$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/668198c6-793c-30d1-8889-7ae2873276d3.roa File: 668198c6-793c-30d1-8889-7ae2873276d3.roa (raw, json) Hash identifier: 8ZfP/lAo71GMn/5otTywg8ccq8jd6G7T8V7Nd9GMv4Y= Subject key identifier: 36:53:56:DE:8E:C9:19:53:69:FC:E4:E5:3B:53:01:67:0C:46:22:E7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A30F03204F2963AB62780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/668198c6-793c-30d1-8889-7ae2873276d3.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396599 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:30:f0:32:04:f2:96:3a:b6:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=a49ea5ee-b8d0-4b08-93f5-175d7fe581dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7a:c3:3d:b3:2a:ea:4e:9c:8a:9c:03:24:5d: 14:73:f6:d2:fc:cb:f8:fe:6d:9d:21:1b:2a:f7:48: f0:59:61:28:ba:df:f3:08:c1:97:50:57:d3:c9:ca: d4:8e:ce:59:9d:30:9a:cf:42:e1:da:d1:e2:03:02: 2e:a3:db:24:58:8d:47:5a:e3:17:3b:f8:80:c1:48: 21:a6:ad:ac:f4:77:39:02:b7:04:e4:ab:04:7e:6d: ed:b6:8f:80:43:4c:f0:09:77:b6:d2:05:02:fa:4f: 9e:2f:de:e1:e0:8a:f3:ed:da:08:47:16:3c:58:93: 13:a9:7d:3c:ac:11:66:58:65:26:7f:9d:28:74:06: 66:e1:aa:58:ab:57:1d:fc:1d:ab:30:07:e3:69:46: 54:f6:ec:56:0e:3c:39:05:07:4e:3b:09:74:71:ab: 2c:1e:2a:d1:e9:d7:51:f9:7a:a0:fd:01:5b:4e:24: ef:6a:4b:ed:e1:21:9d:22:3d:f7:f2:c9:da:5a:32: 64:c1:7a:22:9b:e5:59:08:e1:db:37:42:1d:6a:f1: 5b:c4:bc:6a:ba:d7:ab:3d:7f:aa:5a:a5:00:74:34: 50:1b:95:46:79:64:d6:16:ed:d5:d8:70:75:84:5f: 6a:ba:55:a4:07:74:0f:9f:5f:5e:e6:be:55:7e:42: 6a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:53:56:DE:8E:C9:19:53:69:FC:E4:E5:3B:53:01:67:0C:46:22:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/668198c6-793c-30d1-8889-7ae2873276d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:08:33:6f:61:4d:6f:9c:77:e9:5f:93:94:40:22:14:ac:41: 63:cc:ac:d4:dd:dc:e7:3e:0e:16:d8:9a:2a:4c:2a:33:81:fe: 80:9f:8e:36:20:06:bc:7c:eb:42:cc:a4:55:d9:de:69:79:69: ce:7e:be:31:d1:cf:be:35:f6:f2:c6:b8:79:f8:ff:cd:41:7c: 66:97:d5:39:8e:06:b3:b1:de:9c:b4:e0:6f:b0:3b:3d:dc:67: 0c:c2:3c:80:30:41:cd:da:90:8f:22:20:5d:82:ca:74:c0:63: 2c:91:0a:82:0a:5d:31:b3:b1:d7:3f:b6:0f:df:20:c9:a5:de: 3b:d8:06:87:b7:8a:f6:3d:69:0b:1a:b0:e4:af:d1:f4:91:24: dc:7a:7b:df:5d:0a:7e:ef:10:b3:04:7b:06:26:af:7c:8f:fa: ce:a6:59:12:ac:15:ad:76:ec:88:8c:2d:85:26:a6:7e:c9:fb: 1f:99:94:4b:93:f3:55:f5:bc:63:c9:37:92:49:3a:ff:cc:f3: 8c:ea:dd:95:12:a2:2d:20:fe:66:73:68:fd:89:c4:7d:dc:22: 0d:e9:92:8e:6b:f2:d5:3f:23:62:4b:1b:42:65:a2:40:98:9f: 49:ae:20:d2:d7:d4:5f:f3:60:6d:ae:df:15:64:59:44:35:a2: 4c:95:71:05 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSjDwMgTyljq2J4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YTQ5ZWE1ZWUtYjhkMC00YjA4LTkzZjUtMTc1ZDdmZTU4MWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnrDPbMq6k6cipwDJF0Uc/bS/Mv4/m2dIRsq 90jwWWEout/zCMGXUFfTycrUjs5ZnTCaz0Lh2tHiAwIuo9skWI1HWuMXO/iAwUgh pq2s9Hc5ArcE5KsEfm3tto+AQ0zwCXe20gUC+k+eL97h4Irz7doIRxY8WJMTqX08 rBFmWGUmf50odAZm4apYq1cd/B2rMAfjaUZU9uxWDjw5BQdOOwl0cassHirR6ddR +Xqg/QFbTiTvakvt4SGdIj338snaWjJkwXoim+VZCOHbN0IdavFbxLxquterPX+q WqUAdDRQG5VGeWTWFu3V2HB1hF9qulWkB3QPn19e5r5VfkJqGQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDZTVt6OyRlTafzk5TtTAWcMRiLnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjY4MTk4YzYtNzkzYy0z MGQxLTg4ODktN2FlMjg3MzI3NmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBkCDNvYU1vnHfpX5OUQCIUrEFjzKzU3dznPg4W 2JoqTCozgf6An442IAa8fOtCzKRV2d5peWnOfr4x0c++Nfbyxrh5+P/NQXxml9U5 jgazsd6ctOBvsDs93GcMwjyAMEHN2pCPIiBdgsp0wGMskQqCCl0xs7HXP7YP3yDJ pd472AaHt4r2PWkLGrDkr9H0kSTcenvfXQp+7xCzBHsGJq98j/rOplkSrBWtduyI jC2FJqZ+yfsfmZRLk/NV9bxjyTeSSTr/zPOM6t2VEqItIP5mc2j9icR93CIN6ZKO a/LVPyNiSxtCZaJAmJ9JriDS19Rf82Btrt8VZFlENaJMlXEF -----END CERTIFICATE-----Generated at Sun May 11 06:19:45 2025 by rpki-client