$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8872c050-fc1f-3e5a-bf08-fa22ecdba438.roa File: 8872c050-fc1f-3e5a-bf08-fa22ecdba438.roa (raw, json) Hash identifier: vrSF/MaOiVOkme3yU1XvlSgwO9hDP4jdAvA1yoZkTWg= Subject key identifier: 52:05:78:AE:7C:D2:8D:0A:69:70:43:F2:96:AC:70:C1:B2:70:7B:29 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4D20F0CF38A603EA00448 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8872c050-fc1f-3e5a-bf08-fa22ecdba438.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 396610 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:d2:0f:0c:f3:8a:60:3e:a0:04:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=03e0e824-dbf3-4dff-9773-744c381400d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:55:d9:ac:1c:37:79:42:77:05:c6:d0:84:ce: 81:b6:4b:7f:c9:34:b3:ee:26:87:ae:2b:0b:6e:b1: 1d:4f:a8:70:c4:85:43:e6:d6:a8:cc:4b:49:d2:7c: e1:c1:1b:29:8c:13:cf:42:4d:58:8a:50:76:20:5a: a9:29:13:89:01:85:48:4e:08:cf:db:85:b7:af:4d: f3:91:45:a6:af:94:8d:df:f9:e5:67:d7:7c:77:92: 3b:92:fd:34:8c:ea:4f:d0:c0:63:ea:ce:5b:4c:b7: 59:09:d1:7f:de:00:3b:0d:fb:58:79:bf:20:84:77: 68:98:a9:d9:da:cd:0c:78:a7:e1:c9:96:0b:c8:3e: 3c:f5:44:71:8e:2c:7b:5c:5a:21:c1:38:d1:8b:ac: 07:cf:8e:05:9b:6e:58:48:6d:0c:74:4a:13:69:06: f3:5d:0b:16:4a:c6:ab:41:fc:2e:c5:d6:ae:2e:b6: 6b:12:cf:68:c6:02:c5:69:35:fb:75:10:7b:0a:1c: 7c:9f:88:cf:cb:32:aa:e9:43:dc:17:1d:76:ec:d8: d2:a9:81:92:84:ca:43:f4:c7:81:e5:5d:6a:e6:75: 13:9e:7b:78:ef:38:cd:a1:5d:a5:8e:4d:e4:ee:96: bb:07:98:4f:73:9d:87:d1:fc:e5:2d:b0:5b:d3:41: 48:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:05:78:AE:7C:D2:8D:0A:69:70:43:F2:96:AC:70:C1:B2:70:7B:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8872c050-fc1f-3e5a-bf08-fa22ecdba438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:b3:bb:56:61:ed:61:7f:75:61:9e:6d:cd:9b:b3:1a:71:75: 77:e0:07:d4:cc:bf:5d:1c:56:92:b3:51:6d:a7:0d:dc:3f:81: c0:54:36:bc:70:90:9f:eb:f9:c5:c5:03:30:e0:55:6c:13:e4: eb:3a:c4:e1:e2:8a:9c:eb:ac:0b:a7:49:53:d8:0e:10:1d:23: 09:ef:17:6c:dc:e5:8f:6a:97:ed:ef:12:7e:0d:ab:0b:a8:11: f9:93:7e:c0:ea:52:57:a5:25:ba:ac:71:97:51:53:ba:6d:9f: 2f:a0:58:d1:86:2d:ea:15:f4:61:ca:0c:a4:ba:33:bd:6b:0e: dd:a5:cb:6d:c9:c1:bd:87:32:1c:0e:91:13:52:1a:33:52:ea: d3:4a:9c:d1:ba:30:60:b8:45:ef:2f:3e:56:74:01:b7:d7:71: b7:74:b8:57:86:17:df:6e:f7:e0:cb:2d:6e:f7:1f:df:7e:28: 24:bb:0e:c2:0c:ba:b1:df:27:ab:d3:13:36:2b:6a:30:b8:fc: 1e:8d:ae:57:9b:e0:bf:85:35:1d:63:16:97:6d:64:9e:7e:b5: a2:38:22:5c:37:93:5d:74:b0:39:53:26:5b:e7:83:15:5e:f2: dd:ed:54:10:07:ec:0a:0a:f6:e4:a7:bc:77:40:94:54:c3:5b: 42:d1:0b:f0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1NIPDPOKYD6gBEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk MDNlMGU4MjQtZGJmMy00ZGZmLTk3NzMtNzQ0YzM4MTQwMGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlXZrBw3eUJ3BcbQhM6Btkt/yTSz7iaHrisL brEdT6hwxIVD5taozEtJ0nzhwRspjBPPQk1YilB2IFqpKROJAYVITgjP24W3r03z kUWmr5SN3/nlZ9d8d5I7kv00jOpP0MBj6s5bTLdZCdF/3gA7DftYeb8ghHdomKnZ 2s0MeKfhyZYLyD489URxjix7XFohwTjRi6wHz44Fm25YSG0MdEoTaQbzXQsWSsar QfwuxdauLrZrEs9oxgLFaTX7dRB7Chx8n4jPyzKq6UPcFx127NjSqYGShMpD9MeB 5V1q5nUTnnt47zjNoV2ljk3k7pa7B5hPc52H0fzlLbBb00FI9wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFIFeK580o0KaXBD8pascMGycHspMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODg3MmMwNTAtZmMxZi0z ZTVhLWJmMDgtZmEyMmVjZGJhNDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAis7tWYe1hf3Vhnm3Nm7MacXV34AfUzL9dHFaS s1Ftpw3cP4HAVDa8cJCf6/nFxQMw4FVsE+TrOsTh4oqc66wLp0lT2A4QHSMJ7xds 3OWPapft7xJ+DasLqBH5k37A6lJXpSW6rHGXUVO6bZ8voFjRhi3qFfRhygykujO9 aw7dpcttycG9hzIcDpETUhozUurTSpzRujBguEXvLz5WdAG313G3dLhXhhffbvfg yy1u9x/ffigkuw7CDLqx3yer0xM2K2owuPweja5Xm+C/hTUdYxaXbWSefrWiOCJc N5NddLA5UyZb54MVXvLd7VQQB+wKCvbkp7x3QJRUw1tC0Qvw -----END CERTIFICATE-----Generated at Sat Jun 7 04:27:02 2025 by rpki-client