$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caa0a0d0-1ea7-35a5-95d4-0981a9de36c8.roa File: caa0a0d0-1ea7-35a5-95d4-0981a9de36c8.roa (raw, json) Hash identifier: CQQLh9F0/Ap0WYSa2VFSUv1UzsHgQYbPWjDbs6IasXk= Subject key identifier: 8D:9F:AE:C9:62:AC:40:58:D6:A2:05:87:6C:BD:4A:8E:2E:14:81:88 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A2A1827E0A8EF888AF100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caa0a0d0-1ea7-35a5-95d4-0981a9de36c8.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396605 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:2a:18:27:e0:a8:ef:88:8a:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=49b2da22-c4bb-4c06-b246-e7b6c138d384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cb:ce:0e:bf:bb:a7:1d:ee:8c:b1:98:51:b8: 6e:35:b1:fa:44:f1:5c:e4:24:19:30:e6:b8:d9:7f: 87:8c:53:eb:b4:27:7b:4b:45:c9:fa:95:f6:35:90: 09:a5:59:16:1b:b3:fa:f7:24:c5:98:3f:c6:ec:12: c6:22:2a:b2:a2:80:07:80:cc:7e:3a:81:f7:05:83: 90:ba:59:b9:96:d6:00:c8:d5:4a:4c:68:f9:ab:db: d2:c5:06:e8:f4:ba:a5:3c:cd:d9:18:d8:21:4d:7d: 95:84:c7:1b:4f:fd:90:87:7b:78:5c:e1:19:c3:e6: ba:99:9f:5a:1d:a0:00:73:fc:00:7e:46:af:56:06: 77:c2:4b:28:81:ab:8f:7b:52:af:20:83:18:29:f2: 2b:66:67:74:40:7d:24:e7:27:63:60:ea:f3:05:cb: e4:b7:ab:3b:b3:3b:80:14:9f:9d:d8:4e:00:86:3b: b8:3a:1a:6a:69:c8:b2:3c:b8:18:63:32:86:cd:75: 2a:b0:de:17:b6:35:1a:da:5d:bf:74:b8:19:bd:68: 11:3e:1b:1a:5e:1f:55:23:53:47:3e:e8:2a:ea:d4: 5c:dd:e0:95:4b:9f:e6:bb:73:82:ea:8b:1a:36:2d: d1:fc:2d:b8:cc:24:16:81:ed:4a:ce:43:bd:f2:2e: e4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:9F:AE:C9:62:AC:40:58:D6:A2:05:87:6C:BD:4A:8E:2E:14:81:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caa0a0d0-1ea7-35a5-95d4-0981a9de36c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:1f:34:67:50:ea:af:43:24:78:55:dc:38:81:4d:92:87:41: fe:10:53:35:b6:26:75:24:70:3f:cc:a9:00:60:f4:7c:63:89: 1b:80:4b:45:1e:10:19:ee:0b:b4:0d:b5:5a:40:01:7d:d4:d9: 73:2f:82:c7:53:7c:d6:77:33:ca:c0:dc:8f:23:7b:70:32:90: c1:c7:13:0c:d8:3b:8c:cf:65:ac:55:34:8f:e4:38:5a:cb:02: 5b:15:f1:e6:70:11:f7:b6:59:97:df:98:ef:64:f3:5c:3a:a4: dc:bd:3c:23:fc:36:43:c1:66:f1:a2:0e:70:b6:10:d5:bb:be: 18:08:79:9b:b9:a0:b9:ae:75:f5:10:37:13:fe:60:21:1c:df: 10:81:3c:1b:11:e1:1c:f4:3a:a7:6d:35:26:ef:cf:7d:88:0f: 28:29:0f:11:0c:fb:76:04:ff:b3:b4:f9:62:51:26:4a:a7:c5: f8:40:6e:9c:a3:62:b1:44:08:50:46:f5:cd:7b:be:55:92:c9: bd:45:c3:e4:ff:d5:a5:5d:f9:05:48:95:57:2d:06:0e:60:7a: 23:c4:27:0f:a0:75:d5:87:e5:50:01:61:79:58:d2:0b:aa:7d: f0:55:f1:82:f2:61:92:73:2b:0f:dc:fb:4e:1f:7e:ea:25:56: 34:ad:cb:1b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSioYJ+Co74iK8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NDliMmRhMjItYzRiYi00YzA2LWIyNDYtZTdiNmMxMzhkMzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8vODr+7px3ujLGYUbhuNbH6RPFc5CQZMOa4 2X+HjFPrtCd7S0XJ+pX2NZAJpVkWG7P69yTFmD/G7BLGIiqyooAHgMx+OoH3BYOQ ulm5ltYAyNVKTGj5q9vSxQbo9LqlPM3ZGNghTX2VhMcbT/2Qh3t4XOEZw+a6mZ9a HaAAc/wAfkavVgZ3wksogauPe1KvIIMYKfIrZmd0QH0k5ydjYOrzBcvkt6s7szuA FJ+d2E4Ahju4OhpqaciyPLgYYzKGzXUqsN4XtjUa2l2/dLgZvWgRPhsaXh9VI1NH Pugq6tRc3eCVS5/mu3OC6osaNi3R/C24zCQWge1KzkO98i7kBQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFI2frslirEBY1qIFh2y9So4uFIGIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2FhMGEwZDAtMWVhNy0z NWE1LTk1ZDQtMDk4MWE5ZGUzNmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBVHzRnUOqvQyR4Vdw4gU2Sh0H+EFM1tiZ1JHA/ zKkAYPR8Y4kbgEtFHhAZ7gu0DbVaQAF91NlzL4LHU3zWdzPKwNyPI3twMpDBxxMM 2DuMz2WsVTSP5DhaywJbFfHmcBH3tlmX35jvZPNcOqTcvTwj/DZDwWbxog5wthDV u74YCHmbuaC5rnX1EDcT/mAhHN8QgTwbEeEc9DqnbTUm7899iA8oKQ8RDPt2BP+z tPliUSZKp8X4QG6co2KxRAhQRvXNe75Vksm9RcPk/9WlXfkFSJVXLQYOYHojxCcP oHXVh+VQAWF5WNILqn3wVfGC8mGScysP3PtOH37qJVY0rcsb -----END CERTIFICATE-----Generated at Sun May 11 05:32:01 2025 by rpki-client