$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd80dce9-2df3-34c1-b119-c78ea1cf244c.roa File: dd80dce9-2df3-34c1-b119-c78ea1cf244c.roa (raw, json) Hash identifier: PQmtV7YhCWwh1xndLHVAfeItJk1rv/yw0YDAaofoV1c= Subject key identifier: BC:8C:EF:2F:86:9F:4A:75:DC:30:76:22:47:05:F8:96:2D:24:03:9F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4DA6D7A5F193C9034D100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd80dce9-2df3-34c1-b119-c78ea1cf244c.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 396544 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:da:6d:7a:5f:19:3c:90:34:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=b503e3be-0645-4185-932f-32dcde55ebe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:78:08:42:15:f9:85:ad:72:22:76:ff:83:69: f2:fc:a7:6b:86:29:5b:81:b9:d6:a9:ad:69:dd:4c: 87:a0:37:0c:9c:4c:62:53:c5:fe:c5:fd:79:f6:46: 76:af:2a:9a:49:c1:22:02:02:a7:2b:ab:f3:91:b4: f2:41:83:82:1f:07:0a:79:79:bf:7a:32:2f:4c:34: b9:bd:fb:1b:06:f6:60:2f:9d:05:36:2f:0e:07:c7: d5:15:0c:de:7e:3a:82:00:ee:3e:61:77:b6:3d:70: 48:28:9e:52:ce:63:0f:93:59:82:72:4c:f6:5f:6b: ed:b5:48:00:da:31:d2:95:4c:03:2e:a3:5d:23:00: d6:bb:61:9b:3f:eb:6b:88:b7:d4:71:8a:29:8e:73: 0d:99:85:86:9a:d8:88:92:fa:61:5b:8c:44:ed:91: d8:60:92:65:fb:32:43:0a:ee:26:0c:6b:93:be:7d: 18:91:88:5b:44:11:b6:d0:70:5c:66:12:e5:22:4e: a6:85:06:35:78:14:38:32:db:18:6a:f4:be:42:aa: f2:de:d4:9c:46:09:ef:48:2a:c7:d4:74:11:b0:29: 70:39:73:a8:bd:6e:9e:de:70:ec:a9:69:54:0d:91: b5:4a:01:52:b0:8e:ac:66:8c:2f:bc:9f:4f:40:e0: ff:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:8C:EF:2F:86:9F:4A:75:DC:30:76:22:47:05:F8:96:2D:24:03:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dd80dce9-2df3-34c1-b119-c78ea1cf244c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:b9:62:ae:34:c7:b8:22:42:be:3d:c5:27:ff:a6:29:5a:bb: 1e:b4:cd:d5:e5:1f:e0:96:ac:29:4f:bc:b8:f3:48:fb:1f:37: 30:30:fe:4c:e7:d0:aa:be:9f:99:32:3c:56:c5:82:ff:38:02: 46:17:9b:3f:e9:62:8e:a0:64:4b:1e:9d:4b:63:43:82:4c:47: ed:ef:c7:8f:6a:5e:3b:e2:c6:07:0d:ca:92:51:be:c7:89:8a: 56:6c:b1:64:5a:85:1d:3a:f3:00:54:cd:2f:d3:d0:15:41:5f: 2d:6a:1f:9b:74:29:7f:b7:38:62:0c:e5:90:95:e7:07:05:c0: 35:ac:0c:24:5d:71:b0:7f:d5:2e:73:36:b2:25:e8:0a:59:40: f8:7a:1f:8d:bf:fb:b2:b6:cc:92:01:8a:03:de:9a:6e:16:50: 21:d0:b2:04:a3:25:99:24:25:73:eb:e2:1a:af:fb:9c:fc:cb: a6:cd:41:73:89:77:b3:d3:18:af:6f:56:86:a1:ea:9d:e9:88: db:0a:2d:91:fd:cb:93:e2:46:3f:93:10:7c:12:7e:be:35:a5: f7:0c:50:aa:6b:92:28:f6:ff:4f:19:76:4e:37:6e:53:4d:ae: 54:ba:5a:c2:e2:7b:02:00:df:f7:96:8b:38:46:3e:c8:a9:98: 1d:d7:3d:17 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1Nptel8ZPJA00QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk YjUwM2UzYmUtMDY0NS00MTg1LTkzMmYtMzJkY2RlNTVlYmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXgIQhX5ha1yInb/g2ny/KdrhilbgbnWqa1p 3UyHoDcMnExiU8X+xf159kZ2ryqaScEiAgKnK6vzkbTyQYOCHwcKeXm/ejIvTDS5 vfsbBvZgL50FNi8OB8fVFQzefjqCAO4+YXe2PXBIKJ5SzmMPk1mCckz2X2vttUgA 2jHSlUwDLqNdIwDWu2GbP+triLfUcYopjnMNmYWGmtiIkvphW4xE7ZHYYJJl+zJD Cu4mDGuTvn0YkYhbRBG20HBcZhLlIk6mhQY1eBQ4MtsYavS+Qqry3tScRgnvSCrH 1HQRsClwOXOovW6e3nDsqWlUDZG1SgFSsI6sZowvvJ9PQOD/vwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLyM7y+Gn0p13DB2IkcF+JYtJAOfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGQ4MGRjZTktMmRmMy0z NGMxLWIxMTktYzc4ZWExY2YyNDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBhuWKuNMe4IkK+PcUn/6YpWrsetM3V5R/glqwp T7y480j7HzcwMP5M59Cqvp+ZMjxWxYL/OAJGF5s/6WKOoGRLHp1LY0OCTEft78eP al474sYHDcqSUb7HiYpWbLFkWoUdOvMAVM0v09AVQV8tah+bdCl/tzhiDOWQlecH BcA1rAwkXXGwf9UuczayJegKWUD4eh+Nv/uytsySAYoD3ppuFlAh0LIEoyWZJCVz 6+Iar/uc/MumzUFziXez0xivb1aGoeqd6YjbCi2R/cuT4kY/kxB8En6+NaX3DFCq a5Io9v9PGXZON25TTa5UulrC4nsCAN/3los4Rj7IqZgd1z0X -----END CERTIFICATE-----Generated at Sun May 11 05:24:49 2025 by rpki-client