$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df99b829-7747-36ad-acaf-1a1fc1a94666.roa File: df99b829-7747-36ad-acaf-1a1fc1a94666.roa (raw, json) Hash identifier: QFmuXlnun3bU6OOw20/RU83TZuN+5aDOF0HsdC3ZC4w= Subject key identifier: 05:E9:8F:7C:2C:90:CB:1C:8C:4C:7E:AE:6A:F2:EB:11:C2:AC:0C:FF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A31D9D96C1392A090D0C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df99b829-7747-36ad-acaf-1a1fc1a94666.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 397212 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:31:d9:d9:6c:13:92:a0:90:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=c01d3cb1-934c-4598-b8f8-ca0fe795696c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:66:04:cc:33:94:80:15:83:40:25:ef:2c:7d: 4d:e4:de:53:5d:38:0d:0b:16:21:57:69:64:fb:71: 40:9f:78:e3:c3:e7:ec:71:8e:84:24:66:8d:05:42: b4:3c:d1:14:76:61:e4:00:64:aa:80:e1:4c:a0:0a: a4:8c:4a:cc:df:78:3c:95:2e:1a:35:95:e5:b3:f0: ae:92:eb:9b:ea:ea:b3:2e:de:63:e5:5b:6b:40:cf: ff:3d:aa:14:ca:99:4f:84:0b:3a:53:7b:af:71:55: be:f0:b6:e2:26:fc:1f:ef:fb:e1:53:b7:4c:f0:50: 97:f5:10:a4:9e:d6:be:cd:53:59:7e:1a:ab:7e:44: 5a:80:58:24:0b:e4:84:a5:d0:c0:67:7c:58:f5:88: 29:61:f3:80:3c:d5:f6:11:8b:43:3f:f9:8b:1f:0f: 3c:8f:4f:f5:b2:04:aa:6e:95:81:8c:92:ea:14:c0: 90:e4:91:e9:71:0f:5f:70:20:61:b2:79:99:42:ab: 4c:fa:a2:bf:9a:22:8f:84:93:bc:03:eb:d0:39:b6: fb:90:a6:51:64:ba:49:41:2a:b8:16:7a:06:76:77: 90:2b:03:db:b8:d1:63:d0:8b:b0:3a:21:9d:b4:39: 9c:2e:0c:74:f9:ae:8b:0a:10:d0:c1:41:0f:50:a2: 78:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E9:8F:7C:2C:90:CB:1C:8C:4C:7E:AE:6A:F2:EB:11:C2:AC:0C:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df99b829-7747-36ad-acaf-1a1fc1a94666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:ef:e0:86:08:be:89:3b:dd:57:8f:47:cc:db:f5:25:93:29: 94:8e:3e:56:f4:f0:57:f5:1a:a2:85:70:95:c1:c4:61:8a:18: 99:dc:1a:ed:99:f7:06:fe:9c:f1:77:03:3e:77:37:0b:09:3c: 0c:be:69:30:7f:42:57:d8:f2:3c:95:71:b2:b3:12:74:a0:e7: 75:09:60:8e:15:ca:0a:73:f4:26:59:86:bf:da:e4:94:e9:8d: dd:45:7e:ec:80:7f:b0:77:fd:c9:c1:d4:16:05:2b:51:50:89: 09:54:40:31:47:52:45:f0:5e:80:07:6b:b0:12:e9:00:4d:81: da:8d:2f:17:6a:3c:fc:5a:96:52:8e:06:bf:2b:67:e5:1e:c4: b8:3d:97:02:c2:d1:b5:56:37:c2:5c:72:16:20:9b:1a:21:2e: bb:d3:64:ae:84:0f:fd:cc:df:66:e2:ab:96:87:16:f8:f0:43: e5:ef:5b:9b:a3:35:f5:88:48:73:26:d7:0b:f6:b1:98:97:cf: 10:fc:2b:ba:dc:e8:29:c7:5d:87:e9:60:92:2f:56:df:00:72: 90:80:e8:1f:10:ab:6c:19:6a:7f:a8:f8:dd:24:fb:0d:f4:81: fe:f0:f5:a4:45:69:4f:c0:ad:df:3b:d7:e3:d6:3d:aa:61:10: 21:f5:ca:72 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSjHZ2WwTkqCQ0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YzAxZDNjYjEtOTM0Yy00NTk4LWI4ZjgtY2EwZmU3OTU2OTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2YEzDOUgBWDQCXvLH1N5N5TXTgNCxYhV2lk +3FAn3jjw+fscY6EJGaNBUK0PNEUdmHkAGSqgOFMoAqkjErM33g8lS4aNZXls/Cu kuub6uqzLt5j5VtrQM//PaoUyplPhAs6U3uvcVW+8LbiJvwf7/vhU7dM8FCX9RCk nta+zVNZfhqrfkRagFgkC+SEpdDAZ3xY9YgpYfOAPNX2EYtDP/mLHw88j0/1sgSq bpWBjJLqFMCQ5JHpcQ9fcCBhsnmZQqtM+qK/miKPhJO8A+vQObb7kKZRZLpJQSq4 FnoGdneQKwPbuNFj0IuwOiGdtDmcLgx0+a6LChDQwUEPUKJ4OQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAXpj3wskMscjEx+rmry6xHCrAz/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGY5OWI4MjktNzc0Ny0z NmFkLWFjYWYtMWExZmMxYTk0NjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCC7+CGCL6JO91Xj0fM2/UlkymUjj5W9PBX9Rqi hXCVwcRhihiZ3BrtmfcG/pzxdwM+dzcLCTwMvmkwf0JX2PI8lXGysxJ0oOd1CWCO FcoKc/QmWYa/2uSU6Y3dRX7sgH+wd/3JwdQWBStRUIkJVEAxR1JF8F6AB2uwEukA TYHajS8Xajz8WpZSjga/K2flHsS4PZcCwtG1VjfCXHIWIJsaIS6702SuhA/9zN9m 4quWhxb48EPl71ubozX1iEhzJtcL9rGYl88Q/Cu63Ogpx12H6WCSL1bfAHKQgOgf EKtsGWp/qPjdJPsN9IH+8PWkRWlPwK3fO9fj1j2qYRAh9cpy -----END CERTIFICATE-----Generated at Sun May 11 06:40:02 2025 by rpki-client