$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3df4436b-cf8d-3938-a752-30d9d66f0d80.roa File: 3df4436b-cf8d-3938-a752-30d9d66f0d80.roa (raw, json) Hash identifier: VqDltmoYdNeDIXqmIh1XtiRAO+Bfs9ctz7J+sk6+NW8= Subject key identifier: 7A:E5:CD:DE:6A:2A:0F:F1:44:00:4E:E7:FE:7A:9A:4F:0E:C1:DC:E6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A2A90805C5B9D532AC680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3df4436b-cf8d-3938-a752-30d9d66f0d80.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396611 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:2a:90:80:5c:5b:9d:53:2a:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=25bc06af-ba7b-4b1e-97db-b165f16af3d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d0:49:65:8b:bf:a6:58:ec:93:1e:df:14:37: 00:c4:74:99:b8:ad:45:56:32:3b:e1:3d:66:bd:10: c3:7b:ae:d6:98:f0:ae:97:b7:ec:b2:7e:5e:6b:ab: 14:8f:6c:06:2b:9f:9e:33:65:79:0b:f4:bb:49:4f: 15:35:b6:a7:86:2e:16:24:9a:67:64:44:3e:13:c4: a4:12:f1:4b:7a:18:06:a9:8c:45:a8:d1:73:81:95: db:44:02:6a:cc:11:b5:12:84:63:e9:d6:c3:a2:59: 75:7b:29:23:a1:2e:bb:7e:d6:60:9f:4f:d0:21:2f: d4:20:8d:1f:c8:49:35:c5:79:2c:e2:3d:0f:68:81: 2f:22:27:09:60:22:0c:26:87:67:24:fa:73:6a:66: 12:84:d3:55:b4:10:1f:b9:4c:e5:e6:ca:91:88:f0: 59:f0:11:64:af:cc:20:e5:46:f1:a2:e5:90:d4:57: e9:1f:a3:f1:6a:f5:45:d6:05:14:07:bb:3f:6f:4b: 8e:53:90:9b:55:ee:20:cb:7e:3e:87:76:0e:c0:0e: 67:05:1c:68:28:7b:03:d4:24:1a:62:e7:39:5e:8f: b1:55:a5:68:ca:0e:51:b1:25:9a:63:b0:d3:2d:15: 08:04:97:f4:cd:3b:b3:1b:60:65:ac:03:4f:5a:47: 64:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E5:CD:DE:6A:2A:0F:F1:44:00:4E:E7:FE:7A:9A:4F:0E:C1:DC:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3df4436b-cf8d-3938-a752-30d9d66f0d80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:04:17:6f:7e:90:d9:9e:c1:93:78:d8:f9:0f:b3:f9:89:25: 32:53:75:14:8b:88:03:12:09:33:9f:9a:a6:98:80:20:3e:ac: d2:ab:07:54:71:ea:46:fd:84:83:23:86:9f:34:0b:9f:5a:b4: 2d:5d:62:3e:a1:18:72:d5:95:ef:0b:42:7a:a5:11:22:c1:e8: 8c:35:99:53:10:45:a6:88:a7:db:25:e5:6f:5f:5c:60:e6:01: 76:84:52:db:f7:ac:4e:1e:67:99:d8:df:43:0c:56:37:2c:42: 51:e8:c9:8e:38:9d:11:a6:f8:aa:81:dd:0e:3c:a9:ff:ce:a9: 75:38:c6:ea:48:d8:70:1a:21:1b:d0:11:bd:11:9a:f8:9a:59: ee:73:37:cc:42:53:78:c6:74:2d:d2:30:44:15:8d:2a:09:6e: e6:dc:86:81:52:06:bc:70:f1:ce:a4:0c:90:8e:bb:0c:27:c5: 10:db:8d:30:f7:7e:7a:b8:85:72:7b:8e:fe:38:eb:ca:bb:59: 5e:79:e5:8e:32:d3:43:6b:3e:be:ba:de:fb:7d:cc:55:8b:ab: 3f:e1:48:e4:f1:38:2c:19:e9:0c:dd:44:09:08:f4:56:8b:7b: 6b:b3:05:e5:e1:83:0f:e1:14:30:0a:c2:b2:ed:51:0f:80:6b: c7:0c:95:92 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSiqQgFxbnVMqxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MjViYzA2YWYtYmE3Yi00YjFlLTk3ZGItYjE2NWYxNmFmM2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9BJZYu/pljskx7fFDcAxHSZuK1FVjI74T1m vRDDe67WmPCul7fssn5ea6sUj2wGK5+eM2V5C/S7SU8VNbanhi4WJJpnZEQ+E8Sk EvFLehgGqYxFqNFzgZXbRAJqzBG1EoRj6dbDoll1eykjoS67ftZgn0/QIS/UII0f yEk1xXks4j0PaIEvIicJYCIMJodnJPpzamYShNNVtBAfuUzl5sqRiPBZ8BFkr8wg 5UbxouWQ1FfpH6PxavVF1gUUB7s/b0uOU5CbVe4gy34+h3YOwA5nBRxoKHsD1CQa Yuc5Xo+xVaVoyg5RsSWaY7DTLRUIBJf0zTuzG2BlrANPWkdkewIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHrlzd5qKg/xRABO5/56mk8OwdzmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2RmNDQzNmItY2Y4ZC0z OTM4LWE3NTItMzBkOWQ2NmYwZDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBNBBdvfpDZnsGTeNj5D7P5iSUyU3UUi4gDEgkz n5qmmIAgPqzSqwdUcepG/YSDI4afNAufWrQtXWI+oRhy1ZXvC0J6pREiweiMNZlT EEWmiKfbJeVvX1xg5gF2hFLb96xOHmeZ2N9DDFY3LEJR6MmOOJ0Rpviqgd0OPKn/ zql1OMbqSNhwGiEb0BG9EZr4mlnuczfMQlN4xnQt0jBEFY0qCW7m3IaBUga8cPHO pAyQjrsMJ8UQ240w9356uIVye47+OOvKu1leeeWOMtNDaz6+ut77fcxVi6s/4Ujk 8TgsGekM3UQJCPRWi3trswXl4YMP4RQwCsKy7VEPgGvHDJWS -----END CERTIFICATE-----Generated at Sun May 11 05:30:43 2025 by rpki-client