$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43d32526-2163-341f-b6bb-e44553e73e1e.roa File: 43d32526-2163-341f-b6bb-e44553e73e1e.roa (raw, json) Hash identifier: 89VqmLU73kTEL9Wd78eXD3Vr6Nrql+fQUjJqpC4ZMPw= Subject key identifier: 25:80:23:D0:CA:1C:8B:A5:62:BE:F4:83:1B:C0:4B:66:A7:34:8A:56 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A2FC3DDC517DB281CC690 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43d32526-2163-341f-b6bb-e44553e73e1e.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396604 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:2f:c3:dd:c5:17:db:28:1c:c6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=225e8260-c850-40ac-aa35-275b9c423d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7c:e0:ba:e7:86:ed:23:88:bb:6a:50:fb:be: 98:66:9c:21:b2:53:dd:61:8c:9e:66:26:36:e9:3d: 01:29:01:3a:31:48:ca:3d:85:6a:2b:37:4b:48:ac: a3:70:b7:4f:1b:8d:b4:74:3b:65:af:cc:3f:47:9f: 01:3a:eb:80:14:62:e7:cb:bb:07:34:ec:8e:25:b7: 12:95:76:5b:39:62:2e:9b:11:c8:4e:fe:a5:ae:56: bd:47:d9:5a:62:ef:4f:60:ff:51:43:36:24:12:e7: ef:73:bf:66:9a:fd:4f:0f:47:a5:11:52:6f:8e:f2: a2:9a:74:b3:6f:fc:db:ef:7b:15:3d:b6:af:b3:54: ce:e8:4c:fc:a4:bf:15:8f:a6:36:5e:3b:13:77:bc: 8a:92:34:bf:9a:17:16:a9:38:0d:6d:3f:81:c4:44: f5:fa:b0:97:fe:56:6e:57:ed:4c:f7:31:71:55:ee: f1:7c:51:bc:4f:ae:35:fc:e0:e6:55:c4:ce:de:31: 33:d3:25:ad:4f:b9:ec:fe:0e:3b:aa:1e:43:15:ab: 97:7f:58:8c:c0:ea:0c:c0:b2:da:b5:3d:0d:7f:24: 69:f1:17:e6:74:7f:4c:11:8e:f1:42:15:88:da:d2: 70:07:0b:51:12:24:6e:e7:ea:8d:bc:ed:d9:c2:5c: 3b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:80:23:D0:CA:1C:8B:A5:62:BE:F4:83:1B:C0:4B:66:A7:34:8A:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43d32526-2163-341f-b6bb-e44553e73e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:da:3e:9c:78:17:88:2b:5a:87:94:b9:80:f7:4b:1e:98:ea: 78:15:1f:5a:9b:f4:82:ba:24:dc:53:23:b4:78:83:6f:45:b4: 6f:81:a7:72:f9:be:b0:bf:01:d2:a1:5b:1f:a1:01:0f:33:8d: a3:91:46:b8:87:d1:e1:3d:e3:f3:70:9d:ce:1a:3a:fc:f2:c6: 36:19:6d:85:ef:c3:53:49:25:cd:56:5c:c1:50:09:5a:65:be: dd:92:bb:94:89:71:fb:e2:69:28:60:70:f4:6c:c2:f8:c7:af: 01:42:a8:03:1d:64:c7:8a:66:95:2d:6a:43:12:38:f2:5c:50: 17:d3:a7:0c:6d:81:20:87:6f:c2:ba:fd:94:35:69:aa:0e:10: 95:de:d4:c8:19:a5:c4:ce:50:60:0f:34:fa:8e:f8:54:a2:52: ef:a4:f9:2e:1f:5c:34:40:a4:a8:75:cb:1a:b6:99:f1:92:3c: 82:9e:62:55:16:be:01:06:c0:be:23:df:87:f2:93:ee:08:2e: 56:a1:83:ec:a7:e3:d1:26:c0:af:e6:c8:52:47:c9:19:c5:6b: 89:8d:bc:a9:65:5b:a0:0f:70:6c:a5:81:e8:c7:dd:ab:96:77: 2f:65:3e:d1:41:fb:db:3f:ec:a8:d9:65:04:91:bc:22:0a:38: 62:4f:b0:df -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSi/D3cUX2ygcxpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MjI1ZTgyNjAtYzg1MC00MGFjLWFhMzUtMjc1YjljNDIzZDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXzguueG7SOIu2pQ+76YZpwhslPdYYyeZiY2 6T0BKQE6MUjKPYVqKzdLSKyjcLdPG420dDtlr8w/R58BOuuAFGLny7sHNOyOJbcS lXZbOWIumxHITv6lrla9R9laYu9PYP9RQzYkEufvc79mmv1PD0elEVJvjvKimnSz b/zb73sVPbavs1TO6Ez8pL8Vj6Y2XjsTd7yKkjS/mhcWqTgNbT+BxET1+rCX/lZu V+1M9zFxVe7xfFG8T641/ODmVcTO3jEz0yWtT7ns/g47qh5DFauXf1iMwOoMwLLa tT0NfyRp8RfmdH9MEY7xQhWI2tJwBwtREiRu5+qNvO3Zwlw7HQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCWAI9DKHIulYr70gxvAS2anNIpWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDNkMzI1MjYtMjE2My0z NDFmLWI2YmItZTQ0NTUzZTczZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBf2j6ceBeIK1qHlLmA90semOp4FR9am/SCuiTc UyO0eINvRbRvgady+b6wvwHSoVsfoQEPM42jkUa4h9HhPePzcJ3OGjr88sY2GW2F 78NTSSXNVlzBUAlaZb7dkruUiXH74mkoYHD0bML4x68BQqgDHWTHimaVLWpDEjjy XFAX06cMbYEgh2/Cuv2UNWmqDhCV3tTIGaXEzlBgDzT6jvhUolLvpPkuH1w0QKSo dcsatpnxkjyCnmJVFr4BBsC+I9+H8pPuCC5WoYPsp+PRJsCv5shSR8kZxWuJjbyp ZVugD3BspYHox92rlncvZT7RQfvbP+yo2WUEkbwiCjhiT7Df -----END CERTIFICATE-----Generated at Sun May 11 06:22:50 2025 by rpki-client