$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21812b5d-b2b3-398c-afb7-221a71c32c32.roa File: 21812b5d-b2b3-398c-afb7-221a71c32c32.roa (raw, json) Hash identifier: gJXVW+hRAEPCUXrxyVpQliXP/ENtT/2Upi7yWdUcAj4= Subject key identifier: A5:C5:C8:42:4D:46:17:EE:E6:AB:FF:78:EB:6D:91:4C:9E:61:F5:A2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849D85FD57CFB3F4108449923C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21812b5d-b2b3-398c-afb7-221a71c32c32.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 396575 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:d5:7c:fb:3f:41:08:44:99:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=f302f140-9ab8-4901-b3bf-1822ed568483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:47:4c:f7:19:8d:1d:b8:e4:57:96:f7:bb:76: 6c:e9:d2:fb:00:eb:8e:f4:93:68:20:ea:6e:a1:c6: 43:d1:b5:19:c6:b0:38:85:30:a4:f1:17:85:ab:e7: 2b:71:dd:52:0e:a4:24:3d:6a:1c:66:23:f3:ee:5f: a4:45:69:2e:2b:67:9d:91:b8:70:0c:04:68:fa:0e: 4d:22:73:e2:15:19:20:7e:5a:24:4b:d9:ad:3f:96: d1:d7:45:73:03:1e:6e:65:f5:4d:50:b0:df:16:b2: e5:cc:d9:12:93:14:88:45:c0:5c:6d:1a:bf:86:fb: 5f:81:f8:d6:84:78:5d:07:fd:1d:a6:9c:54:12:ad: d3:db:34:9d:71:c3:29:b8:da:bc:47:88:a3:53:65: 49:8d:54:4f:b9:79:3e:a9:fa:8e:7f:3c:bc:97:5f: 26:8d:ff:99:58:0b:f2:b5:39:06:8c:dd:71:77:0d: 15:af:a8:53:21:33:e5:0b:d8:e2:86:d2:34:1d:c5: db:90:a5:f9:7d:5b:ca:9a:5e:fb:08:0a:f9:d5:42: 5f:bd:30:d8:2a:3c:7a:d5:3e:6d:09:13:1c:5e:73: f3:9d:df:41:c6:3a:7d:f6:e2:80:5f:b6:ac:45:dc: f7:0a:9d:a6:52:a5:88:28:30:c2:24:82:dc:ca:68: 6d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C5:C8:42:4D:46:17:EE:E6:AB:FF:78:EB:6D:91:4C:9E:61:F5:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21812b5d-b2b3-398c-afb7-221a71c32c32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:a4:80:f7:68:0c:ea:da:dd:2b:f5:de:b3:57:36:74:ac:20: df:bb:dc:3d:70:d3:3c:67:1e:3a:e8:43:6d:98:a6:63:ee:98: bb:13:9b:e3:48:45:76:11:52:ba:3e:4e:86:2a:c1:b4:c0:6b: 0e:12:a7:33:2a:8e:14:f8:4a:c3:b7:3c:3c:ca:fa:82:30:ed: cc:bf:fe:9f:ec:f1:6d:f9:43:0f:f4:07:1a:d6:d6:71:ce:c2: f4:ff:11:58:fe:29:28:3d:3a:e8:81:9c:56:d3:27:08:e3:10: a5:7b:af:5d:6a:7b:62:c7:fe:a0:d6:f6:46:c2:11:23:b6:6b: 77:bb:22:49:10:83:e5:8d:07:c2:08:86:3a:4e:2b:93:41:56: 66:e9:2e:c0:62:57:c5:ac:e3:cc:d6:5f:d8:71:32:b4:95:9b: d8:9a:de:3f:b4:06:ba:f1:62:cb:87:c0:d8:6b:4e:c5:be:09: 1a:f8:32:51:3d:8c:45:f3:79:44:ca:4e:5a:68:8a:d2:05:54: 21:30:37:72:0b:50:8c:75:2e:12:46:27:13:81:55:94:9b:90: 7c:4d:ab:64:75:f9:5a:14:76:1e:25:e2:9b:a6:a7:a9:e4:07: 77:a9:7e:55:f9:ba:ea:d8:a6:85:2d:d9:2b:83:14:01:02:7d: 93:08:8f:2c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnYX9V8+z9BCESZI8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZjMwMmYxNDAtOWFiOC00OTAxLWIzYmYtMTgyMmVkNTY4NDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskdM9xmNHbjkV5b3u3Zs6dL7AOuO9JNoIOpu ocZD0bUZxrA4hTCk8ReFq+crcd1SDqQkPWocZiPz7l+kRWkuK2edkbhwDARo+g5N InPiFRkgflokS9mtP5bR10VzAx5uZfVNULDfFrLlzNkSkxSIRcBcbRq/hvtfgfjW hHhdB/0dppxUEq3T2zSdccMpuNq8R4ijU2VJjVRPuXk+qfqOfzy8l18mjf+ZWAvy tTkGjN1xdw0Vr6hTITPlC9jihtI0HcXbkKX5fVvKml77CAr51UJfvTDYKjx61T5t CRMcXnPznd9Bxjp99uKAX7asRdz3Cp2mUqWIKDDCJILcymhtvwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKXFyEJNRhfu5qv/eOttkUyeYfWiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjE4MTJiNWQtYjJiMy0z OThjLWFmYjctMjIxYTcxYzMyYzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQARpID3aAzq2t0r9d6zVzZ0rCDfu9w9cNM8Zx46 6ENtmKZj7pi7E5vjSEV2EVK6Pk6GKsG0wGsOEqczKo4U+ErDtzw8yvqCMO3Mv/6f 7PFt+UMP9Aca1tZxzsL0/xFY/ikoPTrogZxW0ycI4xCle69dantix/6g1vZGwhEj tmt3uyJJEIPljQfCCIY6TiuTQVZm6S7AYlfFrOPM1l/YcTK0lZvYmt4/tAa68WLL h8DYa07Fvgka+DJRPYxF83lEyk5aaIrSBVQhMDdyC1CMdS4SRicTgVWUm5B8Tatk dflaFHYeJeKbpqep5Ad3qX5V+brq2KaFLdkrgxQBAn2TCI8s -----END CERTIFICATE-----Generated at Sat Jun 7 04:39:17 2025 by rpki-client