$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f5c69d70-263b-308b-9d98-50d617be8c53.roa File: f5c69d70-263b-308b-9d98-50d617be8c53.roa (raw, json) Hash identifier: QIilk03Aa90UydENJReZWzgYsOErL+Y3QMy8lR6RjVA= Subject key identifier: E8:6E:44:A0:56:59:2A:55:D4:DF:8A:61:2B:B3:8D:8C:7E:A0:A1:29 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A2B8EC1AD82ABE81C4180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f5c69d70-263b-308b-9d98-50d617be8c53.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396584 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:2b:8e:c1:ad:82:ab:e8:1c:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=6fd4d0a7-d6b9-4086-94fd-d02b6c43711f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:55:c6:38:68:54:57:66:f5:48:3f:96:58:1b: 54:35:93:96:f6:cf:8c:b5:4a:cc:b4:61:73:28:f6: fd:57:d0:15:fa:5f:50:16:39:8c:5a:a8:ea:6a:cf: 68:77:4f:f0:15:0a:d5:78:4f:ad:50:ed:35:ec:e9: 41:4d:9b:a3:89:a4:e3:7b:a7:ab:78:1d:bc:c0:02: 92:a7:b7:9b:65:93:6d:1c:00:8f:bc:1c:a1:bc:b4: df:dd:76:65:c0:92:a4:74:d9:bb:37:eb:0e:3b:36: e1:8d:9b:6c:70:dc:94:76:d2:d4:4c:2f:d1:05:fe: a2:64:b9:69:14:98:44:f4:3d:c7:f5:fa:df:6f:f8: 3d:11:2a:aa:8e:38:55:06:58:58:2b:bd:e7:3d:b3: 73:f1:ef:cd:f5:32:39:32:63:8a:da:7d:2c:e6:07: ef:a3:a8:2f:22:ea:af:4b:3a:7d:27:aa:d7:47:f1: 4b:cb:d8:2a:4d:4c:89:85:32:0e:b7:f7:14:73:d0: 7a:a3:a3:c5:1c:ab:9c:24:ab:74:aa:ac:d7:ac:49: 38:34:5e:8b:b0:29:55:76:03:8e:4c:c9:85:1a:9d: c5:0d:a7:01:ba:50:33:ac:04:cf:b1:91:09:6f:21: f8:a2:89:1a:79:f5:5e:fd:7a:f7:fc:21:e9:ae:98: 49:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:6E:44:A0:56:59:2A:55:D4:DF:8A:61:2B:B3:8D:8C:7E:A0:A1:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f5c69d70-263b-308b-9d98-50d617be8c53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:37:b4:f6:f6:1c:25:e2:50:90:05:3b:dd:b3:2b:00:29:fb: f8:30:00:19:0e:ec:f0:35:49:eb:c5:31:36:6e:3d:d8:13:8d: 17:97:76:0d:a3:2c:2b:41:b0:42:ac:26:35:17:2e:58:9b:44: d7:30:33:7a:fc:a3:b3:5e:56:68:b0:73:d0:37:00:d9:54:4e: 25:e4:8f:53:a7:ba:d0:de:99:18:c0:90:b9:1d:66:c7:80:43: bb:f7:40:b2:b4:5a:77:e3:93:f8:96:c7:11:10:de:1d:4c:11: 1e:52:a6:7a:f0:80:70:a1:75:a2:7a:94:2f:be:05:02:9d:2f: 47:27:0d:3e:c8:b7:88:9b:1d:dd:8d:f8:c9:9e:6f:74:83:ca: c1:7a:47:02:74:72:d2:bc:6f:bf:3e:53:69:e5:31:43:ab:2d: 45:70:a0:68:f1:8c:03:92:4c:c8:1b:68:8d:d8:e1:9e:b5:1d: 7b:d1:8c:35:05:da:fa:1e:7d:c9:b5:55:b7:54:7d:09:8f:c1: 67:4f:e1:cb:14:81:65:ad:4f:49:62:18:e1:22:68:52:48:3e: f4:c4:85:a3:b2:9f:fb:56:a9:9c:f4:45:8b:96:3a:cd:99:af: e9:66:29:46:d7:e5:2d:26:3b:5b:32:92:02:4f:c4:11:ab:d1: 8e:3a:c3:61 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSiuOwa2Cq+gcQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NmZkNGQwYTctZDZiOS00MDg2LTk0ZmQtZDAyYjZjNDM3MTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1XGOGhUV2b1SD+WWBtUNZOW9s+MtUrMtGFz KPb9V9AV+l9QFjmMWqjqas9od0/wFQrVeE+tUO017OlBTZujiaTje6ereB28wAKS p7ebZZNtHACPvByhvLTf3XZlwJKkdNm7N+sOOzbhjZtscNyUdtLUTC/RBf6iZLlp FJhE9D3H9frfb/g9ESqqjjhVBlhYK73nPbNz8e/N9TI5MmOK2n0s5gfvo6gvIuqv Szp9J6rXR/FLy9gqTUyJhTIOt/cUc9B6o6PFHKucJKt0qqzXrEk4NF6LsClVdgOO TMmFGp3FDacBulAzrATPsZEJbyH4ookaefVe/Xr3/CHprphJUQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOhuRKBWWSpV1N+KYSuzjYx+oKEpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjVjNjlkNzAtMjYzYi0z MDhiLTlkOTgtNTBkNjE3YmU4YzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB6N7T29hwl4lCQBTvdsysAKfv4MAAZDuzwNUnr xTE2bj3YE40Xl3YNoywrQbBCrCY1Fy5Ym0TXMDN6/KOzXlZosHPQNwDZVE4l5I9T p7rQ3pkYwJC5HWbHgEO790CytFp345P4lscREN4dTBEeUqZ68IBwoXWiepQvvgUC nS9HJw0+yLeImx3djfjJnm90g8rBekcCdHLSvG+/PlNp5TFDqy1FcKBo8YwDkkzI G2iN2OGetR170Yw1Bdr6Hn3JtVW3VH0Jj8FnT+HLFIFlrU9JYhjhImhSSD70xIWj sp/7Vqmc9EWLljrNma/pZilG1+UtJjtbMpICT8QRq9GOOsNh -----END CERTIFICATE-----Generated at Sun May 11 06:15:10 2025 by rpki-client