$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb24cd45-31bf-38f6-bea4-c8bd5bba0184.roa File: bb24cd45-31bf-38f6-bea4-c8bd5bba0184.roa (raw, json) Hash identifier: GJpz5FANJ83m/XM3ESETog2v8b53z+X6DGB0prWZKlc= Subject key identifier: 5E:86:BC:AB:2F:ED:42:4C:68:16:8B:A3:16:92:64:74:67:03:D2:B5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A33FB36FDE5338743C480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb24cd45-31bf-38f6-bea4-c8bd5bba0184.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 19836 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:33:fb:36:fd:e5:33:87:43:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=f4ef9e4d-68cb-45fe-b525-245bd3cc99e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6a:ca:5a:33:00:33:0d:8e:8e:e4:bb:3c:15: 99:bc:04:94:32:ca:19:2f:4a:57:1d:57:ef:95:d4: 93:a7:87:cd:ef:4f:62:82:a3:8b:0b:c3:f8:c3:0d: f1:3a:17:d3:b4:ab:91:db:cb:05:b3:07:31:ee:2b: 4b:0d:29:93:cb:a9:92:11:83:56:15:12:45:27:ff: 18:33:fa:1d:d0:70:5e:3e:c5:26:b0:5d:3e:79:8c: 8c:9b:fe:20:bb:69:6f:c0:c9:05:ce:a0:b7:82:ae: b0:ec:fe:a7:71:79:b5:b7:c0:a6:d1:76:47:7f:e5: 01:22:12:b4:8c:b8:e5:9d:67:0c:19:83:0d:0c:df: 9b:96:eb:dd:dc:97:8f:ac:43:fc:09:9a:b5:ab:9f: 5c:60:08:ec:5c:02:ad:12:29:b0:19:3e:09:15:8a: f2:1b:b2:d5:67:fb:8d:36:08:9d:b3:4f:16:ae:a7: fa:5b:bf:1a:3e:b0:e4:21:e6:cd:2c:5f:1d:8f:36: b9:e7:d1:3b:41:dc:f0:88:4d:d7:5b:0d:47:ea:09: cd:23:58:30:a7:ed:d1:22:f2:b1:66:e2:e0:3b:f4: b4:bc:87:d3:35:19:5f:39:4b:fe:31:9f:cb:fe:fa: 57:b4:e5:98:3b:95:ed:36:d2:c0:2e:2c:99:61:e7: c2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:86:BC:AB:2F:ED:42:4C:68:16:8B:A3:16:92:64:74:67:03:D2:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb24cd45-31bf-38f6-bea4-c8bd5bba0184.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:ae:93:6b:02:df:83:29:9a:cb:04:85:ae:ad:2b:32:e0:b6: bb:30:e9:55:de:b9:bf:4d:fc:aa:61:d9:b9:09:d1:93:cd:6a: c7:d2:86:17:ec:80:f4:85:c9:e8:27:33:b3:38:97:e9:8c:6a: c3:c2:50:2c:96:6f:ff:56:14:14:cd:8e:05:25:eb:73:6e:34: 01:69:9c:48:7f:21:8d:2f:05:e7:ad:50:a3:86:a6:8c:92:5c: 4e:b6:46:3f:5f:f2:46:1a:13:90:13:91:f7:b6:dd:65:b1:e5: 1c:a4:2b:89:01:74:c5:9c:03:e1:8d:8e:69:23:03:ce:bc:27: 3c:2c:30:ea:56:b3:e2:f0:31:d1:e1:4e:db:43:0b:1e:85:c2: 9c:68:74:50:7b:86:60:7c:cc:b1:bc:5a:92:54:1b:d0:3f:4e: 35:e3:4c:23:21:1f:37:bf:a4:b1:c7:52:00:0e:86:73:63:e2: 12:d6:73:5e:1c:9f:21:89:be:02:a1:73:97:8b:dc:bb:bd:41: 70:13:c5:ab:f5:ee:af:03:98:d7:19:70:b9:b2:6a:92:8d:3e: e5:1b:ac:5a:b0:cb:85:c6:e8:f6:70:36:b4:03:f5:e4:50:b7: a9:9f:ca:41:b7:72:fa:ea:03:79:fa:ba:18:d0:df:26:0f:12: b5:1c:2d:73 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSjP7Nv3lM4dDxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZjRlZjllNGQtNjhjYi00NWZlLWI1MjUtMjQ1YmQzY2M5OWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2rKWjMAMw2OjuS7PBWZvASUMsoZL0pXHVfv ldSTp4fN709igqOLC8P4ww3xOhfTtKuR28sFswcx7itLDSmTy6mSEYNWFRJFJ/8Y M/od0HBePsUmsF0+eYyMm/4gu2lvwMkFzqC3gq6w7P6ncXm1t8Cm0XZHf+UBIhK0 jLjlnWcMGYMNDN+bluvd3JePrEP8CZq1q59cYAjsXAKtEimwGT4JFYryG7LVZ/uN Ngids08Wrqf6W78aPrDkIebNLF8djza559E7QdzwiE3XWw1H6gnNI1gwp+3RIvKx ZuLgO/S0vIfTNRlfOUv+MZ/L/vpXtOWYO5XtNtLALiyZYefCmwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFF6GvKsv7UJMaBaLoxaSZHRnA9K1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmIyNGNkNDUtMzFiZi0z OGY2LWJlYTQtYzhiZDViYmEwMTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBXrpNrAt+DKZrLBIWurSsy4La7MOlV3rm/Tfyq Ydm5CdGTzWrH0oYX7ID0hcnoJzOzOJfpjGrDwlAslm//VhQUzY4FJetzbjQBaZxI fyGNLwXnrVCjhqaMklxOtkY/X/JGGhOQE5H3tt1lseUcpCuJAXTFnAPhjY5pIwPO vCc8LDDqVrPi8DHR4U7bQwsehcKcaHRQe4ZgfMyxvFqSVBvQP04140wjIR83v6Sx x1IADoZzY+IS1nNeHJ8hib4CoXOXi9y7vUFwE8Wr9e6vA5jXGXC5smqSjT7lG6xa sMuFxuj2cDa0A/XkULepn8pBt3L66gN5+roY0N8mDxK1HC1z -----END CERTIFICATE-----Generated at Sun May 11 06:24:51 2025 by rpki-client