$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a29e971c-3fed-3379-ad50-027a14d1589b.roa File: a29e971c-3fed-3379-ad50-027a14d1589b.roa (raw, json) Hash identifier: rlPzgIaYaiSx/84TgeI+9GCcuCV1pSdb69koIiVs73M= Subject key identifier: 53:3A:A9:8F:FC:4F:5D:C7:6C:B0:10:99:88:E0:7B:2E:5B:72:BD:E4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849D164FE0F0FA764F2F6AC3BA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a29e971c-3fed-3379-ad50-027a14d1589b.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 0 IP address blocks: 2620:74:28::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:64:fe:0f:0f:a7:64:f2:f6:ac:3b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=6e5f5c02-5207-4fe2-8f4b-d67c4e7c5b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:62:bf:dc:a6:0b:a2:4b:2a:f0:5f:5e:68:eb: 0a:d2:61:4b:f4:71:94:9a:3f:b2:b8:ba:03:56:2b: 81:3b:50:73:1c:e5:dd:d7:6b:4b:e1:75:0a:a2:21: c3:7b:bd:12:26:ea:ed:5d:24:85:77:5e:ff:4f:58: d1:ac:73:08:cc:e3:dd:b3:46:13:af:33:a1:17:c6: 83:3f:cd:7f:41:08:66:3a:cc:c4:b3:3a:c1:bb:49: c3:a6:59:58:79:22:7d:b1:80:70:fa:70:ce:a5:a5: 6d:f1:61:3c:e0:ff:40:69:da:2b:b9:be:ba:12:04: eb:7c:c7:25:80:79:7a:30:38:58:6a:f4:dd:c2:7d: e9:d2:41:94:35:86:97:bf:17:a4:df:44:b2:64:a6: a9:dc:e9:f6:46:ac:f9:ee:27:4b:d0:c8:4d:6f:dc: 49:b0:70:d1:12:f5:56:bf:82:a6:ec:3b:b7:e6:69: 3e:8a:2b:51:64:09:7b:52:eb:f1:d4:10:80:7b:f1: 25:52:67:2d:cf:47:25:db:42:80:f8:4b:32:22:92: 8c:40:22:36:98:2c:a9:79:3f:3b:38:46:59:88:3d: 3e:33:28:ce:8f:d0:26:dd:e0:e9:31:40:80:c5:79: 1b:e5:a3:bd:12:67:8b:fa:f8:bc:b5:ec:83:47:d0: 97:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:3A:A9:8F:FC:4F:5D:C7:6C:B0:10:99:88:E0:7B:2E:5B:72:BD:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a29e971c-3fed-3379-ad50-027a14d1589b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:28::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:f5:1d:78:8e:43:23:d3:1d:e9:61:2e:5d:38:26:8a:99:5e: a2:82:78:05:49:2c:2f:d7:18:f7:f3:2b:d5:44:28:e4:28:15: 4a:36:ad:33:d2:ab:5c:5e:80:c9:ce:c2:fd:d6:0f:65:93:89: d9:fe:13:2d:68:68:7c:4c:a3:3f:1c:88:2e:44:f7:79:66:09: 66:92:73:86:19:b5:17:c7:5b:1d:fc:c7:21:c7:df:06:b0:dc: 53:22:60:37:fb:fc:ac:be:d8:8a:97:65:94:88:1b:77:80:1b: b4:ec:e0:9c:5e:bd:fe:66:dd:0e:c8:69:56:ce:99:88:b0:92: 0a:d6:22:52:ad:98:d2:7a:90:7f:ec:28:6c:73:35:1c:58:83: 62:ab:d8:97:ef:da:48:a1:ea:d9:b7:e3:0c:78:b6:2f:2e:d4: bc:2f:54:a7:ef:00:b0:41:ed:71:9f:f9:96:96:40:d7:aa:f8: 52:b0:ea:45:7e:d9:4b:8f:3c:d9:c7:bd:7a:a2:25:63:bb:9e: fe:60:d0:b9:92:17:7f:1e:70:2c:b3:7a:15:4e:dc:f4:41:fe: 73:75:ef:b8:e8:4a:ad:8b:79:9e:05:85:cd:8c:7a:ba:01:aa: 2a:b7:1b:6f:ed:ff:73:aa:b8:93:a1:3a:a4:dd:78:eb:11:6d: 76:18:52:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnRZP4PD6dk8vasO6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk NmU1ZjVjMDItNTIwNy00ZmUyLThmNGItZDY3YzRlN2M1Yjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGK/3KYLoksq8F9eaOsK0mFL9HGUmj+yuLoD ViuBO1BzHOXd12tL4XUKoiHDe70SJurtXSSFd17/T1jRrHMIzOPds0YTrzOhF8aD P81/QQhmOszEszrBu0nDpllYeSJ9sYBw+nDOpaVt8WE84P9Aadorub66EgTrfMcl gHl6MDhYavTdwn3p0kGUNYaXvxek30SyZKap3On2Rqz57idL0MhNb9xJsHDREvVW v4Km7Du35mk+iitRZAl7Uuvx1BCAe/ElUmctz0cl20KA+EsyIpKMQCI2mCypeT87 OEZZiD0+MyjOj9Am3eDpMUCAxXkb5aO9EmeL+vi8teyDR9CX6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFM6qY/8T13HbLAQmYjgey5bcr3kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTI5ZTk3MWMtM2ZlZC0z Mzc5LWFkNTAtMDI3YTE0ZDE1ODliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAdAAo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABH1HXiOQyPTHelhLl04JoqZXqKCeAVJLC/XGPfzK9VEKOQoFUo2 rTPSq1xegMnOwv3WD2WTidn+Ey1oaHxMoz8ciC5E93lmCWaSc4YZtRfHWx38xyHH 3waw3FMiYDf7/Ky+2IqXZZSIG3eAG7Ts4Jxevf5m3Q7IaVbOmYiwkgrWIlKtmNJ6 kH/sKGxzNRxYg2Kr2Jfv2kih6tm34wx4ti8u1LwvVKfvALBB7XGf+ZaWQNeq+FKw 6kV+2UuPPNnHvXqiJWO7nv5g0LmSF38ecCyzehVO3PRB/nN177joSq2LeZ4Fhc2M eroBqiq3G2/t/3OquJOhOqTdeOsRbXYYUjk= -----END CERTIFICATE-----Generated at Mon May 12 02:14:52 2025 by rpki-client