$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89c0097c-ba53-3eda-b8f4-83253c50f6be.roa File: 89c0097c-ba53-3eda-b8f4-83253c50f6be.roa (raw, json) Hash identifier: 5m3K1s3zZ6MV5fhex76PR0QZ32cQfH1dyGauGq9F2x4= Subject key identifier: 84:03:C8:45:22:08:D1:88:8A:DB:8D:84:A6:31:2B:10:96:E5:9F:9B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A331A3846C9B7B92D01A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89c0097c-ba53-3eda-b8f4-83253c50f6be.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 36620 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:33:1a:38:46:c9:b7:b9:2d:01:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=42495d12-9f01-4e38-8200-bf2cd1f07a5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3a:15:da:2b:6b:42:f5:3b:5e:5c:94:50:3b: d7:99:25:71:99:ae:c5:84:25:bd:71:75:df:b6:53: 52:6f:19:cf:db:41:e8:71:d3:34:46:f5:3d:06:ed: c3:83:f8:55:00:e1:3f:a1:b9:6d:18:4b:45:c5:1a: e1:81:45:a3:31:dd:49:f4:74:e8:bc:ef:80:70:7d: 00:e1:1f:10:0a:71:78:d3:41:17:91:d8:9e:85:c3: 99:a2:b7:21:32:9a:56:43:94:bb:39:27:6d:86:03: 00:3d:6a:ee:79:a9:04:3e:8a:d0:7d:a5:74:73:9d: 26:43:89:d1:e0:02:05:60:74:71:dc:b6:88:e8:7e: 21:03:18:41:f3:1a:96:6c:07:b5:e9:06:b9:e3:f1: 73:e5:8d:39:a8:d4:d2:13:4f:1d:e6:67:05:21:f1: 80:63:bb:e8:5b:47:32:ba:96:9d:1e:c5:0e:5b:ae: 2f:0d:6c:6b:34:6a:40:a5:c1:71:60:99:39:75:d8: c5:b1:6e:5b:4e:c5:b4:75:bc:61:49:bb:2c:53:cd: 0d:54:09:0b:f4:25:fc:5c:5a:cb:a5:94:3d:99:25: ca:18:d1:3d:aa:f2:ae:60:c0:03:50:b2:4d:f8:62: fc:c3:5a:f0:e0:94:79:8c:82:b3:22:e5:79:7f:e8: 86:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:03:C8:45:22:08:D1:88:8A:DB:8D:84:A6:31:2B:10:96:E5:9F:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89c0097c-ba53-3eda-b8f4-83253c50f6be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:4b:8b:d7:65:18:88:fb:5c:3f:28:3b:2d:51:a5:62:42:b0: 6b:22:c7:6d:b2:a7:e6:0d:fd:6c:91:0e:79:a5:4e:24:e7:02: f5:30:d1:f8:f8:96:7c:f6:23:db:c9:4a:02:f0:b5:97:06:b9: b8:b0:07:ca:70:ba:79:06:65:e8:67:00:57:be:36:53:c8:a7: 20:cd:92:ba:c5:b6:fe:00:5f:90:93:cd:46:49:57:a1:99:86: b9:af:7a:0a:d8:6b:c6:37:a2:28:f5:71:c9:68:d0:1f:cd:9e: f4:e1:ac:cd:f4:6a:bc:f7:62:83:03:00:9f:78:66:42:7c:55: 5f:0b:3f:dc:96:db:1a:fb:b7:0c:04:86:f8:f9:f6:fd:ab:55: e2:42:9b:fe:63:a8:4c:62:4c:82:50:b8:4e:9a:30:63:34:6e: 7a:b5:0d:cc:56:74:b3:a4:4e:21:cc:ef:7c:3e:43:65:88:7d: db:18:89:f6:a8:17:c6:11:59:12:c2:84:e0:07:19:df:f5:f4: 63:23:8e:bd:b1:0f:bf:4a:c5:d6:a9:1f:87:98:2a:f0:29:c9: 10:ce:01:f3:d9:72:b8:3b:8d:ba:61:0f:0a:44:a4:8f:e9:3a: 19:a5:16:2b:46:fb:c9:78:d5:d1:91:f3:35:e8:23:cb:69:94: df:e1:4b:34 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSjMaOEbJt7ktAaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NDI0OTVkMTItOWYwMS00ZTM4LTgyMDAtYmYyY2QxZjA3YTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzoV2itrQvU7XlyUUDvXmSVxma7FhCW9cXXf tlNSbxnP20HocdM0RvU9Bu3Dg/hVAOE/obltGEtFxRrhgUWjMd1J9HTovO+AcH0A 4R8QCnF400EXkdiehcOZorchMppWQ5S7OSdthgMAPWrueakEPorQfaV0c50mQ4nR 4AIFYHRx3LaI6H4hAxhB8xqWbAe16Qa54/Fz5Y05qNTSE08d5mcFIfGAY7voW0cy upadHsUOW64vDWxrNGpApcFxYJk5ddjFsW5bTsW0dbxhSbssU80NVAkL9CX8XFrL pZQ9mSXKGNE9qvKuYMADULJN+GL8w1rw4JR5jIKzIuV5f+iGlQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIQDyEUiCNGIituNhKYxKxCW5Z+bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODljMDA5N2MtYmE1My0z ZWRhLWI4ZjQtODMyNTNjNTBmNmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA2S4vXZRiI+1w/KDstUaViQrBrIsdtsqfmDf1s kQ55pU4k5wL1MNH4+JZ89iPbyUoC8LWXBrm4sAfKcLp5BmXoZwBXvjZTyKcgzZK6 xbb+AF+Qk81GSVehmYa5r3oK2GvGN6Io9XHJaNAfzZ704azN9Gq892KDAwCfeGZC fFVfCz/cltsa+7cMBIb4+fb9q1XiQpv+Y6hMYkyCULhOmjBjNG56tQ3MVnSzpE4h zO98PkNliH3bGIn2qBfGEVkSwoTgBxnf9fRjI469sQ+/SsXWqR+HmCrwKckQzgHz 2XK4O426YQ8KRKSP6ToZpRYrRvvJeNXRkfM16CPLaZTf4Us0 -----END CERTIFICATE-----Generated at Sun May 11 08:13:15 2025 by rpki-client