$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0b1d594-50a0-3a18-bb39-157ea6492353.roa File: b0b1d594-50a0-3a18-bb39-157ea6492353.roa (raw, json) Hash identifier: EC22K4Pjf2xU8w2VDW8aOxmJVjXoAVwZXphVXo1aMCo= Subject key identifier: 6F:0F:F7:03:4A:5A:69:90:6A:D5:8A:8C:01:97:18:32:A2:9C:62:E7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A339182BEBCC1E9836B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0b1d594-50a0-3a18-bb39-157ea6492353.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396576 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:33:91:82:be:bc:c1:e9:83:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=8969c467-5b32-43c6-b4ce-cc56a03eef5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:96:7b:97:2e:9f:ae:32:da:2d:13:18:cd:f2: d5:d5:db:27:d7:be:ea:5e:0b:ec:99:78:58:a7:37: 15:0a:9b:a5:a0:b8:67:be:99:fe:67:71:6f:66:f0: d2:18:e3:ec:3b:57:65:2b:53:2d:9d:d1:90:86:01: 04:49:5f:60:c2:18:6e:f5:bd:a0:25:67:49:1b:1a: 3a:e3:3a:74:99:34:b9:cb:65:26:eb:fa:f4:94:0b: dc:d1:6e:d0:77:65:bd:c1:c6:7d:65:25:f2:16:83: 60:06:21:b5:ad:ac:56:d7:bd:fc:70:54:30:89:87: 21:09:89:64:3e:2a:22:ea:73:da:d0:e1:b7:9e:8d: 99:1e:c3:0c:61:0b:1e:76:9e:90:15:80:0a:f3:f1: 5f:24:2a:82:75:2a:93:c4:70:2d:e3:44:2c:31:ca: 73:25:9a:78:5d:b3:21:a4:bc:5b:9e:c4:6b:ff:3e: 0e:ba:2b:de:0d:d2:0b:d2:27:69:27:e2:f0:8c:56: 6a:b1:86:2f:f4:52:0d:5a:c3:b5:d0:68:cd:78:dd: 23:8a:9c:e5:cf:40:02:ef:c9:2a:8e:6f:58:7f:e6: 61:9e:a4:33:0a:05:dc:c1:05:65:4d:12:66:fa:25: 26:45:97:37:d1:c8:53:f5:84:b4:32:95:95:02:58: 9d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:0F:F7:03:4A:5A:69:90:6A:D5:8A:8C:01:97:18:32:A2:9C:62:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0b1d594-50a0-3a18-bb39-157ea6492353.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:c9:a6:38:33:e4:dd:ed:ee:26:a4:ec:5a:cb:ca:43:69:c2: 70:5c:c1:d8:46:11:30:27:c8:d2:32:8b:fe:e3:55:54:02:59: dd:c4:33:cf:48:06:82:cb:f6:c5:fc:54:35:90:65:1c:6d:18: 61:82:8f:56:03:ca:20:7f:be:2d:7a:eb:56:85:49:23:42:53: 46:b1:01:98:4b:8b:c7:cf:20:8f:18:17:ed:c1:92:67:56:7d: fd:53:5e:e8:62:39:34:e2:cd:84:dd:f1:04:29:50:de:0b:12: 19:3c:1d:43:35:5e:b7:68:16:86:01:6b:e4:1e:65:91:9d:94: d1:82:c6:64:02:25:78:91:46:bc:53:97:b3:d1:30:01:5f:76: fc:1d:a6:34:0c:de:17:ec:85:c4:36:63:e0:a1:e9:d3:dc:9a: 3a:9a:24:95:cb:1d:12:11:6a:a8:fe:ef:59:9a:ab:32:e6:20: b7:72:47:fe:bd:26:46:c1:36:3a:f9:11:0c:03:9a:d6:e2:5e: 13:5b:fc:91:64:0d:83:8f:33:12:de:a7:50:cd:3d:f1:24:57: ca:cd:7f:f5:ad:30:a1:56:fb:1d:d1:da:19:6a:fd:62:60:54: ce:f8:b4:c8:14:4f:ef:de:38:79:90:aa:65:98:dc:27:dd:91: 66:50:cf:5c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSjORgr68wemDa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ODk2OWM0NjctNWIzMi00M2M2LWI0Y2UtY2M1NmEwM2VlZjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZZ7ly6frjLaLRMYzfLV1dsn177qXgvsmXhY pzcVCpuloLhnvpn+Z3FvZvDSGOPsO1dlK1MtndGQhgEESV9gwhhu9b2gJWdJGxo6 4zp0mTS5y2Um6/r0lAvc0W7Qd2W9wcZ9ZSXyFoNgBiG1raxW1738cFQwiYchCYlk Pioi6nPa0OG3no2ZHsMMYQsedp6QFYAK8/FfJCqCdSqTxHAt40QsMcpzJZp4XbMh pLxbnsRr/z4OuiveDdIL0idpJ+LwjFZqsYYv9FINWsO10GjNeN0jipzlz0AC78kq jm9Yf+ZhnqQzCgXcwQVlTRJm+iUmRZc30chT9YS0MpWVAlidcwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFG8P9wNKWmmQatWKjAGXGDKinGLnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjBiMWQ1OTQtNTBhMC0z YTE4LWJiMzktMTU3ZWE2NDkyMzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAayaY4M+Td7e4mpOxay8pDacJwXMHYRhEwJ8jS Mov+41VUAlndxDPPSAaCy/bF/FQ1kGUcbRhhgo9WA8ogf74teutWhUkjQlNGsQGY S4vHzyCPGBftwZJnVn39U17oYjk04s2E3fEEKVDeCxIZPB1DNV63aBaGAWvkHmWR nZTRgsZkAiV4kUa8U5ez0TABX3b8HaY0DN4X7IXENmPgoenT3Jo6miSVyx0SEWqo /u9Zmqsy5iC3ckf+vSZGwTY6+REMA5rW4l4TW/yRZA2DjzMS3qdQzT3xJFfKzX/1 rTChVvsd0doZav1iYFTO+LTIFE/v3jh5kKplmNwn3ZFmUM9c -----END CERTIFICATE-----Generated at Sun May 11 10:18:10 2025 by rpki-client