$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cdad0421-1c2f-3ace-8aad-949a541f3140.roa File: cdad0421-1c2f-3ace-8aad-949a541f3140.roa (raw, json) Hash identifier: IRDT5W0haNRAT2t2s2B34bVi5Kj4oNTCaix8m+KJWg8= Subject key identifier: B6:EC:0D:02:0C:6C:A2:10:91:C7:94:62:34:B1:8C:EE:21:24:23:E7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4D4BB2EFC898F24B59940 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cdad0421-1c2f-3ace-8aad-949a541f3140.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 396543 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:d4:bb:2e:fc:89:8f:24:b5:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=2d00335f-ec3b-4e11-887d-63b3c51689de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ce:c2:f7:18:f4:5d:6e:1e:b8:a4:f8:3f:36: 7d:0e:30:42:5d:0b:4b:99:c5:7b:4a:4c:fe:94:6e: 06:83:17:be:b9:e3:df:52:3a:01:e5:d4:bc:d9:a4: 9d:d1:fb:39:40:d6:8b:ae:45:32:eb:6c:ea:bc:a7: 9b:b9:41:5f:d9:9b:fd:2d:f8:fe:9a:b0:32:de:8e: 16:8d:a1:bb:48:52:bd:bf:45:90:9d:ef:04:78:b3: 11:f2:1e:a6:dd:6d:0b:45:2b:cd:88:22:83:6e:8b: f0:64:f7:ee:6e:cc:42:46:39:30:d3:0c:61:c1:a1: d9:9c:ba:fb:d5:28:47:96:2a:c5:36:77:90:6d:f0: c5:03:7c:3b:a2:56:34:eb:4f:03:e0:97:f3:3b:17: 20:a7:d6:c1:51:26:f0:fa:39:d7:84:ca:cb:4b:1a: cb:b7:d8:77:bc:fc:f9:8b:68:1c:75:b5:fa:c1:df: 90:7e:f1:31:8a:5f:aa:fb:ce:ca:db:54:74:2b:b2: 3e:73:d1:e4:ac:8d:75:21:e8:7f:da:9b:b9:3d:eb: cc:fc:73:a2:08:1c:2a:68:92:95:e6:b6:a0:73:56: ac:b4:1b:2d:0a:b2:5b:65:9f:d8:dc:c6:85:d0:d4: c9:a4:c6:31:33:23:38:2d:aa:e9:84:9b:5a:8f:42: 9e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:EC:0D:02:0C:6C:A2:10:91:C7:94:62:34:B1:8C:EE:21:24:23:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cdad0421-1c2f-3ace-8aad-949a541f3140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:50:33:14:96:04:bd:4e:35:62:e0:f6:ec:b2:3b:ae:f0:48: b8:a1:66:af:00:7e:2e:d6:be:24:2f:6d:52:cf:48:91:c4:ae: 8c:29:20:5e:6d:10:14:75:39:ef:78:e0:4d:6d:1c:fe:3f:43: 00:9b:6e:72:c2:79:54:25:49:a5:60:ee:c5:b5:0c:b8:74:5d: cd:40:7e:4c:98:70:84:ab:18:db:53:c4:58:28:6a:50:5a:d4: 16:4c:d2:73:9f:f5:c4:b5:4c:c4:16:9f:ca:d1:f3:38:8f:ed: 3f:a9:ab:50:33:78:42:ef:93:ce:f2:74:d6:b2:89:83:a5:f6: cc:42:23:b4:4f:e6:c1:2a:2b:e6:e1:e4:9a:b5:06:b1:6b:ec: 68:48:53:74:b5:57:5d:cd:ee:1f:5c:2b:06:4d:6f:76:42:73: e2:97:58:f8:c5:d0:86:60:74:77:eb:09:9b:a9:91:ea:3c:b3: a1:bc:35:25:00:46:06:21:12:e7:fa:bd:9b:bb:bd:d2:37:b6: 33:3e:01:58:03:06:e0:61:fa:5e:94:e6:56:1d:35:68:5d:88: 0a:0b:8a:2c:7b:7e:29:77:13:83:ea:3a:3f:f2:16:3a:ae:1e: cb:13:d9:13:6e:a4:5d:cf:64:9e:79:35:b7:72:86:91:fb:5c: ad:d9:85:63 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1NS7LvyJjyS1mUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk MmQwMDMzNWYtZWMzYi00ZTExLTg4N2QtNjNiM2M1MTY4OWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM7C9xj0XW4euKT4PzZ9DjBCXQtLmcV7Skz+ lG4Ggxe+uePfUjoB5dS82aSd0fs5QNaLrkUy62zqvKebuUFf2Zv9Lfj+mrAy3o4W jaG7SFK9v0WQne8EeLMR8h6m3W0LRSvNiCKDbovwZPfubsxCRjkw0wxhwaHZnLr7 1ShHlirFNneQbfDFA3w7olY0608D4JfzOxcgp9bBUSbw+jnXhMrLSxrLt9h3vPz5 i2gcdbX6wd+QfvExil+q+87K21R0K7I+c9HkrI11Ieh/2pu5PevM/HOiCBwqaJKV 5ragc1astBstCrJbZZ/Y3MaF0NTJpMYxMyM4LarphJtaj0KeZwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLbsDQIMbKIQkceUYjSxjO4hJCPnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2RhZDA0MjEtMWMyZi0z YWNlLThhYWQtOTQ5YTU0MWYzMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAPUDMUlgS9TjVi4Pbssjuu8Ei4oWavAH4u1r4k L21Sz0iRxK6MKSBebRAUdTnveOBNbRz+P0MAm25ywnlUJUmlYO7FtQy4dF3NQH5M mHCEqxjbU8RYKGpQWtQWTNJzn/XEtUzEFp/K0fM4j+0/qatQM3hC75PO8nTWsomD pfbMQiO0T+bBKivm4eSatQaxa+xoSFN0tVddze4fXCsGTW92QnPil1j4xdCGYHR3 6wmbqZHqPLOhvDUlAEYGIRLn+r2bu73SN7YzPgFYAwbgYfpelOZWHTVoXYgKC4os e34pdxOD6jo/8hY6rh7LE9kTbqRdz2SeeTW3coaR+1yt2YVj -----END CERTIFICATE-----Generated at Sun May 11 08:28:57 2025 by rpki-client