$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b6b77ad4-1dd6-37d8-a3e5-2709ae17a66c.roa File: b6b77ad4-1dd6-37d8-a3e5-2709ae17a66c.roa (raw, json) Hash identifier: +McXK74fsmk1I5VczTJa2Sl3XXyndbcEpG9Ol2cMua0= Subject key identifier: 40:B1:49:91:09:CF:60:4E:92:FF:91:C5:30:10:E4:30:EB:17:23:9B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584961B9A7397050C41C0B789180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b6b77ad4-1dd6-37d8-a3e5-2709ae17a66c.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 396605 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:a7:39:70:50:c4:1c:0b:78:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=622c46b8-cf20-431e-ad68-1416285dc27f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7b:19:58:42:ad:65:42:48:50:c9:04:37:40: b3:a4:f3:c3:96:97:3a:eb:20:72:0a:b6:f2:05:0b: 7d:cd:3a:73:65:38:d3:ad:e6:6c:38:1a:e3:1d:71: ea:09:64:d1:4c:d1:b5:c9:92:80:b1:23:d5:2f:7f: 3b:a8:71:b2:fe:25:7b:e5:5a:ba:4e:52:44:8f:6b: 86:a7:44:9b:5f:9f:d4:36:f9:91:ee:8e:8d:1d:93: 3f:72:8e:c6:3f:c8:f7:47:9a:3a:5f:64:76:36:49: a7:a8:8f:6b:ab:67:c4:86:49:29:16:bc:69:e6:3a: 79:c8:d6:bf:20:49:3b:67:22:81:b2:b3:b5:26:48: a9:e7:b4:26:f1:fb:e1:93:5f:b8:0d:ff:fc:99:b6: 88:52:89:fb:14:49:e3:24:17:6c:76:66:86:30:e9: 0c:81:6b:d5:da:70:08:98:cf:c5:a9:34:5c:a0:3a: 33:1d:b1:7f:d5:e5:e4:6a:7a:cb:5b:69:29:9b:af: c3:9e:10:d7:80:78:14:53:49:a2:d6:c4:16:67:22: 91:81:ff:07:24:02:1e:5d:62:b8:31:e3:4c:fb:ac: 39:83:2d:02:04:64:0a:ea:64:a6:2c:64:e0:8d:8d: b7:3f:ed:75:25:f2:0f:fd:77:c9:c3:11:64:cc:d0: 0d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B1:49:91:09:CF:60:4E:92:FF:91:C5:30:10:E4:30:EB:17:23:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b6b77ad4-1dd6-37d8-a3e5-2709ae17a66c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:ae:f1:5c:8e:0b:06:5c:d3:68:79:d9:d9:b2:2e:01:68:47: 72:19:60:27:c2:33:85:38:88:ba:16:f0:e8:e6:b7:c4:f9:a8: 05:92:58:9e:ef:57:d0:d9:ff:b3:fb:6d:a2:73:6f:81:4f:e9: 2e:04:9f:f5:9d:84:0f:d2:e6:06:f4:63:8c:50:27:e6:1b:d0: f5:32:5c:0d:e7:69:16:89:95:19:84:88:6e:61:7c:31:4b:10: 7e:a4:a1:80:f7:d3:72:25:a0:df:27:1a:9f:9c:60:76:da:e2: 51:3d:8d:63:12:03:32:f6:68:4d:4d:ba:0e:2c:43:2d:fe:55: 40:fb:d5:34:18:2e:bf:4e:16:3d:c4:b0:6d:aa:2d:d9:92:2d: c3:ca:b4:97:73:52:4c:fe:6d:9f:8e:d9:7c:a4:ce:9a:6b:ee: ff:2f:82:48:c6:4f:2b:f2:0f:b8:2b:71:a7:ad:6d:e9:30:18: b2:14:f8:6c:ea:dd:68:1b:4c:48:ac:18:f2:96:f5:04:9b:c9: 0f:56:7f:8e:b4:f3:a8:b4:5d:2d:0a:d5:cc:ef:b6:d4:cf:27: c1:e9:27:b6:70:23:74:9d:bd:27:0b:2b:bc:5d:fd:bc:98:f5: f5:1c:21:aa:61:42:c2:e2:43:be:8e:99:ad:dd:ef:91:d0:d7: 39:8c:fb:07 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWElhuac5cFDEHAt4kYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk NjIyYzQ2YjgtY2YyMC00MzFlLWFkNjgtMTQxNjI4NWRjMjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3sZWEKtZUJIUMkEN0CzpPPDlpc66yByCrby BQt9zTpzZTjTreZsOBrjHXHqCWTRTNG1yZKAsSPVL387qHGy/iV75Vq6TlJEj2uG p0SbX5/UNvmR7o6NHZM/co7GP8j3R5o6X2R2NkmnqI9rq2fEhkkpFrxp5jp5yNa/ IEk7ZyKBsrO1Jkip57Qm8fvhk1+4Df/8mbaIUon7FEnjJBdsdmaGMOkMgWvV2nAI mM/FqTRcoDozHbF/1eXkanrLW2kpm6/DnhDXgHgUU0mi1sQWZyKRgf8HJAIeXWK4 MeNM+6w5gy0CBGQK6mSmLGTgjY23P+11JfIP/XfJwxFkzNANcQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFECxSZEJz2BOkv+RxTAQ5DDrFyObMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjZiNzdhZDQtMWRkNi0z N2Q4LWEzZTUtMjcwOWFlMTdhNjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAprvFcjgsGXNNoednZsi4BaEdyGWAnwjOFOIi6 FvDo5rfE+agFklie71fQ2f+z+22ic2+BT+kuBJ/1nYQP0uYG9GOMUCfmG9D1MlwN 52kWiZUZhIhuYXwxSxB+pKGA99NyJaDfJxqfnGB22uJRPY1jEgMy9mhNTboOLEMt /lVA+9U0GC6/ThY9xLBtqi3Zki3DyrSXc1JM/m2fjtl8pM6aa+7/L4JIxk8r8g+4 K3GnrW3pMBiyFPhs6t1oG0xIrBjylvUEm8kPVn+OtPOotF0tCtXM77bUzyfB6Se2 cCN0nb0nCyu8Xf28mPX1HCGqYULC4kO+jpmt3e+R0Nc5jPsH -----END CERTIFICATE-----Generated at Sun May 11 05:26:53 2025 by rpki-client