$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e696a77-1907-396f-8f77-87763e5d1464.roa File: 4e696a77-1907-396f-8f77-87763e5d1464.roa (raw, json) Hash identifier: d21Fb/c5786XXS/1WOK4NHgiqo3OA9jRarn0YYXFgl0= Subject key identifier: AC:0D:89:C1:77:7B:B1:40:21:E5:9B:D6:77:0C:90:A5:7C:66:04:66 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4DB7C827B8550C287B2C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e696a77-1907-396f-8f77-87763e5d1464.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 396826 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:db:7c:82:7b:85:50:c2:87:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=39ba5744-37ad-4240-b5b6-394d5f767622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ea:fe:d7:f0:e5:e1:57:39:7e:6a:be:69:bd: 87:26:4d:9f:b0:9f:35:e8:91:79:79:aa:ae:0e:04: d3:b7:26:4f:f0:27:c3:ed:55:5d:3f:10:27:ee:78: 65:62:8b:8a:e0:ac:09:e7:ba:43:d5:37:bf:1a:4c: 3d:7c:4b:52:56:44:12:17:e1:44:55:34:c2:5b:83: 69:90:c1:42:55:b0:d3:c8:d2:0f:ca:90:d2:5a:8b: c1:49:2a:82:3f:83:a5:38:6c:a1:9e:5c:48:e7:aa: 21:b6:53:a9:f3:52:6b:81:fc:79:26:90:cb:05:dd: c2:8f:07:86:73:25:ce:84:f2:eb:ca:3e:33:ef:14: 8f:36:51:16:7f:fc:5f:c0:9e:f5:46:e2:ba:59:e0: cd:76:97:c4:9c:7e:cf:c3:71:8a:c2:b7:1c:3d:97: f3:fa:42:69:2a:70:4c:de:ce:b8:dd:a1:31:ae:36: 05:9a:25:b8:b5:7d:6a:1f:ea:78:b7:81:fb:cb:98: af:46:24:1e:37:3c:35:c0:93:95:9a:e8:c2:4b:25: 19:80:d4:66:44:b6:2e:ce:7a:99:22:2d:6f:8f:f0: 96:33:44:f7:b2:ee:f4:84:69:89:f5:03:3a:9c:b7: 55:74:db:ec:be:18:0e:53:dd:67:f7:44:90:35:46: e4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:0D:89:C1:77:7B:B1:40:21:E5:9B:D6:77:0C:90:A5:7C:66:04:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e696a77-1907-396f-8f77-87763e5d1464.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:94:6d:60:a5:d5:83:3f:c3:f1:31:1c:c5:2e:9e:c5:d9:08: 3c:b1:dc:ae:2c:18:4d:d2:10:7a:43:24:a1:63:bf:16:da:e4: 5e:e8:cc:b0:6f:92:ca:cb:8d:04:93:61:a8:aa:2a:91:53:98: df:63:80:a3:15:f2:75:d6:d0:48:ec:36:41:34:09:93:58:b2: 30:32:ea:95:9f:ec:91:5f:a3:b6:99:bb:e6:54:ef:0b:cf:c7: 15:a8:76:dd:48:49:f2:87:3e:38:8b:ab:06:6b:d0:6f:04:a1: dc:bd:0c:89:c8:47:4a:a5:d9:92:45:d0:02:cd:38:d0:81:b5: d5:1e:ea:0e:0e:7d:92:df:b6:dd:89:a8:fc:72:e7:42:a0:3d: 5d:ac:c7:7c:92:59:40:40:6c:f4:d0:bc:d2:b8:f7:6a:b8:fa: 9e:db:8e:30:fc:39:29:38:9e:88:8a:f8:18:36:01:04:2e:e8: 5f:37:d9:14:a1:13:35:12:b7:bb:84:e6:b1:42:9a:ed:54:da: 66:35:6f:07:ee:5c:ee:1c:85:d0:9b:f6:65:e8:17:e2:e1:1f: c9:ae:ec:40:65:f4:cd:90:05:84:b8:da:34:97:25:3e:ea:34: c2:64:bc:91:88:ae:d7:3d:03:aa:92:9f:d3:bd:22:cf:a3:8d: 0c:bf:7a:29 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1Nt8gnuFUMKHssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk MzliYTU3NDQtMzdhZC00MjQwLWI1YjYtMzk0ZDVmNzY3NjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjur+1/Dl4Vc5fmq+ab2HJk2fsJ816JF5eaqu DgTTtyZP8CfD7VVdPxAn7nhlYouK4KwJ57pD1Te/Gkw9fEtSVkQSF+FEVTTCW4Np kMFCVbDTyNIPypDSWovBSSqCP4OlOGyhnlxI56ohtlOp81Jrgfx5JpDLBd3CjweG cyXOhPLryj4z7xSPNlEWf/xfwJ71RuK6WeDNdpfEnH7Pw3GKwrccPZfz+kJpKnBM 3s643aExrjYFmiW4tX1qH+p4t4H7y5ivRiQeNzw1wJOVmujCSyUZgNRmRLYuznqZ Ii1vj/CWM0T3su70hGmJ9QM6nLdVdNvsvhgOU91n90SQNUbkQQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKwNicF3e7FAIeWb1ncMkKV8ZgRmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGU2OTZhNzctMTkwNy0z OTZmLThmNzctODc3NjNlNWQxNDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBElG1gpdWDP8PxMRzFLp7F2Qg8sdyuLBhN0hB6 QyShY78W2uRe6Mywb5LKy40Ek2GoqiqRU5jfY4CjFfJ11tBI7DZBNAmTWLIwMuqV n+yRX6O2mbvmVO8Lz8cVqHbdSEnyhz44i6sGa9BvBKHcvQyJyEdKpdmSRdACzTjQ gbXVHuoODn2S37bdiaj8cudCoD1drMd8kllAQGz00LzSuPdquPqe244w/DkpOJ6I ivgYNgEELuhfN9kUoRM1Ere7hOaxQprtVNpmNW8H7lzuHIXQm/Zl6Bfi4R/JruxA ZfTNkAWEuNo0lyU+6jTCZLyRiK7XPQOqkp/TvSLPo40Mv3op -----END CERTIFICATE-----Generated at Sun May 11 06:35:19 2025 by rpki-client