$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1541f905-91f8-3cec-84e6-eeb94b27085a.roa File: 1541f905-91f8-3cec-84e6-eeb94b27085a.roa (raw, json) Hash identifier: fJNpErYQNbbKszCJFuVxZOoUlYBmQ4+ZWxDHAoKuV3g= Subject key identifier: 62:C4:10:9E:20:8B:3D:67:C0:CE:3F:34:72:A2:EB:52:EC:67:02:0A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849D85FD0EA98D822A87A73F000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1541f905-91f8-3cec-84e6-eeb94b27085a.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 396550 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:d0:ea:98:d8:22:a8:7a:73:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=d7114998-ea15-4032-a166-b5fe359dd9bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3c:4f:e7:bb:97:8c:87:53:04:7a:53:1b:10: 89:e1:4d:4c:1a:e4:67:ce:05:0e:80:3f:7f:8a:94: 41:1a:31:f4:09:58:0d:5d:fc:d7:32:cd:69:80:2c: d0:1c:4b:4d:21:f0:67:71:68:d5:65:2d:88:56:9c: 61:b7:0c:73:e1:a0:e1:d8:82:35:d3:c4:ad:1b:b9: 25:d2:1b:ec:63:7b:55:79:ce:d6:4a:4f:4b:e5:3f: 7f:3e:87:33:e4:56:e9:97:fe:ad:c9:19:b7:ab:7e: 82:09:cd:0c:1d:8f:81:5d:5d:84:d7:8e:81:71:0c: d7:e9:52:d5:ee:d9:86:8e:81:94:d2:d5:75:d4:11: 47:19:0b:e9:fd:5a:3f:3b:ab:87:26:50:a5:94:5a: 7c:80:0b:28:07:83:72:52:18:e4:01:36:92:79:43: 3c:86:a3:a0:ca:25:ed:93:1e:f6:30:6e:6f:9e:7d: 72:c0:9f:71:b6:bb:e0:e0:05:d6:7c:f1:ab:ed:6e: 92:cb:6b:0e:ab:bd:0a:45:18:0c:86:df:e9:5a:e7: 69:ad:0c:c8:50:a2:8d:98:89:34:8c:fc:3d:e8:6f: a5:e1:24:e3:f4:29:12:c7:da:fe:89:91:1c:9a:a4: 75:78:89:d2:85:99:13:9d:83:49:b3:d9:16:4c:79: 52:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C4:10:9E:20:8B:3D:67:C0:CE:3F:34:72:A2:EB:52:EC:67:02:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1541f905-91f8-3cec-84e6-eeb94b27085a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:73:37:88:39:ef:89:90:12:4a:96:45:3d:2d:d2:44:15:07: 7d:08:66:4d:97:f4:23:27:ab:43:74:89:0f:e2:74:00:8e:fa: cc:89:0d:df:2c:f9:90:1f:9f:d3:78:aa:ab:50:c4:a7:74:4a: 50:9c:b4:56:03:ee:8d:bb:3e:e1:2c:0e:52:aa:9c:c6:73:a9: 94:4d:c0:80:01:b6:72:42:99:ae:9e:c1:1a:14:83:aa:1c:c1: 09:01:1b:3a:4d:4e:87:7f:68:4d:3c:9f:b9:40:dd:ed:98:6a: ef:2c:c7:0b:66:6d:1a:47:42:d9:ab:dc:00:94:cd:67:21:b9: 4b:ff:36:d7:4b:80:92:9f:5e:13:fa:e0:d8:40:11:4c:08:df: 3f:fd:29:b3:a5:f3:c6:17:b8:2b:3c:b8:1c:82:b9:45:5c:f4: 8c:b3:74:21:58:bc:6c:8d:ea:ea:48:7f:4d:ed:1d:01:09:66: 38:3a:b5:6f:ed:10:94:7b:ab:f8:64:cc:75:e4:0f:9f:49:62: 8b:21:97:3a:11:89:19:7c:71:be:49:57:78:44:d8:e9:7a:b6: 97:47:34:3d:7d:06:43:dd:9b:ed:92:8e:83:94:61:54:35:fc: a5:dc:9c:b2:99:07:9b:9b:cc:5f:cd:92:95:b5:b3:a3:f1:6c: 78:8c:2c:6e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnYX9DqmNgiqHpz8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZDcxMTQ5OTgtZWExNS00MDMyLWExNjYtYjVmZTM1OWRkOWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjxP57uXjIdTBHpTGxCJ4U1MGuRnzgUOgD9/ ipRBGjH0CVgNXfzXMs1pgCzQHEtNIfBncWjVZS2IVpxhtwxz4aDh2II108StG7kl 0hvsY3tVec7WSk9L5T9/Pocz5Fbpl/6tyRm3q36CCc0MHY+BXV2E146BcQzX6VLV 7tmGjoGU0tV11BFHGQvp/Vo/O6uHJlCllFp8gAsoB4NyUhjkATaSeUM8hqOgyiXt kx72MG5vnn1ywJ9xtrvg4AXWfPGr7W6Sy2sOq70KRRgMht/pWudprQzIUKKNmIk0 jPw96G+l4STj9CkSx9r+iZEcmqR1eInShZkTnYNJs9kWTHlSlQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGLEEJ4giz1nwM4/NHKi61LsZwIKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTU0MWY5MDUtOTFmOC0z Y2VjLTg0ZTYtZWViOTRiMjcwODVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBjczeIOe+JkBJKlkU9LdJEFQd9CGZNl/QjJ6tD dIkP4nQAjvrMiQ3fLPmQH5/TeKqrUMSndEpQnLRWA+6Nuz7hLA5SqpzGc6mUTcCA AbZyQpmunsEaFIOqHMEJARs6TU6Hf2hNPJ+5QN3tmGrvLMcLZm0aR0LZq9wAlM1n IblL/zbXS4CSn14T+uDYQBFMCN8//SmzpfPGF7grPLgcgrlFXPSMs3QhWLxsjerq SH9N7R0BCWY4OrVv7RCUe6v4ZMx15A+fSWKLIZc6EYkZfHG+SVd4RNjperaXRzQ9 fQZD3Zvtko6DlGFUNfyl3JyymQebm8xfzZKVtbOj8Wx4jCxu -----END CERTIFICATE-----Generated at Sun Jun 8 00:49:08 2025 by rpki-client