$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/806aee88-19bd-3e4e-b47a-e451a147a219.roa File: 806aee88-19bd-3e4e-b47a-e451a147a219.roa (raw, json) Hash identifier: nKlIXdGbRA9BrsZrGUTXzqXOjAImo6QAxrC5y+BZ0+Y= Subject key identifier: DB:67:2E:3B:E0:C3:62:4B:0E:7E:3B:2D:3E:69:44:E8:4F:CB:D5:43 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4DBA758249FD695B04D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/806aee88-19bd-3e4e-b47a-e451a147a219.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 396558 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:db:a7:58:24:9f:d6:95:b0:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=61e199fe-8a6c-4e42-bfe1-ccaac5ecd338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4b:f2:8a:db:02:de:c6:f8:7e:bf:4a:3e:49: 2b:bf:f1:bb:9c:a9:df:d7:a7:90:2c:e3:0d:31:f8: f2:8f:ad:f2:2c:bc:0f:b3:e0:f0:62:9a:33:ef:a0: 0e:bb:da:0a:d0:4e:b0:6c:51:b2:8d:62:2b:48:5e: 50:44:db:d9:36:f5:71:67:c4:b1:af:c4:6f:94:10: 77:a2:46:14:dd:c0:07:a6:c5:fb:9b:52:2f:4e:57: ed:c4:69:60:d9:8f:6c:8b:6f:5d:6b:f3:64:a8:55: 15:21:82:8d:fe:4a:ca:e4:89:1b:9e:3c:25:3f:78: 38:40:ce:f8:04:6f:7e:ce:1f:62:e9:39:cd:03:07: dc:31:96:b7:75:d3:bd:e1:5e:fe:b3:b4:ed:0a:20: 0d:e1:26:65:b5:15:17:5c:28:ca:25:fd:9b:d8:f5: 39:64:47:f3:b7:56:44:3a:99:bd:0a:bb:c0:6b:c1: 7c:61:38:45:ef:a9:38:cb:d1:2e:74:53:3a:7a:70: 0c:b2:81:5b:74:0c:cd:96:48:43:44:7c:d8:28:2c: be:ed:25:61:c9:99:48:12:2b:f5:f4:31:41:33:f0: ec:0b:1a:88:0c:0e:b9:84:a6:ed:9a:a1:9b:35:1a: 9f:d0:a5:b6:f3:e2:b4:32:ed:f5:ff:93:65:77:ad: 13:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:67:2E:3B:E0:C3:62:4B:0E:7E:3B:2D:3E:69:44:E8:4F:CB:D5:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/806aee88-19bd-3e4e-b47a-e451a147a219.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:74:0e:24:45:96:75:4c:3d:7a:c6:59:12:24:c5:bd:b5:24: 57:21:95:f8:ff:dc:3c:58:e8:8b:b5:bc:6c:90:52:99:66:3d: 64:0a:87:75:e1:ab:40:3f:7f:95:e0:aa:89:f3:5e:6f:05:31: 53:ae:4d:1d:c5:c2:ce:cb:06:ad:39:83:0a:8d:c1:de:11:6a: cc:84:5f:81:94:52:08:3c:b1:77:bb:ef:d2:34:2e:88:28:3c: 68:ff:f6:b3:1f:e1:cd:30:69:82:06:58:a2:d6:77:67:76:a0: cc:70:6f:c4:b0:b4:61:5b:2c:fa:cf:ac:4b:b8:8a:9b:db:33: cb:17:18:d5:02:d5:1a:42:da:70:0f:68:d6:e1:b1:db:e0:1e: 3b:88:25:89:bd:23:b9:36:30:75:6e:da:bc:5d:30:af:4c:49: 74:23:2c:53:8f:4c:22:42:db:67:76:9f:0d:35:31:bf:90:58: b8:a3:98:c2:c5:6f:c0:1f:0d:65:5a:db:e0:49:2e:96:a3:3a: 48:60:bb:18:df:9b:5c:bf:bd:23:1a:0d:39:5c:ee:36:03:85: 52:65:6f:9a:5e:a1:6f:f1:7f:a5:f8:48:5d:f2:78:f9:5a:84: 1c:78:60:9e:10:ca:0a:46:61:a0:77:5d:c5:08:3a:27:84:80: c1:aa:b4:c2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1NunWCSf1pWwTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk NjFlMTk5ZmUtOGE2Yy00ZTQyLWJmZTEtY2NhYWM1ZWNkMzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUvyitsC3sb4fr9KPkkrv/G7nKnf16eQLOMN Mfjyj63yLLwPs+DwYpoz76AOu9oK0E6wbFGyjWIrSF5QRNvZNvVxZ8Sxr8RvlBB3 okYU3cAHpsX7m1IvTlftxGlg2Y9si29da/NkqFUVIYKN/krK5IkbnjwlP3g4QM74 BG9+zh9i6TnNAwfcMZa3ddO94V7+s7TtCiAN4SZltRUXXCjKJf2b2PU5ZEfzt1ZE Opm9CrvAa8F8YThF76k4y9EudFM6enAMsoFbdAzNlkhDRHzYKCy+7SVhyZlIEiv1 9DFBM/DsCxqIDA65hKbtmqGbNRqf0KW28+K0Mu31/5Nld60TKQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNtnLjvgw2JLDn47LT5pROhPy9VDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODA2YWVlODgtMTliZC0z ZTRlLWI0N2EtZTQ1MWExNDdhMjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAUdA4kRZZ1TD16xlkSJMW9tSRXIZX4/9w8WOiL tbxskFKZZj1kCod14atAP3+V4KqJ815vBTFTrk0dxcLOywatOYMKjcHeEWrMhF+B lFIIPLF3u+/SNC6IKDxo//azH+HNMGmCBlii1ndndqDMcG/EsLRhWyz6z6xLuIqb 2zPLFxjVAtUaQtpwD2jW4bHb4B47iCWJvSO5NjB1btq8XTCvTEl0IyxTj0wiQttn dp8NNTG/kFi4o5jCxW/AHw1lWtvgSS6WozpIYLsY35tcv70jGg05XO42A4VSZW+a XqFv8X+l+Ehd8nj5WoQceGCeEMoKRmGgd13FCDonhIDBqrTC -----END CERTIFICATE-----Generated at Sun May 11 06:40:04 2025 by rpki-client