$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5bd64e44-14a1-37d6-b31f-5c2397e53513.roa File: 5bd64e44-14a1-37d6-b31f-5c2397e53513.roa (raw, json) Hash identifier: ENsOHBkrNWtXvXU+hJKq3Fl60326a9ScLtDAMIHoVWo= Subject key identifier: 8D:21:97:E1:89:AB:93:8B:86:0E:78:15:FC:31:43:79:B7:21:AF:7A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A2F76F08FA25BC2C7E100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5bd64e44-14a1-37d6-b31f-5c2397e53513.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 397199 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:2f:76:f0:8f:a2:5b:c2:c7:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=7b348442-2265-48a9-9b05-ea755d68dc8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7f:31:e7:83:a1:76:a3:ca:51:f9:7f:f8:84: e5:8d:e7:0c:ca:30:6f:eb:99:ed:3f:8d:26:6a:40: 46:d8:46:ff:4c:23:1b:7c:d6:01:75:cd:f5:63:aa: e2:e7:71:00:e4:6e:34:cc:b9:b8:a9:b2:68:cd:bf: 2d:20:9d:10:4c:50:a4:17:8b:b7:0b:20:b5:52:e0: 23:d2:cf:ba:b1:db:75:af:be:37:e0:2e:0e:43:4f: d0:d2:b0:27:b8:d4:5a:2f:12:93:a3:01:f5:d8:97: fa:87:c1:35:db:ee:43:ae:e9:b2:7f:c2:cb:ac:c7: 10:07:41:f7:2c:b7:3f:6f:50:3f:12:17:8b:ec:8e: 12:b2:e1:dc:66:5c:e1:76:eb:0d:4d:a5:4e:75:51: 89:44:84:d2:0f:ba:05:9d:dd:21:af:44:01:4a:23: cf:9a:79:28:40:a8:5c:be:33:9f:a8:db:cf:ea:4e: de:68:1b:a0:a2:c8:13:d8:a1:b9:2e:1d:b7:c6:1d: 14:50:4c:06:6f:a0:e5:db:ca:f1:42:03:57:b6:c8: 19:37:e1:a0:37:ab:c5:0e:fc:7b:21:3a:29:42:8f: f1:d2:72:5a:fe:07:54:a8:3f:63:80:fb:fb:b1:a1: 82:8f:23:07:ab:6f:5b:0b:1f:ea:52:de:fd:6c:a5: 9e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:21:97:E1:89:AB:93:8B:86:0E:78:15:FC:31:43:79:B7:21:AF:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5bd64e44-14a1-37d6-b31f-5c2397e53513.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:dc:5c:28:c0:08:e0:92:4b:2e:4a:a1:49:22:7b:a2:02:17: 31:08:86:37:f6:e7:10:92:4a:d4:72:e8:f1:4d:fe:46:cc:f4: 63:b7:45:82:bc:75:a4:4c:cd:68:a7:67:3e:87:d2:3f:4b:91: 32:34:a2:83:99:f4:79:90:96:5d:99:4b:36:5f:d7:6a:41:25: 9a:ca:61:fe:e8:c1:37:9a:8b:9c:b9:9b:b0:38:29:4d:dc:71: 9c:2e:69:91:af:73:65:11:f0:6a:8d:b9:10:e3:af:50:bb:c2: 54:7b:58:b1:43:34:0f:aa:7a:42:18:65:13:5a:fa:3e:a9:65: 74:24:7e:7a:a2:aa:6c:5c:b8:83:4f:68:1b:89:5c:78:44:46: 8f:97:69:8f:8c:19:09:2e:13:57:ad:bb:64:d0:8c:8f:6b:57: 8a:b5:f0:aa:b6:6e:7b:cb:d1:15:b4:83:7d:d0:23:ec:13:8c: e1:54:90:31:b4:32:dd:5f:db:15:af:55:3b:1e:66:06:78:78: 86:7f:e6:4c:2c:e4:ed:f9:44:cd:b4:b1:89:f2:97:5f:9d:01: c9:1b:17:a2:fb:99:c0:35:cd:c5:2f:2d:19:bf:81:2c:01:d0: 79:21:2b:67:09:bb:86:f3:0f:1c:32:10:11:e0:ab:29:4b:8f: fa:39:ac:39 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSi928I+iW8LH4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk N2IzNDg0NDItMjI2NS00OGE5LTliMDUtZWE3NTVkNjhkYzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5X8x54OhdqPKUfl/+ITljecMyjBv65ntP40m akBG2Eb/TCMbfNYBdc31Y6ri53EA5G40zLm4qbJozb8tIJ0QTFCkF4u3CyC1UuAj 0s+6sdt1r7434C4OQ0/Q0rAnuNRaLxKTowH12Jf6h8E12+5Drumyf8LLrMcQB0H3 LLc/b1A/EheL7I4SsuHcZlzhdusNTaVOdVGJRITSD7oFnd0hr0QBSiPPmnkoQKhc vjOfqNvP6k7eaBugosgT2KG5Lh23xh0UUEwGb6Dl28rxQgNXtsgZN+GgN6vFDvx7 ITopQo/x0nJa/gdUqD9jgPv7saGCjyMHq29bCx/qUt79bKWeYQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFI0hl+GJq5OLhg54FfwxQ3m3Ia96MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWJkNjRlNDQtMTRhMS0z N2Q2LWIzMWYtNWMyMzk3ZTUzNTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBY3FwowAjgkksuSqFJInuiAhcxCIY39ucQkkrU cujxTf5GzPRjt0WCvHWkTM1op2c+h9I/S5EyNKKDmfR5kJZdmUs2X9dqQSWaymH+ 6ME3moucuZuwOClN3HGcLmmRr3NlEfBqjbkQ469Qu8JUe1ixQzQPqnpCGGUTWvo+ qWV0JH56oqpsXLiDT2gbiVx4REaPl2mPjBkJLhNXrbtk0IyPa1eKtfCqtm57y9EV tIN90CPsE4zhVJAxtDLdX9sVr1U7HmYGeHiGf+ZMLOTt+UTNtLGJ8pdfnQHJGxei +5nANc3FLy0Zv4EsAdB5IStnCbuG8w8cMhAR4KspS4/6Oaw5 -----END CERTIFICATE-----Generated at Sun May 11 06:26:09 2025 by rpki-client