$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaef397a-8d41-3de4-a846-0161071f4f81.roa File: aaef397a-8d41-3de4-a846-0161071f4f81.roa (raw, json) Hash identifier: 02lgeLsmihZkN4kHpmekAqol4qPUw+mtP0e4Ug3lCos= Subject key identifier: 26:F1:8B:F1:AD:EB:10:17:EC:E5:7F:98:0E:37:B9:31:52:79:14:48 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A2A85158E2E5E1C4DB590 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaef397a-8d41-3de4-a846-0161071f4f81.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 397195 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:2a:85:15:8e:2e:5e:1c:4d:b5:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=2591556b-29f6-4c52-b83e-dbb83d3ce20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7a:90:80:c7:04:78:d9:fd:59:9e:7f:a2:fe: 93:8b:2e:3e:81:49:86:07:a1:2a:63:18:0c:73:64: 45:5c:77:fb:34:fa:d5:d7:c8:01:03:f2:c3:2b:0b: 2a:8d:17:eb:b6:79:e0:93:5e:09:3b:41:d7:c7:08: c8:81:b3:44:c0:91:40:44:d4:90:df:71:f1:34:f2: ab:38:9e:8b:ff:7d:ce:fb:cd:83:06:2e:0d:71:de: 63:42:73:2e:27:bd:88:b2:48:64:69:aa:1f:21:c1: 67:13:36:d6:27:fd:92:bc:cf:29:2a:50:69:ec:84: 3d:2b:c1:4d:32:1e:53:8b:37:5f:8b:a2:02:0a:cf: 61:d2:0e:b7:26:16:bf:d5:b5:d3:f3:9b:ad:c5:90: b7:fe:5e:c4:a2:93:a6:4e:76:ab:20:2d:be:44:21: c8:57:85:0a:8b:e6:6f:88:31:45:ea:10:41:1a:2f: e7:6a:66:8a:72:3a:ca:3a:08:73:15:10:78:f4:a1: ba:47:dd:03:77:21:d6:00:43:7b:83:d6:6b:1a:ad: a4:a2:a3:92:c1:87:a5:ad:c3:f0:0e:7c:fb:9e:0c: 80:4b:a4:bb:50:1b:3c:a9:b5:96:66:0b:75:dd:2a: e1:95:65:2c:40:d6:ff:36:e6:da:76:cd:1d:c0:a7: d7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F1:8B:F1:AD:EB:10:17:EC:E5:7F:98:0E:37:B9:31:52:79:14:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaef397a-8d41-3de4-a846-0161071f4f81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:28:c1:46:5f:32:aa:dd:ca:c7:cf:b9:fe:9f:eb:3b:d5:d8: 73:ed:08:fb:1e:8c:83:5e:5f:03:3d:f1:c6:8e:92:aa:21:fa: 36:42:63:94:76:46:d5:5e:70:c0:b8:62:e7:c0:78:c6:21:da: 51:78:e9:ac:a1:fa:ca:06:86:79:fd:37:28:bb:d3:56:0a:d6: 93:9d:7f:6c:9b:3b:d5:d4:b7:5c:f3:58:99:b2:8c:ae:11:72: 58:5d:93:71:68:df:87:99:b9:44:75:e4:7a:06:0c:23:b1:fc: 70:40:fc:ec:a1:69:10:f8:fa:e2:89:5f:9d:f1:d1:26:39:5e: a7:0e:f7:e8:b5:06:d3:4e:ff:c9:10:34:31:a1:80:0e:17:25: ca:07:9e:a8:78:aa:cd:65:5b:a6:15:76:76:4e:4a:e1:3f:d7: cc:7b:9f:02:8a:ba:ac:d4:83:f4:41:93:59:3b:27:8a:e2:6c: 0d:fd:5e:a7:03:7d:20:17:37:37:9d:2b:6f:2b:e5:32:26:26: 4c:3f:8e:01:8e:02:8d:ce:9e:17:c7:63:75:b8:8d:90:43:7b: bb:8f:dd:f5:45:50:db:69:b5:80:33:57:07:8d:9b:3a:18:ad: 97:6f:35:00:79:ab:84:e0:3f:e7:27:cf:24:2b:ad:d2:7e:d2: 8a:ab:f2:9f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSiqFFY4uXhxNtZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MjU5MTU1NmItMjlmNi00YzUyLWI4M2UtZGJiODNkM2NlMjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXqQgMcEeNn9WZ5/ov6Tiy4+gUmGB6EqYxgM c2RFXHf7NPrV18gBA/LDKwsqjRfrtnngk14JO0HXxwjIgbNEwJFARNSQ33HxNPKr OJ6L/33O+82DBi4Ncd5jQnMuJ72IskhkaaofIcFnEzbWJ/2SvM8pKlBp7IQ9K8FN Mh5Tizdfi6ICCs9h0g63Jha/1bXT85utxZC3/l7EopOmTnarIC2+RCHIV4UKi+Zv iDFF6hBBGi/namaKcjrKOghzFRB49KG6R90DdyHWAEN7g9ZrGq2koqOSwYelrcPw Dnz7ngyAS6S7UBs8qbWWZgt13SrhlWUsQNb/Nubads0dwKfXLwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCbxi/Gt6xAX7OV/mA43uTFSeRRIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWFlZjM5N2EtOGQ0MS0z ZGU0LWE4NDYtMDE2MTA3MWY0ZjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAfKMFGXzKq3crHz7n+n+s71dhz7Qj7HoyDXl8D PfHGjpKqIfo2QmOUdkbVXnDAuGLnwHjGIdpReOmsofrKBoZ5/Tcou9NWCtaTnX9s mzvV1Ldc81iZsoyuEXJYXZNxaN+HmblEdeR6BgwjsfxwQPzsoWkQ+PriiV+d8dEm OV6nDvfotQbTTv/JEDQxoYAOFyXKB56oeKrNZVumFXZ2TkrhP9fMe58Cirqs1IP0 QZNZOyeK4mwN/V6nA30gFzc3nStvK+UyJiZMP44BjgKNzp4Xx2N1uI2QQ3u7j931 RVDbabWAM1cHjZs6GK2XbzUAeauE4D/nJ88kK63SftKKq/Kf -----END CERTIFICATE-----Generated at Sat Jun 7 21:50:03 2025 by rpki-client