$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97ed43b8-0e7e-3f1d-9544-ff2053e5f159.roa File: 97ed43b8-0e7e-3f1d-9544-ff2053e5f159.roa (raw, json) Hash identifier: rUhGQvV6Z2C0NzO+GnOUzeIwvC5w9a7sumU7rqFxIEA= Subject key identifier: B9:FB:E3:1D:1B:69:8C:E2:48:A4:78:8E:B5:15:04:EE:F4:91:74:F2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4D45E86B1618943ED3800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97ed43b8-0e7e-3f1d-9544-ff2053e5f159.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 36621 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:d4:5e:86:b1:61:89:43:ed:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=6d5e8cb3-3877-4923-ba6b-edad5bbdfc76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7e:5f:04:f4:87:93:e8:9a:31:c3:6c:76:af: 37:d6:b1:a9:4c:aa:3a:ba:52:34:69:73:63:93:6c: 29:b9:d3:f1:80:a0:6a:81:1d:a8:fe:7c:4f:bd:70: 51:c8:53:a3:ce:f7:b9:f2:28:1d:8b:5a:f1:dc:44: 45:a5:3c:d8:f9:76:45:7f:a0:04:ae:12:fc:57:c2: 92:d9:c1:1a:bf:35:a3:22:00:71:c7:6f:92:cf:d6: 8c:c3:b7:51:61:cc:e1:d6:99:41:65:8c:78:ba:56: ee:d9:e6:8c:66:4a:0d:1c:f9:9d:4f:dd:8b:62:c8: 95:b6:ad:17:4a:8f:ee:5a:3e:1b:7b:0c:6c:02:85: 5f:b3:fc:f6:e5:bb:55:5e:10:3b:81:01:9e:d9:ba: a7:9a:8f:40:b7:87:60:01:3e:d9:cd:e1:c7:25:2f: 7e:12:b2:78:dd:7f:b8:fe:e8:c1:ef:9a:d5:6d:c8: cf:f5:61:28:3b:8d:bb:1e:8e:52:98:61:24:0c:e9: 79:ec:a0:c1:a3:d3:4c:f6:b1:aa:50:0f:a9:cc:d6: 09:1b:2c:46:6e:16:a4:c5:6d:8f:86:27:f9:eb:43: 95:10:96:77:2e:91:ee:90:65:e4:5b:e7:39:e9:ce: 1f:06:54:97:08:d8:3b:50:88:e9:fa:78:3f:b0:8c: fa:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:FB:E3:1D:1B:69:8C:E2:48:A4:78:8E:B5:15:04:EE:F4:91:74:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97ed43b8-0e7e-3f1d-9544-ff2053e5f159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:61:34:71:ad:17:d4:e8:63:d4:ca:d9:71:85:9d:d3:8d:b4: b3:83:ef:d9:8f:64:84:fa:20:9e:b3:0e:8e:9f:a7:a7:22:0b: 3b:b2:8c:a0:e0:69:ad:ad:a0:17:1c:ec:06:0a:0e:f5:0a:c3: c1:08:06:6c:05:0d:fa:b1:2a:89:75:9f:35:2e:5c:8e:1b:73: 00:40:db:e4:05:7b:22:a8:ee:ae:30:b6:07:d0:88:50:a2:5a: 99:64:d9:95:de:3d:60:ed:12:ce:dd:4f:f9:dc:1d:74:61:bd: ae:7b:5f:88:c4:c8:ea:ff:7a:74:a3:25:c7:1f:16:1b:df:10: 41:de:0e:16:aa:59:38:70:41:81:c3:88:01:d3:13:da:00:f1: 78:00:6c:b2:06:9f:f3:fe:91:5f:ea:7b:28:ec:17:5d:2c:d7: e1:ca:f2:73:f1:df:50:97:eb:be:b3:c1:58:2f:fc:54:69:bd: 4f:8b:7b:0d:09:ca:6e:11:cd:00:8a:55:a1:08:20:7a:8c:aa: ed:0d:14:24:22:fe:66:db:ed:3e:78:9e:ce:2a:8b:8a:8c:4a: 32:40:14:8f:74:b9:bb:70:e7:1f:63:17:72:d1:c3:64:62:80: 75:f7:9b:95:bd:5b:88:4e:4c:4e:83:b7:e2:c4:74:c7:01:b7: 6a:77:7d:23 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1NRehrFhiUPtOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk NmQ1ZThjYjMtMzg3Ny00OTIzLWJhNmItZWRhZDViYmRmYzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn5fBPSHk+iaMcNsdq831rGpTKo6ulI0aXNj k2wpudPxgKBqgR2o/nxPvXBRyFOjzve58igdi1rx3ERFpTzY+XZFf6AErhL8V8KS 2cEavzWjIgBxx2+Sz9aMw7dRYczh1plBZYx4ulbu2eaMZkoNHPmdT92LYsiVtq0X So/uWj4bewxsAoVfs/z25btVXhA7gQGe2bqnmo9At4dgAT7ZzeHHJS9+ErJ43X+4 /ujB75rVbcjP9WEoO427Ho5SmGEkDOl57KDBo9NM9rGqUA+pzNYJGyxGbhakxW2P hif560OVEJZ3LpHukGXkW+c56c4fBlSXCNg7UIjp+ng/sIz6FwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLn74x0baYziSKR4jrUVBO70kXTyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTdlZDQzYjgtMGU3ZS0z ZjFkLTk1NDQtZmYyMDUzZTVmMTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAhYTRxrRfU6GPUytlxhZ3TjbSzg+/Zj2SE+iCe sw6On6enIgs7soyg4GmtraAXHOwGCg71CsPBCAZsBQ36sSqJdZ81LlyOG3MAQNvk BXsiqO6uMLYH0IhQolqZZNmV3j1g7RLO3U/53B10Yb2ue1+IxMjq/3p0oyXHHxYb 3xBB3g4Wqlk4cEGBw4gB0xPaAPF4AGyyBp/z/pFf6nso7BddLNfhyvJz8d9Ql+u+ s8FYL/xUab1Pi3sNCcpuEc0AilWhCCB6jKrtDRQkIv5m2+0+eJ7OKouKjEoyQBSP dLm7cOcfYxdy0cNkYoB195uVvVuITkxOg7fixHTHAbdqd30j -----END CERTIFICATE-----Generated at Sun May 11 05:26:45 2025 by rpki-client