$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c90b6e64-abe9-32d6-bc54-43b01279e223.roa File: c90b6e64-abe9-32d6-bc54-43b01279e223.roa (raw, json) Hash identifier: fNZEc1ZX5km9MNtqnmXZf2eFQRD1et8Y/b1NDGT3m0w= Subject key identifier: 10:58:59:E2:30:2C:AA:3D:DC:87:76:AA:E3:A4:61:56:44:F5:D9:22 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4D814D48D9C3BD6B46600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c90b6e64-abe9-32d6-bc54-43b01279e223.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 396600 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:d8:14:d4:8d:9c:3b:d6:b4:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=ae9f03a0-49e2-4540-8a66-caf9b216409f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1d:f3:e2:04:24:db:c2:4a:3d:90:24:c7:f7: 42:c8:8a:ec:c8:c3:b0:03:5b:b2:6a:55:6d:0b:eb: 70:35:0d:00:6f:90:df:5b:b6:88:6b:35:48:4b:ee: 70:8d:01:26:fe:56:31:79:fc:99:0b:36:8e:33:09: 3c:98:44:de:5f:ed:f2:fc:c0:a1:d6:d9:1a:8d:24: 07:b2:d3:a0:97:ba:20:9c:1a:b9:83:38:85:80:ac: 4a:0e:72:31:8d:ea:de:dd:35:8f:77:4b:34:33:1b: bd:21:83:23:21:47:7f:0a:fb:b3:52:75:58:91:82: fc:01:52:49:d7:e4:54:e4:33:35:4a:1a:ea:a2:0c: 53:2a:17:b2:b5:06:11:8b:ae:f8:b6:2e:72:2c:53: 9c:84:6a:16:66:56:ea:fa:9a:0c:b0:3b:39:5d:dd: 42:6a:dd:d9:2c:3b:d0:33:31:80:cb:2c:ca:0f:d2: 22:5f:bf:48:9c:6b:b5:44:63:42:31:bf:aa:fd:13: b2:7e:8f:8a:fa:4c:df:12:5c:42:f4:9d:9c:95:2c: d2:fc:6e:4c:f7:49:92:3d:38:30:f3:08:0e:11:0a: 8c:f4:a9:46:ba:f2:36:76:9e:31:8a:33:7f:39:02: 8c:2f:3b:80:b1:b5:82:2f:93:c8:8b:7a:8a:c9:78: c6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:58:59:E2:30:2C:AA:3D:DC:87:76:AA:E3:A4:61:56:44:F5:D9:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c90b6e64-abe9-32d6-bc54-43b01279e223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:08:44:40:75:15:88:36:ea:5f:02:6a:34:70:54:08:69:f6: 47:58:e7:0f:af:5f:19:19:b2:b9:3c:b4:9d:b2:03:67:75:8f: 75:9d:2a:f2:27:dd:02:a8:d0:02:a9:ae:f2:08:40:bd:d2:a3: 00:66:19:31:1c:dd:b9:9f:dc:51:2e:f6:29:df:f4:53:49:e6: 48:28:81:4a:9f:5f:0b:bd:bf:56:f1:8f:8a:19:30:aa:13:c4: dd:e9:99:0e:ee:1a:4b:00:21:8f:ed:a8:44:7c:64:27:7d:0a: e8:52:18:c1:da:37:c9:db:a5:a3:c3:46:d0:ca:58:e5:10:a1: 20:04:c5:54:9b:9d:6b:7d:c0:cc:27:8c:bc:03:50:6b:b1:7e: 97:f9:43:54:ed:e8:db:60:a0:75:7d:d1:84:34:33:84:a6:77: 16:1c:c2:af:16:0b:d4:7d:f3:c3:6b:b6:78:ee:dc:5a:62:ec: 92:6e:06:cc:1a:64:a5:b3:d8:18:e8:89:7e:d2:cb:55:5c:16: b5:7a:16:4f:fc:ba:26:02:39:40:fb:df:ae:52:bd:9f:92:88: ba:cc:1b:f7:cb:4b:61:25:15:d3:2b:dd:0d:4e:07:a4:69:d4: f1:52:aa:48:05:66:6c:3b:b1:31:9f:9f:fc:86:db:d8:ef:a7: b1:4b:ea:74 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1NgU1I2cO9a0ZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk YWU5ZjAzYTAtNDllMi00NTQwLThhNjYtY2FmOWIyMTY0MDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB3z4gQk28JKPZAkx/dCyIrsyMOwA1uyalVt C+twNQ0Ab5DfW7aIazVIS+5wjQEm/lYxefyZCzaOMwk8mETeX+3y/MCh1tkajSQH stOgl7ognBq5gziFgKxKDnIxjere3TWPd0s0Mxu9IYMjIUd/CvuzUnVYkYL8AVJJ 1+RU5DM1ShrqogxTKheytQYRi674ti5yLFOchGoWZlbq+poMsDs5Xd1Cat3ZLDvQ MzGAyyzKD9IiX79InGu1RGNCMb+q/ROyfo+K+kzfElxC9J2clSzS/G5M90mSPTgw 8wgOEQqM9KlGuvI2dp4xijN/OQKMLzuAsbWCL5PIi3qKyXjGxwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBBYWeIwLKo93Id2quOkYVZE9dkiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzkwYjZlNjQtYWJlOS0z MmQ2LWJjNTQtNDNiMDEyNzllMjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAACERAdRWINupfAmo0cFQIafZHWOcPr18ZGbK5 PLSdsgNndY91nSryJ90CqNACqa7yCEC90qMAZhkxHN25n9xRLvYp3/RTSeZIKIFK n18Lvb9W8Y+KGTCqE8Td6ZkO7hpLACGP7ahEfGQnfQroUhjB2jfJ26Wjw0bQyljl EKEgBMVUm51rfcDMJ4y8A1BrsX6X+UNU7ejbYKB1fdGENDOEpncWHMKvFgvUffPD a7Z47txaYuySbgbMGmSls9gY6Il+0stVXBa1ehZP/LomAjlA+9+uUr2fkoi6zBv3 y0thJRXTK90NTgekadTxUqpIBWZsO7Exn5/8htvY76exS+p0 -----END CERTIFICATE-----Generated at Sun May 11 05:36:28 2025 by rpki-client