$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b71c364a-deae-3b2d-8ac9-f06a7cecd3e3.roa File: b71c364a-deae-3b2d-8ac9-f06a7cecd3e3.roa (raw, json) Hash identifier: QQ/QkabI+cqBNK+eQBhHJY17zZFSCB7g3Eh+DLAc4Z8= Subject key identifier: C0:DF:51:66:02:7D:B3:AF:F9:B6:FF:79:5C:34:37:A8:FD:2A:E9:21 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A306EA78AFDDAF834C100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b71c364a-deae-3b2d-8ac9-f06a7cecd3e3.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 397206 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:30:6e:a7:8a:fd:da:f8:34:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=8e678a81-49bb-4e30-a12c-72b92ebea06e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5e:39:94:64:71:7d:2e:f5:54:41:af:fd:6f: c8:1d:6a:7a:d5:35:19:2f:50:0a:b5:41:75:c2:74: f5:61:89:18:df:d0:18:99:81:fe:54:58:5a:4d:e9: 43:70:f6:db:61:79:4c:5c:38:ba:ca:4a:9d:73:57: 44:82:fd:96:45:d0:8b:98:34:72:d4:67:a5:ea:3d: bc:fe:3a:4e:d0:2e:00:c8:a0:f4:fb:92:80:2e:b2: d5:70:29:bf:08:44:cc:9e:da:e3:ca:9d:9d:c9:d5: 22:72:0b:b2:ef:d8:1e:df:98:ee:b4:75:51:52:51: 91:a7:24:4a:66:18:29:6c:36:86:7b:b8:2f:a8:ad: fb:b0:ae:17:52:20:a3:90:c7:17:f2:8d:6c:d9:03: bd:63:21:6c:c8:0e:a3:3d:1f:5a:93:5c:4a:26:e2: b8:5a:63:1a:bd:49:75:9f:b9:0e:5b:ae:40:15:eb: 95:ad:7c:f3:7e:4d:6d:27:45:ac:8a:d5:60:59:64: de:3b:ba:e1:fc:af:95:7b:36:13:18:93:63:24:6d: b3:b6:07:16:46:41:dd:47:2c:ae:5c:db:00:7e:70: 86:66:0e:59:0a:ec:ac:08:c5:42:70:70:b0:d8:a6: 06:4b:34:d4:20:99:11:cc:86:80:7a:44:5c:58:32: 5d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:DF:51:66:02:7D:B3:AF:F9:B6:FF:79:5C:34:37:A8:FD:2A:E9:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b71c364a-deae-3b2d-8ac9-f06a7cecd3e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:72:55:07:40:f6:5c:51:2f:87:d1:92:7a:26:33:0a:85:bc: c5:e0:2b:cf:61:a8:c5:b6:42:ef:df:64:c2:14:04:d9:68:c2: f6:73:e6:07:91:ad:de:01:5d:c9:f2:aa:e1:e1:a5:33:88:5d: 77:71:3d:58:2c:06:d8:c2:1f:67:63:a2:a0:f3:9a:cb:49:5d: 51:78:a3:1c:e2:94:cc:e4:52:98:ec:b2:f1:22:48:e0:ad:7c: 70:01:ff:5f:ce:be:96:21:53:5a:cf:c3:59:f4:e8:89:c6:07: fb:e1:1c:4f:6c:7f:9f:f9:16:c2:12:1f:df:b9:98:bf:5f:be: 36:53:ca:f6:a1:ea:05:7b:3f:49:70:26:2d:42:95:91:76:26: 02:45:d6:c6:2d:5a:7e:ae:fa:c0:5e:bf:f2:a2:bd:67:88:56: f3:09:b5:6d:e2:14:a5:d3:0c:cd:f5:22:f5:33:12:c1:b6:23: e6:7f:03:53:a9:f5:7e:9a:e3:f0:7b:9d:50:49:7d:15:b4:23: 65:90:76:8f:b1:99:ee:77:6b:dd:24:33:fe:fc:c1:53:5f:e3: d8:b4:ce:95:ec:0b:d0:d9:51:16:da:95:32:17:46:41:03:38: b5:c9:e7:89:d0:90:dc:2d:6f:f9:d1:a5:55:30:24:99:c0:40: 8a:10:fd:fc -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSjBup4r92vg0wQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk OGU2NzhhODEtNDliYi00ZTMwLWExMmMtNzJiOTJlYmVhMDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl45lGRxfS71VEGv/W/IHWp61TUZL1AKtUF1 wnT1YYkY39AYmYH+VFhaTelDcPbbYXlMXDi6ykqdc1dEgv2WRdCLmDRy1Gel6j28 /jpO0C4AyKD0+5KALrLVcCm/CETMntrjyp2dydUicguy79ge35jutHVRUlGRpyRK ZhgpbDaGe7gvqK37sK4XUiCjkMcX8o1s2QO9YyFsyA6jPR9ak1xKJuK4WmMavUl1 n7kOW65AFeuVrXzzfk1tJ0WsitVgWWTeO7rh/K+VezYTGJNjJG2ztgcWRkHdRyyu XNsAfnCGZg5ZCuysCMVCcHCw2KYGSzTUIJkRzIaAekRcWDJdqQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMDfUWYCfbOv+bb/eVw0N6j9KukhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjcxYzM2NGEtZGVhZS0z YjJkLThhYzktZjA2YTdjZWNkM2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQATclUHQPZcUS+H0ZJ6JjMKhbzF4CvPYajFtkLv 32TCFATZaML2c+YHka3eAV3J8qrh4aUziF13cT1YLAbYwh9nY6Kg85rLSV1ReKMc 4pTM5FKY7LLxIkjgrXxwAf9fzr6WIVNaz8NZ9OiJxgf74RxPbH+f+RbCEh/fuZi/ X742U8r2oeoFez9JcCYtQpWRdiYCRdbGLVp+rvrAXr/yor1niFbzCbVt4hSl0wzN 9SL1MxLBtiPmfwNTqfV+muPwe51QSX0VtCNlkHaPsZnud2vdJDP+/MFTX+PYtM6V 7AvQ2VEW2pUyF0ZBAzi1yeeJ0JDcLW/50aVVMCSZwECKEP38 -----END CERTIFICATE-----Generated at Sun May 11 05:34:58 2025 by rpki-client