$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd4a8b30-cf9d-3036-a31c-d6ac3cca2a59.roa File: cd4a8b30-cf9d-3036-a31c-d6ac3cca2a59.roa (raw, json) Hash identifier: PcxfQ6PqCfdTgAi54dUC4WK8k8FssCOA2H/RpKRUKLM= Subject key identifier: F1:25:53:04:9B:1A:4F:5E:86:D2:1F:C9:0F:0D:E1:CA:56:D5:63:6D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A2926E6D275514EFF4280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd4a8b30-cf9d-3036-a31c-d6ac3cca2a59.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 397208 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:29:26:e6:d2:75:51:4e:ff:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=a8a7f5ed-d417-4b0e-a394-deb787f05094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:54:01:d8:79:b3:cc:02:ee:d9:72:48:1d:ba: 77:ea:c8:61:2a:6f:c6:f3:c8:8b:15:60:4d:67:4a: 00:c8:84:bf:de:0a:9d:41:05:42:80:41:94:58:db: 5d:89:98:15:b1:78:81:08:c2:a7:31:6a:79:86:ab: d4:6f:d6:f8:28:8d:97:db:87:f5:fa:dd:81:ae:8e: 69:44:6a:39:0b:b7:c5:36:1d:94:b6:64:48:83:10: 0f:59:08:75:fb:19:38:64:07:7e:18:dc:6c:99:11: ab:5f:79:07:ac:cc:25:f0:84:34:f3:d6:7f:a1:21: aa:34:c5:22:e1:60:de:24:bc:9a:3e:85:43:05:f3: dd:8e:f0:bd:31:80:c3:24:8b:b1:a8:2b:be:34:d4: e0:31:48:91:2f:7a:7c:20:96:8b:d8:bd:3b:50:45: a3:12:dc:c0:b9:e9:df:a2:6e:b4:a6:be:a7:e1:74: e7:a2:f3:4c:9d:f4:3b:17:b7:1a:14:ed:ff:46:32: 76:60:ea:93:8b:7e:f0:7f:95:a7:dc:5e:e3:3e:da: 62:66:ba:a4:bd:17:79:f9:99:3a:23:2b:a6:fb:e8: 0f:b4:51:a3:15:89:2a:37:71:5b:bb:e5:88:81:2e: 87:45:ec:1f:7b:96:7d:4a:b1:36:51:8b:62:d6:f4: dd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:25:53:04:9B:1A:4F:5E:86:D2:1F:C9:0F:0D:E1:CA:56:D5:63:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd4a8b30-cf9d-3036-a31c-d6ac3cca2a59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:03:31:ba:86:ab:09:ec:e6:a2:bc:76:95:b0:0d:68:74:85: 14:db:c6:f1:30:0f:d0:2b:40:d3:eb:17:24:5e:17:24:4e:6b: 18:aa:3e:50:92:9f:66:24:70:3d:16:b0:e0:80:7a:78:77:5c: c1:08:64:6a:ee:9b:ab:45:4e:0c:35:64:20:2a:d5:a2:92:94: 0b:88:54:09:02:23:0b:af:7e:f9:8b:16:8f:d9:d2:49:cc:c5: fd:20:0c:6f:83:c9:b9:9c:49:18:db:00:77:74:f1:d9:88:09: df:c6:30:ba:50:c1:a2:a5:f1:24:4a:58:5a:ba:55:b6:01:73: e3:5b:9b:d9:25:39:24:e6:90:05:a8:e7:ce:4f:43:8d:bc:65: 94:f4:c9:6c:a5:10:64:dc:f6:5d:d1:98:4e:c9:60:2c:22:cb: ba:04:5c:9f:e8:5a:43:48:94:82:78:e4:f5:19:4e:12:94:b1: 2a:12:50:c1:13:ee:b7:6f:0f:59:dc:ec:e0:97:05:a8:ff:ca: 98:1f:1e:19:41:1f:18:25:f0:69:ad:7f:d2:38:d4:20:09:5e: 80:37:01:a1:be:46:b9:ea:01:53:62:f4:a4:73:1d:5b:71:1c: 90:00:87:1e:0c:df:e9:95:a2:65:3f:26:eb:b4:d0:a3:d4:33: dd:7f:c8:1f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSikm5tJ1UU7/QoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YThhN2Y1ZWQtZDQxNy00YjBlLWEzOTQtZGViNzg3ZjA1MDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFQB2HmzzALu2XJIHbp36shhKm/G88iLFWBN Z0oAyIS/3gqdQQVCgEGUWNtdiZgVsXiBCMKnMWp5hqvUb9b4KI2X24f1+t2Bro5p RGo5C7fFNh2UtmRIgxAPWQh1+xk4ZAd+GNxsmRGrX3kHrMwl8IQ089Z/oSGqNMUi 4WDeJLyaPoVDBfPdjvC9MYDDJIuxqCu+NNTgMUiRL3p8IJaL2L07UEWjEtzAuenf om60pr6n4XTnovNMnfQ7F7caFO3/RjJ2YOqTi37wf5Wn3F7jPtpiZrqkvRd5+Zk6 Iyum++gPtFGjFYkqN3Fbu+WIgS6HRewfe5Z9SrE2UYti1vTdIwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPElUwSbGk9ehtIfyQ8N4cpW1WNtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2Q0YThiMzAtY2Y5ZC0z MDM2LWEzMWMtZDZhYzNjY2EyYTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBwAzG6hqsJ7OaivHaVsA1odIUU28bxMA/QK0DT 6xckXhckTmsYqj5Qkp9mJHA9FrDggHp4d1zBCGRq7purRU4MNWQgKtWikpQLiFQJ AiMLr375ixaP2dJJzMX9IAxvg8m5nEkY2wB3dPHZiAnfxjC6UMGipfEkSlhaulW2 AXPjW5vZJTkk5pAFqOfOT0ONvGWU9MlspRBk3PZd0ZhOyWAsIsu6BFyf6FpDSJSC eOT1GU4SlLEqElDBE+63bw9Z3OzglwWo/8qYHx4ZQR8YJfBprX/SONQgCV6ANwGh vka56gFTYvSkcx1bcRyQAIceDN/plaJlPybrtNCj1DPdf8gf -----END CERTIFICATE-----Generated at Sun May 11 05:20:25 2025 by rpki-client