$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4140952-6f6e-3709-8359-f87184f12a8f.roa File: e4140952-6f6e-3709-8359-f87184f12a8f.roa (raw, json) Hash identifier: LxHJKHLMbSe0GkiyZwPdPpWXqTyqvEFNP1QtW9+EzuU= Subject key identifier: 6C:40:6D:3C:BD:4C:2A:11:77:77:04:BA:69:2C:01:3C:78:17:68:76 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4D7E51A4E2E2ADF021D40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4140952-6f6e-3709-8359-f87184f12a8f.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 396584 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:d7:e5:1a:4e:2e:2a:df:02:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=72252407-38c4-46c8-8ebe-b1cecefac8fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5a:00:3e:c9:36:45:9f:93:ca:7e:6b:61:41: 87:45:d2:e0:3f:23:b1:ab:8c:e5:bf:ea:9e:a7:56: ae:41:a3:55:76:33:05:aa:69:5e:b8:8a:c9:dd:d1: d2:1e:a7:6a:0d:d1:fc:70:6d:19:1d:e7:21:f8:ec: 75:c9:92:30:e9:83:5e:03:50:62:d4:b3:e0:dd:29: aa:78:e0:99:7d:a3:2d:8f:ab:09:20:aa:94:50:9b: b3:04:81:2f:80:5b:eb:9f:da:a1:bd:3a:74:e0:68: 56:7d:72:b2:c9:fd:c6:3e:4f:0e:a1:04:37:56:53: c0:fe:13:58:27:ec:9c:e4:bd:03:60:77:cc:f7:a5: cf:7a:03:bb:60:c7:9f:ea:9a:b7:14:2d:73:4f:04: 91:d4:51:e7:87:53:29:fe:1e:38:58:5a:2a:6a:29: 04:aa:5b:95:dc:73:b9:80:02:08:53:b2:69:dc:60: a4:6c:46:ed:f7:62:09:93:23:07:8d:49:95:98:d0: cd:32:f4:2a:9e:13:f5:30:b0:eb:b4:0f:2b:fe:f9: 8e:db:4f:9a:ef:6d:5c:58:73:da:ca:97:27:c5:b8: 9e:d2:f0:61:d0:d4:e5:b6:52:73:80:0b:a5:de:b2: 5f:0f:43:50:a2:25:5e:c6:4b:0c:76:f5:f9:c6:36: 15:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:40:6D:3C:BD:4C:2A:11:77:77:04:BA:69:2C:01:3C:78:17:68:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4140952-6f6e-3709-8359-f87184f12a8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:4e:06:ee:de:5a:a4:d1:ab:ef:19:fb:5c:73:02:6d:f1:7d: 8a:73:33:c6:a5:24:77:2d:0e:10:7c:88:14:1f:cd:99:94:34: ec:a3:c5:dc:82:25:a5:33:0c:04:4a:00:94:a3:1b:40:b3:8a: 86:c8:75:40:0e:33:e4:e8:21:d1:07:ca:ca:36:3c:8b:85:9a: c9:e4:53:d1:32:2f:e1:2a:9b:2d:3d:e1:fb:91:48:46:90:b6: 7f:a5:0c:e1:46:58:36:50:57:22:eb:8a:d7:96:9d:4c:0c:3f: 20:71:ed:46:bf:b2:43:b3:22:ac:2d:c1:99:42:17:fe:05:1e: d6:e3:08:0f:a7:aa:25:08:5c:93:b6:17:b8:4f:ca:3a:f4:18: ef:c6:dc:9d:77:4b:2a:62:5c:60:70:9c:3b:fd:1e:28:b6:e3: f5:cb:f2:f3:ad:06:84:90:00:c9:b9:44:32:28:1f:c6:b1:8a: 52:d8:d1:c5:dd:66:7c:6a:6c:05:98:ea:23:47:d0:7e:f1:40: 84:f2:e2:52:37:32:89:07:c2:c6:3c:d8:10:a0:87:95:66:65: 81:e8:2b:8d:b0:31:e6:f0:1b:ca:15:0c:e2:00:fe:60:ce:e6: b5:7d:40:d9:3f:47:a8:60:0a:e1:01:80:ec:3b:cc:bf:ae:7f: 1a:cb:bc:79 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1NflGk4uKt8CHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk NzIyNTI0MDctMzhjNC00NmM4LThlYmUtYjFjZWNlZmFjOGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVoAPsk2RZ+Tyn5rYUGHRdLgPyOxq4zlv+qe p1auQaNVdjMFqmleuIrJ3dHSHqdqDdH8cG0ZHech+Ox1yZIw6YNeA1Bi1LPg3Smq eOCZfaMtj6sJIKqUUJuzBIEvgFvrn9qhvTp04GhWfXKyyf3GPk8OoQQ3VlPA/hNY J+yc5L0DYHfM96XPegO7YMef6pq3FC1zTwSR1FHnh1Mp/h44WFoqaikEqluV3HO5 gAIIU7Jp3GCkbEbt92IJkyMHjUmVmNDNMvQqnhP1MLDrtA8r/vmO20+a721cWHPa ypcnxbie0vBh0NTltlJzgAul3rJfD0NQoiVexksMdvX5xjYVKQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGxAbTy9TCoRd3cEumksATx4F2h2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTQxNDA5NTItNmY2ZS0z NzA5LTgzNTktZjg3MTg0ZjEyYThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBkTgbu3lqk0avvGftccwJt8X2KczPGpSR3LQ4Q fIgUH82ZlDTso8XcgiWlMwwESgCUoxtAs4qGyHVADjPk6CHRB8rKNjyLhZrJ5FPR Mi/hKpstPeH7kUhGkLZ/pQzhRlg2UFci64rXlp1MDD8gce1Gv7JDsyKsLcGZQhf+ BR7W4wgPp6olCFyTthe4T8o69Bjvxtydd0sqYlxgcJw7/R4otuP1y/LzrQaEkADJ uUQyKB/GsYpS2NHF3WZ8amwFmOojR9B+8UCE8uJSNzKJB8LGPNgQoIeVZmWB6CuN sDHm8BvKFQziAP5gzua1fUDZP0eoYArhAYDsO8y/rn8ay7x5 -----END CERTIFICATE-----Generated at Sun May 11 05:58:29 2025 by rpki-client