$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b2180ac8-6d6d-37cb-becf-577079062714.roa File: b2180ac8-6d6d-37cb-becf-577079062714.roa (raw, json) Hash identifier: N7nd3F15ROwZ6DV1BluylDmb+KkIOJ8RM4p+MF+sIvY= Subject key identifier: 4A:CF:8F:C0:55:C1:0D:56:E7:56:B4:87:F4:FE:9C:3D:3A:A3:ED:F2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A31080B49A3717DC5B080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b2180ac8-6d6d-37cb-becf-577079062714.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396580 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:31:08:0b:49:a3:71:7d:c5:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=a0b70f2c-7a31-4dac-8389-7fa71d2e0c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b9:84:28:5d:49:00:7e:88:e8:ce:a5:1b:c7: 0d:3d:4c:cd:67:96:81:2c:53:55:8a:10:e1:74:4d: c9:6d:65:7d:f7:ba:ff:4b:e9:60:9b:89:f1:8d:e0: 3f:d1:50:1d:fd:cd:44:60:b7:0f:f8:df:27:ca:92: 68:0b:db:9c:be:a0:c0:3d:a1:a4:57:21:39:1d:82: e8:fe:c0:11:7a:85:c9:11:09:76:fd:db:c5:14:d1: 7b:8b:96:1e:4a:96:67:dd:71:2f:9a:bf:53:35:cb: ac:59:89:f7:1e:a4:c9:fb:00:eb:6c:9a:95:74:5b: 1b:5c:47:63:7d:85:70:8a:ce:d1:ac:fa:2a:bf:a1: df:29:bb:e1:e8:10:1f:77:c4:75:55:f8:1f:ff:38: 74:17:4c:ac:d1:2c:be:92:ee:4e:7f:6d:b3:7a:d4: 85:67:da:2a:50:d8:d9:3e:41:06:a4:c9:11:ec:59: dd:14:0c:7c:4d:f0:03:c2:e0:3a:82:e3:1a:c4:62: 4b:dd:9c:fb:fc:37:d3:1b:f6:50:34:81:d9:d3:f4: fb:7a:e7:2d:24:cc:d7:eb:63:36:f0:c0:ba:25:0e: c3:b7:2e:b9:bd:91:64:46:52:08:4b:ee:1f:f9:8d: b8:58:d9:6b:d8:39:64:07:20:f5:14:03:07:c4:b3: c8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CF:8F:C0:55:C1:0D:56:E7:56:B4:87:F4:FE:9C:3D:3A:A3:ED:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b2180ac8-6d6d-37cb-becf-577079062714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:80:00:55:b6:4a:fb:44:78:5b:14:f6:8c:6b:4e:7f:b5:fb: b7:fd:05:59:b7:4b:ea:88:3e:0d:1f:e1:97:f5:1e:31:96:08: fe:b6:4b:59:98:bb:d0:30:d6:d8:5c:0e:24:a0:81:e1:c8:10: 77:ae:1d:f3:00:41:99:99:9d:b6:40:76:e7:b2:0a:a6:c6:c6: 7d:19:91:2e:e4:dc:ba:4c:42:81:ae:d5:cc:8b:e3:a9:83:17: ee:9d:e4:e5:c4:31:f6:2d:68:a2:58:db:4d:a0:2f:7c:b2:25: 2d:51:2a:4b:1b:ed:eb:e4:61:f5:fc:42:3e:e5:1d:f7:c9:c7: 7f:7e:50:83:70:44:6a:53:b0:40:0f:60:16:7c:b7:6a:e0:60: 6e:4c:f9:36:b2:1b:c2:46:58:c2:2b:e1:83:dc:8a:f0:48:d6: c3:3e:2d:7a:cf:12:a1:24:da:47:2b:09:fd:94:fc:7e:1d:cb: 60:2a:66:bf:e4:44:fc:2f:9a:7b:81:6a:28:1e:32:7a:c7:85: 08:23:66:32:e7:ca:d4:fe:47:ee:cb:5b:39:d0:cb:0f:bd:2b: 2d:b0:c9:c4:72:3a:f0:50:2d:0e:07:19:75:97:20:56:63:22: 7f:69:43:a2:a4:b6:4f:3a:23:62:89:1a:75:ff:c0:10:34:90: 67:a9:cd:36 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSjEIC0mjcX3FsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YTBiNzBmMmMtN2EzMS00ZGFjLTgzODktN2ZhNzFkMmUwYzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rmEKF1JAH6I6M6lG8cNPUzNZ5aBLFNVihDh dE3JbWV997r/S+lgm4nxjeA/0VAd/c1EYLcP+N8nypJoC9ucvqDAPaGkVyE5HYLo /sAReoXJEQl2/dvFFNF7i5YeSpZn3XEvmr9TNcusWYn3HqTJ+wDrbJqVdFsbXEdj fYVwis7RrPoqv6HfKbvh6BAfd8R1Vfgf/zh0F0ys0Sy+ku5Of22zetSFZ9oqUNjZ PkEGpMkR7FndFAx8TfADwuA6guMaxGJL3Zz7/DfTG/ZQNIHZ0/T7euctJMzX62M2 8MC6JQ7Dty65vZFkRlIIS+4f+Y24WNlr2DlkByD1FAMHxLPIrwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFErPj8BVwQ1W51a0h/T+nD06o+3yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjIxODBhYzgtNmQ2ZC0z N2NiLWJlY2YtNTc3MDc5MDYyNzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBEgABVtkr7RHhbFPaMa05/tfu3/QVZt0vqiD4N H+GX9R4xlgj+tktZmLvQMNbYXA4koIHhyBB3rh3zAEGZmZ22QHbnsgqmxsZ9GZEu 5Ny6TEKBrtXMi+OpgxfuneTlxDH2LWiiWNtNoC98siUtUSpLG+3r5GH1/EI+5R33 ycd/flCDcERqU7BAD2AWfLdq4GBuTPk2shvCRljCK+GD3IrwSNbDPi16zxKhJNpH Kwn9lPx+HctgKma/5ET8L5p7gWooHjJ6x4UII2Yy58rU/kfuy1s50MsPvSstsMnE cjrwUC0OBxl1lyBWYyJ/aUOipLZPOiNiiRp1/8AQNJBnqc02 -----END CERTIFICATE-----Generated at Sun May 11 06:24:52 2025 by rpki-client