$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/acdeccd5-6ce1-34c0-9177-dfb5d06e9ba8.roa File: acdeccd5-6ce1-34c0-9177-dfb5d06e9ba8.roa (raw, json) Hash identifier: wqwt3kNRfYHsCcq0hMbBkSB0A4d5ZW+KlFBRZVJ5+nk= Subject key identifier: AB:DF:1C:1D:37:6E:FE:47:0F:ED:3E:5E:50:E5:83:D8:21:BF:48:FD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F87A98E05546C9A800CFBA00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/acdeccd5-6ce1-34c0-9177-dfb5d06e9ba8.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 397199 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:98:e0:55:46:c9:a8:00:cf:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=649b92dd-7fe9-424a-a90e-7afc3086dac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2c:2b:7a:e5:6c:99:8f:06:d8:86:69:13:b0: 7d:9a:cb:32:e1:81:09:e2:6f:3a:47:5b:d1:07:81: 4e:4d:8d:bc:0c:4c:77:22:81:e6:95:b3:30:4c:07: b3:28:ea:67:a0:49:65:d3:1c:7c:f2:fa:1b:01:3d: c5:57:90:21:a4:d0:bb:c6:d2:a8:6e:1b:40:64:6e: 1b:e6:ba:a5:d9:c0:c3:00:ad:69:3c:8b:8c:45:8a: 23:8e:ef:f6:c2:f9:75:83:df:02:19:a1:65:85:b4: f5:44:97:c8:66:08:7c:b5:2c:29:00:82:93:a4:0d: 39:17:89:bd:be:e8:80:04:d6:65:f6:a1:38:32:3d: ea:35:2a:f5:22:9e:da:06:cc:69:d0:f1:ff:92:97: 28:94:94:21:7d:f3:ce:0e:0f:c6:85:5b:26:01:dc: 85:9e:a4:f2:73:36:6f:9c:bd:71:7f:b9:0a:d9:f6: c6:d2:d5:71:cb:96:22:d5:cc:7e:d4:5e:8e:17:4f: 1b:27:fe:ff:65:a4:89:83:22:07:24:2b:de:07:9e: 82:f6:7e:99:99:0e:a2:67:31:46:b5:83:7d:e0:f0: 23:83:85:fe:e0:7d:49:22:5e:8e:5d:1b:05:1c:82: f2:95:32:73:ac:b8:6b:d7:92:a9:d2:4f:02:ee:c8: 21:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:DF:1C:1D:37:6E:FE:47:0F:ED:3E:5E:50:E5:83:D8:21:BF:48:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/acdeccd5-6ce1-34c0-9177-dfb5d06e9ba8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:0c:ac:c1:a6:74:d0:f8:d7:3b:0e:30:fb:10:4f:d6:f4:92: a8:74:f2:90:56:3a:92:92:69:ae:6e:c0:0a:cb:5a:3c:4d:bf: 50:9b:60:a4:c3:d4:23:55:69:fe:91:16:59:25:3e:11:03:4e: 7d:19:52:07:53:42:19:b7:06:aa:d6:d8:0d:e6:62:ad:07:7d: 93:e6:4a:72:c9:2a:b7:a5:4f:19:3d:66:fe:d2:70:5e:a0:c3: 89:24:b9:87:85:7c:ba:59:9a:03:00:7f:50:61:81:2f:4c:23: 09:e5:96:1e:83:fd:45:8f:a0:48:0e:a8:73:db:28:33:95:9d: fe:14:bf:c3:b0:51:a1:6f:7e:57:ea:a9:a9:a3:89:f6:eb:09: c9:a6:3b:cd:08:df:76:83:e2:54:2e:f5:bb:a9:6d:95:20:d9: dc:63:a5:e4:a4:33:74:2e:60:5c:3f:eb:1b:49:8e:69:27:7d: 9e:fe:b2:31:89:7f:42:a8:a7:46:b5:38:f3:f3:cb:ee:18:93: d6:76:80:01:51:57:98:39:99:d9:ba:a4:43:0f:05:5c:94:7c: 85:a1:69:36:40:50:48:23:f9:d7:05:56:49:d1:a2:6a:56:e0: 39:9e:c4:ba:95:e5:31:5c:aa:95:fd:78:c8:80:83:d6:48:bd: f3:36:7e:7e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn4epjgVUbJqADPugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk NjQ5YjkyZGQtN2ZlOS00MjRhLWE5MGUtN2FmYzMwODZkYWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiywreuVsmY8G2IZpE7B9mssy4YEJ4m86R1vR B4FOTY28DEx3IoHmlbMwTAezKOpnoEll0xx88vobAT3FV5AhpNC7xtKobhtAZG4b 5rql2cDDAK1pPIuMRYojju/2wvl1g98CGaFlhbT1RJfIZgh8tSwpAIKTpA05F4m9 vuiABNZl9qE4Mj3qNSr1Ip7aBsxp0PH/kpcolJQhffPODg/GhVsmAdyFnqTyczZv nL1xf7kK2fbG0tVxy5Yi1cx+1F6OF08bJ/7/ZaSJgyIHJCveB56C9n6ZmQ6iZzFG tYN94PAjg4X+4H1JIl6OXRsFHILylTJzrLhr15Kp0k8C7sghUQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKvfHB03bv5HD+0+XlDlg9ghv0j9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWNkZWNjZDUtNmNlMS0z NGMwLTkxNzctZGZiNWQwNmU5YmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAvDKzBpnTQ+Nc7DjD7EE/W9JKodPKQVjqSkmmu bsAKy1o8Tb9Qm2Ckw9QjVWn+kRZZJT4RA059GVIHU0IZtwaq1tgN5mKtB32T5kpy ySq3pU8ZPWb+0nBeoMOJJLmHhXy6WZoDAH9QYYEvTCMJ5ZYeg/1Fj6BIDqhz2ygz lZ3+FL/DsFGhb35X6qmpo4n26wnJpjvNCN92g+JULvW7qW2VINncY6XkpDN0LmBc P+sbSY5pJ32e/rIxiX9CqKdGtTjz88vuGJPWdoABUVeYOZnZuqRDDwVclHyFoWk2 QFBII/nXBVZJ0aJqVuA5nsS6leUxXKqV/XjIgIPWSL3zNn5+ -----END CERTIFICATE-----Generated at Sat Jun 7 04:05:57 2025 by rpki-client