$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e8c48de6-c2cf-331a-a1e4-237d0c5b25f3.roa File: e8c48de6-c2cf-331a-a1e4-237d0c5b25f3.roa (raw, json) Hash identifier: rIuBYcekq5B2Th5j0MstuS2k/sUNPKc/qp0fuvRUPJY= Subject key identifier: 4A:54:14:DF:29:7B:40:CE:D0:CC:8C:E3:46:2B:8D:69:24:7F:9E:31 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4D44C1758332E7FC1B380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e8c48de6-c2cf-331a-a1e4-237d0c5b25f3.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 396585 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:d4:4c:17:58:33:2e:7f:c1:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=04bbce7c-8104-45a4-9e92-9f0150eca6f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9f:b5:d0:3d:24:9b:4a:79:67:22:9f:4d:a8: 88:de:28:c1:59:ce:a4:e1:53:d0:e6:0b:e2:ba:7b: 67:6c:67:05:8a:f2:e3:39:03:ee:fb:19:c7:18:9a: 4d:68:85:a4:77:bb:fe:71:9c:8b:ab:85:e4:56:66: 16:e3:f5:89:ed:84:11:04:1e:07:1a:3d:35:d7:b8: 92:b3:58:54:f8:a6:2a:8f:a1:b0:19:17:6c:91:07: 66:bd:96:a8:a8:ca:db:da:02:c8:bb:d5:db:5e:75: 7f:21:20:a4:cf:05:9a:a1:a1:78:78:17:39:c1:dd: 82:07:05:36:53:80:c4:ed:4f:30:e9:48:b1:78:90: 50:d7:9c:54:84:64:85:d2:cd:20:c9:95:75:33:95: be:c1:8d:f5:ea:83:e9:e4:1a:30:6b:29:8e:52:c9: 36:a8:d6:53:da:18:22:62:f0:08:64:b2:fc:5a:3c: 7b:16:e6:7c:39:d4:e6:c5:29:78:e8:39:79:cc:f7: dc:89:ca:e2:0b:84:0c:8a:1f:81:ae:3e:40:19:95: f3:66:cc:49:06:a6:81:c6:e1:9b:7e:be:98:21:33: 81:9b:74:b5:12:05:c3:46:ad:49:e1:ea:84:a6:b6: 25:92:94:b6:24:09:02:05:30:8d:c5:f4:37:d2:74: 44:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:54:14:DF:29:7B:40:CE:D0:CC:8C:E3:46:2B:8D:69:24:7F:9E:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e8c48de6-c2cf-331a-a1e4-237d0c5b25f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:0c:f9:41:c5:00:67:e0:e6:2b:3b:d5:55:92:75:9e:9a:86: f3:4d:b4:91:7a:5f:06:2d:41:06:bb:88:0e:45:9e:52:de:94: ac:a0:9a:32:a9:47:17:05:2e:4d:c7:42:51:da:47:ad:21:d1: 47:8e:ce:c0:24:1a:8d:e7:91:bd:45:fc:5d:3e:98:c6:3f:41: 63:26:e7:91:55:35:30:b0:ab:97:8f:d6:73:54:3d:1f:b9:7a: f6:fd:53:77:50:99:ed:c5:eb:21:f6:3a:c5:75:be:23:22:da: fe:bc:6b:d2:7c:01:54:92:ca:e3:89:9c:a2:97:24:70:e6:2b: fb:e6:26:fe:01:58:dc:09:0f:52:fa:fd:c3:d1:d2:f8:05:20: 03:10:04:75:44:eb:33:71:75:ff:f2:50:50:6d:4b:0a:76:de: 9b:5b:29:95:29:4a:10:94:21:c7:3b:88:1c:f3:3a:f6:2c:1b: db:40:c5:50:ab:4e:35:18:28:db:b3:b5:85:2b:36:2c:7d:40: 0d:5c:58:47:b6:93:f3:bb:46:0d:e0:e3:b7:95:c6:a6:d0:6d: 13:e4:6a:e3:f3:1c:50:c2:fd:65:e9:84:69:cc:7c:5d:cf:89: 1e:4a:35:47:95:de:93:d7:2f:a7:b3:10:35:14:43:15:2b:f5: de:fc:33:3e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1NRMF1gzLn/Bs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk MDRiYmNlN2MtODEwNC00NWE0LTllOTItOWYwMTUwZWNhNmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5+10D0km0p5ZyKfTaiI3ijBWc6k4VPQ5gvi untnbGcFivLjOQPu+xnHGJpNaIWkd7v+cZyLq4XkVmYW4/WJ7YQRBB4HGj0117iS s1hU+KYqj6GwGRdskQdmvZaoqMrb2gLIu9XbXnV/ISCkzwWaoaF4eBc5wd2CBwU2 U4DE7U8w6UixeJBQ15xUhGSF0s0gyZV1M5W+wY316oPp5BowaymOUsk2qNZT2hgi YvAIZLL8Wjx7FuZ8OdTmxSl46Dl5zPfcicriC4QMih+Brj5AGZXzZsxJBqaBxuGb fr6YITOBm3S1EgXDRq1J4eqEprYlkpS2JAkCBTCNxfQ30nREQwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEpUFN8pe0DO0MyM40YrjWkkf54xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZThjNDhkZTYtYzJjZi0z MzFhLWExZTQtMjM3ZDBjNWIyNWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAPDPlBxQBn4OYrO9VVknWemobzTbSRel8GLUEG u4gORZ5S3pSsoJoyqUcXBS5Nx0JR2ketIdFHjs7AJBqN55G9RfxdPpjGP0FjJueR VTUwsKuXj9ZzVD0fuXr2/VN3UJntxesh9jrFdb4jItr+vGvSfAFUksrjiZyilyRw 5iv75ib+AVjcCQ9S+v3D0dL4BSADEAR1ROszcXX/8lBQbUsKdt6bWymVKUoQlCHH O4gc8zr2LBvbQMVQq041GCjbs7WFKzYsfUANXFhHtpPzu0YN4OO3lcam0G0T5Grj 8xxQwv1l6YRpzHxdz4keSjVHld6T1y+nsxA1FEMVK/Xe/DM+ -----END CERTIFICATE-----Generated at Sun May 11 05:23:42 2025 by rpki-client