$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f3e95a17-56b7-3a4a-82b2-4c85eda70d58.roa File: f3e95a17-56b7-3a4a-82b2-4c85eda70d58.roa (raw, json) Hash identifier: y7XzfTDZbvnHq1BE6uytqFDQ78pVjmPEWSg5VVHPuME= Subject key identifier: 72:8E:74:34:07:7E:A9:7A:D8:88:29:45:6C:E0:E5:9B:6D:2F:E5:D4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A32EA85C2B98749DAE340 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f3e95a17-56b7-3a4a-82b2-4c85eda70d58.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396610 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:32:ea:85:c2:b9:87:49:da:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=83131367-9747-4927-aa93-ec36c9b9a536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:41:40:28:e2:e4:a6:ec:f1:ee:28:22:91:eb: 8e:12:d9:13:0b:13:d6:57:6a:24:e5:b3:52:07:5f: f7:c8:e7:e2:a2:d2:5a:57:da:ba:a0:40:e1:f9:04: 84:6c:a4:48:a5:55:c5:ca:6b:fb:49:f9:ab:04:6b: da:f9:c1:4e:5e:7e:8d:3a:14:7d:87:d1:2c:bc:71: 52:48:df:cf:7f:74:b5:72:7f:1e:d0:79:0d:80:f2: 2e:93:a5:29:5d:6d:7b:08:6c:3c:8a:2f:53:3b:83: fc:f5:9b:3a:f2:e5:d4:c3:16:5d:64:66:7b:e1:c5: fb:c5:16:d1:c5:f2:75:63:f5:bc:9d:85:eb:80:2b: e1:c3:37:56:c4:5a:d5:c2:28:53:06:0f:4e:c1:df: 9d:a7:41:74:21:28:88:3d:b5:cc:53:1c:f8:5b:74: 7e:db:15:f5:a5:17:cc:42:14:78:08:91:d9:c6:fc: 23:8b:86:f1:25:e3:f2:12:72:b5:96:c1:e8:e8:a2: e0:d5:13:14:b5:9e:eb:4f:a1:9c:c4:76:20:b6:4f: 43:47:07:19:5c:f0:92:53:f8:7e:c8:b9:96:2d:3c: 61:dc:40:1d:53:3a:3e:9e:8f:19:5d:ef:c6:62:44: 23:0e:41:5f:2a:f4:4f:c1:3e:b2:b7:05:f1:ce:34: da:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8E:74:34:07:7E:A9:7A:D8:88:29:45:6C:E0:E5:9B:6D:2F:E5:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f3e95a17-56b7-3a4a-82b2-4c85eda70d58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:71:fd:f0:97:99:91:b8:92:09:27:78:2e:cd:91:3a:c7:3f: a6:8c:4f:29:fd:6e:79:70:0a:93:fe:32:85:41:c1:95:2b:b0: 29:bf:4b:46:3b:83:e8:c0:ff:79:70:57:bb:cf:d3:b4:0c:5f: 19:1a:55:94:9b:50:97:6a:09:17:a5:61:6d:96:b6:d6:f0:9f: 73:75:25:30:30:f7:43:f3:7f:2b:de:6f:36:68:7c:43:2f:6c: 3b:00:2c:0b:06:4f:94:66:08:72:8f:f4:20:4b:c6:52:ad:59: 53:a3:90:51:d4:9c:80:7b:a4:6d:66:74:91:30:62:3d:82:0d: 64:52:9f:ea:e6:74:4d:ae:dd:a1:06:d0:51:6f:23:7d:b2:f6: 92:32:14:e7:fa:6c:88:a3:3d:7f:41:46:2d:fd:a2:bf:9c:4f: 96:04:94:7a:53:6a:41:03:c9:0a:36:3f:8f:8b:1f:50:bd:55: 04:02:07:84:35:6e:e8:b1:4c:69:1b:7a:8b:df:97:88:4a:f4: 7e:b4:8f:4c:64:bf:54:cb:c6:40:01:2c:00:ab:d5:33:c7:60: 88:82:c3:10:95:70:b1:c4:b0:38:a5:42:77:cb:45:a2:05:26: d9:1e:76:b3:c8:3b:46:ca:68:f7:83:45:f6:86:85:7a:1b:2a: bb:88:b1:01 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSjLqhcK5h0na40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ODMxMzEzNjctOTc0Ny00OTI3LWFhOTMtZWMzNmM5YjlhNTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkFAKOLkpuzx7igikeuOEtkTCxPWV2ok5bNS B1/3yOfiotJaV9q6oEDh+QSEbKRIpVXFymv7SfmrBGva+cFOXn6NOhR9h9EsvHFS SN/Pf3S1cn8e0HkNgPIuk6UpXW17CGw8ii9TO4P89Zs68uXUwxZdZGZ74cX7xRbR xfJ1Y/W8nYXrgCvhwzdWxFrVwihTBg9Owd+dp0F0ISiIPbXMUxz4W3R+2xX1pRfM QhR4CJHZxvwji4bxJePyEnK1lsHo6KLg1RMUtZ7rT6GcxHYgtk9DRwcZXPCSU/h+ yLmWLTxh3EAdUzo+no8ZXe/GYkQjDkFfKvRPwT6ytwXxzjTaiQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHKOdDQHfql62IgpRWzg5ZttL+XUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjNlOTVhMTctNTZiNy0z YTRhLTgyYjItNGM4NWVkYTcwZDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBGcf3wl5mRuJIJJ3guzZE6xz+mjE8p/W55cAqT /jKFQcGVK7Apv0tGO4PowP95cFe7z9O0DF8ZGlWUm1CXagkXpWFtlrbW8J9zdSUw MPdD838r3m82aHxDL2w7ACwLBk+UZghyj/QgS8ZSrVlTo5BR1JyAe6RtZnSRMGI9 gg1kUp/q5nRNrt2hBtBRbyN9svaSMhTn+myIoz1/QUYt/aK/nE+WBJR6U2pBA8kK Nj+Pix9QvVUEAgeENW7osUxpG3qL35eISvR+tI9MZL9Uy8ZAASwAq9Uzx2CIgsMQ lXCxxLA4pUJ3y0WiBSbZHnazyDtGymj3g0X2hoV6Gyq7iLEB -----END CERTIFICATE-----Generated at Sun May 11 08:15:07 2025 by rpki-client