$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bceabade-34a5-3fd7-aa22-752619bc3467.roa File: bceabade-34a5-3fd7-aa22-752619bc3467.roa (raw, json) Hash identifier: SaZ+MwdcBNzIWvnXGkLuf585Wmbyyh73uRzZSPHYZQg= Subject key identifier: B2:09:4C:5C:1C:4D:93:CD:69:ED:B9:FC:8B:1F:88:AA:0D:5C:72:3A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4D220F7897467ED33B840 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bceabade-34a5-3fd7-aa22-752619bc3467.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 396593 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:d2:20:f7:89:74:67:ed:33:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=efb7c1b2-51e5-48e9-b2dd-13a87e634a6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:9d:a1:71:e1:43:b8:0b:c0:dc:36:56:03:a1: 51:ed:77:ff:50:e5:04:0e:7a:6a:4d:2d:79:34:39: 39:1e:b7:69:47:ac:57:82:9f:f7:46:c8:0a:29:f3: e6:1b:84:c1:5c:5e:29:7f:e1:f9:a8:99:73:cf:5e: 35:bc:b2:d4:8f:11:08:6b:cc:d6:7e:43:b1:74:9f: a3:c7:00:28:b8:94:dd:86:f2:19:31:56:4b:72:ee: a3:b9:c0:d5:02:ed:c3:82:a3:55:1f:1f:6c:22:47: 0b:a9:22:5c:2c:6a:68:a9:22:f8:4e:e7:d8:52:d3: 91:af:d0:41:4f:43:6a:69:73:40:ec:63:0f:7d:ef: 3e:18:6b:af:3e:a3:4d:4d:59:e1:9b:c9:2c:8b:67: cf:f7:c9:59:72:16:b5:3e:7f:be:10:62:fe:c9:80: 26:36:ab:a4:4b:69:19:c1:ee:b9:7d:7a:e7:44:76: 1c:fa:59:95:28:c2:a2:32:de:be:65:5b:7f:54:5a: 3c:2e:0a:59:6f:c3:e8:37:3a:d2:f9:af:5e:cc:71: 48:16:7b:eb:40:91:f4:13:71:3a:08:85:ca:af:02: fa:0d:6d:40:3a:01:f9:f4:7b:2b:1d:8f:72:32:28: 79:1c:f2:9c:0f:45:f9:08:fc:73:ca:09:d7:29:6d: e5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:09:4C:5C:1C:4D:93:CD:69:ED:B9:FC:8B:1F:88:AA:0D:5C:72:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bceabade-34a5-3fd7-aa22-752619bc3467.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:f1:90:6b:46:47:35:8c:3e:9c:a8:61:c3:82:93:8b:7c:d4: 7c:8e:44:f6:ea:b9:27:2d:3b:89:09:56:cc:83:fc:a9:57:b9: 3f:65:46:c9:ff:16:65:13:8e:2d:53:49:51:62:1a:09:a1:c6: d7:ff:bc:ba:4d:2f:f8:27:3a:8f:2f:9c:0f:fc:4c:4a:57:cb: cf:ee:69:77:1f:a5:0f:fb:8e:cd:8b:84:39:14:18:4a:89:42: 0f:c6:51:bc:61:52:35:3e:3e:67:18:15:0e:ac:0b:80:36:58: fd:a3:41:da:11:f6:cc:ee:ff:b1:a0:34:09:90:e9:72:dd:f0: 1f:20:9d:c7:90:6a:29:18:0c:9e:d5:2c:73:e4:d1:1e:60:71: 25:86:5a:c6:48:22:eb:5f:c1:f3:f4:46:27:e3:d5:63:b5:ee: 36:fb:d1:fb:95:4c:2b:4c:55:0a:c8:26:da:51:34:26:12:9b: 1e:cc:26:ac:49:0e:e7:1a:9b:16:bb:2d:2f:36:7c:f2:66:88: 45:ff:5e:6d:c1:78:15:5a:a1:a9:6e:bd:b4:74:89:c4:91:01: bf:f1:ec:e6:e3:40:e1:15:51:29:99:90:d7:5b:80:8e:db:e9: 8d:a2:6c:69:5e:7c:2c:f9:cb:f4:31:d9:4c:fb:d3:95:14:f9: 60:de:d3:d3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1NIg94l0Z+0zuEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk ZWZiN2MxYjItNTFlNS00OGU5LWIyZGQtMTNhODdlNjM0YTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA552hceFDuAvA3DZWA6FR7Xf/UOUEDnpqTS15 NDk5HrdpR6xXgp/3RsgKKfPmG4TBXF4pf+H5qJlzz141vLLUjxEIa8zWfkOxdJ+j xwAouJTdhvIZMVZLcu6jucDVAu3DgqNVHx9sIkcLqSJcLGpoqSL4TufYUtORr9BB T0NqaXNA7GMPfe8+GGuvPqNNTVnhm8ksi2fP98lZcha1Pn++EGL+yYAmNqukS2kZ we65fXrnRHYc+lmVKMKiMt6+ZVt/VFo8LgpZb8PoNzrS+a9ezHFIFnvrQJH0E3E6 CIXKrwL6DW1AOgH59HsrHY9yMih5HPKcD0X5CPxzygnXKW3lsQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLIJTFwcTZPNae25/IsfiKoNXHI6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmNlYWJhZGUtMzRhNS0z ZmQ3LWFhMjItNzUyNjE5YmMzNDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBU8ZBrRkc1jD6cqGHDgpOLfNR8jkT26rknLTuJ CVbMg/ypV7k/ZUbJ/xZlE44tU0lRYhoJocbX/7y6TS/4JzqPL5wP/ExKV8vP7ml3 H6UP+47Ni4Q5FBhKiUIPxlG8YVI1Pj5nGBUOrAuANlj9o0HaEfbM7v+xoDQJkOly 3fAfIJ3HkGopGAye1Sxz5NEeYHElhlrGSCLrX8Hz9EYn49Vjte42+9H7lUwrTFUK yCbaUTQmEpsezCasSQ7nGpsWuy0vNnzyZohF/15twXgVWqGpbr20dInEkQG/8ezm 40DhFVEpmZDXW4CO2+mNomxpXnws+cv0MdlM+9OVFPlg3tPT -----END CERTIFICATE-----Generated at Sun May 11 08:33:16 2025 by rpki-client