$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e374fd7a-6ea3-3e5c-9b8f-b7035a1a13b0.roa File: e374fd7a-6ea3-3e5c-9b8f-b7035a1a13b0.roa (raw, json) Hash identifier: DErvbAb80HfVVK7o4MRdpqvM2Mx5/3ZbJXvN/MNv0cs= Subject key identifier: A1:7C:52:A2:A0:A2:B6:C7:9F:2E:1C:DE:16:AC:89:10:A4:D6:A5:E6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849D85FD4431A1395466EC94800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e374fd7a-6ea3-3e5c-9b8f-b7035a1a13b0.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 396563 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:d4:43:1a:13:95:46:6e:c9:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=96aa942a-0753-4b10-b624-c94626e757f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:57:f8:6c:85:64:7d:78:df:58:1d:40:76:b0: 68:9b:83:81:74:da:fc:47:a4:44:d2:62:e9:9d:8a: 6f:28:e1:85:84:ad:7f:1b:2f:a0:6b:19:39:86:1f: 11:db:b4:31:3b:bb:1d:3e:81:47:f0:61:8e:05:c7: 11:60:5a:c1:d2:2f:aa:e3:14:a7:cf:f5:63:2a:ec: ef:f5:f9:18:cd:04:97:e7:5e:0e:09:12:1b:41:c3: 33:3e:df:4c:cd:62:e2:93:31:99:c3:aa:23:d7:05: 85:fb:0b:ec:c0:47:ed:0f:dc:b3:f1:05:74:07:fb: 80:fe:d9:fc:27:a5:7a:20:83:5e:49:f9:aa:2c:4f: 86:6b:ef:e1:0e:e4:9a:c4:a3:14:6f:32:cf:09:fb: 39:77:b1:8d:af:94:e6:26:26:16:35:ca:79:77:b6: c5:e5:13:65:8c:f2:2a:e1:57:dd:a6:47:c0:b8:2a: 18:e0:2c:c1:bd:43:f9:34:75:c6:5a:ad:f7:79:29: ad:57:12:b1:95:b1:72:ae:00:8a:fe:9a:03:2f:0b: fe:f2:f0:de:6d:2d:a4:ad:1e:38:45:6d:17:10:2f: 51:5c:9c:a6:cb:c9:d8:82:29:b4:d3:58:69:69:c7: 06:c9:00:d0:f8:60:04:1c:a3:24:c9:0d:a0:9d:8b: 57:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7C:52:A2:A0:A2:B6:C7:9F:2E:1C:DE:16:AC:89:10:A4:D6:A5:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e374fd7a-6ea3-3e5c-9b8f-b7035a1a13b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:bf:98:eb:f0:87:1a:58:b0:4d:64:14:e2:0e:28:18:45:64: af:72:49:85:ea:67:72:ef:de:72:1f:f9:0b:3f:2e:d4:4a:dd: e5:d3:e4:57:d2:45:3d:7c:74:b4:2a:33:62:8b:f9:9e:ef:bf: bb:2a:58:90:48:be:ba:24:27:9d:cb:f5:25:83:45:7e:89:a1: c4:61:9f:1a:4e:ec:23:44:43:40:00:1a:d3:80:18:47:56:33: b7:7c:f3:42:2a:fd:5e:60:1d:c1:a7:3a:22:4d:b5:f0:32:fe: fa:b2:d3:01:b9:10:e2:60:f8:17:ec:83:9f:c5:14:61:3e:ab: 11:b5:93:5b:bb:15:14:fa:dc:3f:ab:b3:84:ff:43:db:b8:57: 45:46:40:ef:19:ec:ae:c5:84:62:1f:f1:64:23:93:36:a9:ad: c8:b1:af:1a:c1:63:78:05:f0:9d:5c:6f:fb:59:8c:8b:60:2b: 4c:68:30:29:dc:b2:e7:81:6b:ac:5f:44:78:6e:30:c4:10:a6: cf:4e:e3:2d:2a:b3:86:a8:6e:f0:63:81:27:4b:0f:00:b9:8f: 54:76:af:84:ae:9d:af:08:67:76:cc:2c:24:43:ee:5a:4a:3c: 48:3a:4c:06:56:af:67:5b:3f:c8:c9:ba:bc:19:75:81:f8:50: 57:1c:30:2c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnYX9RDGhOVRm7JSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk OTZhYTk0MmEtMDc1My00YjEwLWI2MjQtYzk0NjI2ZTc1N2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplf4bIVkfXjfWB1AdrBom4OBdNr8R6RE0mLp nYpvKOGFhK1/Gy+gaxk5hh8R27QxO7sdPoFH8GGOBccRYFrB0i+q4xSnz/VjKuzv 9fkYzQSX514OCRIbQcMzPt9MzWLikzGZw6oj1wWF+wvswEftD9yz8QV0B/uA/tn8 J6V6IINeSfmqLE+Ga+/hDuSaxKMUbzLPCfs5d7GNr5TmJiYWNcp5d7bF5RNljPIq 4VfdpkfAuCoY4CzBvUP5NHXGWq33eSmtVxKxlbFyrgCK/poDLwv+8vDebS2krR44 RW0XEC9RXJymy8nYgim001hpaccGyQDQ+GAEHKMkyQ2gnYtX7QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKF8UqKgorbHny4c3hasiRCk1qXmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTM3NGZkN2EtNmVhMy0z ZTVjLTliOGYtYjcwMzVhMWExM2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAWv5jr8IcaWLBNZBTiDigYRWSvckmF6mdy795y H/kLPy7USt3l0+RX0kU9fHS0KjNii/me77+7KliQSL66JCedy/Ulg0V+iaHEYZ8a TuwjRENAABrTgBhHVjO3fPNCKv1eYB3BpzoiTbXwMv76stMBuRDiYPgX7IOfxRRh PqsRtZNbuxUU+tw/q7OE/0PbuFdFRkDvGeyuxYRiH/FkI5M2qa3Isa8awWN4BfCd XG/7WYyLYCtMaDAp3LLngWusX0R4bjDEEKbPTuMtKrOGqG7wY4EnSw8AuY9Udq+E rp2vCGd2zCwkQ+5aSjxIOkwGVq9nWz/Iybq8GXWB+FBXHDAs -----END CERTIFICATE-----Generated at Sat Jun 7 04:00:10 2025 by rpki-client