$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9bf4c20-84d9-3bce-9ba6-e7bed946cfd5.roa File: d9bf4c20-84d9-3bce-9ba6-e7bed946cfd5.roa (raw, json) Hash identifier: GoousJ8Nf6rh/yTK5UeLkQOFW/HbyLeKPI1V86uk44I= Subject key identifier: 9B:98:A9:C9:EA:25:3D:8B:8A:CF:B4:17:4B:20:C3:AE:1D:55:D9:13 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F87A99F3334BA7C9C9AB2000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9bf4c20-84d9-3bce-9ba6-e7bed946cfd5.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 25485 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:99:f3:33:4b:a7:c9:c9:ab:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=0321837e-793a-4de9-954b-57e8e22fcb5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cc:37:b1:95:42:3e:36:87:56:16:55:50:96: fe:75:ef:97:a9:af:78:75:9c:b2:27:c2:ab:41:cd: 9d:3c:dd:66:11:43:32:ee:75:06:4c:61:0e:61:87: 59:3e:d4:93:3c:14:3e:be:d5:25:ed:4d:96:5f:c5: a0:1f:55:ec:77:21:47:d6:e7:cf:a3:0a:f9:9b:da: 90:b8:1a:0f:65:fd:e7:0e:78:06:f0:bd:2e:82:1e: b2:b5:9e:57:5a:9e:47:cb:d8:dc:d0:7e:55:21:17: a8:3a:e6:e6:34:2c:7b:87:75:71:8c:93:20:74:0f: 0d:3a:3f:aa:cd:e1:61:89:d2:f6:46:3c:e2:a4:b6: c2:77:a4:b6:01:71:67:c6:11:09:d9:14:ab:f9:32: 1b:73:02:c0:22:da:1a:f7:f4:5c:f2:e8:03:de:96: 46:ba:4e:6e:61:b3:a3:f2:f8:59:33:e3:4d:60:0d: d7:22:dc:08:5c:63:48:b1:7d:de:37:84:bf:09:ae: d9:b5:20:bf:53:54:95:8c:09:67:15:df:37:a9:54: c4:a0:74:0a:4d:e7:90:da:4c:af:5d:18:f3:9f:2f: 40:19:3f:75:51:e4:6c:73:a3:9f:4e:6f:fc:69:0c: b1:f7:e1:12:b2:23:bf:06:2f:99:0e:31:4b:89:28: 5c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:98:A9:C9:EA:25:3D:8B:8A:CF:B4:17:4B:20:C3:AE:1D:55:D9:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d9bf4c20-84d9-3bce-9ba6-e7bed946cfd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:03:27:e3:5e:7f:c1:31:e2:13:c0:cf:a9:92:2c:7e:79:86: 87:f4:3a:f1:dd:57:59:2e:27:6b:b1:a9:92:a2:cc:4b:0b:66: 64:c9:6e:53:e7:90:53:ef:b3:03:ac:a8:54:d7:ba:af:ce:40: ba:44:29:4b:31:37:2b:78:77:50:42:90:9d:b0:31:ee:c2:16: 8d:1c:e5:5d:d5:5f:ba:ef:e1:82:40:1f:0a:b8:52:a5:40:97: 77:80:7d:76:7e:ea:e0:dd:18:f5:a1:19:8d:c4:70:02:63:08: 0e:e4:fb:63:7a:a9:f1:dc:33:cb:54:93:24:0d:47:40:90:09: 04:a9:f2:81:0c:8b:f9:9c:53:c4:7c:a9:25:16:b4:34:9f:96: c0:d9:6f:e3:5e:c6:51:03:c6:e2:4d:18:c8:11:ea:76:ad:fd: 83:75:3e:95:f5:da:f6:a8:bd:4b:95:1f:4e:6b:41:55:ee:24: a4:55:30:0f:10:bb:21:c6:59:49:e9:43:7e:42:be:dd:5c:7e: e2:72:5e:f9:0c:05:d3:4d:0b:6d:80:a8:0b:c6:7f:a9:84:7d: 2d:39:49:06:54:75:15:aa:6d:c8:c2:b3:e5:14:69:5b:bd:dd: 6a:93:a0:97:f8:33:91:1f:c0:34:9b:cb:92:17:c0:f2:90:0f: 90:40:ea:10 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn4epnzM0unycmrIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk MDMyMTgzN2UtNzkzYS00ZGU5LTk1NGItNTdlOGUyMmZjYjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8w3sZVCPjaHVhZVUJb+de+Xqa94dZyyJ8Kr Qc2dPN1mEUMy7nUGTGEOYYdZPtSTPBQ+vtUl7U2WX8WgH1XsdyFH1ufPowr5m9qQ uBoPZf3nDngG8L0ugh6ytZ5XWp5Hy9jc0H5VIReoOubmNCx7h3VxjJMgdA8NOj+q zeFhidL2RjzipLbCd6S2AXFnxhEJ2RSr+TIbcwLAItoa9/Rc8ugD3pZGuk5uYbOj 8vhZM+NNYA3XItwIXGNIsX3eN4S/Ca7ZtSC/U1SVjAlnFd83qVTEoHQKTeeQ2kyv XRjzny9AGT91UeRsc6OfTm/8aQyx9+ESsiO/Bi+ZDjFLiShcjQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJuYqcnqJT2Lis+0F0sgw64dVdkTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDliZjRjMjAtODRkOS0z YmNlLTliYTYtZTdiZWQ5NDZjZmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB9AyfjXn/BMeITwM+pkix+eYaH9Drx3VdZLidr samSosxLC2ZkyW5T55BT77MDrKhU17qvzkC6RClLMTcreHdQQpCdsDHuwhaNHOVd 1V+67+GCQB8KuFKlQJd3gH12furg3Rj1oRmNxHACYwgO5Ptjeqnx3DPLVJMkDUdA kAkEqfKBDIv5nFPEfKklFrQ0n5bA2W/jXsZRA8biTRjIEep2rf2DdT6V9dr2qL1L lR9Oa0FV7iSkVTAPELshxllJ6UN+Qr7dXH7icl75DAXTTQttgKgLxn+phH0tOUkG VHUVqm3IwrPlFGlbvd1qk6CX+DORH8A0m8uSF8DykA+QQOoQ -----END CERTIFICATE-----Generated at Sat Jun 7 04:02:36 2025 by rpki-client