$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5fb789be-4f34-3587-9bb1-b19d60821d31.roa File: 5fb789be-4f34-3587-9bb1-b19d60821d31.roa (raw, json) Hash identifier: eX+45Vaq3Vkgmm9rb3fBbybC47FfuciqkGJjoO5ToDY= Subject key identifier: 31:7E:F1:49:80:8F:25:F8:68:2A:7F:AB:50:EB:18:F3:FB:82:8E:D8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849D85FD27169B9998C1D6627E4 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5fb789be-4f34-3587-9bb1-b19d60821d31.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 396567 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:d2:71:69:b9:99:8c:1d:66:27:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=d40c457d-7b8b-4e9e-8a55-2a47c94825d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:64:f9:a2:9e:02:3b:be:b0:4d:c7:af:ff:83: c6:1c:9f:e1:d0:e0:44:23:fa:b3:4a:76:c2:42:ce: 45:1a:ed:b7:87:3b:dc:d6:8d:24:89:41:35:3a:ae: 88:0f:54:90:97:f3:62:fd:09:e7:b3:01:ad:6f:90: 53:98:09:f4:89:7d:01:cc:73:ac:05:d5:bc:a8:04: 37:27:c8:10:41:c6:16:8e:e2:52:38:ab:a9:b7:bd: 3e:7f:b1:0d:a7:6c:c3:cf:b3:83:a1:5a:5f:cb:81: 05:a0:41:3a:ba:a7:38:f8:46:75:c4:b3:58:3b:0e: c0:1a:ee:34:83:6d:19:b1:30:06:bd:23:6c:00:d3: 6e:d0:79:e0:ed:c4:9a:db:aa:10:8e:19:2a:2f:f0: 90:9f:18:5c:d5:e7:b5:6a:63:01:29:36:1b:17:ac: fc:9e:d8:17:db:ae:01:f2:e9:4c:6b:f8:6b:33:8c: 13:c3:75:9c:f6:00:66:09:e9:50:b5:ea:10:b5:74: 64:b9:39:12:9e:29:ac:da:a9:f5:be:c7:8e:71:4d: eb:09:e0:e2:1f:d3:cd:e5:43:b7:04:f2:d4:1a:47: 57:60:57:8e:96:37:bc:34:8b:ae:4b:c4:d7:e3:ca: 4a:87:1e:c8:f0:e7:de:61:20:9d:6b:01:5f:56:9d: f4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:7E:F1:49:80:8F:25:F8:68:2A:7F:AB:50:EB:18:F3:FB:82:8E:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5fb789be-4f34-3587-9bb1-b19d60821d31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:e2:bc:ef:2e:e8:4e:88:26:d2:8e:17:65:62:7a:de:80:65: a6:9d:e9:e9:a8:03:9a:a3:86:f7:98:29:c2:94:41:80:6b:d3: 06:65:03:83:6d:64:37:bc:4e:b3:b6:45:6a:4c:d7:10:f6:70: 49:d6:5e:26:95:04:a9:4c:5c:ad:27:18:c9:0d:e4:96:9b:85: 23:1f:97:7a:e8:98:eb:27:8b:05:b0:16:6e:6f:aa:ad:82:83: 67:83:28:1e:76:8b:86:ed:50:70:14:c1:a5:3b:de:66:33:0e: e7:ba:ad:9b:e9:6a:55:5b:38:34:c5:f8:e0:11:3d:e2:6c:0f: d3:3c:69:bb:47:81:b7:57:20:75:16:d2:19:4b:df:be:d4:7c: 99:37:7b:83:fb:3b:9b:9f:eb:82:d0:d8:dd:75:39:28:36:42: 14:1c:a8:d3:16:d3:6e:97:b2:4d:f6:5e:83:e4:ae:38:0b:68: 3e:a6:fb:8e:63:a4:8c:51:9f:3c:a4:e9:36:c7:6b:f3:ef:31: 6e:18:eb:7a:8c:bf:84:f8:38:12:de:83:b6:c7:e6:33:80:5d: 01:cf:72:2e:77:35:23:88:be:51:f0:e9:55:bd:41:1b:5e:6f: 9e:31:e5:07:3e:66:81:e5:fe:62:a9:51:a3:a5:d4:9a:aa:6b: 6d:ed:28:34 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnYX9JxabmZjB1mJ+QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZDQwYzQ1N2QtN2I4Yi00ZTllLThhNTUtMmE0N2M5NDgyNWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGT5op4CO76wTcev/4PGHJ/h0OBEI/qzSnbC Qs5FGu23hzvc1o0kiUE1Oq6ID1SQl/Ni/QnnswGtb5BTmAn0iX0BzHOsBdW8qAQ3 J8gQQcYWjuJSOKupt70+f7ENp2zDz7ODoVpfy4EFoEE6uqc4+EZ1xLNYOw7AGu40 g20ZsTAGvSNsANNu0Hng7cSa26oQjhkqL/CQnxhc1ee1amMBKTYbF6z8ntgX264B 8ulMa/hrM4wTw3Wc9gBmCelQteoQtXRkuTkSnims2qn1vseOcU3rCeDiH9PN5UO3 BPLUGkdXYFeOlje8NIuuS8TX48pKhx7I8OfeYSCdawFfVp30xQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDF+8UmAjyX4aCp/q1DrGPP7go7YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWZiNzg5YmUtNGYzNC0z NTg3LTliYjEtYjE5ZDYwODIxZDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCL4rzvLuhOiCbSjhdlYnregGWmnenpqAOao4b3 mCnClEGAa9MGZQODbWQ3vE6ztkVqTNcQ9nBJ1l4mlQSpTFytJxjJDeSWm4UjH5d6 6JjrJ4sFsBZub6qtgoNngygedouG7VBwFMGlO95mMw7nuq2b6WpVWzg0xfjgET3i bA/TPGm7R4G3VyB1FtIZS9++1HyZN3uD+zubn+uC0NjddTkoNkIUHKjTFtNul7JN 9l6D5K44C2g+pvuOY6SMUZ88pOk2x2vz7zFuGOt6jL+E+DgS3oO2x+YzgF0Bz3Iu dzUjiL5R8OlVvUEbXm+eMeUHPmaB5f5iqVGjpdSaqmtt7Sg0 -----END CERTIFICATE-----Generated at Sun Jun 8 22:38:25 2025 by rpki-client