$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fffe1080-ba53-3a25-a249-2ea2617bd944.roa File: fffe1080-ba53-3a25-a249-2ea2617bd944.roa (raw, json) Hash identifier: uOGwpXMitfWNUDuH959vR6LfCHPi7N+DF89IFRk0Z3k= Subject key identifier: 56:42:B7:35:04:55:1C:DF:9F:21:66:FA:0A:9E:AC:5B:BC:9D:F8:35 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4D6A6EB08C5E081102900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fffe1080-ba53-3a25-a249-2ea2617bd944.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 10515 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:d6:a6:eb:08:c5:e0:81:10:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=dc66c161-2465-4a1a-acec-b16acfcb900b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:50:e6:73:59:9a:4c:86:50:78:b6:3e:67:38: 93:cf:ed:47:c2:f8:d8:c7:2a:e7:3c:21:b1:86:28: ec:da:36:bd:7d:a2:bd:df:f4:97:3d:01:73:9d:7e: 82:41:68:48:10:d5:97:f9:61:82:ee:24:11:a3:c8: d6:5e:1f:5d:d9:52:c3:2e:dd:ac:69:d8:85:a0:53: be:78:e9:98:ee:e3:e7:cd:08:23:16:a4:c5:64:30: 8a:af:9a:9e:a5:90:4e:eb:80:e0:34:16:c3:7c:f8: 01:55:20:ea:e3:7f:f3:65:3d:dc:d3:9b:bb:1c:97: ce:81:dd:fd:03:db:e2:31:41:56:93:6d:dc:d4:8c: 9c:47:89:eb:a8:97:bd:45:df:62:a4:5c:23:92:4f: 65:51:30:eb:c6:d8:d4:49:07:af:c9:31:70:b8:57: f8:d3:6e:5a:29:96:14:eb:20:ef:65:d1:f9:32:13: f6:0d:b6:2a:2f:9a:cf:09:6c:45:82:c0:bb:5e:3e: d1:d1:06:c3:33:94:44:c4:8c:63:66:2c:cb:c7:8d: d8:ed:4a:61:e4:33:7a:56:f1:91:31:9d:c3:36:ce: 0b:1d:3b:a5:63:6e:e3:6c:6d:bb:ed:42:0e:f2:6f: c1:fd:39:5d:cb:c5:2b:ac:cb:ca:da:92:28:72:86: 95:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:42:B7:35:04:55:1C:DF:9F:21:66:FA:0A:9E:AC:5B:BC:9D:F8:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fffe1080-ba53-3a25-a249-2ea2617bd944.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:bc:b4:93:de:5c:2c:79:1b:5e:27:f7:f5:2e:bd:c3:84:6c: 40:42:07:1a:0b:b4:50:ec:bb:81:66:b4:0a:35:5f:1f:95:47: f7:df:ac:02:5d:eb:2f:d6:a1:82:19:8f:5a:f3:7c:7a:af:34: 0b:6f:76:9e:3a:f7:e3:40:b5:41:1a:56:f7:3b:49:58:6a:01: 43:30:68:33:82:a7:3e:1e:09:02:5e:90:f1:8b:34:42:c0:c3: db:bb:c4:38:23:d1:e0:c8:6a:0d:1f:85:d0:de:50:c3:1b:85: 1e:de:e1:10:71:53:de:81:dc:7d:0e:8d:db:44:0d:5b:92:45: a9:37:73:73:b1:d3:d0:83:c9:6b:60:ec:32:44:da:5f:80:98: 3b:5d:c6:3f:a2:16:c1:39:27:db:36:5b:5d:8c:98:dc:90:b9: 1f:cb:18:b1:41:0a:6f:1b:92:66:7d:3d:31:55:80:a7:04:80: ee:e9:42:61:53:fd:8e:23:c3:22:64:75:eb:93:0c:77:61:4e: 32:b5:34:b4:a4:58:0d:1a:31:26:9e:4a:4c:e9:05:d2:8a:24: 2d:55:bd:e3:18:82:39:21:b1:77:a2:6e:63:fe:4a:bf:80:9b: 6a:7a:89:97:59:c0:d5:2a:1b:3a:2b:9b:9b:dc:df:cb:10:eb: 21:6a:7a:9c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1Nam6wjF4IEQKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk ZGM2NmMxNjEtMjQ2NS00YTFhLWFjZWMtYjE2YWNmY2I5MDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFDmc1maTIZQeLY+ZziTz+1HwvjYxyrnPCGx hijs2ja9faK93/SXPQFznX6CQWhIENWX+WGC7iQRo8jWXh9d2VLDLt2sadiFoFO+ eOmY7uPnzQgjFqTFZDCKr5qepZBO64DgNBbDfPgBVSDq43/zZT3c05u7HJfOgd39 A9viMUFWk23c1IycR4nrqJe9Rd9ipFwjkk9lUTDrxtjUSQevyTFwuFf4025aKZYU 6yDvZdH5MhP2DbYqL5rPCWxFgsC7Xj7R0QbDM5RExIxjZizLx43Y7Uph5DN6VvGR MZ3DNs4LHTulY27jbG277UIO8m/B/Tldy8UrrMvK2pIocoaVJQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFZCtzUEVRzfnyFm+gqerFu8nfg1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmZmZTEwODAtYmE1My0z YTI1LWEyNDktMmVhMjYxN2JkOTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBHvLST3lwseRteJ/f1Lr3DhGxAQgcaC7RQ7LuB ZrQKNV8flUf336wCXesv1qGCGY9a83x6rzQLb3aeOvfjQLVBGlb3O0lYagFDMGgz gqc+HgkCXpDxizRCwMPbu8Q4I9HgyGoNH4XQ3lDDG4Ue3uEQcVPegdx9Do3bRA1b kkWpN3NzsdPQg8lrYOwyRNpfgJg7XcY/ohbBOSfbNltdjJjckLkfyxixQQpvG5Jm fT0xVYCnBIDu6UJhU/2OI8MiZHXrkwx3YU4ytTS0pFgNGjEmnkpM6QXSiiQtVb3j GII5IbF3om5j/kq/gJtqeomXWcDVKhs6K5ub3N/LEOshanqc -----END CERTIFICATE-----Generated at Mon May 12 02:49:41 2025 by rpki-client