$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/38a85f41-7d00-368f-a88b-da675a578c44.roa File: 38a85f41-7d00-368f-a88b-da675a578c44.roa (raw, json) Hash identifier: aHeePwIQW44iXLRZECKauP3YmrRzHVaDGB067s2t2kE= Subject key identifier: 7D:19:67:79:34:E8:C7:3A:C9:AE:77:3A:8D:C8:D2:48:AB:0E:C4:3F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A34D51F7AAF7F8F5F54A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/38a85f41-7d00-368f-a88b-da675a578c44.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396565 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:34:d5:1f:7a:af:7f:8f:5f:54:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=7da03907-6b6b-400b-877e-9e37b9ea1504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:dc:a4:4f:3a:89:8c:6d:0e:15:be:53:49:cb: d4:6b:b6:67:54:0c:64:28:9d:61:2d:5f:33:de:6f: 41:8c:0b:28:18:77:56:ff:9d:c3:6a:e0:e4:b8:90: 13:61:03:2e:73:48:3d:60:fc:79:4c:7e:31:a4:2e: e5:6d:37:78:58:10:60:c7:63:f1:c4:87:84:f9:1e: d4:fa:fe:f3:9e:4a:5c:9e:39:73:9a:e3:9a:b9:3e: 71:36:7a:ad:3f:aa:97:dc:5d:56:e3:fd:3e:5e:c0: ca:a1:e6:71:d6:14:9e:bb:ec:22:ea:f7:29:f5:61: 33:04:26:88:11:9b:99:a2:f5:ab:0f:d0:45:24:63: ff:74:f4:1f:19:6d:26:2d:32:10:a3:11:a1:77:fe: 90:c5:30:82:ca:9e:ea:1c:6a:c1:46:9f:1b:0a:f0: 34:e0:bc:57:b3:30:9c:22:fc:76:e5:13:9d:d2:06: 5e:7a:a9:a9:38:c0:a4:61:29:f2:6a:6e:49:1a:ea: f4:8c:40:d0:5c:e6:a0:a4:3b:4e:af:3c:48:5f:48: c8:e2:e0:f2:45:97:f6:0a:e7:19:81:a8:cb:51:1f: bd:fb:f7:24:a6:bd:94:3b:c1:54:d3:63:9a:ca:56: 70:5a:44:f5:20:51:b4:8d:92:8e:fa:37:01:5c:89: a1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:19:67:79:34:E8:C7:3A:C9:AE:77:3A:8D:C8:D2:48:AB:0E:C4:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/38a85f41-7d00-368f-a88b-da675a578c44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:d9:eb:04:37:82:f7:5a:89:25:44:36:83:fa:05:6a:54:c9: 0b:1f:7e:12:c5:cc:99:e0:50:d1:47:75:1f:24:9f:5f:6e:d2: 04:8c:ec:78:96:23:8f:0f:70:42:c5:d5:d1:2c:f7:a6:08:b7: c2:d8:db:74:79:18:1c:2a:e8:a7:37:77:28:47:83:83:cc:ca: d1:12:e2:1b:f2:91:99:3e:8e:90:80:04:fe:cd:bf:bf:16:fb: 50:3b:51:21:da:6f:4d:65:c5:41:81:7d:a0:29:94:8b:95:af: 0f:98:d8:26:b7:76:91:a0:09:3e:0a:b9:15:a2:23:68:6c:4c: 3e:22:c1:18:be:2f:31:8e:df:d1:45:bd:f6:35:9e:be:62:f9: 53:fd:a6:a1:6b:65:4d:a7:88:22:6b:ff:aa:81:be:e0:1c:99: c1:e5:74:ae:79:e2:d3:d6:4f:f0:8f:6f:10:15:20:21:19:39: de:d6:c8:34:61:d7:7a:df:14:ba:76:f0:c5:2c:c8:83:4b:2b: 9b:f0:44:6e:49:a9:88:9d:84:38:69:fb:04:43:66:93:d8:18: 35:c3:40:ca:5e:4f:9b:57:9e:9b:c1:0b:90:9c:c7:5d:3d:96: a3:9c:80:ae:2c:d4:df:33:36:88:76:cd:55:0c:98:e1:2f:47: a7:b0:e0:7b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSjTVH3qvf49fVKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk N2RhMDM5MDctNmI2Yi00MDBiLTg3N2UtOWUzN2I5ZWExNTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tykTzqJjG0OFb5TScvUa7ZnVAxkKJ1hLV8z 3m9BjAsoGHdW/53DauDkuJATYQMuc0g9YPx5TH4xpC7lbTd4WBBgx2PxxIeE+R7U +v7znkpcnjlzmuOauT5xNnqtP6qX3F1W4/0+XsDKoeZx1hSeu+wi6vcp9WEzBCaI EZuZovWrD9BFJGP/dPQfGW0mLTIQoxGhd/6QxTCCyp7qHGrBRp8bCvA04LxXszCc Ivx25ROd0gZeeqmpOMCkYSnyam5JGur0jEDQXOagpDtOrzxIX0jI4uDyRZf2CucZ gajLUR+9+/ckpr2UO8FU02OaylZwWkT1IFG0jZKO+jcBXImh7QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFH0ZZ3k06Mc6ya53Oo3I0kirDsQ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzhhODVmNDEtN2QwMC0z NjhmLWE4OGItZGE2NzVhNTc4YzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBS2esEN4L3WoklRDaD+gVqVMkLH34SxcyZ4FDR R3UfJJ9fbtIEjOx4liOPD3BCxdXRLPemCLfC2Nt0eRgcKuinN3coR4ODzMrREuIb 8pGZPo6QgAT+zb+/FvtQO1Eh2m9NZcVBgX2gKZSLla8PmNgmt3aRoAk+CrkVoiNo bEw+IsEYvi8xjt/RRb32NZ6+YvlT/aaha2VNp4gia/+qgb7gHJnB5XSueeLT1k/w j28QFSAhGTne1sg0Ydd63xS6dvDFLMiDSyub8ERuSamInYQ4afsEQ2aT2Bg1w0DK Xk+bV56bwQuQnMddPZajnICuLNTfMzaIds1VDJjhL0ensOB7 -----END CERTIFICATE-----Generated at Sun May 11 05:38:43 2025 by rpki-client