$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/69cf3d78-143e-383d-b961-07f42c2e0a44.roa File: 69cf3d78-143e-383d-b961-07f42c2e0a44.roa (raw, json) Hash identifier: lYT+ibAJm+IhJyHtFGAKGUCFZ1Ej8nTqj/xN3H8Y3hY= Subject key identifier: 04:81:58:F3:C2:A1:D4:6C:60:17:57:FE:10:54:0E:92:EC:C7:D0:91 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A335552CC0C6903A03140 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/69cf3d78-143e-383d-b961-07f42c2e0a44.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396611 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:33:55:52:cc:0c:69:03:a0:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=0d9e064d-3688-4057-a071-5f8fc51caec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fd:88:55:dc:07:2a:ae:bf:e6:9c:03:ff:e0: 85:8d:eb:a2:19:50:2f:3c:5d:e2:fc:e2:54:db:1b: 47:25:8c:1f:5e:ee:91:4a:81:4f:9f:8a:f3:89:1c: e6:b2:f7:5c:db:e3:87:ea:93:b6:33:54:40:bc:f6: 86:f4:63:24:32:26:9b:bf:b3:93:42:2e:4c:f9:64: 39:00:0e:91:df:b1:d1:8c:23:c7:f0:ab:db:13:18: 59:df:06:bf:e3:92:08:54:dc:79:89:9f:7f:78:dc: 7e:63:40:b3:b7:5c:24:9e:99:b5:f8:56:0e:78:0f: 90:57:d9:87:67:42:93:14:eb:06:82:cd:b4:d4:19: eb:bf:68:b7:0e:d7:a5:01:ec:15:2a:e2:63:28:55: a9:ab:34:a3:6e:9f:86:bd:80:af:be:70:79:61:db: 1e:f0:82:06:73:0d:ad:bb:d2:f6:80:75:61:92:65: 6a:e6:5e:c4:13:28:78:cb:57:a2:20:75:c9:83:71: ca:66:a9:8d:2f:96:69:97:b6:1f:ac:41:e3:ca:ce: ca:11:1e:84:42:b5:ed:29:af:c9:a7:78:9b:9f:01: 8e:8e:5f:2c:20:8a:d1:21:ec:dd:f6:48:89:9e:d4: 1d:86:cf:63:d3:83:73:c3:c3:b3:88:26:87:ab:8b: 82:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:81:58:F3:C2:A1:D4:6C:60:17:57:FE:10:54:0E:92:EC:C7:D0:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/69cf3d78-143e-383d-b961-07f42c2e0a44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:8f:04:3d:fa:3e:82:f9:e2:10:c3:a5:18:8a:0b:8f:b6:ed: 7a:e6:be:7b:69:64:3a:a8:93:e1:58:59:98:23:36:c9:14:a1: 5f:09:7a:c8:26:6f:35:bb:f8:f9:4b:c3:50:07:32:ef:65:b2: 33:e8:1c:ce:d1:87:93:53:2a:80:42:52:99:e8:a4:e4:e8:88: 5e:81:30:50:4e:b3:44:20:26:3b:cb:97:b7:e1:80:09:0a:92: 54:40:77:b0:00:ac:c9:0d:9b:4f:7e:4d:38:1e:4e:ea:4e:bd: 59:a4:a8:1a:5f:b0:18:d0:50:10:eb:9b:aa:62:81:a1:73:0a: 3f:d4:59:74:96:6b:87:6c:c5:a6:ca:12:5e:b4:87:05:07:46: 7b:d6:9e:02:91:b2:ee:72:db:a2:a3:58:c5:1a:34:91:da:56: e6:1c:ae:17:75:0f:ba:73:02:f5:c6:48:40:14:ba:78:89:90: 18:93:19:e7:f1:86:ab:83:bf:2c:71:10:de:29:6e:59:d8:c7: da:8b:6a:05:09:58:5e:8a:ee:9b:6e:88:6a:f4:b7:56:a7:69: 05:48:6d:49:94:6e:10:69:13:57:76:79:09:1e:ed:dc:3c:dc: 83:7e:10:0c:d4:42:72:d2:0a:5a:a2:7f:c4:9d:87:5d:a9:17: 14:5a:81:76 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSjNVUswMaQOgMUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MGQ5ZTA2NGQtMzY4OC00MDU3LWEwNzEtNWY4ZmM1MWNhZWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf2IVdwHKq6/5pwD/+CFjeuiGVAvPF3i/OJU 2xtHJYwfXu6RSoFPn4rziRzmsvdc2+OH6pO2M1RAvPaG9GMkMiabv7OTQi5M+WQ5 AA6R37HRjCPH8KvbExhZ3wa/45IIVNx5iZ9/eNx+Y0Czt1wknpm1+FYOeA+QV9mH Z0KTFOsGgs201Bnrv2i3DtelAewVKuJjKFWpqzSjbp+GvYCvvnB5Ydse8IIGcw2t u9L2gHVhkmVq5l7EEyh4y1eiIHXJg3HKZqmNL5Zpl7YfrEHjys7KER6EQrXtKa/J p3ibnwGOjl8sIIrRIezd9kiJntQdhs9j04Nzw8OziCaHq4uCcQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFASBWPPCodRsYBdX/hBUDpLsx9CRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjljZjNkNzgtMTQzZS0z ODNkLWI5NjEtMDdmNDJjMmUwYTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAajwQ9+j6C+eIQw6UYiguPtu165r57aWQ6qJPh WFmYIzbJFKFfCXrIJm81u/j5S8NQBzLvZbIz6BzO0YeTUyqAQlKZ6KTk6IhegTBQ TrNEICY7y5e34YAJCpJUQHewAKzJDZtPfk04Hk7qTr1ZpKgaX7AY0FAQ65uqYoGh cwo/1Fl0lmuHbMWmyhJetIcFB0Z71p4CkbLuctuio1jFGjSR2lbmHK4XdQ+6cwL1 xkhAFLp4iZAYkxnn8Yarg78scRDeKW5Z2Mfai2oFCVheiu6bbohq9LdWp2kFSG1J lG4QaRNXdnkJHu3cPNyDfhAM1EJy0gpaon/EnYddqRcUWoF2 -----END CERTIFICATE-----Generated at Sat Jun 7 11:53:34 2025 by rpki-client