$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ab73f9d-44f7-3713-aada-20aa6abfe251.roa File: 3ab73f9d-44f7-3713-aada-20aa6abfe251.roa (raw, json) Hash identifier: yauazRpvs2VjVFwSNYD2eAVxOKPa2PFL/w+gyNaTw0Q= Subject key identifier: C9:39:1E:39:58:31:AF:E4:8D:18:C6:90:4E:25:EE:93:CF:30:37:A9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849D85FD08C3B3A8B9730C4D542 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ab73f9d-44f7-3713-aada-20aa6abfe251.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 397205 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:d0:8c:3b:3a:8b:97:30:c4:d5:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=e48098f9-4f98-4866-bfcf-e982a3e4bbd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:22:a4:4a:f4:c3:e3:b7:88:c6:dd:28:66:ad: da:ad:a9:09:49:61:a1:81:d9:69:b6:e3:0e:5a:82: 63:89:63:08:a9:68:3b:7f:41:0d:ac:39:cd:09:c4: 48:d6:0a:ae:37:92:17:79:7b:a1:2a:6a:0f:21:db: 64:b7:e7:0c:5b:a6:56:01:b0:b5:35:83:cc:35:93: c9:af:d0:13:8d:f5:9c:01:ee:d2:d3:4c:76:c1:c0: 00:5b:7d:59:80:87:89:1e:22:e0:72:72:c0:41:1e: a4:f2:aa:5b:67:7d:6d:8e:37:10:ce:3f:67:13:d3: b7:75:d4:0d:f2:9c:1f:78:20:23:b1:85:9b:ae:1e: 20:f5:e1:89:90:bf:c4:cb:cd:e5:ad:17:63:18:9f: 65:2d:44:ec:12:0d:10:0f:df:df:d8:3c:36:5f:c7: 6b:c2:29:6c:b6:7d:7a:9f:f3:05:4c:82:97:0f:b6: c0:79:fb:6e:79:fa:ae:6d:fe:17:6c:fd:fb:18:0a: 6f:e1:d2:05:49:6e:0f:76:3d:6c:51:25:7c:6e:73: 9a:23:ae:56:a3:b6:1b:88:c4:51:b0:73:3f:fc:c5: 35:b7:fe:71:3f:d7:65:42:88:c0:2c:29:3a:fb:9f: 0c:ff:d9:7a:1d:4a:d8:48:71:68:e4:41:c3:11:d6: fa:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:39:1E:39:58:31:AF:E4:8D:18:C6:90:4E:25:EE:93:CF:30:37:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ab73f9d-44f7-3713-aada-20aa6abfe251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:92:40:3c:70:5e:9a:d4:78:f9:0d:2a:52:8c:3c:57:7d:63: 4d:f5:c6:86:d6:83:16:2a:88:94:26:99:88:17:be:20:86:dc: eb:9e:4c:71:5c:8c:10:f2:50:70:c2:f3:af:23:5d:30:5d:17: ae:20:4e:f7:5b:c9:c2:fb:6e:ff:94:29:91:cc:86:09:85:bf: b1:f6:e5:90:ba:89:14:f2:34:5c:ec:be:70:b1:f2:db:d3:b2: c2:be:32:03:a5:fb:36:05:cb:16:c8:f1:70:68:72:ef:a8:c7: 5c:8d:3c:e9:95:07:04:dc:4c:fc:31:51:c3:12:95:78:21:e1: bc:a7:3d:b7:6a:07:53:56:e9:7d:f9:a0:2e:fe:51:9e:b2:aa: 56:e2:91:90:38:1a:c3:eb:80:8b:3a:cd:d2:19:92:08:3c:79: 66:24:be:a7:6d:be:23:93:2e:25:09:62:f0:e3:28:8c:8b:ec: 23:54:42:27:d5:f8:56:15:e6:13:9c:eb:b3:cc:6d:74:dd:83: 10:75:22:e2:43:77:06:e9:f5:c6:b0:df:7d:08:2d:a2:1e:0f: ba:1f:23:69:97:79:20:5c:7d:89:bd:5e:fb:87:6c:5d:90:cb: 25:9a:ec:61:d7:a8:2c:82:b2:f8:9b:98:0c:bc:a6:39:cf:93: bc:50:fa:af -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnYX9CMOzqLlzDE1UIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZTQ4MDk4ZjktNGY5OC00ODY2LWJmY2YtZTk4MmEzZTRiYmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryKkSvTD47eIxt0oZq3arakJSWGhgdlptuMO WoJjiWMIqWg7f0ENrDnNCcRI1gquN5IXeXuhKmoPIdtkt+cMW6ZWAbC1NYPMNZPJ r9ATjfWcAe7S00x2wcAAW31ZgIeJHiLgcnLAQR6k8qpbZ31tjjcQzj9nE9O3ddQN 8pwfeCAjsYWbrh4g9eGJkL/Ey83lrRdjGJ9lLUTsEg0QD9/f2Dw2X8drwilstn16 n/MFTIKXD7bAeftuefqubf4XbP37GApv4dIFSW4Pdj1sUSV8bnOaI65Wo7YbiMRR sHM//MU1t/5xP9dlQojALCk6+58M/9l6HUrYSHFo5EHDEdb6EwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMk5HjlYMa/kjRjGkE4l7pPPMDepMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2FiNzNmOWQtNDRmNy0z NzEzLWFhZGEtMjBhYTZhYmZlMjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAOkkA8cF6a1Hj5DSpSjDxXfWNN9caG1oMWKoiU JpmIF74ghtzrnkxxXIwQ8lBwwvOvI10wXReuIE73W8nC+27/lCmRzIYJhb+x9uWQ uokU8jRc7L5wsfLb07LCvjIDpfs2BcsWyPFwaHLvqMdcjTzplQcE3Ez8MVHDEpV4 IeG8pz23agdTVul9+aAu/lGesqpW4pGQOBrD64CLOs3SGZIIPHlmJL6nbb4jky4l CWLw4yiMi+wjVEIn1fhWFeYTnOuzzG103YMQdSLiQ3cG6fXGsN99CC2iHg+6HyNp l3kgXH2JvV77h2xdkMslmuxh16gsgrL4m5gMvKY5z5O8UPqv -----END CERTIFICATE-----Generated at Sat Jun 7 04:25:30 2025 by rpki-client