$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c0a8a47e-5fee-3b96-bca8-72cb3594ca04.roa File: c0a8a47e-5fee-3b96-bca8-72cb3594ca04.roa (raw, json) Hash identifier: CsbRkMTScBIHaJHMApfFEApljw2gZQBbXSqcFNDikP0= Subject key identifier: DC:40:AB:73:B7:CC:93:A4:3D:FA:E0:44:0B:55:E7:EF:16:A4:D6:4D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849D85FD400F7FA05872D6B8740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c0a8a47e-5fee-3b96-bca8-72cb3594ca04.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 396555 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:d4:00:f7:fa:05:87:2d:6b:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=1916c281-cfc0-4942-a9cb-88f4ecf34999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a8:2a:3f:aa:ed:41:3e:48:6e:f5:34:da:d5: 8b:f1:ee:01:c5:5b:a3:a3:2c:16:2b:96:50:a7:ac: 1f:3e:ea:23:7c:47:b3:bc:2b:54:3e:d5:21:c9:34: 37:77:8c:86:ac:4d:87:3f:60:a3:94:8b:ee:49:68: 26:50:54:8f:4c:fd:be:19:bb:ce:c3:9c:9e:1e:8d: 5d:3b:00:c3:74:35:7e:fc:ff:58:51:34:c9:3d:63: 09:16:e0:5f:a5:55:1e:42:1b:5e:5d:8f:6f:26:58: 6a:85:58:59:1e:0a:39:2a:0b:20:1a:c4:78:87:51: 88:53:74:e1:40:af:e1:47:5c:36:d8:ec:88:cb:17: db:6e:de:7e:cf:09:77:0d:21:dc:ff:16:5c:20:b1: a8:26:e2:a4:af:04:f7:56:57:18:e9:05:6c:3d:cf: 99:f2:33:77:b4:7f:7c:90:b5:c8:0c:3a:86:2c:b6: 9e:63:ae:ed:53:44:e2:a3:56:6f:81:f4:2b:15:ef: bf:0b:bd:ca:e0:11:0d:8b:e8:a6:55:f8:73:26:11: d8:42:c2:4e:0f:83:62:bc:34:84:5d:fb:7a:ea:cf: 52:cb:54:46:9b:ac:da:ae:b1:a4:98:15:c0:c6:15: e9:d3:76:eb:2e:04:33:9d:25:c1:4d:c0:39:2e:a6: f1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:40:AB:73:B7:CC:93:A4:3D:FA:E0:44:0B:55:E7:EF:16:A4:D6:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c0a8a47e-5fee-3b96-bca8-72cb3594ca04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:db:41:96:67:2f:7d:3a:2b:3b:f6:90:51:fe:3f:d1:23:6e: 8e:7a:b5:40:fa:f2:48:1a:b1:38:dc:3c:0c:c5:8c:3a:85:26: 02:23:74:1b:ba:ba:02:37:9c:a0:bb:3d:30:d5:d8:8d:b0:e7: 67:21:ac:86:36:42:24:ec:16:74:30:94:56:dc:a7:b5:98:4a: ef:9d:3a:94:c5:c9:79:6c:bd:9b:be:61:e6:d3:83:57:e4:e9: 4c:34:1c:43:e3:71:e8:08:d2:1a:bf:c8:66:81:3d:69:d7:a6: 0a:ef:b2:4f:d2:12:b0:ee:3a:77:03:7f:d5:da:9d:91:ce:e7: c9:91:84:89:73:83:97:b9:75:76:53:01:9b:c9:00:1e:7d:eb: 5b:9a:4e:56:66:cf:cb:a7:1f:33:ca:28:fe:89:e2:d1:f4:d2: d5:40:cd:a2:bb:67:a2:17:db:6d:db:7c:48:e3:5a:65:df:a8: 23:a4:8a:db:8c:c9:d0:bd:74:28:b0:93:93:4c:66:be:65:db: b7:d3:60:56:56:24:57:c3:50:e5:0f:b0:e9:f8:1e:1d:3d:65: f1:3d:58:7b:78:c0:92:c8:9d:69:52:c6:af:95:7c:e3:ae:c4: d7:9d:8a:21:9e:2c:a6:d6:2d:b3:b6:83:3e:b5:f8:c8:6c:ea: d0:db:15:26 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnYX9QA9/oFhy1rh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MTkxNmMyODEtY2ZjMC00OTQyLWE5Y2ItODhmNGVjZjM0OTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKgqP6rtQT5IbvU02tWL8e4BxVujoywWK5ZQ p6wfPuojfEezvCtUPtUhyTQ3d4yGrE2HP2CjlIvuSWgmUFSPTP2+GbvOw5yeHo1d OwDDdDV+/P9YUTTJPWMJFuBfpVUeQhteXY9vJlhqhVhZHgo5KgsgGsR4h1GIU3Th QK/hR1w22OyIyxfbbt5+zwl3DSHc/xZcILGoJuKkrwT3VlcY6QVsPc+Z8jN3tH98 kLXIDDqGLLaeY67tU0Tio1ZvgfQrFe+/C73K4BENi+imVfhzJhHYQsJOD4NivDSE Xft66s9Sy1RGm6zarrGkmBXAxhXp03brLgQznSXBTcA5LqbxswIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNxAq3O3zJOkPfrgRAtV5+8WpNZNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzBhOGE0N2UtNWZlZS0z Yjk2LWJjYTgtNzJjYjM1OTRjYTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA220GWZy99Ois79pBR/j/RI26OerVA+vJIGrE4 3DwMxYw6hSYCI3QburoCN5yguz0w1diNsOdnIayGNkIk7BZ0MJRW3Ke1mErvnTqU xcl5bL2bvmHm04NX5OlMNBxD43HoCNIav8hmgT1p16YK77JP0hKw7jp3A3/V2p2R zufJkYSJc4OXuXV2UwGbyQAefetbmk5WZs/Lpx8zyij+ieLR9NLVQM2iu2eiF9tt 23xI41pl36gjpIrbjMnQvXQosJOTTGa+Zdu302BWViRXw1DlD7Dp+B4dPWXxPVh7 eMCSyJ1pUsavlXzjrsTXnYohniym1i2ztoM+tfjIbOrQ2xUm -----END CERTIFICATE-----Generated at Sat Jun 7 04:07:42 2025 by rpki-client