$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2eca3807-d151-31b9-b13b-46593a0fe39f.roa File: 2eca3807-d151-31b9-b13b-46593a0fe39f.roa (raw, json) Hash identifier: w6FourV0jqb8A1o/bQho7Br7ZySTxhGhSpbbW8vxZjI= Subject key identifier: A7:5C:04:00:89:0F:9D:B1:6C:01:50:CE:75:5D:C1:C1:0E:AF:BD:AC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A2C079FD8B1BC9B3BFF80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2eca3807-d151-31b9-b13b-46593a0fe39f.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396597 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:2c:07:9f:d8:b1:bc:9b:3b:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=a58feeb5-0def-469a-9af7-13b36f18a493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:83:d8:01:e6:cc:a8:1e:d4:6b:1d:80:07:ef: 2a:e1:00:2c:00:1b:36:7a:4d:ca:63:3b:89:c1:ed: 32:72:37:4e:4a:c0:12:b6:7b:9a:40:d6:85:3f:e6: c8:b1:2a:88:ff:a3:f9:c7:35:ce:4b:ac:40:98:76: 75:9e:4e:a0:d9:a4:0a:4a:2e:23:71:93:42:20:6e: f2:3b:f1:4d:0c:3c:4a:21:96:b3:42:92:f8:c3:c5: 82:26:6d:ee:6b:68:86:73:f7:06:14:f8:52:db:c8: 22:98:4f:a7:fa:86:96:22:a2:98:29:9a:ae:07:06: cc:e1:a5:a3:0b:5c:58:06:57:42:c8:40:6a:51:24: 2d:36:13:52:71:fb:50:17:97:79:6f:e1:e1:6b:66: 5c:45:d8:96:dc:d2:95:34:79:21:68:5a:c1:f7:05: dc:75:cb:bf:c0:20:ff:fe:58:30:e6:6e:35:4f:f3: 3b:c2:a7:95:f5:92:11:06:5f:7d:70:89:6b:de:8d: f0:58:6b:f3:dd:0e:9c:14:42:65:43:55:fe:92:af: 16:0b:ad:8c:b2:f2:8d:e4:06:2e:f9:7a:1d:83:8d: 2f:2d:11:15:bf:2f:44:a2:a6:3a:29:da:2c:4d:b7: 09:d1:56:82:5f:6b:c3:b9:42:5a:18:dd:15:89:66: a4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5C:04:00:89:0F:9D:B1:6C:01:50:CE:75:5D:C1:C1:0E:AF:BD:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2eca3807-d151-31b9-b13b-46593a0fe39f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:c6:74:68:a5:d0:ac:9e:57:01:e4:88:41:b5:49:9b:79:d8: e3:27:fa:13:54:90:e5:3e:f3:99:1a:d3:9e:59:1c:25:ee:ea: 4d:c2:96:78:99:86:d5:2d:54:be:36:10:20:57:4f:b4:2e:74: e9:82:f8:a2:5e:8b:64:45:af:85:ee:46:68:1d:ef:16:35:f7: 8a:4c:af:f9:03:6a:79:01:c9:58:74:72:75:c2:b0:cb:9d:b8: 2a:f7:bf:13:5f:19:36:00:aa:59:68:5b:88:f0:ee:f5:a0:c0: bc:1c:e0:37:0e:68:bd:34:00:69:1e:af:24:69:10:c9:4f:fc: 47:e0:f5:5f:89:ef:a5:b1:4e:77:73:45:54:5e:95:6d:3f:9e: 4d:4f:f3:45:3b:68:5e:d4:e3:4e:f1:51:93:13:1e:9d:ec:2b: 74:15:d9:91:ff:ba:b4:4b:1c:bb:a2:41:42:56:82:58:72:0d: 3f:7a:c9:28:15:1c:bc:08:4e:c9:e8:f1:4b:a1:3d:b6:21:9e: b7:bf:73:62:48:13:e5:e4:88:af:ef:a4:1d:62:a4:92:a8:83: 70:c4:9b:01:65:52:2a:c5:9a:3c:25:65:37:5c:81:25:23:8a: bd:54:61:ce:97:cb:7b:74:f9:de:7f:24:d0:51:5a:42:1c:c4: 35:01:d9:62 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSiwHn9ixvJs7/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YTU4ZmVlYjUtMGRlZi00NjlhLTlhZjctMTNiMzZmMThhNDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoPYAebMqB7Uax2AB+8q4QAsABs2ek3KYzuJ we0ycjdOSsAStnuaQNaFP+bIsSqI/6P5xzXOS6xAmHZ1nk6g2aQKSi4jcZNCIG7y O/FNDDxKIZazQpL4w8WCJm3ua2iGc/cGFPhS28gimE+n+oaWIqKYKZquBwbM4aWj C1xYBldCyEBqUSQtNhNScftQF5d5b+Hha2ZcRdiW3NKVNHkhaFrB9wXcdcu/wCD/ /lgw5m41T/M7wqeV9ZIRBl99cIlr3o3wWGvz3Q6cFEJlQ1X+kq8WC62MsvKN5AYu +Xodg40vLREVvy9EoqY6KdosTbcJ0VaCX2vDuUJaGN0ViWaktwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKdcBACJD52xbAFQznVdwcEOr72sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmVjYTM4MDctZDE1MS0z MWI5LWIxM2ItNDY1OTNhMGZlMzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBVxnRopdCsnlcB5IhBtUmbedjjJ/oTVJDlPvOZ GtOeWRwl7upNwpZ4mYbVLVS+NhAgV0+0LnTpgviiXotkRa+F7kZoHe8WNfeKTK/5 A2p5AclYdHJ1wrDLnbgq978TXxk2AKpZaFuI8O71oMC8HOA3Dmi9NABpHq8kaRDJ T/xH4PVfie+lsU53c0VUXpVtP55NT/NFO2he1ONO8VGTEx6d7Ct0FdmR/7q0Sxy7 okFCVoJYcg0/eskoFRy8CE7J6PFLoT22IZ63v3NiSBPl5Iiv76QdYqSSqINwxJsB ZVIqxZo8JWU3XIElI4q9VGHOl8t7dPnefyTQUVpCHMQ1Adli -----END CERTIFICATE-----Generated at Sun May 11 08:20:43 2025 by rpki-client