$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb9c8a4f-9d4f-3d82-ae3d-5778d95b5292.roa File: bb9c8a4f-9d4f-3d82-ae3d-5778d95b5292.roa (raw, json) Hash identifier: WH7zLY8jzC2zpSEi5RBHEuN7rhc8K23OgrQvZ4TX1hw= Subject key identifier: 8B:AA:9A:98:AF:4E:39:96:8D:51:0E:8E:D2:5F:29:06:80:CA:BB:19 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A345AA51658B973946000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb9c8a4f-9d4f-3d82-ae3d-5778d95b5292.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396583 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:34:5a:a5:16:58:b9:73:94:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=a6feecd7-c833-4098-b92d-f6e67991ca8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:71:18:0c:1a:d2:35:b7:ae:73:36:4f:88:64: 56:5b:69:85:96:f8:0d:4e:d3:25:36:f1:9f:51:6c: 7e:07:05:e9:be:12:af:91:0c:b5:15:aa:4c:36:b1: de:1e:04:06:91:a1:ba:30:09:f9:a8:53:cf:6e:30: 02:ff:70:e0:12:32:80:f3:a9:0e:c7:7a:fe:b5:a9: f2:9c:f9:f7:e3:60:11:d5:d1:f5:73:80:52:73:30: e4:e4:c2:03:01:1f:06:d9:df:d9:c3:e8:79:9e:30: 98:ed:8b:73:af:01:0f:8d:0e:a2:49:c4:98:69:68: b3:fc:40:75:0e:a0:c4:56:6d:d7:74:6d:b1:14:1f: 5c:28:64:d9:f6:a5:c6:93:d8:eb:8d:ee:44:cc:4d: 0d:2c:cc:82:b9:cc:f1:f0:5d:60:2b:6b:d0:81:18: 5d:dd:88:75:44:47:16:44:a6:c3:68:e1:55:3b:8f: 54:eb:24:d6:58:1a:7e:c0:8e:3e:a5:2c:e1:a9:52: 76:48:49:d6:ee:ab:3f:7a:09:ad:03:a8:b6:0d:7d: b7:3a:d4:50:67:58:82:6a:ba:75:37:ef:be:50:7d: 07:56:45:79:61:df:ca:d8:33:4e:a1:ac:9c:34:94: c7:a7:db:42:17:81:b0:32:0c:ef:3e:5e:56:a8:19: 63:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:AA:9A:98:AF:4E:39:96:8D:51:0E:8E:D2:5F:29:06:80:CA:BB:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb9c8a4f-9d4f-3d82-ae3d-5778d95b5292.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:22:d3:49:11:dd:7d:ba:82:c2:10:64:c8:5c:72:dc:84:56: 3f:62:d2:06:ba:8b:b7:6b:1f:b8:bd:f0:84:be:e9:44:5b:2d: 4e:ea:2c:1a:fa:a5:0c:45:4c:93:8d:b6:bf:ac:7b:ae:14:72: 04:3d:7e:eb:01:ad:05:8a:cc:6e:36:d4:f7:80:4d:d4:54:62: c9:69:9f:69:47:c7:86:8d:c2:92:36:8b:d0:18:1c:03:4a:5d: bf:98:e3:b1:17:79:5e:62:31:4a:a7:d4:75:0b:4a:7f:b8:ae: d7:34:f1:ce:f4:c3:4e:cb:e8:0e:3f:de:1e:a1:64:f3:e1:27: 44:3c:6e:56:13:54:96:0c:71:f5:55:e5:f6:78:5c:0f:8f:f9: e1:bf:af:87:b0:91:93:c2:25:a0:01:7c:d0:93:bf:c2:e0:7c: 0b:58:e6:65:32:19:9d:a6:5f:ee:ab:c8:bb:db:8c:59:b2:60: 78:59:0c:78:c3:8b:93:13:a7:f6:f8:19:58:9a:7b:17:1d:b3: d7:54:11:f4:6c:b0:02:68:ba:3a:0c:cc:fc:88:92:a2:fe:57: cf:b9:a3:a1:a6:36:d3:32:d6:f6:d6:de:47:a9:c6:3b:74:6d: 80:98:89:8f:b0:97:25:8e:06:22:9e:b8:b2:ac:ba:a8:65:28: bb:f9:00:b3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSjRapRZYuXOUYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YTZmZWVjZDctYzgzMy00MDk4LWI5MmQtZjZlNjc5OTFjYThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnEYDBrSNbeuczZPiGRWW2mFlvgNTtMlNvGf UWx+BwXpvhKvkQy1FapMNrHeHgQGkaG6MAn5qFPPbjAC/3DgEjKA86kOx3r+tany nPn342AR1dH1c4BSczDk5MIDAR8G2d/Zw+h5njCY7YtzrwEPjQ6iScSYaWiz/EB1 DqDEVm3XdG2xFB9cKGTZ9qXGk9jrje5EzE0NLMyCuczx8F1gK2vQgRhd3Yh1REcW RKbDaOFVO49U6yTWWBp+wI4+pSzhqVJ2SEnW7qs/egmtA6i2DX23OtRQZ1iCarp1 N+++UH0HVkV5Yd/K2DNOoaycNJTHp9tCF4GwMgzvPl5WqBlj7wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIuqmpivTjmWjVEOjtJfKQaAyrsZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmI5YzhhNGYtOWQ0Zi0z ZDgyLWFlM2QtNTc3OGQ5NWI1MjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBQItNJEd19uoLCEGTIXHLchFY/YtIGuou3ax+4 vfCEvulEWy1O6iwa+qUMRUyTjba/rHuuFHIEPX7rAa0FisxuNtT3gE3UVGLJaZ9p R8eGjcKSNovQGBwDSl2/mOOxF3leYjFKp9R1C0p/uK7XNPHO9MNOy+gOP94eoWTz 4SdEPG5WE1SWDHH1VeX2eFwPj/nhv6+HsJGTwiWgAXzQk7/C4HwLWOZlMhmdpl/u q8i724xZsmB4WQx4w4uTE6f2+BlYmnsXHbPXVBH0bLACaLo6DMz8iJKi/lfPuaOh pjbTMtb21t5HqcY7dG2AmImPsJcljgYinriyrLqoZSi7+QCz -----END CERTIFICATE-----Generated at Sun May 11 05:32:10 2025 by rpki-client