$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/baf5385d-2f68-372a-9c60-6ed99c881111.roa File: baf5385d-2f68-372a-9c60-6ed99c881111.roa (raw, json) Hash identifier: lG+lb3vpcMIXC1zhY3Wt2fX6dxv32RmIlqesJPX+n5Q= Subject key identifier: 26:0B:0C:BB:64:CE:68:44:F8:AD:7E:08:6C:97:39:E4:43:33:E8:BB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4DCE6A03FE45AC2ECCC00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/baf5385d-2f68-372a-9c60-6ed99c881111.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 396592 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:dc:e6:a0:3f:e4:5a:c2:ec:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=fb25fae7-744e-4264-94a5-36446e6ae8bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:70:a0:40:1a:ce:14:d8:75:5a:1f:ef:be:50: 5e:24:7a:0f:24:10:3d:4c:c8:06:eb:a4:a4:d7:23: 16:81:d1:ed:77:fc:a5:3c:83:5c:b2:d4:5a:7c:91: 8b:26:eb:aa:06:44:d8:c9:d3:b1:47:dd:0f:68:80: 4d:e7:3c:06:60:18:81:87:80:a7:21:0b:38:bf:45: 2d:af:d3:96:6c:a3:f0:35:a8:cf:fc:3e:6d:dd:ad: 6a:11:09:58:59:6c:3d:a4:a0:72:ec:50:32:b8:e7: eb:83:14:36:ee:ed:27:9c:8c:3d:7a:71:7b:46:14: b6:83:a9:b2:a6:90:a3:2c:8b:be:d9:71:b9:bb:0b: 32:01:d9:79:0a:9f:83:a7:b0:3f:83:9e:73:c6:37: af:2b:95:90:68:3d:b8:cc:ce:5f:fb:99:d4:c6:8c: 04:c8:87:d3:7c:9e:90:a2:f6:7f:d4:42:32:92:32: da:fd:f1:6b:a1:d1:e5:1c:30:bb:c6:20:89:2f:11: 50:fc:ff:68:5b:18:51:fc:41:31:cc:b5:d5:7b:3b: ac:83:64:6d:3f:10:cc:73:b5:e0:29:1c:a0:d5:ff: 1c:da:36:49:b6:29:df:01:33:50:7c:ac:92:3a:8d: cb:89:37:92:69:d2:c5:b9:ec:66:be:08:74:40:17: db:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:0B:0C:BB:64:CE:68:44:F8:AD:7E:08:6C:97:39:E4:43:33:E8:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/baf5385d-2f68-372a-9c60-6ed99c881111.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:50:29:c9:a0:f6:2d:c7:65:52:19:c6:5a:f6:a0:7c:66:c1: 2e:5e:f1:6a:2c:e1:02:9d:2b:0b:de:da:76:17:46:45:de:56: 51:79:76:bd:76:2c:89:6a:38:8a:c4:20:56:02:42:c9:9f:81: 8a:53:37:f9:03:70:c1:be:a0:04:22:b2:f3:22:cd:c6:e3:9c: 8f:02:92:fd:d5:9c:d0:b3:8e:48:92:53:76:38:a6:92:a6:7d: 4d:db:e1:ff:69:31:6c:fe:61:e4:92:03:04:21:d8:b5:db:94: 85:c1:18:a3:2e:45:59:d2:0c:7d:ef:32:03:a9:8e:b6:12:79: fc:41:34:eb:07:67:65:eb:4e:31:ab:03:2b:54:5a:f5:30:45: 0a:3d:e1:72:6d:84:08:8f:6c:f2:a2:83:70:13:18:4b:86:44: 8b:eb:2b:13:8d:48:59:18:dd:ef:06:14:7f:90:3e:7c:59:47: 7c:89:28:d9:51:5a:f6:17:cd:b5:79:b2:59:ed:71:00:28:42: 34:ea:19:3d:19:72:3e:41:5e:79:fa:bf:6d:dd:f8:4a:c1:58: 6a:5e:c0:b4:15:e6:c5:e5:fb:90:95:18:35:7e:45:df:31:fa: 3f:ac:83:7a:67:54:58:64:62:53:b3:8a:c6:78:9d:3c:f6:d7: 99:2b:9b:0a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1NzmoD/kWsLszAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk ZmIyNWZhZTctNzQ0ZS00MjY0LTk0YTUtMzY0NDZlNmFlOGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13CgQBrOFNh1Wh/vvlBeJHoPJBA9TMgG66Sk 1yMWgdHtd/ylPINcstRafJGLJuuqBkTYydOxR90PaIBN5zwGYBiBh4CnIQs4v0Ut r9OWbKPwNajP/D5t3a1qEQlYWWw9pKBy7FAyuOfrgxQ27u0nnIw9enF7RhS2g6my ppCjLIu+2XG5uwsyAdl5Cp+Dp7A/g55zxjevK5WQaD24zM5f+5nUxowEyIfTfJ6Q ovZ/1EIykjLa/fFrodHlHDC7xiCJLxFQ/P9oWxhR/EExzLXVezusg2RtPxDMc7Xg KRyg1f8c2jZJtinfATNQfKySOo3LiTeSadLFuexmvgh0QBfb4QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCYLDLtkzmhE+K1+CGyXOeRDM+i7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmFmNTM4NWQtMmY2OC0z NzJhLTljNjAtNmVkOTljODgxMTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBAUCnJoPYtx2VSGcZa9qB8ZsEuXvFqLOECnSsL 3tp2F0ZF3lZReXa9diyJajiKxCBWAkLJn4GKUzf5A3DBvqAEIrLzIs3G45yPApL9 1ZzQs45IklN2OKaSpn1N2+H/aTFs/mHkkgMEIdi125SFwRijLkVZ0gx97zIDqY62 Enn8QTTrB2dl604xqwMrVFr1MEUKPeFybYQIj2zyooNwExhLhkSL6ysTjUhZGN3v BhR/kD58WUd8iSjZUVr2F821ebJZ7XEAKEI06hk9GXI+QV55+r9t3fhKwVhqXsC0 FebF5fuQlRg1fkXfMfo/rIN6Z1RYZGJTs4rGeJ089teZK5sK -----END CERTIFICATE-----Generated at Sun May 11 08:35:28 2025 by rpki-client