$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a24d1f9b-3211-3955-9582-5d075204bab5.roa File: a24d1f9b-3211-3955-9582-5d075204bab5.roa (raw, json) Hash identifier: 6oDpA9JFTCEzbhOU7+aLIMZu9VwJcGQesLHg2YKMiVM= Subject key identifier: 96:40:26:AF:D6:AB:35:3D:22:E2:A1:F8:F5:DE:42:04:01:D8:B7:09 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A347A16C2D26423F1D080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a24d1f9b-3211-3955-9582-5d075204bab5.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 36630 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:34:7a:16:c2:d2:64:23:f1:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=3a5e2ae8-dc02-4ce2-9796-b456cb4808da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:20:1f:27:cc:2d:29:5d:d5:7b:0a:6a:9a:39: 5c:d4:b7:45:da:fb:6a:69:b8:b2:0e:70:6d:ed:82: 52:2c:33:eb:de:6c:b0:40:8f:3d:e0:b7:16:43:44: c1:1a:1f:20:36:9a:38:22:03:b6:74:e1:8a:ae:4a: b7:82:ac:ad:bb:3c:c1:02:97:73:38:b1:e5:5d:38: c6:91:80:fc:7f:c7:86:65:b2:b0:c2:7b:cc:42:43: ba:49:ac:70:26:95:d4:cd:31:54:75:f9:4a:37:4e: 7d:be:e9:a8:1c:90:9c:b9:82:32:3f:89:7e:e5:a1: 4b:10:57:d3:44:ad:52:ec:99:ad:40:a2:05:d6:29: f5:04:99:54:a2:36:8e:4c:bb:d7:64:a8:c5:18:ea: 5a:96:c7:0f:4f:50:bd:59:04:b1:dc:56:ab:5e:3e: fc:fa:c6:a5:9e:c7:58:88:04:8e:5f:e8:e2:07:87: 2c:21:66:e0:02:72:e8:4b:55:73:28:15:a4:88:3b: d0:81:5f:5d:86:66:12:1b:6c:4d:dc:ca:da:86:15: 34:42:9e:c6:6a:36:9f:c6:4a:ea:51:28:89:fb:41: df:55:78:ee:b7:e4:e5:cb:4b:7e:01:ab:63:ac:e7: 03:0b:77:07:a2:d6:fc:aa:96:15:4e:02:f2:a0:59: be:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:40:26:AF:D6:AB:35:3D:22:E2:A1:F8:F5:DE:42:04:01:D8:B7:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a24d1f9b-3211-3955-9582-5d075204bab5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:a3:0c:99:60:8b:ca:91:18:06:26:c6:3f:6f:b9:9a:9f:0b: 43:8a:40:fb:46:ae:27:17:0e:b8:03:a5:86:f0:56:52:94:73: 5e:ef:82:8b:de:b2:46:07:3c:b8:55:03:15:ed:48:75:11:f1: a3:d3:03:78:24:cb:88:81:d9:bd:f4:f1:33:dc:50:cd:1b:74: bc:80:7f:fa:2b:29:dd:2a:09:1a:e8:0b:92:29:0c:bf:5b:79: 29:e8:11:3a:0f:c0:2b:7c:75:b3:fe:3b:89:fb:b9:d4:54:62: 3c:4e:6e:31:68:a3:24:71:52:e4:a3:6b:5c:55:ae:2d:0b:d6: a9:cf:d9:91:9c:22:e4:1c:43:78:ca:aa:9a:e6:4d:a8:f6:5a: 03:32:31:3b:40:a3:78:30:2f:9a:5d:78:65:bf:e5:c7:b9:1d: 0e:df:ea:5e:af:77:16:3e:e4:f0:8a:e4:49:35:42:78:6b:d8: f6:46:e8:60:ea:6a:8e:1e:24:21:82:a1:31:c3:ac:56:80:70: f6:6c:6f:e2:77:cd:43:19:66:7a:86:ce:06:44:ed:41:f3:7a: 46:9e:b2:77:cf:60:69:94:4e:f1:cb:6d:9f:6b:33:65:b4:58: 92:fb:4b:f8:81:7b:0f:c9:e4:9a:2c:df:1f:13:d3:58:6c:da: f4:ef:ff:7c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSjR6FsLSZCPx0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk M2E1ZTJhZTgtZGMwMi00Y2UyLTk3OTYtYjQ1NmNiNDgwOGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSAfJ8wtKV3Vewpqmjlc1LdF2vtqabiyDnBt 7YJSLDPr3mywQI894LcWQ0TBGh8gNpo4IgO2dOGKrkq3gqytuzzBApdzOLHlXTjG kYD8f8eGZbKwwnvMQkO6SaxwJpXUzTFUdflKN059vumoHJCcuYIyP4l+5aFLEFfT RK1S7JmtQKIF1in1BJlUojaOTLvXZKjFGOpalscPT1C9WQSx3FarXj78+salnsdY iASOX+jiB4csIWbgAnLoS1VzKBWkiDvQgV9dhmYSG2xN3MrahhU0Qp7Gajafxkrq USiJ+0HfVXjut+Tly0t+AatjrOcDC3cHotb8qpYVTgLyoFm+ZQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJZAJq/WqzU9IuKh+PXeQgQB2LcJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTI0ZDFmOWItMzIxMS0z OTU1LTk1ODItNWQwNzUyMDRiYWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB6owyZYIvKkRgGJsY/b7manwtDikD7Rq4nFw64 A6WG8FZSlHNe74KL3rJGBzy4VQMV7Uh1EfGj0wN4JMuIgdm99PEz3FDNG3S8gH/6 KyndKgka6AuSKQy/W3kp6BE6D8ArfHWz/juJ+7nUVGI8Tm4xaKMkcVLko2tcVa4t C9apz9mRnCLkHEN4yqqa5k2o9loDMjE7QKN4MC+aXXhlv+XHuR0O3+per3cWPuTw iuRJNUJ4a9j2Ruhg6mqOHiQhgqExw6xWgHD2bG/id81DGWZ6hs4GRO1B83pGnrJ3 z2BplE7xy22fazNltFiS+0v4gXsPyeSaLN8fE9NYbNr07/98 -----END CERTIFICATE-----Generated at Sun May 11 06:30:27 2025 by rpki-client