$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c3022ed4-a782-3131-9722-f51d5206eaed.roa File: c3022ed4-a782-3131-9722-f51d5206eaed.roa (raw, json) Hash identifier: oVuHdl8xu3rGr2bf9cMENzHKK0GB1G651fgGEMKaYdM= Subject key identifier: 22:3D:12:FB:7C:AF:35:B2:1D:AD:FE:C7:AE:4E:D3:64:FF:F3:72:C1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849D85FD3B8E002382E58CBDB80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c3022ed4-a782-3131-9722-f51d5206eaed.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 396614 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:d3:b8:e0:02:38:2e:58:cb:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=ae1ffe6e-aca0-433d-be3c-53d0a247f29c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a3:2f:04:9c:44:fc:c6:05:8b:1b:c2:15:cb: c7:97:d5:51:72:60:46:ed:25:9a:fe:5e:dc:88:98: 69:80:da:1e:dc:36:58:53:d2:f3:7d:15:0b:11:7f: 09:2c:bd:ad:f6:19:d0:1a:0d:da:be:a7:f6:f0:8e: ba:21:84:4b:f0:d8:95:fa:23:37:6b:1c:78:c1:e7: 74:27:40:25:3f:99:b0:b9:cd:05:38:c4:02:ef:71: 88:7d:72:a5:88:06:19:99:3f:14:00:74:e3:6b:d4: 69:60:16:d8:5a:71:ad:21:56:be:e7:52:34:c1:6d: f7:46:d7:54:0b:4d:24:08:ca:16:b6:31:da:53:8a: 91:75:e7:d0:41:7c:f4:a1:db:c0:21:7e:32:88:32: e0:05:10:b2:ae:47:f6:b2:e4:63:cb:7a:24:a9:30: f1:5a:8a:e9:5b:92:23:d7:d6:44:58:65:a3:28:69: ab:5b:8d:69:bf:28:d9:6e:c2:93:ea:69:16:d4:9d: b0:c9:73:be:77:72:f6:56:58:00:22:35:0d:d7:d5: 90:b9:f2:26:d2:d7:99:c4:0b:c2:e7:93:80:11:97: aa:f8:49:3f:0f:5f:c4:35:15:75:7c:05:d9:d6:bc: 02:cd:f1:45:40:c7:00:89:6c:3c:91:c9:55:2c:b2: 4d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3D:12:FB:7C:AF:35:B2:1D:AD:FE:C7:AE:4E:D3:64:FF:F3:72:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c3022ed4-a782-3131-9722-f51d5206eaed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:41:32:2d:fa:4e:fa:f7:22:e4:35:96:59:70:ec:89:5f:14: 56:a7:1b:e7:67:d2:70:c5:b2:c4:bb:95:11:bf:84:94:f4:f4: bb:a3:71:62:bb:2e:56:99:d0:e4:aa:bd:ae:f4:d4:76:5a:ad: ca:f6:4d:ed:68:6a:89:a0:54:8c:d5:49:67:2f:4d:5e:85:7a: 0d:5b:03:e0:9f:51:67:10:e6:f5:76:9c:db:77:40:5a:1b:1e: 15:a0:cd:94:9e:4e:29:8a:19:76:b1:92:59:91:b5:c4:eb:38: c5:25:db:12:9c:86:e3:48:c3:03:da:5c:ad:d2:d2:7c:2e:4e: 23:d9:e8:1b:5b:e7:e5:6b:39:65:23:b0:e0:5c:f3:51:9a:e7: d7:45:25:0e:7c:e4:1d:e5:a2:c5:35:a8:53:57:89:c8:6f:e8: e4:29:15:60:14:e6:a6:e9:ca:0f:6e:7c:42:84:04:44:f9:9c: ff:12:26:3e:9f:95:4b:73:b4:4f:50:47:4a:8a:83:1c:e2:db: f3:a9:e6:3d:a6:33:91:d7:12:70:f5:f0:37:e0:91:e0:44:3b: 16:bd:e3:00:cd:b1:d6:ce:ea:42:99:7b:da:ff:4e:eb:1a:55: 81:5f:57:5a:bd:d7:40:60:72:d6:d6:99:83:c9:ed:6b:0d:0d: fc:55:79:05 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnYX9O44AI4LljL24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YWUxZmZlNmUtYWNhMC00MzNkLWJlM2MtNTNkMGEyNDdmMjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KMvBJxE/MYFixvCFcvHl9VRcmBG7SWa/l7c iJhpgNoe3DZYU9LzfRULEX8JLL2t9hnQGg3avqf28I66IYRL8NiV+iM3axx4wed0 J0AlP5mwuc0FOMQC73GIfXKliAYZmT8UAHTja9RpYBbYWnGtIVa+51I0wW33RtdU C00kCMoWtjHaU4qRdefQQXz0odvAIX4yiDLgBRCyrkf2suRjy3okqTDxWorpW5Ij 19ZEWGWjKGmrW41pvyjZbsKT6mkW1J2wyXO+d3L2VlgAIjUN19WQufIm0teZxAvC 55OAEZeq+Ek/D1/ENRV1fAXZ1rwCzfFFQMcAiWw8kclVLLJN/wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCI9Evt8rzWyHa3+x65O02T/83LBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzMwMjJlZDQtYTc4Mi0z MTMxLTk3MjItZjUxZDUyMDZlYWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA5QTIt+k769yLkNZZZcOyJXxRWpxvnZ9JwxbLE u5URv4SU9PS7o3Fiuy5WmdDkqr2u9NR2Wq3K9k3taGqJoFSM1UlnL01ehXoNWwPg n1FnEOb1dpzbd0BaGx4VoM2Unk4pihl2sZJZkbXE6zjFJdsSnIbjSMMD2lyt0tJ8 Lk4j2egbW+flazllI7DgXPNRmufXRSUOfOQd5aLFNahTV4nIb+jkKRVgFOam6coP bnxChARE+Zz/EiY+n5VLc7RPUEdKioMc4tvzqeY9pjOR1xJw9fA34JHgRDsWveMA zbHWzupCmXva/07rGlWBX1davddAYHLW1pmDye1rDQ38VXkF -----END CERTIFICATE-----Generated at Fri Jun 6 19:34:43 2025 by rpki-client