$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e22e1de-01c6-3507-ab20-b881646f46fa.roa File: 8e22e1de-01c6-3507-ab20-b881646f46fa.roa (raw, json) Hash identifier: z/2I6Cm8wqLzPqeJgifsqF+wG3K4bw33Hf97YrgF9RQ= Subject key identifier: 87:0D:12:5E:1C:AF:E8:A4:49:2D:6A:EC:F5:53:BD:C9:E2:70:25:AF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A291AFFC5FA7394243400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e22e1de-01c6-3507-ab20-b881646f46fa.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396578 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:29:1a:ff:c5:fa:73:94:24:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=6f7f22e2-85b2-43d2-8775-b5248904a7b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a8:be:28:71:8d:3c:be:b5:7c:82:c6:8e:b8: 05:d3:4e:64:b2:e5:de:8e:6c:27:a4:c2:71:ce:21: 0b:d5:ea:d4:93:4e:ca:a7:43:cf:8b:5f:df:9f:40: 56:27:ab:99:13:9d:3a:50:d9:94:67:25:d2:47:11: 85:de:85:bc:86:28:c7:fb:91:d7:e1:10:d3:38:23: 5e:7e:5e:21:bc:8b:c9:02:a2:93:17:ac:6b:90:05: 84:2a:e1:de:64:d7:0d:35:92:a1:64:40:d8:3a:64: bc:63:da:f7:3e:ca:88:0a:72:45:b0:3d:56:59:47: 97:97:24:e3:28:8a:e6:14:fe:89:1f:41:70:5f:5b: 25:de:4d:01:72:95:7c:b5:79:e6:c9:cf:c2:b8:fc: 10:23:4d:2e:bc:99:b1:99:27:3f:dd:62:8d:58:bc: 20:7a:0b:fd:dc:60:74:85:d7:5b:14:4e:4c:ef:04: ab:a3:b9:52:88:8d:8e:d0:8e:d1:1d:ef:99:7f:e4: 96:d3:cd:13:c2:82:f1:17:46:c1:af:16:a5:42:67: 83:04:88:0c:21:34:02:fc:b6:8b:d7:d2:86:a1:95: 05:6c:0c:ca:0f:a7:aa:49:ce:c5:1c:c0:0b:c9:87: 88:c5:7d:66:f0:b9:9a:3b:53:4a:e0:28:e1:4f:a3: 22:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0D:12:5E:1C:AF:E8:A4:49:2D:6A:EC:F5:53:BD:C9:E2:70:25:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e22e1de-01c6-3507-ab20-b881646f46fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:7b:7c:60:64:c7:01:21:75:09:38:19:b9:f9:09:16:16:c6: 5f:dd:3e:65:a4:27:30:01:f2:c4:05:7e:f4:77:50:32:bc:bd: 57:72:77:1f:fc:68:fa:b1:4e:55:14:b8:aa:7a:e7:62:f8:4e: 7b:4d:0e:34:e0:e2:22:b3:c8:3b:ec:99:36:05:dc:37:3a:fc: 49:8c:68:84:1b:92:b9:6b:12:26:5a:71:7a:02:12:a9:69:32: b3:b4:f1:9b:af:0b:53:88:56:8a:b2:e0:0e:ed:41:d6:aa:72: bc:e1:da:ec:e0:4c:ef:d6:d0:aa:9a:c6:57:9b:60:e8:c8:a3: d6:12:2f:89:e7:a9:1a:0f:bb:f3:77:00:8f:9f:e3:05:ad:9d: c7:48:e8:e6:34:e5:45:6e:c5:3a:06:5d:a1:10:d5:7c:bc:64: a2:6a:99:13:72:ee:6e:95:97:f6:d8:a9:b8:a9:16:53:cb:14: 09:eb:ee:65:a6:af:eb:98:00:2b:3f:e1:99:08:b8:36:32:0a: fb:3b:16:7e:66:e3:86:6e:ce:20:e6:51:0d:7f:a5:d7:49:e1: e1:18:4d:ec:22:6f:8a:51:2f:6b:76:b0:cb:e5:89:4b:5e:63: 2b:cf:97:43:0a:fc:36:4d:9e:c7:53:a2:ab:38:2c:75:45:02: ef:b5:c8:32 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSika/8X6c5QkNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NmY3ZjIyZTItODViMi00M2QyLTg3NzUtYjUyNDg5MDRhN2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKi+KHGNPL61fILGjrgF005ksuXejmwnpMJx ziEL1erUk07Kp0PPi1/fn0BWJ6uZE506UNmUZyXSRxGF3oW8hijH+5HX4RDTOCNe fl4hvIvJAqKTF6xrkAWEKuHeZNcNNZKhZEDYOmS8Y9r3PsqICnJFsD1WWUeXlyTj KIrmFP6JH0FwX1sl3k0BcpV8tXnmyc/CuPwQI00uvJmxmSc/3WKNWLwgegv93GB0 hddbFE5M7wSro7lSiI2O0I7RHe+Zf+SW080TwoLxF0bBrxalQmeDBIgMITQC/LaL 19KGoZUFbAzKD6eqSc7FHMALyYeIxX1m8LmaO1NK4CjhT6MicQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIcNEl4cr+ikSS1q7PVTvcnicCWvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGUyMmUxZGUtMDFjNi0z NTA3LWFiMjAtYjg4MTY0NmY0NmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB3e3xgZMcBIXUJOBm5+QkWFsZf3T5lpCcwAfLE BX70d1AyvL1Xcncf/Gj6sU5VFLiqeudi+E57TQ404OIis8g77Jk2Bdw3OvxJjGiE G5K5axImWnF6AhKpaTKztPGbrwtTiFaKsuAO7UHWqnK84drs4Ezv1tCqmsZXm2Do yKPWEi+J56kaD7vzdwCPn+MFrZ3HSOjmNOVFbsU6Bl2hENV8vGSiapkTcu5ulZf2 2Km4qRZTyxQJ6+5lpq/rmAArP+GZCLg2Mgr7OxZ+ZuOGbs4g5lENf6XXSeHhGE3s Im+KUS9rdrDL5YlLXmMrz5dDCvw2TZ7HU6KrOCx1RQLvtcgy -----END CERTIFICATE-----Generated at Sun May 11 06:20:32 2025 by rpki-client