$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/60485d31-fe41-3d69-b3f6-e18bf328c391.roa File: 60485d31-fe41-3d69-b3f6-e18bf328c391.roa (raw, json) Hash identifier: /1mzEEEZMVN3FpfCAEp0044Jg5x6W6mGc3nQG0AsC0A= Subject key identifier: 25:E9:FD:D0:C1:9D:C3:AF:31:05:AC:A3:DB:0E:52:43:7B:D8:BE:31 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4DC0DCB7580F65F272B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/60485d31-fe41-3d69-b3f6-e18bf328c391.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 36623 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:dc:0d:cb:75:80:f6:5f:27:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=d085a4b5-d951-4d89-9817-c2edbcdc2f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:11:f9:07:85:18:55:53:36:c7:7a:9a:dd:4e: ae:3a:82:22:09:8c:2f:d8:84:ba:15:25:f7:8c:a8: 10:d3:16:3f:92:d9:3a:75:39:c4:0c:71:1a:e6:09: 36:77:26:2a:71:de:95:a6:0b:bf:89:81:f3:cd:d1: 04:97:9e:3b:51:bf:cc:56:e9:1e:3c:33:6d:8b:50: 2b:74:be:84:e5:0b:9f:07:5b:31:13:1a:59:92:02: 3f:6a:db:27:f2:80:df:6d:74:64:fb:85:7c:f9:be: f2:0d:86:fc:52:ca:c0:08:a0:e9:56:d2:8f:d4:6a: f2:33:46:ba:79:74:79:f3:44:05:91:a2:bd:9c:1f: f9:cd:64:09:10:51:38:62:60:1b:66:95:6b:8f:3e: 31:31:a8:1f:67:5e:11:97:5a:81:10:d5:6b:9e:86: 35:ad:78:45:10:34:18:fb:54:a6:50:8e:b9:56:79: 18:7a:9c:1e:b0:d2:01:77:c4:d0:dd:5b:f1:e3:f4: d5:2e:e0:b0:39:2d:9c:5a:fc:2c:cc:4d:65:cb:a8: 81:f3:dd:b5:4b:88:7f:a8:31:69:ad:61:3a:74:67: 7f:72:03:9f:4e:a5:35:43:ae:96:34:dc:ee:7f:82: 8f:d6:19:ad:b4:12:79:9b:1a:59:f8:e7:12:b0:34: 02:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E9:FD:D0:C1:9D:C3:AF:31:05:AC:A3:DB:0E:52:43:7B:D8:BE:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/60485d31-fe41-3d69-b3f6-e18bf328c391.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:3b:44:7e:77:71:98:d2:fd:26:8b:20:68:e9:1b:2d:17:ed: 1b:81:76:9c:ee:28:8b:fc:15:7f:f1:df:36:db:96:16:64:4c: 32:1c:63:2e:3b:60:4f:24:79:57:8d:cb:e1:9b:2c:e2:c5:48: e0:e0:6c:ed:ce:f5:87:4e:c1:11:75:c0:32:92:0f:43:5c:6d: 6d:aa:dd:4a:62:62:78:20:ef:cd:a2:fa:98:e0:2f:b2:78:0e: 1c:99:19:85:c2:fa:6b:29:8c:ca:28:ed:cb:d4:25:c4:a1:22: 36:63:9f:94:8b:90:15:0a:29:99:f1:25:70:8c:80:5e:62:07: 93:e1:78:9b:63:b9:89:b0:92:7a:d3:52:35:a1:83:f5:7b:36: a9:aa:73:4e:f9:37:8f:bb:c3:0c:18:c2:9f:3d:45:41:cf:04: 6e:07:25:5a:09:67:03:a7:0f:98:3a:7a:3e:e9:eb:d8:ff:03: 83:e2:69:6f:be:9e:94:b7:1a:0e:35:8f:0b:7a:a7:38:7c:b5: 82:f0:3f:eb:d9:3c:1a:f9:be:7e:50:a5:c2:be:1f:8e:6f:79: 65:c5:f9:2e:75:36:40:d5:39:bf:3c:a4:ef:ea:94:d2:1b:0d: 49:38:5e:48:84:6d:d5:2c:8f:8e:36:c2:47:c6:a3:de:84:b5: 47:c0:b2:f0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1NwNy3WA9l8nK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk ZDA4NWE0YjUtZDk1MS00ZDg5LTk4MTctYzJlZGJjZGMyZjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRH5B4UYVVM2x3qa3U6uOoIiCYwv2IS6FSX3 jKgQ0xY/ktk6dTnEDHEa5gk2dyYqcd6Vpgu/iYHzzdEEl547Ub/MVukePDNti1Ar dL6E5QufB1sxExpZkgI/atsn8oDfbXRk+4V8+b7yDYb8UsrACKDpVtKP1GryM0a6 eXR580QFkaK9nB/5zWQJEFE4YmAbZpVrjz4xMagfZ14Rl1qBENVrnoY1rXhFEDQY +1SmUI65VnkYepwesNIBd8TQ3Vvx4/TVLuCwOS2cWvwszE1ly6iB8921S4h/qDFp rWE6dGd/cgOfTqU1Q66WNNzuf4KP1hmttBJ5mxpZ+OcSsDQClwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCXp/dDBncOvMQWso9sOUkN72L4xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjA0ODVkMzEtZmU0MS0z ZDY5LWIzZjYtZTE4YmYzMjhjMzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB5O0R+d3GY0v0miyBo6RstF+0bgXac7iiL/BV/ 8d8225YWZEwyHGMuO2BPJHlXjcvhmyzixUjg4GztzvWHTsERdcAykg9DXG1tqt1K YmJ4IO/NovqY4C+yeA4cmRmFwvprKYzKKO3L1CXEoSI2Y5+Ui5AVCimZ8SVwjIBe YgeT4XibY7mJsJJ601I1oYP1ezapqnNO+TePu8MMGMKfPUVBzwRuByVaCWcDpw+Y Ono+6evY/wOD4mlvvp6UtxoONY8Leqc4fLWC8D/r2Twa+b5+UKXCvh+Ob3llxfku dTZA1Tm/PKTv6pTSGw1JOF5IhG3VLI+ONsJHxqPehLVHwLLw -----END CERTIFICATE-----Generated at Sun May 11 06:23:54 2025 by rpki-client