$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f5916bc5-ecd2-3b43-b31a-0e5def489853.roa File: f5916bc5-ecd2-3b43-b31a-0e5def489853.roa (raw, json) Hash identifier: EQwU137By6vCuHQz2AJH2C0ETLTr8bMwz22oJquQyoM= Subject key identifier: FA:FE:7A:09:61:4F:D3:00:24:58:79:EB:A3:4D:1D:4C:CF:9E:51:43 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A341EFD84F6930D4A2DC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f5916bc5-ecd2-3b43-b31a-0e5def489853.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 397200 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:34:1e:fd:84:f6:93:0d:4a:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=e60acd75-9a32-491b-b383-f9dbcc143244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:21:a1:d2:62:12:e1:cf:9c:d1:c6:d3:75:66: 10:06:a2:8b:31:83:b0:bd:e0:34:17:6e:d7:05:ff: 49:d6:d8:5a:4b:b4:ed:08:89:12:d0:50:5b:39:c8: 14:fa:19:49:ea:0d:4e:0e:8b:f5:cb:72:2e:ec:9a: ec:6e:8b:0c:17:8f:de:4a:50:0c:8b:e3:cc:b1:14: 9e:70:a8:52:09:ed:07:32:ae:fe:72:af:3d:f8:79: 8b:9f:7b:bc:0f:59:7b:af:96:9b:67:be:8b:0b:c7: 61:52:6f:cb:d0:b1:03:f2:94:64:57:40:01:f3:7a: 34:ab:da:9d:38:4c:60:b8:5b:92:fe:c1:19:0f:6a: 32:3f:7f:32:7e:3c:04:58:e6:86:0a:82:52:41:2c: ae:3f:b2:84:32:57:b0:e5:5b:d5:fe:db:45:e1:b9: b7:c2:e6:3c:dc:a4:b2:bf:02:71:e6:b2:bf:f1:73: c8:ba:bd:2b:b7:a2:38:6c:8f:26:c6:d5:54:ba:61: ce:80:53:45:cc:6d:0e:08:da:03:bb:24:62:e4:33: 21:40:8a:bc:d0:cb:24:43:5d:7a:1b:1f:6a:e4:2f: f6:fa:00:19:dc:e5:4f:c7:00:cc:89:2b:a6:80:c0: 15:05:50:c9:46:23:11:2d:43:f7:de:1f:5c:a0:64: c4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:FE:7A:09:61:4F:D3:00:24:58:79:EB:A3:4D:1D:4C:CF:9E:51:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f5916bc5-ecd2-3b43-b31a-0e5def489853.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:e7:6e:70:f3:a2:7a:ec:b5:ee:96:f6:8a:41:06:e6:7b:4f: 05:4f:1d:c8:ce:0a:85:b5:74:56:8f:17:86:a6:a5:aa:78:8c: 0c:42:39:5f:17:4b:65:bd:e6:3d:45:f9:05:f9:d4:22:90:d6: 58:97:0f:be:9b:ca:7d:5d:7d:ed:f7:70:a1:a0:e7:b5:62:da: 48:ac:a8:01:68:9a:d2:ba:d7:59:f7:16:3e:93:d3:4c:fe:0a: 74:40:9e:bf:b4:5d:7f:fd:be:93:3f:de:79:9c:09:b5:f9:46: 9b:9b:02:65:b0:be:6f:d3:45:20:5c:d1:34:ec:d8:5b:4a:d2: fc:aa:31:ee:95:bd:89:7c:53:f7:9d:bd:1a:19:ce:72:3b:00: 1f:ad:30:cf:ae:1e:7e:6c:3c:39:77:da:b2:1f:de:0e:99:c0: a0:34:45:f9:96:ff:05:ba:0a:9f:f5:64:de:b6:28:b6:35:6a: 66:1e:3b:a3:97:fa:5a:48:d7:32:d8:46:16:b8:02:38:dc:bc: c6:fe:8e:8b:c7:5a:90:ca:93:69:6e:f8:9f:3f:9c:48:c5:08: 74:e6:af:ad:a0:34:c8:77:3b:52:95:c8:1d:54:14:66:e9:ea: c0:2b:3a:97:37:ac:55:2f:1a:f3:0b:36:fd:8a:3b:32:69:e9: 6e:34:de:bb -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSjQe/YT2kw1KLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZTYwYWNkNzUtOWEzMi00OTFiLWIzODMtZjlkYmNjMTQzMjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiGh0mIS4c+c0cbTdWYQBqKLMYOwveA0F27X Bf9J1thaS7TtCIkS0FBbOcgU+hlJ6g1ODov1y3Iu7JrsbosMF4/eSlAMi+PMsRSe cKhSCe0HMq7+cq89+HmLn3u8D1l7r5abZ76LC8dhUm/L0LED8pRkV0AB83o0q9qd OExguFuS/sEZD2oyP38yfjwEWOaGCoJSQSyuP7KEMlew5VvV/ttF4bm3wuY83KSy vwJx5rK/8XPIur0rt6I4bI8mxtVUumHOgFNFzG0OCNoDuyRi5DMhQIq80MskQ116 Gx9q5C/2+gAZ3OVPxwDMiSumgMAVBVDJRiMRLUP33h9coGTE7wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPr+eglhT9MAJFh566NNHUzPnlFDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjU5MTZiYzUtZWNkMi0z YjQzLWIzMWEtMGU1ZGVmNDg5ODUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBh525w86J67LXulvaKQQbme08FTx3IzgqFtXRW jxeGpqWqeIwMQjlfF0tlveY9RfkF+dQikNZYlw++m8p9XX3t93ChoOe1YtpIrKgB aJrSutdZ9xY+k9NM/gp0QJ6/tF1//b6TP955nAm1+UabmwJlsL5v00UgXNE07Nhb StL8qjHulb2JfFP3nb0aGc5yOwAfrTDPrh5+bDw5d9qyH94OmcCgNEX5lv8Fugqf 9WTetii2NWpmHjujl/paSNcy2EYWuAI43LzG/o6Lx1qQypNpbvifP5xIxQh05q+t oDTIdztSlcgdVBRm6erAKzqXN6xVLxrzCzb9ijsyaeluNN67 -----END CERTIFICATE-----Generated at Sun May 11 05:25:45 2025 by rpki-client