$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d6aa46c-8dd5-3d40-ad3b-f1ffc6eb687a.roa File: 4d6aa46c-8dd5-3d40-ad3b-f1ffc6eb687a.roa (raw, json) Hash identifier: 36It1LLSAUtRJ2qmVL2m83auJfdISEypoOLM77S4uWk= Subject key identifier: 58:F6:45:AB:F2:67:EE:18:F9:2F:91:9B:6E:92:04:5B:E6:2D:97:C6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A2FCFD29598A46E0A4280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d6aa46c-8dd5-3d40-ad3b-f1ffc6eb687a.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396579 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:2f:cf:d2:95:98:a4:6e:0a:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=4112bbc3-e4fb-40cb-ad3e-872f7a3f04bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a6:0d:01:c6:33:b8:40:55:21:af:b1:a9:7a: 19:98:a8:3c:77:24:75:9a:05:c8:17:e5:06:00:52: 44:ae:59:04:92:df:70:f4:c3:53:89:b5:a5:e1:ce: a7:9f:e0:0e:35:9f:0c:5f:a8:bc:7d:fc:8a:a5:ff: 5f:07:44:d6:db:2b:70:c1:96:95:7c:48:16:81:35: b6:7b:88:17:3b:1a:57:b5:5d:32:aa:11:94:3f:3d: 6e:ac:b6:3c:be:a9:66:18:dc:8c:52:a8:a8:3d:b3: 15:76:28:08:ee:1b:d7:c5:d7:46:6d:d3:60:03:31: 9e:bf:6e:93:75:4e:38:85:bc:d7:7e:0c:38:0e:94: 63:69:f0:81:06:de:db:0a:68:cd:d9:f7:62:de:8c: c7:30:7c:35:bf:60:26:b1:c8:fe:c7:39:63:c1:e5: 05:4d:53:68:2f:14:90:2d:d7:02:e2:a0:33:4d:74: 62:3b:5b:66:65:b8:a2:c6:77:45:8f:57:bd:1a:13: 06:93:fe:62:75:53:07:6f:86:e1:72:6e:ed:b6:7b: 5d:69:58:2b:65:83:ec:3f:d0:d9:46:42:56:c8:67: 59:d0:90:73:b7:b9:be:0c:1f:27:8e:0c:47:f2:c4: 8b:1b:49:94:f6:81:eb:27:7a:f7:6d:d6:07:6a:d8: 7f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F6:45:AB:F2:67:EE:18:F9:2F:91:9B:6E:92:04:5B:E6:2D:97:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d6aa46c-8dd5-3d40-ad3b-f1ffc6eb687a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:c3:0f:87:f2:a8:6a:98:0b:db:bb:9e:df:eb:b8:03:9b:70: cd:bb:80:0a:85:94:7a:e7:35:e1:76:cb:45:1a:be:3b:82:36: 24:26:05:33:ef:af:7d:6c:6e:2e:67:0a:40:b0:72:dc:fa:7f: 01:1d:30:91:a1:79:2d:a6:e0:2a:32:b1:c4:0e:82:ec:b4:05: 7b:7f:b1:54:74:f2:38:c5:a5:99:5f:96:ac:0d:2d:e6:b2:fd: 9c:7c:21:af:25:ce:f3:81:40:3d:0a:01:03:69:57:36:86:41: 0b:c5:0a:34:ac:05:ee:15:bd:85:90:10:61:db:9c:c7:d1:6f: 59:5b:61:78:3c:cd:3a:d5:8a:c2:a5:7d:c9:bb:1a:9c:d3:c5: 3f:ee:85:a6:5d:45:5e:14:fc:05:a6:db:46:01:8c:6e:9e:a2: f7:ea:bf:d6:88:67:4b:eb:2a:ec:b6:26:5d:1c:1a:dd:e3:2d: 2f:b5:37:cb:22:3c:6e:f7:ec:6b:17:bf:c3:7d:70:22:f0:92: 7c:92:50:75:2d:bd:f9:1d:94:12:12:18:11:df:88:f5:2c:2e: 74:2f:b3:5e:91:3c:ec:84:1c:b3:0a:1e:95:fc:9d:4e:13:d0: 87:46:ae:9b:ed:53:51:08:a5:04:91:13:91:2d:ac:f3:ff:c3: 36:51:e0:c4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSi/P0pWYpG4KQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NDExMmJiYzMtZTRmYi00MGNiLWFkM2UtODcyZjdhM2YwNGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6YNAcYzuEBVIa+xqXoZmKg8dyR1mgXIF+UG AFJErlkEkt9w9MNTibWl4c6nn+AONZ8MX6i8ffyKpf9fB0TW2ytwwZaVfEgWgTW2 e4gXOxpXtV0yqhGUPz1urLY8vqlmGNyMUqioPbMVdigI7hvXxddGbdNgAzGev26T dU44hbzXfgw4DpRjafCBBt7bCmjN2fdi3ozHMHw1v2Amscj+xzljweUFTVNoLxSQ LdcC4qAzTXRiO1tmZbiixndFj1e9GhMGk/5idVMHb4bhcm7ttntdaVgrZYPsP9DZ RkJWyGdZ0JBzt7m+DB8njgxH8sSLG0mU9oHrJ3r3bdYHath/XwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFj2RavyZ+4Y+S+Rm26SBFvmLZfGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGQ2YWE0NmMtOGRkNS0z ZDQwLWFkM2ItZjFmZmM2ZWI2ODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBcww+H8qhqmAvbu57f67gDm3DNu4AKhZR65zXh dstFGr47gjYkJgUz7699bG4uZwpAsHLc+n8BHTCRoXktpuAqMrHEDoLstAV7f7FU dPI4xaWZX5asDS3msv2cfCGvJc7zgUA9CgEDaVc2hkELxQo0rAXuFb2FkBBh25zH 0W9ZW2F4PM061YrCpX3Juxqc08U/7oWmXUVeFPwFpttGAYxunqL36r/WiGdL6yrs tiZdHBrd4y0vtTfLIjxu9+xrF7/DfXAi8JJ8klB1Lb35HZQSEhgR34j1LC50L7Ne kTzshByzCh6V/J1OE9CHRq6b7VNRCKUEkRORLazz/8M2UeDE -----END CERTIFICATE-----Generated at Sun May 11 05:24:30 2025 by rpki-client