$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ca7d36e9-73f3-3705-8cc2-9d280515a661.roa File: ca7d36e9-73f3-3705-8cc2-9d280515a661.roa (raw, json) Hash identifier: XdMdMg3KfemmtQLWLaMKrXEsWeINFpdh2mU+EgtZCDo= Subject key identifier: C4:A3:90:73:B0:3E:0D:C7:2C:6D:FF:A8:BE:78:D9:D2:34:35:A0:45 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A2AC4022CF6FD054D0F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ca7d36e9-73f3-3705-8cc2-9d280515a661.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396587 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:2a:c4:02:2c:f6:fd:05:4d:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=211964a0-c45a-4e6b-b8e8-e9cc72becf9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e3:af:79:82:e3:dc:ed:23:82:1e:c9:fe:c9: f0:13:b2:c7:9f:9b:c3:78:4b:50:fd:da:c4:e5:ae: 2d:bc:6c:73:b1:6c:b8:2a:7b:c5:9e:5d:ab:45:c3: 6d:e7:ab:0a:b6:1e:53:c3:33:6b:19:eb:f7:c8:7e: b7:fc:47:aa:23:4f:32:a8:36:d8:e6:04:2f:78:68: b0:46:28:35:81:1e:4d:16:93:d2:63:52:3f:a6:c8: 1e:1e:ad:a9:f3:86:a8:1e:42:af:03:2a:cd:f5:fc: fe:bd:08:55:0c:e6:27:b9:99:37:5d:3d:de:21:24: e9:7a:da:7e:f1:7e:17:99:8d:45:01:df:b8:1e:55: 5e:17:4c:49:8b:78:6b:00:10:46:42:d2:be:d3:c8: 45:7b:01:f0:6d:d6:79:25:29:0f:ae:fb:ff:dc:ff: 4b:af:b8:be:06:94:5d:9d:4a:53:9b:3f:42:e9:35: 69:cb:6a:34:e1:17:a5:f6:60:08:17:75:74:5a:ae: cc:ee:e6:8f:9b:69:bd:65:fd:c3:7a:fd:fc:40:70: b8:10:a7:e3:21:b4:cf:58:bb:fc:c4:4e:5e:f6:fd: 8c:d1:7a:54:d4:23:28:de:6f:c9:63:72:e3:ed:c9: 82:ae:c8:fa:64:4f:9e:8d:b9:b7:5d:fe:93:a4:07: a8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A3:90:73:B0:3E:0D:C7:2C:6D:FF:A8:BE:78:D9:D2:34:35:A0:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ca7d36e9-73f3-3705-8cc2-9d280515a661.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:07:3f:51:85:8f:fc:1d:6e:14:77:d7:44:b3:82:7e:08:03: 69:6c:4a:40:26:ba:41:16:93:60:56:62:eb:f7:94:8f:f1:02: 92:de:9b:a2:bd:a7:88:e5:63:b1:1e:a4:8f:2d:ca:33:f5:7f: 6e:e4:f7:c7:96:43:1c:fa:25:84:4b:b1:36:9b:1c:ab:45:87: 78:af:b9:7c:3c:f5:5f:70:96:b9:6a:17:fe:89:73:0a:10:38: cb:ee:4a:84:49:04:4f:aa:72:b0:6e:93:45:9d:2d:66:26:d5: 0b:2d:45:ac:5e:40:d6:02:87:17:a6:64:32:cf:72:ab:81:d5: b8:2a:84:78:84:60:06:cc:93:e7:80:93:04:df:bc:ae:17:15: f1:25:c4:01:ef:c3:7b:92:77:1f:e5:a5:07:06:a9:e1:30:b5: bb:92:10:dc:7e:67:85:8c:15:78:3d:83:5e:64:8c:47:41:7e: f6:7b:c0:fb:ce:4e:73:13:c1:9c:3a:32:07:56:80:49:31:9d: bd:11:fe:e1:77:5b:0b:1e:d5:9c:38:7e:33:76:58:c6:a8:80: db:6c:ec:62:d6:57:51:0a:3d:36:3e:c7:e0:30:f8:37:60:ff: b6:98:8d:0c:b7:c2:05:0f:54:08:0a:7f:59:28:a7:b5:d6:bc: 82:fa:55:f9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSirEAiz2/QVNDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MjExOTY0YTAtYzQ1YS00ZTZiLWI4ZTgtZTljYzcyYmVjZjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOOveYLj3O0jgh7J/snwE7LHn5vDeEtQ/drE 5a4tvGxzsWy4KnvFnl2rRcNt56sKth5TwzNrGev3yH63/EeqI08yqDbY5gQveGiw Rig1gR5NFpPSY1I/psgeHq2p84aoHkKvAyrN9fz+vQhVDOYnuZk3XT3eISTpetp+ 8X4XmY1FAd+4HlVeF0xJi3hrABBGQtK+08hFewHwbdZ5JSkPrvv/3P9Lr7i+BpRd nUpTmz9C6TVpy2o04Rel9mAIF3V0Wq7M7uaPm2m9Zf3Dev38QHC4EKfjIbTPWLv8 xE5e9v2M0XpU1CMo3m/JY3Lj7cmCrsj6ZE+ejbm3Xf6TpAeoiQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMSjkHOwPg3HLG3/qL542dI0NaBFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2E3ZDM2ZTktNzNmMy0z NzA1LThjYzItOWQyODA1MTVhNjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAABz9RhY/8HW4Ud9dEs4J+CANpbEpAJrpBFpNg VmLr95SP8QKS3puivaeI5WOxHqSPLcoz9X9u5PfHlkMc+iWES7E2mxyrRYd4r7l8 PPVfcJa5ahf+iXMKEDjL7kqESQRPqnKwbpNFnS1mJtULLUWsXkDWAocXpmQyz3Kr gdW4KoR4hGAGzJPngJME37yuFxXxJcQB78N7kncf5aUHBqnhMLW7khDcfmeFjBV4 PYNeZIxHQX72e8D7zk5zE8GcOjIHVoBJMZ29Ef7hd1sLHtWcOH4zdljGqIDbbOxi 1ldRCj02PsfgMPg3YP+2mI0Mt8IFD1QICn9ZKKe11ryC+lX5 -----END CERTIFICATE-----Generated at Sun May 11 08:17:52 2025 by rpki-client