$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d655471-4904-3da8-afd8-b0d9e9a389ec.roa File: 8d655471-4904-3da8-afd8-b0d9e9a389ec.roa (raw, json) Hash identifier: IVNZ2oP+S4x3rQrcDtu57Y4pp6Fa1H5PZ73/tojYYZ8= Subject key identifier: 1C:A8:98:10:6E:25:0C:01:97:54:E3:AF:83:53:E6:DC:EC:51:6F:28 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4D5257BBB3F31215DD200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d655471-4904-3da8-afd8-b0d9e9a389ec.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 396554 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:d5:25:7b:bb:3f:31:21:5d:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=76e8a2e6-f908-438d-afdb-81cd8752da42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:33:a6:a3:6f:ba:f7:5f:cc:1b:57:e8:98:c6: 8c:0f:be:7d:f3:50:03:ed:e2:93:34:1c:1b:93:1e: 0f:1f:bb:1a:84:f5:5e:d0:30:e0:30:63:a1:61:93: d5:8a:56:1c:44:95:13:ab:17:a6:b3:35:b1:0e:66: c8:92:f8:69:65:4c:51:5e:bd:a6:31:68:4c:a9:29: aa:4f:ec:56:7b:ba:7b:a0:b6:48:6b:e4:ed:46:a3: c3:11:e3:8f:60:ec:ed:03:f0:f4:9f:45:f9:94:c1: ca:87:1e:f7:f5:56:be:4f:09:6e:b3:27:08:db:5a: 41:53:2d:72:ec:f7:0a:30:17:83:03:99:87:33:2e: ba:89:13:14:4f:84:33:d4:fb:6b:9e:4f:2a:73:66: ba:14:94:58:f6:1f:30:ce:c7:95:38:ba:3b:ab:df: 9e:15:8d:df:b4:b0:87:4a:34:ca:4f:06:4f:3f:30: c5:66:e5:4c:0f:f8:9e:1e:e1:29:d9:01:cd:9b:d2: e4:13:04:83:e3:82:f6:ed:6f:8f:50:38:de:0d:04: f0:db:53:68:09:ca:fa:f4:67:be:b9:66:6e:e8:c3: 73:56:e7:54:a4:87:af:d2:1b:05:bb:cb:bd:a7:a4: 25:a2:84:3a:42:22:17:ff:b0:36:a4:a2:0c:7d:2e: 81:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A8:98:10:6E:25:0C:01:97:54:E3:AF:83:53:E6:DC:EC:51:6F:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8d655471-4904-3da8-afd8-b0d9e9a389ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:12:33:b4:fa:95:27:2b:43:2a:85:8e:df:c6:c4:48:0a:8e: 0e:01:44:3c:d7:10:74:66:74:a7:40:dd:2d:c5:b6:9f:03:20: 5d:3c:96:42:f7:e0:f5:8f:8a:fe:65:9a:87:13:b5:7d:e8:18: a1:0a:13:8c:f4:14:cb:e9:7d:ba:ea:37:b8:db:13:ee:ec:df: 3b:54:e8:42:33:42:84:8c:c9:3f:61:74:f0:60:1a:49:54:cc: a3:a7:00:49:dc:e5:36:ed:55:12:45:d4:69:c7:aa:03:08:93: 92:88:cb:62:00:25:ca:8a:b1:4a:7f:f6:01:1d:bd:d0:0b:79: c0:6f:e9:81:17:1c:0d:ac:26:2b:30:be:ca:93:45:17:88:09: 12:5e:50:18:14:09:82:66:d5:e6:a3:77:c8:d2:0a:b5:90:be: 8a:14:5e:1a:46:f8:7b:91:05:5d:b8:5c:32:ba:ad:1a:11:4a: 8e:0e:60:3e:23:e3:26:49:78:53:e9:a7:13:c8:a1:5d:52:3a: 46:91:98:59:49:7a:1c:4f:9c:5b:89:69:6d:ae:bb:a5:4f:ad: 2f:5b:05:dc:e3:c5:4f:dd:42:a2:eb:fb:ad:85:1a:68:aa:ce: 98:92:70:5a:2b:24:cf:87:6c:99:42:91:5c:1b:ab:a1:ac:1a: fd:75:17:fa -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1NUle7s/MSFd0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk NzZlOGEyZTYtZjkwOC00MzhkLWFmZGItODFjZDg3NTJkYTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzOmo2+691/MG1fomMaMD75981AD7eKTNBwb kx4PH7sahPVe0DDgMGOhYZPVilYcRJUTqxemszWxDmbIkvhpZUxRXr2mMWhMqSmq T+xWe7p7oLZIa+TtRqPDEeOPYOztA/D0n0X5lMHKhx739Va+TwlusycI21pBUy1y 7PcKMBeDA5mHMy66iRMUT4Qz1Ptrnk8qc2a6FJRY9h8wzseVOLo7q9+eFY3ftLCH SjTKTwZPPzDFZuVMD/ieHuEp2QHNm9LkEwSD44L27W+PUDjeDQTw21NoCcr69Ge+ uWZu6MNzVudUpIev0hsFu8u9p6QlooQ6QiIX/7A2pKIMfS6BHwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFByomBBuJQwBl1Tjr4NT5tzsUW8oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGQ2NTU0NzEtNDkwNC0z ZGE4LWFmZDgtYjBkOWU5YTM4OWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCEEjO0+pUnK0MqhY7fxsRICo4OAUQ81xB0ZnSn QN0txbafAyBdPJZC9+D1j4r+ZZqHE7V96BihChOM9BTL6X266je42xPu7N87VOhC M0KEjMk/YXTwYBpJVMyjpwBJ3OU27VUSRdRpx6oDCJOSiMtiACXKirFKf/YBHb3Q C3nAb+mBFxwNrCYrML7Kk0UXiAkSXlAYFAmCZtXmo3fI0gq1kL6KFF4aRvh7kQVd uFwyuq0aEUqODmA+I+MmSXhT6acTyKFdUjpGkZhZSXocT5xbiWltrrulT60vWwXc 48VP3UKi6/uthRpoqs6YknBaKyTPh2yZQpFcG6uhrBr9dRf6 -----END CERTIFICATE-----Generated at Sun May 11 08:21:55 2025 by rpki-client