$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37af780a-7ad0-3a7d-8e72-f9650b109811.roa File: 37af780a-7ad0-3a7d-8e72-f9650b109811.roa (raw, json) Hash identifier: xeJyjGGdO/bxVvNBKy7mncZrzBvLfk/AWxZ5gYDi6XE= Subject key identifier: 7B:23:29:5B:26:BE:38:00:74:EB:AF:92:56:1C:2E:3B:6C:BE:63:D0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4D5C223CEDE0BF0C1CF00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37af780a-7ad0-3a7d-8e72-f9650b109811.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 20172 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:d5:c2:23:ce:de:0b:f0:c1:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=51a399fc-a1e9-481d-be12-1e058b1c4710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bd:bf:f1:45:28:6e:99:b0:fe:6a:a9:e2:a6: 5c:b9:bf:c8:36:00:a7:37:7d:0f:0f:99:42:4e:53: 41:c8:42:32:6f:2a:52:86:bc:22:ba:26:36:d2:64: 96:a9:42:e6:5c:60:67:57:9e:b2:20:a9:58:fb:95: c8:d1:9d:03:4f:e8:73:b1:a8:97:47:a3:72:1d:9c: da:2c:a8:e9:ee:7a:cb:60:dd:46:90:01:14:f9:d3: c2:f6:a9:56:c0:71:32:34:1e:84:85:a0:e3:8c:5f: 82:39:f9:a9:88:05:09:67:3e:78:84:c1:bc:12:90: bc:20:90:9d:1f:1f:78:ab:23:82:89:22:94:8f:79: 9e:17:a9:b0:f0:bc:08:40:79:58:0c:9e:84:68:cb: 06:06:79:37:39:87:91:f5:50:0a:1f:4d:2a:89:d2: 4e:3f:fb:1b:22:f3:9f:f4:33:d3:53:9d:72:ec:e8: ec:11:21:fd:0c:53:fd:8f:37:d0:01:fb:32:01:ca: ba:d4:54:c0:d8:3d:62:06:59:a7:c5:1b:b9:80:c4: af:cb:ce:4a:67:31:12:2f:5a:8e:f0:41:59:28:07: bb:3e:c7:4e:dd:de:15:eb:2b:e3:91:e8:5c:0c:03: cb:b6:fd:e4:e8:2b:8e:d5:60:bb:1c:eb:2d:28:37: c4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:23:29:5B:26:BE:38:00:74:EB:AF:92:56:1C:2E:3B:6C:BE:63:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/37af780a-7ad0-3a7d-8e72-f9650b109811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:ef:65:47:ce:23:bb:e4:e2:a5:40:09:f2:6b:3f:41:9c:f8: b6:5c:17:67:f3:49:f3:09:62:0b:4c:19:b8:b3:ca:ba:a8:f6: ed:5c:85:67:b9:38:49:26:0b:6b:0e:b5:65:dc:85:b5:24:a6: 37:71:bb:39:67:f4:f4:60:50:6e:4f:df:93:4e:8d:13:4a:06: 27:9c:9b:2b:19:e6:69:c5:5f:fa:e4:dd:c5:1c:c2:68:30:01: 4c:80:30:6d:3a:b6:88:b2:a0:d8:6a:91:f6:fe:15:43:bd:d4: b9:da:e7:a1:f0:1b:9f:b7:76:ef:dd:e6:eb:19:d6:81:9d:40: 73:e5:5c:e3:44:e4:e8:91:fc:4c:a5:2e:98:5c:ea:09:20:4c: 66:f4:85:f8:b4:e3:74:b1:cf:26:42:6a:d5:44:32:d0:da:20: 82:da:2f:91:76:e3:e2:99:3f:b5:24:18:73:dc:5b:f9:87:06: 39:92:a0:49:34:66:e3:b4:69:58:9a:bd:69:ef:f1:6f:ec:b2: ce:2b:5a:16:16:61:9a:7c:1e:0d:5f:af:b3:00:0e:18:1a:a9: bb:01:32:b3:8a:ea:90:e5:7b:44:91:c8:72:6e:6d:87:a5:2e: 51:21:65:94:0b:54:91:ff:5e:b8:47:ee:1f:27:f9:07:cb:92: 5f:6d:e7:69 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1NXCI87eC/DBzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk NTFhMzk5ZmMtYTFlOS00ODFkLWJlMTItMWUwNThiMWM0NzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs72/8UUobpmw/mqp4qZcub/INgCnN30PD5lC TlNByEIybypShrwiuiY20mSWqULmXGBnV56yIKlY+5XI0Z0DT+hzsaiXR6NyHZza LKjp7nrLYN1GkAEU+dPC9qlWwHEyNB6EhaDjjF+COfmpiAUJZz54hMG8EpC8IJCd Hx94qyOCiSKUj3meF6mw8LwIQHlYDJ6EaMsGBnk3OYeR9VAKH00qidJOP/sbIvOf 9DPTU51y7OjsESH9DFP9jzfQAfsyAcq61FTA2D1iBlmnxRu5gMSvy85KZzESL1qO 8EFZKAe7PsdO3d4V6yvjkehcDAPLtv3k6CuO1WC7HOstKDfEJwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHsjKVsmvjgAdOuvklYcLjtsvmPQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzdhZjc4MGEtN2FkMC0z YTdkLThlNzItZjk2NTBiMTA5ODExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAw72VHziO75OKlQAnyaz9BnPi2XBdn80nzCWIL TBm4s8q6qPbtXIVnuThJJgtrDrVl3IW1JKY3cbs5Z/T0YFBuT9+TTo0TSgYnnJsr GeZpxV/65N3FHMJoMAFMgDBtOraIsqDYapH2/hVDvdS52ueh8Buft3bv3ebrGdaB nUBz5VzjROTokfxMpS6YXOoJIExm9IX4tON0sc8mQmrVRDLQ2iCC2i+RduPimT+1 JBhz3Fv5hwY5kqBJNGbjtGlYmr1p7/Fv7LLOK1oWFmGafB4NX6+zAA4YGqm7ATKz iuqQ5XtEkchybm2HpS5RIWWUC1SR/164R+4fJ/kHy5Jfbedp -----END CERTIFICATE-----Generated at Sun May 11 06:17:28 2025 by rpki-client