$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4916ec72-9919-39e0-9d57-6733a8bfde4d.roa File: 4916ec72-9919-39e0-9d57-6733a8bfde4d.roa (raw, json) Hash identifier: rLGxsuLAFRkFVrpri4hWlgqpdqSdYSHffZUV2DS6B70= Subject key identifier: 20:B4:14:C2:22:02:57:F5:54:11:46:D6:F5:82:A4:55:55:07:8A:37 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A32360144E3A7E68DA960 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4916ec72-9919-39e0-9d57-6733a8bfde4d.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 397209 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:32:36:01:44:e3:a7:e6:8d:a9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=ebc5d9e1-2a3f-4057-a843-e739375ffae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2e:2b:bd:4a:f6:6d:f6:68:73:7a:ac:c4:44: a2:dd:01:43:b4:f5:46:36:4b:ed:50:70:19:71:a4: a3:3d:05:38:30:87:31:f4:40:1a:c5:e5:81:65:fb: 14:6e:b3:43:ab:e7:a5:90:c1:2e:35:e7:5d:a8:44: dc:a0:76:53:7a:94:ac:4f:c5:bb:b8:78:ad:af:3d: af:e7:02:6f:fb:78:82:07:f3:76:9d:13:04:0c:b6: b5:16:62:80:0a:bb:de:23:2a:fb:81:06:72:73:5d: 33:b3:d4:e9:8b:2d:1a:ba:a7:a3:86:33:8b:bb:fd: 94:a8:60:7f:e0:6b:9e:f6:7b:f2:16:07:68:d5:18: a7:46:62:50:57:ef:7a:3e:a3:d4:e5:a2:25:2f:db: 39:58:0e:a7:08:a2:4b:33:d6:d8:bd:a5:d0:7d:6b: cf:a3:5c:97:78:ef:2e:53:40:0b:17:70:b4:1c:e3: ff:33:dc:c6:99:33:31:3b:94:a8:2f:46:69:7a:90: 87:e7:07:8b:3b:12:da:d7:1c:c0:77:44:be:de:11: 5c:94:f5:60:02:a3:af:4f:08:55:07:34:f5:c1:23: 78:9e:c2:06:1c:f9:28:04:02:51:4b:c6:22:82:22: 49:8d:78:22:51:47:f9:e9:df:52:6b:f2:0e:6a:0d: 24:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B4:14:C2:22:02:57:F5:54:11:46:D6:F5:82:A4:55:55:07:8A:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4916ec72-9919-39e0-9d57-6733a8bfde4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:54:0b:bc:9e:d2:f5:ed:f2:e5:8e:3c:61:3c:72:44:6a:66: b4:c4:83:1e:a9:59:80:6a:1b:e9:24:37:12:f3:4c:f0:17:c7: ae:23:cb:90:16:14:1b:09:d0:bb:2e:4f:ae:de:b4:4e:e1:a9: 36:6c:c4:e1:47:7c:f7:54:11:1e:6c:47:96:90:f0:a1:ac:60: 16:ab:ee:9a:03:70:f7:91:b7:b0:33:c3:a6:6a:d1:07:35:56: 18:ac:1e:47:8c:a6:ab:f3:51:23:86:7c:76:3b:b4:e7:82:f3: 82:25:ba:88:c7:c3:7b:1f:a5:50:58:12:3a:58:79:b9:5b:a4: 44:bf:90:13:79:e7:79:ad:20:bd:de:b2:5b:38:11:06:b5:65: 50:83:fb:20:52:f8:cd:45:27:f5:1c:ce:d9:90:8b:b4:7d:c6: e1:a8:6e:b1:5a:79:75:cd:61:76:04:94:1d:14:a6:75:8b:79: 15:5c:5d:79:45:91:f6:48:3d:65:66:33:f3:93:df:60:c9:42: 7a:f4:1f:fc:38:d9:7a:31:ae:60:13:96:f3:ef:47:1c:d1:7d: ae:9b:40:5c:80:ca:01:c4:d5:25:2c:1f:c4:d8:92:cc:42:4e: 6e:24:0b:da:28:46:13:67:4a:b3:2e:20:d4:a1:cc:36:65:30: f8:80:93:61 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSjI2AUTjp+aNqWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZWJjNWQ5ZTEtMmEzZi00MDU3LWE4NDMtZTczOTM3NWZmYWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC4rvUr2bfZoc3qsxESi3QFDtPVGNkvtUHAZ caSjPQU4MIcx9EAaxeWBZfsUbrNDq+elkMEuNeddqETcoHZTepSsT8W7uHitrz2v 5wJv+3iCB/N2nRMEDLa1FmKACrveIyr7gQZyc10zs9Tpiy0auqejhjOLu/2UqGB/ 4Gue9nvyFgdo1RinRmJQV+96PqPU5aIlL9s5WA6nCKJLM9bYvaXQfWvPo1yXeO8u U0ALF3C0HOP/M9zGmTMxO5SoL0ZpepCH5weLOxLa1xzAd0S+3hFclPVgAqOvTwhV BzT1wSN4nsIGHPkoBAJRS8YigiJJjXgiUUf56d9Sa/IOag0k8QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCC0FMIiAlf1VBFG1vWCpFVVB4o3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDkxNmVjNzItOTkxOS0z OWUwLTlkNTctNjczM2E4YmZkZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA/VAu8ntL17fLljjxhPHJEama0xIMeqVmAahvp JDcS80zwF8euI8uQFhQbCdC7Lk+u3rRO4ak2bMThR3z3VBEebEeWkPChrGAWq+6a A3D3kbewM8OmatEHNVYYrB5HjKar81Ejhnx2O7TngvOCJbqIx8N7H6VQWBI6WHm5 W6REv5ATeed5rSC93rJbOBEGtWVQg/sgUvjNRSf1HM7ZkIu0fcbhqG6xWnl1zWF2 BJQdFKZ1i3kVXF15RZH2SD1lZjPzk99gyUJ69B/8ONl6Ma5gE5bz70cc0X2um0Bc gMoBxNUlLB/E2JLMQk5uJAvaKEYTZ0qzLiDUocw2ZTD4gJNh -----END CERTIFICATE-----Generated at Sun May 11 06:16:26 2025 by rpki-client