$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87cbc9da-2f8e-3af9-8759-8f2ff1aa25e6.roa File: 87cbc9da-2f8e-3af9-8759-8f2ff1aa25e6.roa (raw, json) Hash identifier: uNUQ++Z3Oh0ESYI/csf26a9rK+ZFEKHtHo93/STacio= Subject key identifier: AA:A7:6E:09:01:16:D2:DB:A2:72:87:71:13:9C:F8:AE:E0:BC:37:CF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4DC01E106F695A6B91100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87cbc9da-2f8e-3af9-8759-8f2ff1aa25e6.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 36624 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:dc:01:e1:06:f6:95:a6:b9:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=cdb147f4-b508-4be4-b933-6d77401a3c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f6:4d:57:b6:c5:55:11:4d:aa:eb:95:79:92: a6:f6:62:09:9e:2b:ab:9e:e4:c7:ee:5a:c0:aa:2f: fb:e8:0d:ff:7c:a7:2f:36:4b:59:0a:62:45:e9:8d: 4c:e9:c6:41:63:22:d6:4e:73:23:ac:da:f4:bb:c4: e0:f8:98:d8:97:32:de:2c:d8:3a:f7:c7:6e:89:97: 0a:15:5b:4e:3c:a0:47:52:1c:3f:44:2e:67:31:09: 70:22:d4:51:b8:ac:99:f9:b1:e5:65:16:f8:f4:03: 84:30:b5:4f:6c:fc:d7:27:46:34:ea:7b:53:c2:33: 8f:ef:8f:9a:5f:cf:d0:a3:e9:60:c6:e7:17:57:af: 0d:79:fd:46:3c:97:c6:10:5f:d5:d1:92:a9:83:16: a1:99:75:c7:46:69:60:94:30:4f:00:d4:ce:b8:9d: 6c:c3:6e:44:6b:4a:8c:e8:8d:e6:9e:b2:db:0d:7e: 2e:a1:73:62:c9:78:d7:7b:5d:8c:18:f5:a1:ef:6c: d1:ef:af:80:99:7a:6f:43:fe:7e:bb:06:e8:51:12: 46:fe:3b:09:a8:21:76:70:e4:c1:6e:2d:c5:b5:45: 49:45:a5:13:b7:c4:e6:76:4f:e6:94:ce:c1:ce:b1: 67:7d:b8:5f:5f:2a:db:79:5c:1e:f9:95:22:e4:d1: 3a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A7:6E:09:01:16:D2:DB:A2:72:87:71:13:9C:F8:AE:E0:BC:37:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87cbc9da-2f8e-3af9-8759-8f2ff1aa25e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:00:aa:a9:3c:75:f6:a7:67:d8:2e:94:bb:f2:0c:ea:77:e1: e2:54:23:92:51:1e:74:d2:60:f7:b7:11:77:72:fd:27:2a:bf: e5:d0:ad:45:99:9b:ac:6b:02:0a:84:d8:a3:38:23:6c:d4:0f: 3c:bc:ea:e8:5b:c3:83:74:ef:e1:5f:7c:d4:bd:5e:80:20:9f: 24:df:42:04:3e:7d:e2:93:89:1d:71:ff:d5:db:77:27:60:08: 59:27:00:9a:7c:4b:8a:67:be:ef:8b:db:3e:c6:8b:32:93:82: 58:08:a9:b0:a7:55:56:29:7b:87:19:b9:c4:08:20:cd:a8:ea: 35:9f:2f:89:19:80:2f:94:cd:29:c3:3a:4d:cc:76:cc:e3:b7: d2:f4:d6:f8:00:17:31:b3:53:8c:58:c9:3e:54:78:a8:26:67: 14:74:6f:46:06:c2:db:26:78:53:73:fc:53:49:4e:13:1e:31: 69:3a:52:0d:41:74:a0:d3:2e:67:3b:09:c7:36:e5:13:84:4e: b5:17:55:03:5b:e0:cb:43:ae:34:6f:9f:93:07:15:c2:59:d4: b2:92:54:9a:af:29:2f:71:f9:5d:22:e6:3c:a2:a8:fe:78:b8: 0a:99:1a:9e:88:d0:8e:f1:13:84:f0:62:55:60:fd:5f:29:d7: 9c:98:38:43 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1NwB4Qb2laa5EQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk Y2RiMTQ3ZjQtYjUwOC00YmU0LWI5MzMtNmQ3NzQwMWEzYzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfZNV7bFVRFNquuVeZKm9mIJniurnuTH7lrA qi/76A3/fKcvNktZCmJF6Y1M6cZBYyLWTnMjrNr0u8Tg+JjYlzLeLNg698duiZcK FVtOPKBHUhw/RC5nMQlwItRRuKyZ+bHlZRb49AOEMLVPbPzXJ0Y06ntTwjOP74+a X8/Qo+lgxucXV68Nef1GPJfGEF/V0ZKpgxahmXXHRmlglDBPANTOuJ1sw25Ea0qM 6I3mnrLbDX4uoXNiyXjXe12MGPWh72zR76+AmXpvQ/5+uwboURJG/jsJqCF2cOTB bi3FtUVJRaUTt8Tmdk/mlM7BzrFnfbhfXyrbeVwe+ZUi5NE6SQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKqnbgkBFtLbonKHcROc+K7gvDfPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODdjYmM5ZGEtMmY4ZS0z YWY5LTg3NTktOGYyZmYxYWEyNWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCJAKqpPHX2p2fYLpS78gzqd+HiVCOSUR500mD3 txF3cv0nKr/l0K1FmZusawIKhNijOCNs1A88vOroW8ODdO/hX3zUvV6AIJ8k30IE Pn3ik4kdcf/V23cnYAhZJwCafEuKZ77vi9s+xosyk4JYCKmwp1VWKXuHGbnECCDN qOo1ny+JGYAvlM0pwzpNzHbM47fS9Nb4ABcxs1OMWMk+VHioJmcUdG9GBsLbJnhT c/xTSU4THjFpOlINQXSg0y5nOwnHNuUThE61F1UDW+DLQ640b5+TBxXCWdSyklSa rykvcfldIuY8oqj+eLgKmRqeiNCO8ROE8GJVYP1fKdecmDhD -----END CERTIFICATE-----Generated at Sun May 11 05:33:32 2025 by rpki-client