$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4adbb52-01fa-37af-995e-37fae4eb1245.roa File: e4adbb52-01fa-37af-995e-37fae4eb1245.roa (raw, json) Hash identifier: xYT/9aSGbZBnkdJosvIcEPPIUgglhc0S7Tg9Jap4xHo= Subject key identifier: 87:3B:C7:D2:6A:C5:49:51:CE:61:79:DB:0C:C9:04:97:9E:7E:41:2D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4D8B99D75F1186C48F000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4adbb52-01fa-37af-995e-37fae4eb1245.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 397200 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:d8:b9:9d:75:f1:18:6c:48:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=f62ed901-64ea-41f1-8fb5-cee9c9ccbc91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:88:db:07:c0:f3:e8:3a:c1:2a:0d:af:b5:af: 29:57:91:0f:a8:57:ff:fb:59:77:e5:85:60:df:fb: d9:0b:65:71:84:ee:bc:7b:f3:7f:23:ba:eb:70:24: 61:a9:76:4e:eb:00:3d:9b:4f:fd:30:78:11:a6:38: 93:1d:88:2d:e2:cf:ed:03:97:9d:69:6b:07:d9:72: 15:60:04:3c:e1:c2:6c:6b:a9:22:85:34:6a:a9:e2: 9d:0e:8f:45:8f:f9:dd:52:7c:c9:0b:da:52:b9:54: 99:a4:4f:ce:c4:b5:b2:5a:0b:33:df:f2:77:31:c4: 26:22:ca:20:27:3d:66:8e:61:62:6a:83:74:17:18: 35:81:90:29:84:28:39:2f:35:5d:71:09:89:e7:58: ac:c2:e0:74:f8:ec:57:49:0f:ad:18:aa:72:38:7c: c4:c1:65:7e:88:06:5c:c9:aa:b8:7c:17:2b:44:b6: 38:67:0a:0a:e1:f4:8c:ac:26:73:d9:bc:74:c1:8f: 90:6a:00:5f:15:a9:e5:34:ec:45:a3:01:8d:7e:25: b0:af:75:e9:8f:e3:f8:90:bb:d5:26:8c:ab:e6:35: 42:98:59:06:25:92:c3:6f:69:2a:9d:49:df:a8:0f: 67:ab:8c:d6:7b:da:a5:6c:a4:c2:92:ac:12:62:1a: ce:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:3B:C7:D2:6A:C5:49:51:CE:61:79:DB:0C:C9:04:97:9E:7E:41:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e4adbb52-01fa-37af-995e-37fae4eb1245.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:89:8a:f7:66:19:3a:58:49:86:c0:ba:a3:a9:b1:8c:f5:ae: 21:d8:61:b8:b8:27:e4:cd:48:89:63:34:a6:74:07:0d:33:bf: cd:a9:b0:fe:1c:a8:a6:32:e8:9d:6b:f0:4d:a4:e5:32:0e:43: 13:a9:a4:c8:86:72:36:d1:3e:59:d5:fb:14:33:d5:e0:2b:71: 8b:ab:fb:a7:7c:c7:c0:0b:f4:13:c4:df:4d:19:c8:e0:43:f3: 8f:d3:c2:51:0c:e4:2b:70:55:00:44:5f:ee:db:e5:1c:f3:c4: 89:f7:ca:a5:04:91:92:90:60:47:9d:18:fc:e2:da:59:1c:61: 3a:5f:22:90:63:dd:1b:32:1f:f6:43:40:d5:83:a1:25:b8:4e: 12:32:be:fd:21:f4:89:aa:74:f4:89:ac:b4:04:75:b3:a4:ec: bb:94:6a:b6:3e:09:47:0f:28:df:f3:29:da:2d:70:3d:77:ca: 16:ce:af:d6:23:cd:f5:d7:4a:4b:28:a8:4d:50:6b:c6:18:1d: 11:e6:8b:af:e7:e7:d7:32:ad:ca:03:15:70:b7:d8:5e:93:71: 40:14:d8:0e:91:0d:ce:66:f0:1d:31:9d:99:01:12:cc:97:a5: 29:bd:da:f7:9a:69:59:b4:8b:9d:de:e5:5c:75:fc:6e:fd:8c: 3b:fc:60:8b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1Ni5nXXxGGxI8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk ZjYyZWQ5MDEtNjRlYS00MWYxLThmYjUtY2VlOWM5Y2NiYzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4jbB8Dz6DrBKg2vta8pV5EPqFf/+1l35YVg 3/vZC2VxhO68e/N/I7rrcCRhqXZO6wA9m0/9MHgRpjiTHYgt4s/tA5edaWsH2XIV YAQ84cJsa6kihTRqqeKdDo9Fj/ndUnzJC9pSuVSZpE/OxLWyWgsz3/J3McQmIsog Jz1mjmFiaoN0Fxg1gZAphCg5LzVdcQmJ51iswuB0+OxXSQ+tGKpyOHzEwWV+iAZc yaq4fBcrRLY4ZwoK4fSMrCZz2bx0wY+QagBfFanlNOxFowGNfiWwr3Xpj+P4kLvV Joyr5jVCmFkGJZLDb2kqnUnfqA9nq4zWe9qlbKTCkqwSYhrOEwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIc7x9JqxUlRzmF52wzJBJeefkEtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTRhZGJiNTItMDFmYS0z N2FmLTk5NWUtMzdmYWU0ZWIxMjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA8iYr3Zhk6WEmGwLqjqbGM9a4h2GG4uCfkzUiJ YzSmdAcNM7/NqbD+HKimMuida/BNpOUyDkMTqaTIhnI20T5Z1fsUM9XgK3GLq/un fMfAC/QTxN9NGcjgQ/OP08JRDOQrcFUARF/u2+Uc88SJ98qlBJGSkGBHnRj84tpZ HGE6XyKQY90bMh/2Q0DVg6EluE4SMr79IfSJqnT0iay0BHWzpOy7lGq2PglHDyjf 8ynaLXA9d8oWzq/WI83110pLKKhNUGvGGB0R5ouv5+fXMq3KAxVwt9hek3FAFNgO kQ3OZvAdMZ2ZARLMl6Upvdr3mmlZtIud3uVcdfxu/Yw7/GCL -----END CERTIFICATE-----Generated at Sun May 11 05:42:25 2025 by rpki-client