$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c486464a-f459-32ee-a0d6-d0d10aab083e.roa File: c486464a-f459-32ee-a0d6-d0d10aab083e.roa (raw, json) Hash identifier: 45bSt47wqMFwfkN8lhdejJEsVj41L378ibJc0f11CDw= Subject key identifier: 77:AF:AC:AC:D7:27:F6:C2:02:F8:87:C4:37:45:FE:EF:E3:F7:8B:48 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A2D173D86007EC1447A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c486464a-f459-32ee-a0d6-d0d10aab083e.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396541 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:2d:17:3d:86:00:7e:c1:44:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=1d936d36-2bb9-4d1c-88f0-dbd44b723156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:23:25:cb:94:c1:c5:89:5d:a7:29:39:27:7a: 5c:20:49:df:2f:51:78:97:bb:69:1d:a5:79:f1:51: 38:e9:c7:63:e0:92:38:fb:90:ca:87:a8:c8:ab:ad: 97:c9:e2:5f:75:d1:ea:5e:2b:83:36:68:cd:f8:30: f6:65:b4:b4:0c:80:83:54:dc:30:38:d9:1f:24:cb: 9a:3c:c8:94:91:96:1e:68:df:1f:48:9d:ff:67:cf: e9:52:5f:64:16:fc:86:07:9c:ae:7c:c6:01:b4:9a: 0c:b3:06:7c:ce:81:10:9c:55:cb:99:20:f3:b1:38: eb:6a:d4:23:45:19:7d:b2:74:0a:0b:69:25:2d:77: 2f:42:6c:e2:0d:d6:54:b8:2b:a8:15:81:81:2c:f9: 84:8e:b7:b9:22:22:d6:53:65:cb:e4:d2:a3:73:00: e9:16:9f:e3:f2:a3:bb:39:c2:df:5b:c2:f7:7a:8a: db:d1:c0:cb:4d:b0:78:58:87:84:cd:fa:5e:9f:20: ca:4d:2c:47:31:b9:3d:57:84:bd:dd:49:ae:cd:08: 92:be:ed:f2:33:dd:c2:56:6b:5b:eb:86:d1:50:ef: c7:00:51:6e:4f:1c:e4:5a:62:17:56:98:e0:83:62: 29:da:30:80:cc:e8:89:69:d1:39:e4:ab:3f:4b:36: 9e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AF:AC:AC:D7:27:F6:C2:02:F8:87:C4:37:45:FE:EF:E3:F7:8B:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c486464a-f459-32ee-a0d6-d0d10aab083e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:8a:75:cf:a6:77:22:76:c5:29:74:51:31:6a:9a:52:74:d9: 01:3c:07:83:c0:02:26:c8:e4:0d:b0:dc:50:88:61:d9:6d:20: 23:81:78:92:ed:59:b5:9a:ff:4c:a0:3a:6c:3a:3c:0f:ab:2f: f0:b4:6f:21:5d:5c:cb:99:d3:0f:5c:51:99:19:8d:89:f7:5a: b0:ca:53:7b:2c:d3:b7:eb:6e:2f:9e:ca:84:72:fd:e9:8a:bb: 18:5d:a9:ed:f2:85:a6:87:26:a9:72:e6:c3:a2:25:d5:7d:56: 85:55:b3:70:62:dc:9d:a8:55:6d:ca:d8:f9:d8:99:33:05:d8: c9:11:fb:83:52:05:66:70:36:96:90:60:84:3b:fd:98:34:43: 1a:ad:54:5a:f5:16:a3:13:0e:5b:53:97:f5:ad:da:e4:8a:fe: ce:b6:31:1d:53:1a:9d:6a:7b:bf:3d:22:16:d6:34:b6:a3:10: 71:b3:09:5b:44:3c:d8:a9:45:d9:72:f4:0c:87:3f:4a:79:23: 33:a2:74:5c:17:91:12:53:84:9e:a9:08:b0:d8:89:1f:c4:ca: 88:8d:21:b2:63:33:30:80:a7:86:e6:0c:10:84:a9:32:c4:bd: f7:7c:ca:ad:eb:cf:c0:2f:3f:7a:65:4f:5c:a1:73:eb:ee:15: 40:16:c0:0a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSi0XPYYAfsFEegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MWQ5MzZkMzYtMmJiOS00ZDFjLTg4ZjAtZGJkNDRiNzIzMTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyMly5TBxYldpyk5J3pcIEnfL1F4l7tpHaV5 8VE46cdj4JI4+5DKh6jIq62XyeJfddHqXiuDNmjN+DD2ZbS0DICDVNwwONkfJMua PMiUkZYeaN8fSJ3/Z8/pUl9kFvyGB5yufMYBtJoMswZ8zoEQnFXLmSDzsTjratQj RRl9snQKC2klLXcvQmziDdZUuCuoFYGBLPmEjre5IiLWU2XL5NKjcwDpFp/j8qO7 OcLfW8L3eorb0cDLTbB4WIeEzfpenyDKTSxHMbk9V4S93UmuzQiSvu3yM93CVmtb 64bRUO/HAFFuTxzkWmIXVpjgg2Ip2jCAzOiJadE55Ks/SzaeTwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHevrKzXJ/bCAviHxDdF/u/j94tIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzQ4NjQ2NGEtZjQ1OS0z MmVlLWEwZDYtZDBkMTBhYWIwODNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBBinXPpncidsUpdFExappSdNkBPAeDwAImyOQN sNxQiGHZbSAjgXiS7Vm1mv9MoDpsOjwPqy/wtG8hXVzLmdMPXFGZGY2J91qwylN7 LNO3624vnsqEcv3pirsYXant8oWmhyapcubDoiXVfVaFVbNwYtydqFVtytj52Jkz BdjJEfuDUgVmcDaWkGCEO/2YNEMarVRa9RajEw5bU5f1rdrkiv7OtjEdUxqdanu/ PSIW1jS2oxBxswlbRDzYqUXZcvQMhz9KeSMzonRcF5ESU4SeqQiw2IkfxMqIjSGy YzMwgKeG5gwQhKkyxL33fMqt68/ALz96ZU9coXPr7hVAFsAK -----END CERTIFICATE-----Generated at Sat Jun 7 04:17:38 2025 by rpki-client