$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42b3b98f-53d5-34aa-be3f-f5e31d5a89da.roa File: 42b3b98f-53d5-34aa-be3f-f5e31d5a89da.roa (raw, json) Hash identifier: DCs229sgep/m8P+vYJHGCwZOqshyKztrGn8bpufr828= Subject key identifier: 8A:F4:F1:FD:84:69:9F:47:E1:42:5D:A0:1B:98:CA:D8:69:D7:D1:50 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849194199277CB1532E02A6B080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42b3b98f-53d5-34aa-be3f-f5e31d5a89da.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 396564 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:99:27:7c:b1:53:2e:02:a6:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=ef8536cf-0a92-458c-8d33-9edfff0920b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d0:3e:11:74:2a:2e:fa:3c:a1:0a:2b:f8:e0: 3f:44:69:d7:f5:e4:a4:e7:83:d3:33:dc:c2:6a:89: d8:a9:84:92:04:f7:50:85:af:32:98:e1:ec:5a:ab: 48:dc:9f:fd:c9:19:d5:a3:7c:f5:ef:43:b2:c1:a6: b9:cc:ac:20:df:c4:bb:4f:ac:3c:85:8a:d7:40:40: 1c:bd:11:0f:9c:00:bd:58:34:66:05:8e:8e:8b:c2: 6a:27:6c:72:08:cc:c3:03:49:5c:73:1f:e5:bf:2a: 53:fb:7e:44:f6:c8:21:ad:90:a4:98:56:d8:a0:ba: d3:e4:c8:c1:c5:bb:6a:3a:b6:fc:40:ed:24:ca:2c: b9:88:47:61:7a:41:5d:68:e5:90:0d:b2:6b:a0:49: 50:60:aa:8b:1e:f8:ef:6c:0d:03:d0:f8:b4:04:bb: c4:23:88:52:15:1b:8d:61:a4:ce:6a:aa:a1:07:7b: ea:d4:e3:7b:21:87:26:97:f7:27:53:b3:80:6d:8a: 83:b5:10:3f:05:53:c5:e6:b8:2e:db:a6:9f:12:6e: ab:96:b3:d3:bc:a4:d4:59:6c:96:45:c0:5e:c8:b9: 66:f7:0b:e9:21:3c:1d:78:a2:e1:82:ff:05:55:c9: 77:dc:7e:06:c4:e2:49:c1:00:16:14:1c:91:98:d4: ac:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F4:F1:FD:84:69:9F:47:E1:42:5D:A0:1B:98:CA:D8:69:D7:D1:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42b3b98f-53d5-34aa-be3f-f5e31d5a89da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:3a:cb:b3:f6:61:5b:3f:f4:f4:d6:ad:3c:9b:da:3c:d9:00: a0:99:55:d3:e7:0f:96:c6:32:0b:7c:06:12:dc:53:a9:38:67: 41:2a:cc:39:b5:45:5f:30:e1:ef:72:7d:23:89:78:3f:92:b2: 6a:51:a0:3e:98:78:1b:e6:97:86:ac:fc:33:2c:01:8b:e1:b2: 3d:e5:e6:6e:d6:30:65:33:9e:9b:16:2b:e9:64:b6:7b:94:79: 30:c2:c4:f9:3e:c1:a3:1a:90:6b:0b:7e:38:d8:d6:a2:63:93: 64:1f:89:95:d1:9f:44:c6:eb:dd:78:df:62:06:40:f7:d1:d6: 52:f9:04:ff:23:d0:0d:c5:f2:d4:d5:8c:88:bf:15:a4:7c:8d: 96:48:85:c5:cd:f4:32:bd:4e:26:aa:91:44:94:01:59:62:7f: 11:64:a0:af:f4:2d:5e:22:70:ed:22:ff:85:09:9a:14:3a:8d: 08:fb:f6:7b:25:a6:dd:ab:b1:ce:74:59:44:94:51:d8:7f:88: bb:54:d9:1a:d4:bb:a7:3b:96:29:99:18:05:fd:04:01:2e:ce: d2:8b:b8:b9:10:e3:5d:ab:68:17:b6:25:6f:c1:7d:70:88:cd: 84:41:fe:55:2b:05:7b:75:70:e4:b0:36:b6:46:30:6d:9e:b7: b8:f7:dc:72 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkZQZknfLFTLgKmsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk ZWY4NTM2Y2YtMGE5Mi00NThjLThkMzMtOWVkZmZmMDkyMGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNA+EXQqLvo8oQor+OA/RGnX9eSk54PTM9zC aonYqYSSBPdQha8ymOHsWqtI3J/9yRnVo3z170Oywaa5zKwg38S7T6w8hYrXQEAc vREPnAC9WDRmBY6Oi8JqJ2xyCMzDA0lccx/lvypT+35E9sghrZCkmFbYoLrT5MjB xbtqOrb8QO0kyiy5iEdhekFdaOWQDbJroElQYKqLHvjvbA0D0Pi0BLvEI4hSFRuN YaTOaqqhB3vq1ON7IYcml/cnU7OAbYqDtRA/BVPF5rgu26afEm6rlrPTvKTUWWyW RcBeyLlm9wvpITwdeKLhgv8FVcl33H4GxOJJwQAWFByRmNSskQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIr08f2EaZ9H4UJdoBuYythp19FQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDJiM2I5OGYtNTNkNS0z NGFhLWJlM2YtZjVlMzFkNWE4OWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAVOsuz9mFbP/T01q08m9o82QCgmVXT5w+WxjIL fAYS3FOpOGdBKsw5tUVfMOHvcn0jiXg/krJqUaA+mHgb5peGrPwzLAGL4bI95eZu 1jBlM56bFivpZLZ7lHkwwsT5PsGjGpBrC3442NaiY5NkH4mV0Z9ExuvdeN9iBkD3 0dZS+QT/I9ANxfLU1YyIvxWkfI2WSIXFzfQyvU4mqpFElAFZYn8RZKCv9C1eInDt Iv+FCZoUOo0I+/Z7Jabdq7HOdFlElFHYf4i7VNka1LunO5YpmRgF/QQBLs7Si7i5 EONdq2gXtiVvwX1wiM2EQf5VKwV7dXDksDa2RjBtnre499xy -----END CERTIFICATE-----Generated at Sun May 11 05:24:44 2025 by rpki-client