$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/afe64ea5-04b0-3478-b6bb-680e04301ee0.roa File: afe64ea5-04b0-3478-b6bb-680e04301ee0.roa (raw, json) Hash identifier: VsIr8Z6TJJolG3ohrPDnIpy8VbrB72sF2ccMlDzdS/w= Subject key identifier: 8B:C7:EF:8C:BD:AC:96:73:92:FD:EE:3E:BC:35:AE:06:1B:DB:A6:3C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4D575267CE1B0460572C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/afe64ea5-04b0-3478-b6bb-680e04301ee0.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 396565 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:d5:75:26:7c:e1:b0:46:05:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=00c17f8b-18d4-48d6-8a3b-73f1dfcfdc23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e2:ab:13:8d:68:a3:cd:1f:7f:7d:c3:82:f1: d9:7e:2d:38:b5:e0:6f:34:e1:45:ed:c1:34:dd:89: d3:c5:0b:25:7d:e5:dc:63:40:2c:8d:1d:43:52:31: ab:fe:67:0f:88:00:a5:e3:2c:69:c5:08:d6:7e:22: 86:90:f7:0e:44:13:ae:ec:74:0a:a1:a5:ca:35:91: 70:7c:c8:46:87:66:8e:9b:9f:15:70:98:b5:35:d7: 1a:99:20:53:70:3f:b2:9a:f5:1a:f6:49:af:d2:1d: ee:f9:19:12:4d:8f:09:4e:2a:c7:c0:d2:31:58:e2: 12:53:a1:6b:00:37:b8:de:de:b1:46:cd:2f:64:a8: c5:41:09:99:3d:41:3b:30:a8:39:e2:e2:ad:1d:2a: 98:6b:53:dd:65:8f:2f:b0:77:d2:2d:a2:e9:96:65: 91:81:ed:e5:80:d2:a6:47:62:d9:38:e3:70:27:05: 58:f8:85:a7:72:0a:42:d3:16:38:90:69:e3:08:89: ca:55:41:8d:c3:df:11:4a:a1:4e:64:4c:10:51:24: 07:71:f8:69:4f:4e:5d:18:74:a4:7b:cd:7c:33:6b: 9b:cc:e3:d3:e3:02:65:b7:37:8d:16:5f:78:09:f4: 8d:f8:6d:44:07:dd:91:34:a0:01:eb:9c:1f:28:0e: ea:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C7:EF:8C:BD:AC:96:73:92:FD:EE:3E:BC:35:AE:06:1B:DB:A6:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/afe64ea5-04b0-3478-b6bb-680e04301ee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:a3:9e:5e:68:c7:be:bc:0f:4d:90:3e:21:f2:45:51:c7:89: a3:59:70:03:67:46:1c:87:0d:76:f5:e9:a9:52:af:1a:a0:9d: ca:67:e6:42:d1:15:ae:c6:d3:df:b6:e4:6c:12:59:7a:4e:e1: 6d:92:d6:66:e7:d6:76:63:9d:56:94:0a:19:35:cc:ae:a5:7e: 18:21:8e:d8:b1:70:ad:60:b7:49:c3:68:c0:43:0b:36:40:dc: 24:44:fd:ed:92:87:c3:36:f7:26:0b:14:de:5b:e1:f9:59:dc: f7:b4:df:77:81:ae:a2:5b:2b:73:a1:3c:c7:58:c5:77:04:21: b9:c0:3a:72:11:22:d8:ac:8f:40:3a:dd:31:f8:3f:14:b8:ba: 00:11:fc:d9:d9:47:2e:97:e5:84:78:37:9a:c3:90:22:f4:53: d8:d3:5c:88:ae:c0:d5:25:64:79:3e:6c:0f:92:fe:ec:f5:47: fe:4b:cd:50:38:e5:2f:ef:ab:e3:b6:ea:2a:65:19:fb:8b:e9: 3d:0b:e6:d2:4c:d4:61:69:02:08:22:18:b4:ff:e5:a3:bb:d7: bc:54:0a:18:3b:cf:84:44:4e:1e:55:da:bc:7e:c2:c8:c8:c3: 80:25:55:86:35:37:22:dc:69:d8:6c:3d:76:1f:67:15:a9:90: c3:b3:f8:ad -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1NV1JnzhsEYFcsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk MDBjMTdmOGItMThkNC00OGQ2LThhM2ItNzNmMWRmY2ZkYzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeKrE41oo80ff33DgvHZfi04teBvNOFF7cE0 3YnTxQslfeXcY0AsjR1DUjGr/mcPiACl4yxpxQjWfiKGkPcORBOu7HQKoaXKNZFw fMhGh2aOm58VcJi1NdcamSBTcD+ymvUa9kmv0h3u+RkSTY8JTirHwNIxWOISU6Fr ADe43t6xRs0vZKjFQQmZPUE7MKg54uKtHSqYa1PdZY8vsHfSLaLplmWRge3lgNKm R2LZOONwJwVY+IWncgpC0xY4kGnjCInKVUGNw98RSqFOZEwQUSQHcfhpT05dGHSk e818M2ubzOPT4wJltzeNFl94CfSN+G1EB92RNKAB65wfKA7qSwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIvH74y9rJZzkv3uPrw1rgYb26Y8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWZlNjRlYTUtMDRiMC0z NDc4LWI2YmItNjgwZTA0MzAxZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCOo55eaMe+vA9NkD4h8kVRx4mjWXADZ0Ychw12 9empUq8aoJ3KZ+ZC0RWuxtPftuRsEll6TuFtktZm59Z2Y51WlAoZNcyupX4YIY7Y sXCtYLdJw2jAQws2QNwkRP3tkofDNvcmCxTeW+H5Wdz3tN93ga6iWytzoTzHWMV3 BCG5wDpyESLYrI9AOt0x+D8UuLoAEfzZ2Ucul+WEeDeaw5Ai9FPY01yIrsDVJWR5 PmwPkv7s9Uf+S81QOOUv76vjtuoqZRn7i+k9C+bSTNRhaQIIIhi0/+Wju9e8VAoY O8+ERE4eVdq8fsLIyMOAJVWGNTci3GnYbD12H2cVqZDDs/it -----END CERTIFICATE-----Generated at Sun May 11 08:47:39 2025 by rpki-client