$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a1d31cf1-4fe8-3b56-a5fd-6baf3c0beaa8.roa File: a1d31cf1-4fe8-3b56-a5fd-6baf3c0beaa8.roa (raw, json) Hash identifier: 9ON+7Lusj7hcU/Bk8nzQ4Uxdo7FMN7AJWkwjkQccJpI= Subject key identifier: FA:B8:E8:07:DF:5F:80:E3:15:E2:1F:6C:89:6E:9C:93:CB:DA:D8:DD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A2BCAEB8BDE593D9B3300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a1d31cf1-4fe8-3b56-a5fd-6baf3c0beaa8.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396559 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:2b:ca:eb:8b:de:59:3d:9b:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=389c099c-bf0f-42c1-9246-34c2b8eb07fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f3:0f:b8:f7:52:9e:26:0e:a7:c9:13:0f:f1: 09:9f:17:52:c4:a4:2c:14:5c:81:52:db:87:21:8e: 06:37:f2:5f:5f:aa:b2:16:48:ce:87:20:e2:9d:21: 89:5b:96:d6:0b:52:66:87:76:85:c6:b1:1b:ab:0c: c7:28:50:58:42:00:b0:f9:fc:8d:38:85:2c:3e:91: d2:08:b8:6c:88:f5:0a:31:40:f7:c9:7a:fe:f2:cf: 3c:4b:f1:ad:30:f4:fe:96:7c:90:01:0e:5c:bf:19: 4f:df:1a:00:a5:26:ed:3a:80:38:62:87:ea:5a:28: 53:c8:00:cb:bc:23:58:2a:30:26:40:d4:70:56:e5: 27:10:34:5d:92:77:e3:f2:7a:47:2a:6d:0d:3e:36: 54:2c:c5:e2:39:7b:40:ce:2b:e0:57:a1:31:bc:62: b3:88:64:10:49:20:30:02:8d:9e:bd:fa:4a:f5:d3: d7:01:ba:c1:71:af:81:a5:88:2e:4d:85:4d:74:be: 60:95:c8:b6:8e:5c:17:3a:3d:cf:6f:2f:2b:68:06: 83:95:2d:39:e0:c5:0d:14:f7:f9:1c:9c:36:88:94: ee:b0:fe:7c:b7:f7:54:eb:38:84:12:fd:6b:aa:38: 30:b3:d3:cf:a8:2a:84:16:0c:63:be:b6:d2:09:2a: 3d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B8:E8:07:DF:5F:80:E3:15:E2:1F:6C:89:6E:9C:93:CB:DA:D8:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a1d31cf1-4fe8-3b56-a5fd-6baf3c0beaa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:31:8c:81:d4:24:6f:65:50:13:ba:1c:68:e1:73:8b:c7:40: 92:2b:aa:40:42:ef:05:68:8d:83:b1:1a:a8:e1:c4:2a:9c:e9: d4:59:22:fc:9a:4b:3f:0e:d5:b8:39:cd:18:a7:f9:fe:a3:1e: c8:7b:46:48:72:93:9b:27:86:59:de:d3:a0:96:ed:ac:4f:35: 5e:2a:de:94:b8:f6:c7:f1:2f:33:78:5a:44:f3:cb:99:61:ee: e4:27:5c:fe:37:31:cc:d1:9b:cb:31:fb:45:13:5d:1f:da:b2: 41:ea:a1:c3:d9:0b:0e:58:47:c5:06:b8:ac:f4:27:03:9b:52: 8a:06:de:6b:d5:ad:50:ed:f4:0a:62:09:07:09:53:a3:07:0c: 63:b7:e7:6e:d7:30:55:9b:dc:76:9b:6d:7b:b5:4b:b8:c8:9f: 4d:31:e6:b6:fd:b9:78:0b:f6:d3:91:b7:93:a6:5e:3b:d1:9e: 94:b0:2b:c0:24:10:7e:d7:b8:1f:9f:e0:96:72:19:2c:58:61: 30:fa:84:a9:74:ad:53:41:b8:36:cb:ec:cd:c4:04:bb:f8:a1: 4b:d1:b0:23:f7:08:d1:6d:37:f3:26:60:41:c5:a4:3c:5f:2f: e9:f3:ab:4e:9d:a0:6c:4c:b8:d7:77:ca:95:cf:8a:73:1e:e8: 80:e1:5c:1c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSivK64veWT2bMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk Mzg5YzA5OWMtYmYwZi00MmMxLTkyNDYtMzRjMmI4ZWIwN2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvMPuPdSniYOp8kTD/EJnxdSxKQsFFyBUtuH IY4GN/JfX6qyFkjOhyDinSGJW5bWC1Jmh3aFxrEbqwzHKFBYQgCw+fyNOIUsPpHS CLhsiPUKMUD3yXr+8s88S/GtMPT+lnyQAQ5cvxlP3xoApSbtOoA4YofqWihTyADL vCNYKjAmQNRwVuUnEDRdknfj8npHKm0NPjZULMXiOXtAzivgV6ExvGKziGQQSSAw Ao2evfpK9dPXAbrBca+BpYguTYVNdL5glci2jlwXOj3Pby8raAaDlS054MUNFPf5 HJw2iJTusP58t/dU6ziEEv1rqjgws9PPqCqEFgxjvrbSCSo9swIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPq46AffX4DjFeIfbIlunJPL2tjdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTFkMzFjZjEtNGZlOC0z YjU2LWE1ZmQtNmJhZjNjMGJlYWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCAMYyB1CRvZVATuhxo4XOLx0CSK6pAQu8FaI2D sRqo4cQqnOnUWSL8mks/DtW4Oc0Yp/n+ox7Ie0ZIcpObJ4ZZ3tOglu2sTzVeKt6U uPbH8S8zeFpE88uZYe7kJ1z+NzHM0ZvLMftFE10f2rJB6qHD2QsOWEfFBris9CcD m1KKBt5r1a1Q7fQKYgkHCVOjBwxjt+du1zBVm9x2m217tUu4yJ9NMea2/bl4C/bT kbeTpl470Z6UsCvAJBB+17gfn+CWchksWGEw+oSpdK1TQbg2y+zNxAS7+KFL0bAj 9wjRbTfzJmBBxaQ8Xy/p86tOnaBsTLjXd8qVz4pzHuiA4Vwc -----END CERTIFICATE-----Generated at Sun May 11 05:26:50 2025 by rpki-client