$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2519e29-f925-335a-a916-17a381aff5b7.roa File: d2519e29-f925-335a-a916-17a381aff5b7.roa (raw, json) Hash identifier: XRus3Hr+RTh4hprVdqd+DCZpSch6lLRA+3Mcuwfl66A= Subject key identifier: C6:59:AC:2C:B6:BD:8C:0C:70:83:69:26:7B:01:4F:D6:B9:B5:6B:7F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4DAF6150EE057B76D1000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2519e29-f925-335a-a916-17a381aff5b7.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 396617 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:da:f6:15:0e:e0:57:b7:6d:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=afd4508f-c422-4a5d-9000-90d9bcf62ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0f:3f:a6:37:6b:3f:20:9f:c8:2f:e2:2f:e6: b7:88:79:51:cd:14:42:2a:45:a4:c6:f7:3a:01:19: 04:22:81:79:72:98:f4:c5:29:d4:f6:57:44:ce:87: 81:e0:6e:47:26:0e:6f:a6:19:ea:71:c3:67:85:72: 69:23:bf:9c:11:5f:30:4d:bc:22:ab:59:23:38:06: 8c:34:9a:2a:92:57:36:71:8e:25:26:80:c4:8a:b5: 11:e5:b0:ab:9e:a2:f2:52:11:b4:c1:ed:1a:f5:67: b4:22:ef:ae:9c:b5:e1:a3:71:3a:ea:a0:fe:1d:0e: f7:e0:40:cb:41:a4:19:1e:0c:2c:cd:ac:4a:43:65: 7b:50:ba:0a:02:dc:03:56:36:05:72:f0:69:bf:99: b4:95:30:25:6c:d1:79:65:1d:a9:71:08:b3:aa:c1: 94:4d:23:1b:ca:59:03:5f:b5:3c:b7:da:45:b6:a9: df:58:2f:f5:4b:d1:a5:43:cc:42:f8:9d:1a:fe:f0: 4b:4f:80:93:18:db:1d:92:2b:58:d5:98:06:fd:01: 29:44:4c:61:ee:ce:8e:a0:a5:fb:34:7e:8b:bb:6b: 71:ad:87:55:da:7f:62:58:ad:0a:b1:60:60:ca:57: d2:03:5b:3d:48:69:94:21:d0:bc:b5:0a:02:ce:88: 3f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:59:AC:2C:B6:BD:8C:0C:70:83:69:26:7B:01:4F:D6:B9:B5:6B:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2519e29-f925-335a-a916-17a381aff5b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:78:87:a0:27:56:3f:e8:a3:29:2a:dc:d1:86:33:85:cc:72: 04:52:f3:57:fe:8c:73:31:23:65:b2:9f:f2:31:70:9e:2f:d3: 8f:1b:75:35:95:83:27:77:06:76:11:65:ca:f6:e0:8d:aa:82: 8c:17:55:af:07:ee:87:22:24:3e:49:fb:06:8f:aa:a3:de:5c: f5:55:79:0a:78:1e:63:e0:3b:63:a2:53:67:6c:80:af:19:a9: 78:6f:ea:f8:2d:98:be:8a:ac:bc:a4:1c:cd:5c:79:fe:70:54: 46:b7:ea:b5:71:36:39:b7:4d:0f:a9:86:1e:04:69:bd:15:9a: 39:06:4d:68:28:9a:24:42:19:dc:8b:95:e5:69:2a:e7:82:da: 5f:c3:b6:70:82:37:99:7d:72:34:38:a6:8c:97:55:a7:d0:cf: e1:f5:5c:16:4e:81:35:30:5d:b9:7e:f2:24:a1:e6:c5:b1:48: bb:33:be:46:a4:13:4e:50:6b:71:e5:76:86:3b:b7:71:27:40: 8b:11:21:6a:18:c6:dc:b4:6f:b7:66:23:dc:4e:32:80:b6:4b: 5a:22:70:68:e9:83:9f:7e:ae:81:98:92:ef:d0:d1:6a:a1:84: 3b:b9:e7:84:e2:ce:72:1f:6e:f0:01:f2:92:ab:e2:3e:45:e9: a1:62:16:9c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1Nr2FQ7gV7dtEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk YWZkNDUwOGYtYzQyMi00YTVkLTkwMDAtOTBkOWJjZjYyY2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA8/pjdrPyCfyC/iL+a3iHlRzRRCKkWkxvc6 ARkEIoF5cpj0xSnU9ldEzoeB4G5HJg5vphnqccNnhXJpI7+cEV8wTbwiq1kjOAaM NJoqklc2cY4lJoDEirUR5bCrnqLyUhG0we0a9We0Iu+unLXho3E66qD+HQ734EDL QaQZHgwszaxKQ2V7ULoKAtwDVjYFcvBpv5m0lTAlbNF5ZR2pcQizqsGUTSMbylkD X7U8t9pFtqnfWC/1S9GlQ8xC+J0a/vBLT4CTGNsdkitY1ZgG/QEpRExh7s6OoKX7 NH6Lu2txrYdV2n9iWK0KsWBgylfSA1s9SGmUIdC8tQoCzog/RwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMZZrCy2vYwMcINpJnsBT9a5tWt/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDI1MTllMjktZjkyNS0z MzVhLWE5MTYtMTdhMzgxYWZmNWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBNeIegJ1Y/6KMpKtzRhjOFzHIEUvNX/oxzMSNl sp/yMXCeL9OPG3U1lYMndwZ2EWXK9uCNqoKMF1WvB+6HIiQ+SfsGj6qj3lz1VXkK eB5j4DtjolNnbICvGal4b+r4LZi+iqy8pBzNXHn+cFRGt+q1cTY5t00PqYYeBGm9 FZo5Bk1oKJokQhnci5XlaSrngtpfw7ZwgjeZfXI0OKaMl1Wn0M/h9VwWToE1MF25 fvIkoebFsUi7M75GpBNOUGtx5XaGO7dxJ0CLESFqGMbctG+3ZiPcTjKAtktaInBo 6YOffq6BmJLv0NFqoYQ7ueeE4s5yH27wAfKSq+I+RemhYhac -----END CERTIFICATE-----Generated at Sun May 11 08:37:38 2025 by rpki-client