$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f39c5d1-23a6-3ce6-90ec-834cb7dbd4cf.roa File: 0f39c5d1-23a6-3ce6-90ec-834cb7dbd4cf.roa (raw, json) Hash identifier: /pzh/VqTDnMbLyTdzaZ8tBbKvXlYZGGTTvZKNCTMSy8= Subject key identifier: 6D:B7:D7:05:B5:D3:2E:D9:01:8B:EF:47:AC:85:97:AF:94:39:04:32 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849D85FD01DAE6750F71DAE2B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f39c5d1-23a6-3ce6-90ec-834cb7dbd4cf.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 396542 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:d0:1d:ae:67:50:f7:1d:ae:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=ad21ae7c-a0a0-4358-bfd9-2adb4bddfb10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cc:ac:b9:fa:ea:0e:c1:97:a8:f1:f6:85:67: 83:15:55:7d:50:e5:33:24:5c:91:66:dd:f2:32:b1: 72:70:99:ed:49:fd:44:5d:c0:3a:66:f9:80:ae:3d: 51:09:61:88:cf:76:eb:10:be:f2:77:27:09:a4:3e: 4a:0c:ca:85:ee:ac:75:fd:9e:38:05:b9:d1:1d:27: 88:55:66:0b:dd:97:84:dd:f8:5d:3e:50:bc:37:9f: 40:c0:f9:92:e7:12:eb:43:a1:f4:d7:65:ce:e2:88: 9f:20:e3:e6:00:8d:c9:49:b6:36:0b:58:4d:0b:70: 80:40:13:d8:e9:13:a8:d6:49:86:6a:9a:0d:95:d7: ef:40:1b:cc:f3:6c:e8:82:1a:58:dc:c9:75:1e:ae: b7:2f:e3:fd:29:37:6e:fa:df:81:55:36:ae:9f:fd: 13:01:b2:22:37:13:96:d9:cf:31:a1:0e:be:19:e4: 09:b5:01:4c:1d:5a:66:a6:b4:35:03:85:ef:fc:93: e7:75:b4:41:8c:7e:d0:4c:63:1f:13:83:ce:dd:d7: 9b:b2:3f:a0:3f:71:0a:bb:96:8b:ab:9b:f6:eb:33: eb:97:94:3f:74:c8:9b:5f:28:dd:92:c9:63:47:1d: 0b:07:d0:b9:03:88:c6:d7:96:65:50:b3:cf:72:e0: cc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B7:D7:05:B5:D3:2E:D9:01:8B:EF:47:AC:85:97:AF:94:39:04:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f39c5d1-23a6-3ce6-90ec-834cb7dbd4cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:00:f9:70:91:60:23:0d:eb:97:d9:aa:d4:f4:0c:3d:c1:5e: 17:26:e0:0f:23:07:13:f6:27:2f:7e:50:55:90:67:dd:f7:e1: 0c:f4:80:f6:91:08:15:5d:0e:d1:79:13:34:a4:74:f4:4a:35: e6:00:a2:d3:38:ea:a6:05:6a:6a:fb:a4:84:97:7b:79:a0:7f: 72:04:0c:be:77:4d:cd:f8:33:a5:f3:5e:ed:c3:36:5f:53:20: e0:0c:e6:cf:f5:47:9b:a0:1b:fb:e1:5f:61:5c:82:3f:15:c1: 0a:06:dd:30:2a:10:f3:80:29:7e:2f:2d:3b:96:a8:10:e3:51: 05:6a:8a:cd:ba:33:e7:79:bf:cc:ad:57:21:ec:f4:bd:bb:a7: df:56:78:39:0c:48:0f:66:6f:34:bd:8d:78:f0:b9:9a:ae:c6: fb:4b:dd:67:2c:ea:77:df:7f:a9:c7:32:e5:80:2b:f9:43:ff: ca:1c:f7:35:96:aa:f7:e6:6f:f8:2c:45:ba:fa:f8:50:e1:ce: 55:c4:fb:cc:dc:32:e0:33:4e:6f:08:1b:cf:da:5a:0b:f2:e1: 0e:41:f0:1d:4a:3c:87:8c:be:5d:0e:e5:2f:3c:a2:58:b0:13: 89:13:3a:57:e1:56:96:14:b8:c1:fe:9f:f9:96:96:06:29:5b: ad:5f:35:01 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnYX9AdrmdQ9x2uKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YWQyMWFlN2MtYTBhMC00MzU4LWJmZDktMmFkYjRiZGRmYjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucysufrqDsGXqPH2hWeDFVV9UOUzJFyRZt3y MrFycJntSf1EXcA6ZvmArj1RCWGIz3brEL7ydycJpD5KDMqF7qx1/Z44BbnRHSeI VWYL3ZeE3fhdPlC8N59AwPmS5xLrQ6H012XO4oifIOPmAI3JSbY2C1hNC3CAQBPY 6ROo1kmGapoNldfvQBvM82zoghpY3Ml1Hq63L+P9KTdu+t+BVTaun/0TAbIiNxOW 2c8xoQ6+GeQJtQFMHVpmprQ1A4Xv/JPndbRBjH7QTGMfE4PO3debsj+gP3EKu5aL q5v26zPrl5Q/dMibXyjdksljRx0LB9C5A4jG15ZlULPPcuDMPwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFG231wW10y7ZAYvvR6yFl6+UOQQyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGYzOWM1ZDEtMjNhNi0z Y2U2LTkwZWMtODM0Y2I3ZGJkNGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBPAPlwkWAjDeuX2arU9Aw9wV4XJuAPIwcT9icv flBVkGfd9+EM9ID2kQgVXQ7ReRM0pHT0SjXmAKLTOOqmBWpq+6SEl3t5oH9yBAy+ d03N+DOl817twzZfUyDgDObP9UeboBv74V9hXII/FcEKBt0wKhDzgCl+Ly07lqgQ 41EFaorNujPneb/MrVch7PS9u6ffVng5DEgPZm80vY148Lmarsb7S91nLOp333+p xzLlgCv5Q//KHPc1lqr35m/4LEW6+vhQ4c5VxPvM3DLgM05vCBvP2loL8uEOQfAd SjyHjL5dDuUvPKJYsBOJEzpX4VaWFLjB/p/5lpYGKVutXzUB -----END CERTIFICATE-----Generated at Sat Jun 7 04:27:10 2025 by rpki-client