$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5989f635-4054-3360-87e0-0bc58dcb3b30.roa File: 5989f635-4054-3360-87e0-0bc58dcb3b30.roa (raw, json) Hash identifier: jxTx37YHxtUAZjQZFTHuB/7rYhBCJnFZxGPRtJymPvk= Subject key identifier: 04:FC:FE:B4:C6:20:F9:42:E1:F9:64:6C:EA:0D:47:27:86:4A:18:6D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4D3837A3FE43FE0E125F0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5989f635-4054-3360-87e0-0bc58dcb3b30.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 36625 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:d3:83:7a:3f:e4:3f:e0:e1:25:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=7c18d798-ea07-4bf4-a1f0-0743974c8285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:af:eb:27:ca:97:53:55:5c:e6:f6:a7:d3:fa: 12:c9:bd:c6:41:a7:62:d9:ce:72:37:33:35:1c:48: 96:3e:01:88:bc:d4:0e:0d:37:97:66:65:36:b1:65: fb:09:08:be:ff:5b:27:65:df:f5:12:57:53:df:c5: 76:30:ba:80:13:13:79:b3:3a:40:c0:a8:76:be:82: 8c:53:cb:f9:02:69:5d:e9:5a:26:54:27:fd:8b:4f: 08:02:d2:dd:85:01:ca:44:6c:4c:98:dc:2c:4e:1b: b2:98:e7:2a:ec:f3:80:d1:7e:59:99:18:71:4f:2b: 1f:a3:30:b0:d1:ea:27:6b:b6:1a:aa:ef:de:5e:65: 70:a5:24:cd:af:58:81:9c:e0:e8:af:6a:eb:79:d1: 42:96:cf:0a:3a:24:85:b6:14:e8:f1:dc:6f:07:33: 45:46:3a:b3:b3:e9:f9:8d:09:b9:6c:17:8c:95:40: 1b:27:53:1d:33:cb:50:d0:b7:32:32:03:48:be:69: bd:f2:8b:bb:fe:f3:a2:a0:b7:14:a2:80:08:55:78: d8:63:82:95:13:f7:ba:19:11:51:be:e0:5b:42:67: 0d:4e:88:03:80:a8:fc:20:f6:e9:85:f0:42:2f:dd: 77:00:d3:46:53:05:a6:8f:15:ca:90:88:40:8f:14: de:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FC:FE:B4:C6:20:F9:42:E1:F9:64:6C:EA:0D:47:27:86:4A:18:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5989f635-4054-3360-87e0-0bc58dcb3b30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:47:26:0f:83:d4:d5:5a:31:47:42:0e:46:8d:0b:70:9a:dc: 27:56:c7:0b:8a:66:2a:95:9a:0a:4f:45:74:e6:ae:a8:c7:d8: 36:af:e1:66:36:3f:1d:30:9e:5d:6d:5e:91:1e:18:81:ed:fb: 31:9e:ad:c7:52:e1:27:0b:51:d8:47:f5:50:1b:05:d1:98:a4: bd:44:54:45:82:99:23:c7:1d:a5:5a:9d:4c:42:59:87:79:df: f8:a9:1f:1f:cb:2a:57:ce:48:d6:75:3b:a8:dc:5c:f5:05:05: aa:92:7e:55:fe:4f:be:26:8c:0d:64:e1:32:e0:ef:6d:5e:69: 94:1c:ea:19:e7:0b:84:f4:57:6f:66:0a:eb:9c:8c:4f:64:ea: 66:f3:c3:36:ec:89:9c:64:3c:33:72:ca:52:44:b8:ee:a6:32: f2:82:20:05:36:c7:53:95:31:93:45:ce:95:48:81:8c:30:7f: 0e:58:5f:db:79:41:29:53:e5:6d:aa:ea:18:3d:94:f5:73:63: 2f:16:c4:41:8b:be:82:7e:2c:3c:88:19:66:76:8e:eb:e4:41: 47:be:98:2d:b1:f6:c9:c2:f1:5a:d9:88:58:f2:62:38:29:da: b5:2b:72:d1:1c:69:0c:32:f1:a4:e7:3b:2e:cb:b7:ca:fd:07: d7:0c:f9:60 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1NODej/kP+DhJfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk N2MxOGQ3OTgtZWEwNy00YmY0LWExZjAtMDc0Mzk3NGM4Mjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq/rJ8qXU1Vc5van0/oSyb3GQadi2c5yNzM1 HEiWPgGIvNQODTeXZmU2sWX7CQi+/1snZd/1EldT38V2MLqAExN5szpAwKh2voKM U8v5Amld6VomVCf9i08IAtLdhQHKRGxMmNwsThuymOcq7POA0X5ZmRhxTysfozCw 0eona7Yaqu/eXmVwpSTNr1iBnODor2rredFCls8KOiSFthTo8dxvBzNFRjqzs+n5 jQm5bBeMlUAbJ1MdM8tQ0LcyMgNIvmm98ou7/vOioLcUooAIVXjYY4KVE/e6GRFR vuBbQmcNTogDgKj8IPbphfBCL913ANNGUwWmjxXKkIhAjxTe/QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAT8/rTGIPlC4flkbOoNRyeGShhtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTk4OWY2MzUtNDA1NC0z MzYwLTg3ZTAtMGJjNThkY2IzYjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCNRyYPg9TVWjFHQg5GjQtwmtwnVscLimYqlZoK T0V05q6ox9g2r+FmNj8dMJ5dbV6RHhiB7fsxnq3HUuEnC1HYR/VQGwXRmKS9RFRF gpkjxx2lWp1MQlmHed/4qR8fyypXzkjWdTuo3Fz1BQWqkn5V/k++JowNZOEy4O9t XmmUHOoZ5wuE9FdvZgrrnIxPZOpm88M27ImcZDwzcspSRLjupjLygiAFNsdTlTGT Rc6VSIGMMH8OWF/beUEpU+VtquoYPZT1c2MvFsRBi76Cfiw8iBlmdo7r5EFHvpgt sfbJwvFa2YhY8mI4Kdq1K3LRHGkMMvGk5zsuy7fK/QfXDPlg -----END CERTIFICATE-----Generated at Sun May 11 10:42:08 2025 by rpki-client