$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d794b85f-dfd3-32c9-84e3-07b5dfc8fc51.roa File: d794b85f-dfd3-32c9-84e3-07b5dfc8fc51.roa (raw, json) Hash identifier: yhrUGH7IELn/UnQOb2nniH0BTLId9hZmoDE1CZtj7aA= Subject key identifier: 69:43:3A:0E:C3:B9:2F:F4:E1:51:48:C4:7F:65:F0:E1:15:6A:7E:B2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A29631A6FDED535C16F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d794b85f-dfd3-32c9-84e3-07b5dfc8fc51.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 397212 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:29:63:1a:6f:de:d5:35:c1:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=22816073-06b5-45d9-a81c-89355d1f2112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b4:f8:2f:38:a0:95:57:83:0a:d8:8c:89:2b: 48:61:df:c2:6d:59:20:6a:a7:d7:04:cd:e3:82:6d: 1c:c3:3a:db:94:13:58:a4:20:27:f9:c7:e6:3e:bf: 58:37:e5:a3:c9:a8:9f:3c:07:95:80:fc:80:6a:aa: e7:8f:9e:74:dd:a6:59:ad:8e:3f:69:93:b8:44:a3: 09:34:54:b4:f2:d4:53:fb:fa:c8:9d:8a:9d:8f:cd: 4f:80:2c:5c:06:ae:79:87:60:e6:a7:83:0c:4d:06: e4:3f:12:73:d3:b6:5d:bb:2b:8c:65:95:0f:1b:cd: ef:91:31:7a:2a:36:7e:82:91:0d:9c:a0:bb:0c:89: 88:9f:67:98:78:d6:87:37:7d:95:ed:a2:a3:a3:2f: 86:2f:85:10:5e:52:17:be:bb:e0:ec:b0:d4:7e:17: 01:42:8b:85:ba:4e:05:4c:4e:41:a4:ea:94:a5:27: 3d:45:03:dd:a4:55:34:2a:ed:7d:ca:67:55:64:7a: 29:65:5c:0a:45:70:dc:e6:60:4e:41:9f:c0:a7:05: 24:0c:99:c9:f6:4d:59:e8:a6:fd:92:fe:94:56:a9: 22:cb:ec:e2:12:c1:f2:8e:1b:0e:c8:24:ce:71:bf: 24:be:3c:08:dd:76:d8:79:6d:a0:c3:7c:f8:5c:97: 15:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:43:3A:0E:C3:B9:2F:F4:E1:51:48:C4:7F:65:F0:E1:15:6A:7E:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d794b85f-dfd3-32c9-84e3-07b5dfc8fc51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:bc:81:f1:bf:87:a4:f1:a6:56:c6:af:49:68:0e:e4:da:69: b6:a9:3b:7e:b5:ff:32:a8:26:c6:b4:e9:1d:2a:23:ee:39:e2: 92:cd:d7:cd:57:bd:74:0c:02:04:70:97:2f:49:31:e0:d1:34: 9b:73:0a:a0:5b:8f:e6:8e:98:8b:ea:e5:21:2f:11:1f:7b:5f: e9:90:71:b9:f7:10:13:17:ab:be:35:2c:58:aa:74:44:c0:64: 67:9a:32:ab:38:35:e4:23:91:2a:73:bb:79:79:76:2e:40:b2: 83:5c:39:bb:64:80:2d:b9:e6:5a:77:97:db:1b:71:8e:63:0d: 77:bc:7f:29:b6:de:33:2d:28:21:6f:6f:07:0f:08:6a:03:93: 60:d1:5e:00:c2:67:68:35:ff:4f:af:d9:62:20:dc:92:4a:24: 22:8f:4a:e2:06:6a:02:81:bb:7e:55:56:b3:7b:70:18:6c:6f: ab:f7:be:11:d9:61:64:6e:3a:35:0b:da:af:1e:12:67:04:90: 29:f9:8b:5c:9f:da:8f:b1:6b:a4:64:82:54:7b:62:55:5d:cc: a2:0f:8c:55:1b:a4:2b:c6:74:17:06:bc:03:d8:cc:6a:30:15: af:1b:db:46:27:e7:b5:ed:bd:4e:63:c8:8f:4a:ef:d7:cb:5c: 7e:2e:20:f9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSiljGm/e1TXBb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MjI4MTYwNzMtMDZiNS00NWQ5LWE4MWMtODkzNTVkMWYyMTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbT4LziglVeDCtiMiStIYd/CbVkgaqfXBM3j gm0cwzrblBNYpCAn+cfmPr9YN+WjyaifPAeVgPyAaqrnj5503aZZrY4/aZO4RKMJ NFS08tRT+/rInYqdj81PgCxcBq55h2Dmp4MMTQbkPxJz07ZduyuMZZUPG83vkTF6 KjZ+gpENnKC7DImIn2eYeNaHN32V7aKjoy+GL4UQXlIXvrvg7LDUfhcBQouFuk4F TE5BpOqUpSc9RQPdpFU0Ku19ymdVZHopZVwKRXDc5mBOQZ/ApwUkDJnJ9k1Z6Kb9 kv6UVqkiy+ziEsHyjhsOyCTOcb8kvjwI3XbYeW2gw3z4XJcVhQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGlDOg7DuS/04VFIxH9l8OEVan6yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDc5NGI4NWYtZGZkMy0z MmM5LTg0ZTMtMDdiNWRmYzhmYzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB4vIHxv4ek8aZWxq9JaA7k2mm2qTt+tf8yqCbG tOkdKiPuOeKSzdfNV710DAIEcJcvSTHg0TSbcwqgW4/mjpiL6uUhLxEfe1/pkHG5 9xATF6u+NSxYqnREwGRnmjKrODXkI5Eqc7t5eXYuQLKDXDm7ZIAtueZad5fbG3GO Yw13vH8ptt4zLSghb28HDwhqA5Ng0V4AwmdoNf9Pr9liINySSiQij0riBmoCgbt+ VVaze3AYbG+r974R2WFkbjo1C9qvHhJnBJAp+Ytcn9qPsWukZIJUe2JVXcyiD4xV G6QrxnQXBrwD2MxqMBWvG9tGJ+e17b1OY8iPSu/Xy1x+LiD5 -----END CERTIFICATE-----Generated at Sun May 11 05:24:30 2025 by rpki-client