$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5959967b-2c0e-3796-9f48-074d19d6bdf5.roa File: 5959967b-2c0e-3796-9f48-074d19d6bdf5.roa (raw, json) Hash identifier: 2Kxj+MgtHXOXcCffECVzFH7ENGzUMsNwr6GJVz6c5Jo= Subject key identifier: 64:DF:A2:59:32:08:96:54:89:9D:DA:60:E0:2A:B5:6A:B1:75:50:F2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4D369752B078FDA2C0D10 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5959967b-2c0e-3796-9f48-074d19d6bdf5.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 36620 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:d3:69:75:2b:07:8f:da:2c:0d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=95e9a477-2fa5-4954-a85b-1a40fa5d7aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e0:d2:5d:9f:01:db:3c:f4:2d:40:14:a1:f8: dd:13:99:f4:8b:1b:b7:e6:2d:29:14:e0:4c:26:50: 99:25:74:88:b6:15:9d:21:f1:3d:f6:65:81:37:31: c1:14:a4:61:f3:4c:84:0f:e8:f0:3c:50:ef:c8:08: 92:30:3a:b4:d4:d2:dc:4e:09:a1:ab:14:70:0b:22: b1:bb:57:f4:21:6b:a1:b9:d5:e7:e4:11:2f:50:28: 08:1f:2d:dd:ab:9c:b3:d3:93:d0:b1:04:ed:28:62: b7:32:34:bb:7b:e3:2a:31:a7:4e:3e:8d:53:5e:61: 80:0f:f7:20:4b:3c:dc:dc:54:32:e6:87:63:6e:93: bf:bd:0f:ee:c5:92:10:6e:4a:04:fb:e7:45:ab:f4: 96:50:ac:37:91:3a:3e:c4:87:1b:01:7c:ff:b2:93: 68:05:de:1d:cf:e7:98:11:6c:e0:b0:44:c7:46:b4: d3:9a:f5:ba:8f:3d:75:22:56:c2:3d:d3:e9:8c:04: d3:ee:13:ae:07:b0:6e:ba:0f:6f:1a:90:3b:22:47: 81:66:01:8e:48:96:d0:fe:9a:b8:66:f1:f5:3c:c2: 08:1a:73:15:33:41:2c:bb:50:71:e0:d5:3f:0d:b5: 1b:91:73:40:98:9b:fd:62:5a:85:83:7a:27:cc:d7: 5e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DF:A2:59:32:08:96:54:89:9D:DA:60:E0:2A:B5:6A:B1:75:50:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5959967b-2c0e-3796-9f48-074d19d6bdf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:11:da:64:de:f1:ee:d5:99:00:24:e9:e2:d8:c9:53:a7:03: c1:b2:66:e2:1f:53:5e:8f:12:cb:f4:b6:e6:e3:c1:81:92:55: fc:e8:3b:be:c7:0f:c8:25:98:81:ec:89:93:fe:5a:b8:f5:fa: 3a:84:4f:ac:2c:ea:91:66:f6:c0:fe:90:b6:ff:1e:80:d9:53: 90:50:a7:61:13:2d:33:30:9c:f2:57:ac:19:3e:cf:90:70:e0: 0a:70:40:fa:88:f7:7a:48:e3:47:3a:98:ae:7f:6a:20:03:33: 4a:f0:07:c1:98:6e:2f:2d:a5:ef:66:3f:5b:83:4c:cb:43:e8: c1:6e:83:8a:1b:36:06:18:04:f6:f7:df:7d:5b:a5:8e:69:43: 5e:d3:98:2a:91:65:da:86:2e:8a:c5:3a:7c:62:8e:bc:50:45: 7f:cd:e7:d7:f1:02:8f:58:a5:ce:02:83:02:e5:d1:ba:04:3b: 25:73:86:30:6b:0f:76:a5:12:98:33:47:e8:23:67:5c:0f:99: 9c:78:f4:23:89:51:74:1f:82:53:66:11:42:26:9e:90:d4:5a: 32:15:85:a8:50:f9:21:e1:1b:84:8d:51:28:21:32:87:4d:5a: 4b:a7:28:31:ca:bf:f2:76:70:4b:42:e6:b4:93:ab:dc:20:b4: e5:b2:e4:3a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1NNpdSsHj9osDRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk OTVlOWE0NzctMmZhNS00OTU0LWE4NWItMWE0MGZhNWQ3YWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleDSXZ8B2zz0LUAUofjdE5n0ixu35i0pFOBM JlCZJXSIthWdIfE99mWBNzHBFKRh80yED+jwPFDvyAiSMDq01NLcTgmhqxRwCyKx u1f0IWuhudXn5BEvUCgIHy3dq5yz05PQsQTtKGK3MjS7e+MqMadOPo1TXmGAD/cg Szzc3FQy5odjbpO/vQ/uxZIQbkoE++dFq/SWUKw3kTo+xIcbAXz/spNoBd4dz+eY EWzgsETHRrTTmvW6jz11IlbCPdPpjATT7hOuB7Buug9vGpA7IkeBZgGOSJbQ/pq4 ZvH1PMIIGnMVM0Esu1Bx4NU/DbUbkXNAmJv9YlqFg3onzNdeXwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGTfolkyCJZUiZ3aYOAqtWqxdVDyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTk1OTk2N2ItMmMwZS0z Nzk2LTlmNDgtMDc0ZDE5ZDZiZGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAIEdpk3vHu1ZkAJOni2MlTpwPBsmbiH1NejxLL 9Lbm48GBklX86Du+xw/IJZiB7ImT/lq49fo6hE+sLOqRZvbA/pC2/x6A2VOQUKdh Ey0zMJzyV6wZPs+QcOAKcED6iPd6SONHOpiuf2ogAzNK8AfBmG4vLaXvZj9bg0zL Q+jBboOKGzYGGAT29999W6WOaUNe05gqkWXahi6KxTp8Yo68UEV/zefX8QKPWKXO AoMC5dG6BDslc4Ywaw92pRKYM0foI2dcD5mcePQjiVF0H4JTZhFCJp6Q1FoyFYWo UPkh4RuEjVEoITKHTVpLpygxyr/ydnBLQua0k6vcILTlsuQ6 -----END CERTIFICATE-----Generated at Sun May 11 08:29:59 2025 by rpki-client