$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97e7fe72-c812-3e89-857d-cba10fa54a1c.roa File: 97e7fe72-c812-3e89-857d-cba10fa54a1c.roa (raw, json) Hash identifier: QNYv+8AAiAf0x1WF5Eyphqti6yyFdN9/aUlKB7BwbiY= Subject key identifier: 51:64:AC:87:C0:42:EB:D0:1B:1E:B9:00:B2:6A:3E:05:FF:47:90:E1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4D4AE2BD8890EFB0E2938 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97e7fe72-c812-3e89-857d-cba10fa54a1c.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 396583 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:d4:ae:2b:d8:89:0e:fb:0e:29:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=67fde888-0760-445a-b44a-d3e4833ba3fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7d:3b:4a:fb:f2:fa:91:2f:45:2c:d2:ac:08: 4a:d5:66:1a:12:b5:56:82:34:6c:54:53:47:23:31: 6f:69:ae:c9:90:34:b6:fd:42:d6:01:0f:15:09:ea: 74:87:d0:83:2f:e0:8b:db:07:eb:cf:35:90:eb:0e: e0:69:c8:b3:dd:a9:2f:61:65:cc:a6:78:7c:4e:81: ea:26:d9:60:c8:80:32:48:52:23:93:b2:47:d6:97: cd:3c:00:66:33:9e:ef:1f:7a:d4:1c:fd:9e:00:71: 2b:a5:04:5e:43:ec:db:5a:58:95:cd:03:57:dd:c7: d0:a9:e5:9c:b0:26:72:d2:b8:3a:41:98:5e:9e:2e: cb:64:24:81:47:95:6c:97:07:2e:de:92:da:2b:62: 64:48:43:bc:a5:e5:4e:03:91:a3:a0:1d:d7:87:96: 76:72:a3:f9:a2:02:db:ef:91:64:42:80:b4:10:cc: be:4f:04:d9:43:c9:87:78:f8:d3:db:f8:21:ea:0b: 5f:31:5a:3d:96:3b:64:2a:0d:2e:a7:c1:0b:5d:06: c1:50:e6:9f:d8:f0:53:a5:b6:39:19:dc:82:0d:f1: f3:c1:3e:5b:40:27:ff:4d:c8:85:c8:66:1b:be:9b: bc:b4:35:c0:22:ef:f4:21:be:b9:94:c0:f5:3e:5b: 81:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:64:AC:87:C0:42:EB:D0:1B:1E:B9:00:B2:6A:3E:05:FF:47:90:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97e7fe72-c812-3e89-857d-cba10fa54a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:13:b8:ea:ff:ff:19:a4:c3:e5:a7:c3:22:f5:79:eb:34:33: 88:83:40:9d:06:37:b5:33:cc:01:dd:af:64:a7:2a:0a:0b:9b: 16:06:f9:59:40:24:b4:fb:44:a8:2d:2e:6d:25:fc:48:42:b7: aa:f6:8d:fc:71:a0:db:e5:52:80:52:20:f1:fd:c1:03:10:82: a3:fe:1a:72:84:5c:4a:9b:50:10:77:a8:48:3a:e4:40:32:97: 6e:1e:13:18:c8:e0:e4:5d:6c:5f:04:92:d0:83:c3:ff:27:1c: a4:5f:e2:8b:99:aa:b5:c8:75:c1:a3:e3:16:df:f2:69:66:18: 59:85:fe:a0:94:51:d6:b1:84:af:77:91:6b:0c:5c:59:8b:de: 32:80:3d:c8:c4:c7:16:42:f0:f3:3d:f5:09:60:f3:f3:02:54: c2:46:d5:99:4d:bc:6a:c1:18:9d:8d:63:49:92:63:49:cc:17: 2d:4a:9d:27:13:a0:98:94:9f:b2:fa:13:83:bf:75:72:fe:7e: d2:9d:b2:13:c5:f5:d3:27:fc:9f:49:bc:70:22:c1:8d:8f:7e: f6:87:2b:5c:1a:3d:b2:d1:85:5a:1b:ad:5d:b9:9e:9f:b7:bc: a7:02:66:35:70:b2:41:a7:e2:fd:b1:a9:4e:74:ac:04:b9:a3: ce:77:5b:b6 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1NSuK9iJDvsOKTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk NjdmZGU4ODgtMDc2MC00NDVhLWI0NGEtZDNlNDgzM2JhM2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX07Svvy+pEvRSzSrAhK1WYaErVWgjRsVFNH IzFvaa7JkDS2/ULWAQ8VCep0h9CDL+CL2wfrzzWQ6w7gaciz3akvYWXMpnh8ToHq JtlgyIAySFIjk7JH1pfNPABmM57vH3rUHP2eAHErpQReQ+zbWliVzQNX3cfQqeWc sCZy0rg6QZheni7LZCSBR5Vslwcu3pLaK2JkSEO8peVOA5GjoB3Xh5Z2cqP5ogLb 75FkQoC0EMy+TwTZQ8mHePjT2/gh6gtfMVo9ljtkKg0up8ELXQbBUOaf2PBTpbY5 GdyCDfHzwT5bQCf/TciFyGYbvpu8tDXAIu/0Ib65lMD1PluB1QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFFkrIfAQuvQGx65ALJqPgX/R5DhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTdlN2ZlNzItYzgxMi0z ZTg5LTg1N2QtY2JhMTBmYTU0YTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBhE7jq//8ZpMPlp8Mi9XnrNDOIg0CdBje1M8wB 3a9kpyoKC5sWBvlZQCS0+0SoLS5tJfxIQreq9o38caDb5VKAUiDx/cEDEIKj/hpy hFxKm1AQd6hIOuRAMpduHhMYyODkXWxfBJLQg8P/JxykX+KLmaq1yHXBo+MW3/Jp ZhhZhf6glFHWsYSvd5FrDFxZi94ygD3IxMcWQvDzPfUJYPPzAlTCRtWZTbxqwRid jWNJkmNJzBctSp0nE6CYlJ+y+hODv3Vy/n7SnbITxfXTJ/yfSbxwIsGNj372hytc Gj2y0YVaG61duZ6ft7ynAmY1cLJBp+L9salOdKwEuaPOd1u2 -----END CERTIFICATE-----Generated at Sun May 11 05:28:12 2025 by rpki-client