$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2d29b5a-61db-3a4f-97db-87e7ff925c90.roa File: a2d29b5a-61db-3a4f-97db-87e7ff925c90.roa (raw, json) Hash identifier: 9+P4OCM+bjl1eK0IsEwyaXVTc5awElCImfiInqAyt6c= Subject key identifier: CF:AC:B2:60:53:05:0B:11:AC:89:21:E6:CC:5A:DB:68:E7:DF:4E:9A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4DD4607D30C1C93074720 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2d29b5a-61db-3a4f-97db-87e7ff925c90.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 396604 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:dd:46:07:d3:0c:1c:93:07:47:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=467fed80-7fe7-449d-8dd5-43531022a7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4a:d8:2d:72:a2:58:4b:b3:d5:4a:96:be:90: 19:f7:12:47:7f:cd:2a:95:77:37:cc:e9:28:c3:bc: 93:2c:ea:c6:3a:92:aa:08:ca:44:82:f4:77:82:aa: 62:e4:3e:38:70:b6:90:cb:2c:5d:f5:6d:50:56:8e: f5:a1:7e:b2:8c:59:7b:55:ba:ce:71:97:2d:03:e7: 4a:be:e7:9c:ab:41:06:4f:2f:a2:a7:a5:93:f8:dd: 35:26:4d:7b:76:d5:b2:2b:d3:08:00:37:3a:94:15: 9d:08:c9:e4:d2:05:85:b0:20:b8:9a:95:b0:85:54: ff:bf:42:1b:25:ad:29:ec:42:11:75:c2:20:81:6a: 6b:12:3b:53:9d:1a:28:af:65:1e:a5:27:94:dd:9e: d3:01:af:94:a6:ec:ea:ca:c5:3b:d6:35:fe:8a:1b: 23:cc:86:07:62:b7:fe:98:8e:f5:41:c6:f7:a1:2d: 20:6b:cc:eb:8c:ea:89:01:b1:36:41:f0:68:1f:6b: a0:37:b3:33:a4:63:b7:6a:a6:5b:c1:32:04:e5:ca: 23:a1:be:56:56:65:de:4b:c0:5f:da:08:90:99:d2: 55:44:94:28:f5:1a:c8:9c:b8:7a:7f:51:c6:e5:0d: de:63:28:ad:b6:5a:79:ac:e7:76:72:02:1f:89:30: 89:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:AC:B2:60:53:05:0B:11:AC:89:21:E6:CC:5A:DB:68:E7:DF:4E:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a2d29b5a-61db-3a4f-97db-87e7ff925c90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:0a:a1:bc:56:98:91:6f:6e:34:3b:d1:b5:01:f0:30:7d:b5: d7:bc:4d:20:cc:9f:5d:09:5c:73:22:12:9f:9e:06:fa:5f:e3: e5:34:13:ad:69:66:65:52:eb:cf:bf:95:c9:a8:5f:16:51:d5: 32:3c:e1:f5:37:e8:80:46:2b:b5:d7:f6:f3:21:e8:3a:98:cb: 9b:05:ac:d6:5b:96:89:89:81:30:4a:bc:b7:a5:02:d5:d3:42: 2e:e9:aa:ce:97:61:47:b1:12:a9:23:70:1a:dc:13:e1:db:27: ca:7d:f7:1d:0c:42:00:28:44:fe:6d:04:64:4c:ac:e7:5c:43: 61:bb:58:1f:9d:8c:bf:29:e0:e6:88:c6:90:6e:8f:9a:47:2d: e8:2a:fa:28:43:05:2f:f3:9a:c4:38:de:2e:1b:fe:93:41:29: 20:ec:44:3d:06:b2:d0:bb:1a:a0:d9:2d:27:d7:06:67:a7:05: e3:e7:ad:02:80:89:a4:87:1d:30:d8:da:1f:fa:8b:fa:69:61: ff:d9:12:da:bb:22:b1:4b:7e:25:dd:9b:e2:b8:d3:08:6c:b7: ca:fb:e7:bd:3f:72:bd:f9:5f:8c:4e:31:9c:f0:3a:8a:7c:9a: 6f:3c:bd:7c:55:fb:e0:ce:88:f6:81:69:5c:fb:d2:06:12:ce: 97:fe:1c:3c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1N1GB9MMHJMHRyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk NDY3ZmVkODAtN2ZlNy00NDlkLThkZDUtNDM1MzEwMjJhN2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUrYLXKiWEuz1UqWvpAZ9xJHf80qlXc3zOko w7yTLOrGOpKqCMpEgvR3gqpi5D44cLaQyyxd9W1QVo71oX6yjFl7VbrOcZctA+dK vuecq0EGTy+ip6WT+N01Jk17dtWyK9MIADc6lBWdCMnk0gWFsCC4mpWwhVT/v0Ib Ja0p7EIRdcIggWprEjtTnRoor2UepSeU3Z7TAa+UpuzqysU71jX+ihsjzIYHYrf+ mI71Qcb3oS0ga8zrjOqJAbE2QfBoH2ugN7MzpGO3aqZbwTIE5cojob5WVmXeS8Bf 2giQmdJVRJQo9RrInLh6f1HG5Q3eYyittlp5rOd2cgIfiTCJ9QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFM+ssmBTBQsRrIkh5sxa22jn306aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTJkMjliNWEtNjFkYi0z YTRmLTk3ZGItODdlN2ZmOTI1YzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBSCqG8VpiRb240O9G1AfAwfbXXvE0gzJ9dCVxz IhKfngb6X+PlNBOtaWZlUuvPv5XJqF8WUdUyPOH1N+iARiu11/bzIeg6mMubBazW W5aJiYEwSry3pQLV00Iu6arOl2FHsRKpI3Aa3BPh2yfKffcdDEIAKET+bQRkTKzn XENhu1gfnYy/KeDmiMaQbo+aRy3oKvooQwUv85rEON4uG/6TQSkg7EQ9BrLQuxqg 2S0n1wZnpwXj560CgImkhx0w2Nof+ov6aWH/2RLauyKxS34l3ZviuNMIbLfK++e9 P3K9+V+MTjGc8DqKfJpvPL18Vfvgzoj2gWlc+9IGEs6X/hw8 -----END CERTIFICATE-----Generated at Sun May 11 05:13:28 2025 by rpki-client