$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f898c3e5-05d7-3302-a541-765065992d07.roa File: f898c3e5-05d7-3302-a541-765065992d07.roa (raw, json) Hash identifier: TC1sd+p4zCTvWUR4FoYW7QzGmbmyVQ0ovW4RccwSH8c= Subject key identifier: D8:82:48:56:A9:B2:AC:25:A0:B5:DC:D4:7C:EF:F7:A2:15:F7:FB:78 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A2E95F06222BC88DB9D40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f898c3e5-05d7-3302-a541-765065992d07.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396566 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:2e:95:f0:62:22:bc:88:db:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=5bb8797f-5cc0-4fda-a528-c89ed085b35c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:86:94:4b:4d:f7:fb:37:5d:cc:d3:21:84:86: 36:d8:b2:d7:78:c9:e3:0d:71:91:0b:28:99:6f:4e: 97:e1:df:45:3c:0c:8d:88:9c:b2:32:9a:0a:e4:bf: f8:c8:21:17:27:17:f4:4a:58:f0:7a:b6:f7:44:45: 04:a8:d8:a1:cd:f9:4e:33:de:98:bd:7e:a1:f1:b1: 46:f2:5c:3d:dc:cb:fb:32:3d:ef:21:c7:85:db:4d: 5c:e6:2e:fb:62:c2:43:05:03:36:7a:c4:b5:15:4e: 69:07:66:28:de:32:ce:61:c4:0f:0e:2f:4e:b8:c8: 41:ae:63:b0:65:d2:86:63:80:a3:cd:fc:2d:e1:74: 7b:a7:d7:61:9f:2e:81:5f:e6:ab:84:40:62:de:93: 0b:75:f4:b1:e0:59:e5:a4:2c:5b:86:58:7b:85:5a: 7a:64:33:ab:4c:7b:a5:55:7b:ba:ea:bb:74:8a:0c: ac:ce:2e:0a:ae:d5:95:a2:c9:21:c6:5f:b1:f2:62: 92:43:f8:38:0f:9e:67:32:48:5a:70:2e:80:7d:4c: fe:15:5b:30:53:fe:2f:a4:8e:62:49:c1:08:dd:2a: d5:a4:19:ff:53:e0:37:bb:98:eb:c4:f8:4b:9c:5e: 3b:ea:2a:6c:da:63:84:ad:ff:b5:4b:a8:44:cd:95: 0c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:82:48:56:A9:B2:AC:25:A0:B5:DC:D4:7C:EF:F7:A2:15:F7:FB:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f898c3e5-05d7-3302-a541-765065992d07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:f2:f4:f9:68:b5:eb:e3:bc:d7:4a:ad:c6:2e:67:a4:62:61: c1:89:cc:61:1c:84:da:c1:a5:38:ed:68:3b:8a:42:e1:07:7c: c0:f3:ee:5b:a4:7d:6e:3b:69:6e:23:b2:be:c7:fa:ff:45:1b: 6b:12:1e:6d:01:dc:96:8e:72:8a:c9:ec:4c:2b:3e:04:c7:0a: 17:03:46:08:40:41:66:2c:1e:9d:9b:0b:f8:3d:ad:ee:cf:6e: 20:38:c2:c3:3e:76:49:ca:94:c4:29:3d:d6:b5:4d:02:e8:f1: 2a:63:98:07:e7:b3:bb:71:27:2b:35:12:95:6a:9d:ee:99:e0: a8:dc:44:97:8e:75:ab:cc:c0:bc:86:3a:c7:24:83:25:e9:c7: 70:29:8a:f5:0a:5c:65:e1:c9:65:f3:50:69:b2:a7:28:d5:a1: 3b:71:8c:be:2c:0b:fa:e8:3c:38:20:23:50:6c:8f:6c:8b:7f: 7d:02:f9:b9:9a:0b:f4:fd:96:a7:75:0c:90:80:11:0d:2f:a7: 08:1a:2f:94:ce:2a:9a:6b:08:b5:fb:58:34:bc:38:fc:bb:28: 4a:37:fc:12:1c:77:62:ae:2d:d2:5a:71:e4:78:cf:9b:81:2a: ad:a7:01:83:8c:ac:1e:d7:18:e3:b2:5d:54:48:6c:93:11:e7: 65:e5:6c:77 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSi6V8GIivIjbnUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NWJiODc5N2YtNWNjMC00ZmRhLWE1MjgtYzg5ZWQwODViMzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YaUS033+zddzNMhhIY22LLXeMnjDXGRCyiZ b06X4d9FPAyNiJyyMpoK5L/4yCEXJxf0Sljwerb3REUEqNihzflOM96YvX6h8bFG 8lw93Mv7Mj3vIceF201c5i77YsJDBQM2esS1FU5pB2Yo3jLOYcQPDi9OuMhBrmOw ZdKGY4Cjzfwt4XR7p9dhny6BX+arhEBi3pMLdfSx4FnlpCxbhlh7hVp6ZDOrTHul VXu66rt0igyszi4KrtWVoskhxl+x8mKSQ/g4D55nMkhacC6AfUz+FVswU/4vpI5i ScEI3SrVpBn/U+A3u5jrxPhLnF476ips2mOErf+1S6hEzZUMlQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNiCSFapsqwloLXc1Hzv96IV9/t4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjg5OGMzZTUtMDVkNy0z MzAyLWE1NDEtNzY1MDY1OTkyZDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAm8vT5aLXr47zXSq3GLmekYmHBicxhHITawaU4 7Wg7ikLhB3zA8+5bpH1uO2luI7K+x/r/RRtrEh5tAdyWjnKKyexMKz4ExwoXA0YI QEFmLB6dmwv4Pa3uz24gOMLDPnZJypTEKT3WtU0C6PEqY5gH57O7cScrNRKVap3u meCo3ESXjnWrzMC8hjrHJIMl6cdwKYr1Clxl4cll81Bpsqco1aE7cYy+LAv66Dw4 ICNQbI9si399Avm5mgv0/ZandQyQgBENL6cIGi+Uziqaawi1+1g0vDj8uyhKN/wS HHdiri3SWnHkeM+bgSqtpwGDjKwe1xjjsl1USGyTEedl5Wx3 -----END CERTIFICATE-----Generated at Sun May 11 08:34:25 2025 by rpki-client