$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2c0d3e83-586c-32a7-ac14-023feb06fb7c.roa File: 2c0d3e83-586c-32a7-ac14-023feb06fb7c.roa (raw, json) Hash identifier: MJ40Tk37vO1+nuhFXwy7EjXxrKsaURWFtWiZK9cum7E= Subject key identifier: 8F:DC:3F:30:7B:C0:CF:3E:D6:F3:02:40:E9:19:4C:5B:D3:CE:B5:B3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A2D52D7112F27E29E6880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2c0d3e83-586c-32a7-ac14-023feb06fb7c.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 36621 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:2d:52:d7:11:2f:27:e2:9e:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=321b0b92-13cc-4ee8-9a39-ce1aed046eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fd:6c:0b:13:47:cf:8b:3c:7a:39:ce:0e:ac: 40:6a:d9:e3:14:ee:64:c1:5b:c4:1a:ef:d4:ae:5c: 95:db:0b:97:ea:ce:25:a2:19:df:a1:d2:0c:63:4f: ec:5f:f9:6d:52:19:f8:fe:c0:22:3c:3b:16:d9:cd: 6e:6e:0b:5c:30:8a:9f:52:f6:7e:79:e0:b6:24:f0: 15:d1:0c:12:ac:a1:fe:05:6d:3d:89:69:e1:21:72: de:dc:6a:f7:22:d7:1e:0e:5b:69:6d:fa:5b:6b:67: 39:06:59:70:c3:e8:12:70:0a:15:05:73:08:d8:14: 64:fc:0a:05:8e:45:0b:56:a0:28:83:29:f8:11:f3: 3e:f7:fc:97:db:6b:0a:00:82:9a:71:f5:11:1d:34: 12:78:55:ee:8a:89:cf:20:95:c0:ef:49:88:91:17: 90:4a:29:6f:40:09:25:36:7e:3b:e0:fe:98:69:7e: de:5e:0a:2c:08:c2:2f:16:ad:0a:6b:85:73:3a:72: 2e:94:cc:59:00:24:ff:98:78:7a:77:d6:83:2a:44: e9:80:a1:0c:58:14:f0:e4:07:5f:9f:69:dd:c5:70: 57:5e:e7:0a:ea:e2:1d:40:db:ac:30:46:52:44:1f: 1e:ee:ed:3b:17:b7:e2:db:bb:2f:5c:98:de:b0:ef: fd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DC:3F:30:7B:C0:CF:3E:D6:F3:02:40:E9:19:4C:5B:D3:CE:B5:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2c0d3e83-586c-32a7-ac14-023feb06fb7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:73:0e:ff:ca:cd:83:14:37:bd:f6:85:f2:3c:91:ac:64:4f: d2:54:4b:f0:2e:59:ef:56:90:bb:28:4a:25:27:b1:b7:a4:72: 11:b1:c1:f6:7c:59:70:ee:94:87:e5:06:fc:74:56:0c:77:2f: 36:fc:ac:21:75:27:b3:af:ba:ce:c1:76:5e:f3:26:10:ea:c9: 4b:01:e4:18:75:d2:15:d9:85:e4:67:d4:1b:19:aa:24:f8:4d: d8:28:d7:81:06:cd:8b:54:fb:b4:b1:79:86:7a:c6:b1:ef:b8: e6:6f:b5:dc:8b:a1:64:5a:c6:01:c9:fa:14:13:db:c7:c5:49: ba:18:5c:85:1a:e8:53:28:ec:4c:1d:d9:b5:8d:20:20:4f:43: f0:31:78:5a:b9:93:d9:14:66:63:c4:6c:0b:96:de:27:a2:5d: 4b:a7:59:e8:35:26:60:4a:02:70:db:5b:87:d3:f6:03:91:41: 97:6d:5d:39:3f:b2:73:06:ae:ac:ef:3d:ce:ee:d5:d0:e5:7e: 1d:e3:41:a3:ac:ed:9e:4e:fa:bd:bc:a3:61:ce:8a:d2:d2:4f: 27:50:1f:5f:e3:8f:5b:1b:36:57:88:1f:69:2f:0d:6b:20:6e: 61:b5:95:5f:ce:95:63:3a:b0:70:7f:e6:e2:12:be:c2:fa:91: 0c:a5:ed:5a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSi1S1xEvJ+KeaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MzIxYjBiOTItMTNjYy00ZWU4LTlhMzktY2UxYWVkMDQ2ZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf1sCxNHz4s8ejnODqxAatnjFO5kwVvEGu/U rlyV2wuX6s4lohnfodIMY0/sX/ltUhn4/sAiPDsW2c1ubgtcMIqfUvZ+eeC2JPAV 0QwSrKH+BW09iWnhIXLe3Gr3ItceDltpbfpba2c5Bllww+gScAoVBXMI2BRk/AoF jkULVqAogyn4EfM+9/yX22sKAIKacfURHTQSeFXuionPIJXA70mIkReQSilvQAkl Nn474P6YaX7eXgosCMIvFq0Ka4VzOnIulMxZACT/mHh6d9aDKkTpgKEMWBTw5Adf n2ndxXBXXucK6uIdQNusMEZSRB8e7u07F7fi27svXJjesO/99QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFI/cPzB7wM8+1vMCQOkZTFvTzrWzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmMwZDNlODMtNTg2Yy0z MmE3LWFjMTQtMDIzZmViMDZmYjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBYcw7/ys2DFDe99oXyPJGsZE/SVEvwLlnvVpC7 KEolJ7G3pHIRscH2fFlw7pSH5Qb8dFYMdy82/KwhdSezr7rOwXZe8yYQ6slLAeQY ddIV2YXkZ9QbGaok+E3YKNeBBs2LVPu0sXmGesax77jmb7Xci6FkWsYByfoUE9vH xUm6GFyFGuhTKOxMHdm1jSAgT0PwMXhauZPZFGZjxGwLlt4nol1Lp1noNSZgSgJw 21uH0/YDkUGXbV05P7JzBq6s7z3O7tXQ5X4d40GjrO2eTvq9vKNhzorS0k8nUB9f 449bGzZXiB9pLw1rIG5htZVfzpVjOrBwf+biEr7C+pEMpe1a -----END CERTIFICATE-----Generated at Sat Jun 7 04:17:38 2025 by rpki-client