$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d7c1377b-00fc-3169-8199-4213802e3b8f.roa File: d7c1377b-00fc-3169-8199-4213802e3b8f.roa (raw, json) Hash identifier: KP8hJWcNRVqTTpuxq0rmiZJNAEmjln77+feTsE3OQ4g= Subject key identifier: 22:B3:04:5D:DD:FC:C9:C5:CB:51:81:09:A1:4A:31:9F:E4:D1:70:ED Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849D85FD102F9733E0E1A461E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d7c1377b-00fc-3169-8199-4213802e3b8f.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 397211 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:d1:02:f9:73:3e:0e:1a:46:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=0df7c37a-24eb-4ae9-b802-46bbaa139fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e7:af:95:63:a6:01:ef:ce:c9:ff:ac:bb:25: f2:7e:46:46:69:32:f5:4d:79:f1:fd:49:48:30:4e: 54:65:db:74:75:da:67:f6:7e:0b:6e:de:1c:4a:12: 87:1d:41:db:20:b9:bd:41:76:7c:84:bd:c8:cd:b4: bd:a2:74:b9:4a:86:e2:c3:44:27:7d:ed:79:88:39: 6d:ad:98:a5:75:5c:bc:34:d1:95:e1:c7:cd:e6:d7: 33:c9:52:cc:c5:d5:57:9e:e5:dd:7e:00:64:c0:bc: 41:bc:4a:60:9f:15:e9:41:f5:4f:57:61:1d:80:e3: cc:67:73:40:00:91:a5:ea:d8:12:7f:2a:ff:30:d0: 47:26:cb:e5:a8:d1:68:68:cd:59:37:bd:1c:7f:df: 34:97:3e:06:a2:43:48:33:1e:5b:93:b4:63:60:bb: f7:3e:a4:b9:0a:bb:bf:41:97:b0:42:f5:af:d1:fd: 67:62:6c:af:ed:06:41:ee:15:e8:ba:bb:ea:2b:ec: 72:8e:30:30:33:0e:49:58:15:36:82:be:33:d6:8d: 82:0f:e3:93:50:d5:61:24:b8:40:2b:f5:90:ca:27: 57:5f:d7:49:10:17:0c:8b:93:56:9a:76:c7:cc:fb: 6a:3e:32:7f:dc:55:cc:51:d2:a2:11:a9:c4:64:83: 46:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B3:04:5D:DD:FC:C9:C5:CB:51:81:09:A1:4A:31:9F:E4:D1:70:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d7c1377b-00fc-3169-8199-4213802e3b8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:0e:8c:3d:21:46:83:46:6b:9a:94:7e:c5:0c:9a:24:5f:99: 1d:47:52:f4:7c:21:ee:96:37:d0:2c:e9:8c:46:9d:0a:69:9a: 0e:34:68:ad:8c:d8:01:5d:b6:be:24:6e:b0:72:54:83:44:44: 01:a2:8e:16:77:c2:7f:4e:da:7d:5d:a1:77:a1:cd:62:40:8b: 7c:9e:3f:94:26:67:13:bd:96:05:71:bb:0d:cb:dc:d9:61:69: a4:2c:b5:0a:48:64:0a:45:61:3e:dc:86:f3:9f:24:81:38:6a: 58:46:ef:33:de:b1:f2:10:23:45:36:ce:38:3b:65:d1:de:8a: a8:15:cf:d4:9e:54:0a:d9:6b:f8:8d:2b:c0:86:6b:22:5e:2a: 4c:f1:87:fe:ea:ba:3a:47:00:71:c6:f4:0a:28:b6:1a:d6:6d: 9b:70:15:95:38:f8:82:7c:b5:67:54:9c:b8:a5:68:5f:3b:12: 89:94:21:84:17:4a:dd:0c:8d:82:3b:01:09:3d:8a:47:28:5e: 0b:06:e2:99:19:ef:14:5e:b5:60:3b:62:73:25:ac:05:d3:bc: 37:ab:ea:75:8e:d4:32:eb:be:d3:47:b7:8d:da:de:4a:aa:45: 5a:1d:d4:30:ff:ba:09:c9:05:c1:2b:85:86:a9:44:07:7c:36: 01:3d:4d:3d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnYX9EC+XM+DhpGHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MGRmN2MzN2EtMjRlYi00YWU5LWI4MDItNDZiYmFhMTM5ZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOevlWOmAe/Oyf+suyXyfkZGaTL1TXnx/UlI ME5UZdt0ddpn9n4Lbt4cShKHHUHbILm9QXZ8hL3IzbS9onS5Sobiw0Qnfe15iDlt rZildVy8NNGV4cfN5tczyVLMxdVXnuXdfgBkwLxBvEpgnxXpQfVPV2EdgOPMZ3NA AJGl6tgSfyr/MNBHJsvlqNFoaM1ZN70cf980lz4GokNIMx5bk7RjYLv3PqS5Cru/ QZewQvWv0f1nYmyv7QZB7hXourvqK+xyjjAwMw5JWBU2gr4z1o2CD+OTUNVhJLhA K/WQyidXX9dJEBcMi5NWmnbHzPtqPjJ/3FXMUdKiEanEZINGQQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCKzBF3d/MnFy1GBCaFKMZ/k0XDtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDdjMTM3N2ItMDBmYy0z MTY5LTgxOTktNDIxMzgwMmUzYjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA+Dow9IUaDRmualH7FDJokX5kdR1L0fCHuljfQ LOmMRp0KaZoONGitjNgBXba+JG6wclSDREQBoo4Wd8J/Ttp9XaF3oc1iQIt8nj+U JmcTvZYFcbsNy9zZYWmkLLUKSGQKRWE+3IbznySBOGpYRu8z3rHyECNFNs44O2XR 3oqoFc/UnlQK2Wv4jSvAhmsiXipM8Yf+6ro6RwBxxvQKKLYa1m2bcBWVOPiCfLVn VJy4pWhfOxKJlCGEF0rdDI2COwEJPYpHKF4LBuKZGe8UXrVgO2JzJawF07w3q+p1 jtQy677TR7eN2t5KqkVaHdQw/7oJyQXBK4WGqUQHfDYBPU09 -----END CERTIFICATE-----Generated at Fri Jun 6 19:32:00 2025 by rpki-client