36-0e0c-35a7-a7e9-1e0bf0a14c92.roa File: 2e8afa36-0e0c-35a7-a7e9-1e0bf0a14c92.roa (raw, json) Hash identifier: zyPW+We0RqgiSGVke+RuVdp8onUWrj59Syhbxi6db78= Subject key identifier: B2:8C:44:2D:31:B5:AA:7E:CB:BB:9B:20:01:C5:E8:C4:F8:90:36:52 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A29E86E424A9F1438A640 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e8afa36-0e0c-35a7-a7e9-1e0bf0a14c92.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396572 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:29:e8:6e:42:4a:9f:14:38:a6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=363a681f-ba31-4d41-a09d-091ab0d28ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:83:f8:d4:26:6e:28:c2:5d:06:94:a5:95:ba: 62:3c:91:34:51:ce:a4:70:72:17:12:8d:8d:ad:48: a0:84:8e:38:3e:45:b6:d4:a6:e8:ad:92:3e:23:18: 4c:d3:ac:ee:8a:7e:8a:11:03:a9:02:69:a6:f3:69: 29:d5:5b:0b:6a:84:da:af:4f:2a:81:28:e1:6e:55: 07:1e:87:bc:e1:5f:66:91:a5:c2:df:ab:41:4c:14: b0:b0:81:92:ed:69:a5:c7:e0:bb:fd:bb:5a:fd:87: 12:b9:2c:74:88:bd:26:b9:58:9e:d4:86:ec:5d:cd: ba:38:33:4b:1d:d3:03:b7:59:79:0c:cc:31:42:eb: 1e:23:2d:73:78:6f:e9:d5:f8:8d:b5:ad:2f:45:32: 53:4a:47:da:2f:76:5d:0e:9b:e1:e7:5f:95:f9:70: 8f:a5:7b:ec:d3:35:51:b7:b3:e9:da:5c:7d:57:2e: de:0c:28:ef:15:22:7f:a2:87:1f:4c:86:20:e0:ab: 46:18:57:f2:e5:08:de:f9:db:8d:2e:d1:27:af:38: fd:2d:e4:21:a0:64:e3:c6:d7:11:a4:d4:00:95:eb: 48:3a:69:f4:d9:46:58:da:15:60:1c:e2:84:88:c7: cb:32:b3:b2:b1:f6:fd:85:5b:43:a8:e7:de:24:1c: 83:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8C:44:2D:31:B5:AA:7E:CB:BB:9B:20:01:C5:E8:C4:F8:90:36:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e8afa36-0e0c-35a7-a7e9-1e0bf0a14c92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:d4:42:a0:d9:10:da:15:b1:a6:cf:30:a4:85:12:35:d8:15: ae:c7:92:00:2b:54:06:2c:4f:f3:e3:c4:b9:b6:1a:42:cc:21: 05:34:14:d2:a6:4f:e0:9e:8e:08:92:63:cd:43:28:66:05:99: 5e:00:df:d8:b7:d8:2c:4b:37:f6:31:56:f8:e5:57:15:7d:12: dd:76:cb:61:3e:1e:c9:6d:7e:75:28:99:2c:d6:9a:7a:97:9a: d5:55:52:ff:d8:1e:2c:be:85:5d:bb:16:a9:d1:34:43:39:98: 14:f7:7b:a3:89:b9:e1:32:2b:4d:28:79:1f:09:77:6b:26:bf: 5d:73:e5:f7:f5:26:c8:37:48:a1:11:ae:d1:7d:26:4b:7c:94: 54:cd:30:8d:ca:6f:38:ba:dc:ff:75:d7:1d:85:3e:d3:aa:c8: 0d:74:b2:a1:ba:c0:7b:79:19:03:39:20:23:0b:9f:db:ae:88: 16:e0:43:0e:e4:04:84:50:9d:a3:8f:1e:ce:82:d3:01:6d:82: 9f:4e:de:2f:60:e6:77:92:2b:be:f5:95:3b:0f:87:6f:c2:75: 9d:71:1c:7e:df:47:6a:c1:15:1f:90:29:1c:a2:35:91:7c:e7: 05:26:42:36:b2:a5:39:42:e1:ac:6f:be:21:49:ea:d3:33:0c: 62:54:3b:43 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSinobkJKnxQ4pkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MzYzYTY4MWYtYmEzMS00ZDQxLWEwOWQtMDkxYWIwZDI4Y2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoP41CZuKMJdBpSllbpiPJE0Uc6kcHIXEo2N rUighI44PkW21KborZI+IxhM06zuin6KEQOpAmmm82kp1VsLaoTar08qgSjhblUH Hoe84V9mkaXC36tBTBSwsIGS7Wmlx+C7/bta/YcSuSx0iL0muVie1IbsXc26ODNL HdMDt1l5DMwxQuseIy1zeG/p1fiNta0vRTJTSkfaL3ZdDpvh51+V+XCPpXvs0zVR t7Pp2lx9Vy7eDCjvFSJ/oocfTIYg4KtGGFfy5Qje+duNLtEnrzj9LeQhoGTjxtcR pNQAletIOmn02UZY2hVgHOKEiMfLMrOysfb9hVtDqOfeJByDRQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLKMRC0xtap+y7ubIAHF6MT4kDZSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmU4YWZhMzYtMGUwYy0z NWE3LWE3ZTktMWUwYmYwYTE0YzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBu1EKg2RDaFbGmzzCkhRI12BWux5IAK1QGLE/z 48S5thpCzCEFNBTSpk/gno4IkmPNQyhmBZleAN/Yt9gsSzf2MVb45VcVfRLddsth Ph7JbX51KJks1pp6l5rVVVL/2B4svoVduxap0TRDOZgU93ujibnhMitNKHkfCXdr Jr9dc+X39SbIN0ihEa7RfSZLfJRUzTCNym84utz/ddcdhT7TqsgNdLKhusB7eRkD OSAjC5/brogW4EMO5ASEUJ2jjx7OgtMBbYKfTt4vYOZ3kiu+9ZU7D4dvwnWdcRx+ 30dqwRUfkCkcojWRfOcFJkI2sqU5QuGsb74hSerTMwxiVDtD -----END CERTIFICATE-----Generated at Sun May 11 05:26:45 2025 by rpki-client