$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e37f4a8a-6317-3d39-a159-db8929ae21e3.roa File: e37f4a8a-6317-3d39-a159-db8929ae21e3.roa (raw, json) Hash identifier: gNboVoPWhq7IFXs3IUTD1iGsUWLMEZZfVzByOEW5G4c= Subject key identifier: A4:38:A8:61:B3:F2:6A:B5:B6:4A:3E:3B:0F:22:5F:3F:AD:04:2B:F5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849D85FD389AF44EEF3C9121650 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e37f4a8a-6317-3d39-a159-db8929ae21e3.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 396553 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:d3:89:af:44:ee:f3:c9:12:16:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=1c2d3360-a8a4-4c07-881b-ffdabf80988d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:79:d0:4a:0c:43:61:00:c4:41:63:64:66:ad: 93:3d:07:3d:0c:7d:5a:e3:58:78:5d:02:86:b8:e2: 80:e3:34:39:56:c6:45:a9:6f:7a:6a:23:b8:3d:91: d4:10:f0:52:79:54:7e:a9:36:6d:38:bf:f9:d5:d9: 8d:2b:72:e4:cf:0c:0d:e6:98:25:80:0f:4c:6d:4b: ed:2e:12:19:b4:31:a0:06:83:d0:b3:3b:29:85:79: df:53:43:b9:2d:5b:89:f2:21:a6:07:d5:04:d5:7b: 49:d8:0c:74:7a:c5:0b:9d:8c:81:8e:72:31:e7:f5: a0:ed:8e:11:f4:90:60:31:6d:95:01:b4:66:75:c2: 3b:d5:c6:7f:7b:73:82:06:1b:4c:d5:21:99:de:ce: de:89:df:bf:db:31:fc:82:b3:77:a5:a8:1d:dc:06: 83:ae:1a:f6:5a:0e:c1:cc:ea:bf:87:ed:de:61:28: 45:8b:d0:a7:6c:0c:4e:ea:11:a4:c8:76:a2:f9:e5: b4:b2:a7:68:df:9c:13:66:47:1b:cf:57:a1:3c:25: 7b:ab:bc:45:6a:c7:99:74:de:51:76:7d:23:4c:b4: bb:ce:08:50:2e:bb:f0:45:a0:b5:f8:95:4c:f6:0d: b2:cd:b9:05:83:f9:b4:41:5d:be:21:26:1d:98:5a: b3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:38:A8:61:B3:F2:6A:B5:B6:4A:3E:3B:0F:22:5F:3F:AD:04:2B:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e37f4a8a-6317-3d39-a159-db8929ae21e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:2d:f1:2b:a2:aa:31:6c:b4:f3:4c:1c:c0:36:bb:7a:b1:8c: 38:ae:8d:2c:2c:1f:36:12:32:f3:4f:51:6c:18:f7:9d:d8:f6: 2b:15:c4:29:3b:8c:63:63:f9:62:c7:87:12:e1:e3:03:54:e1: 96:77:71:31:08:ce:5d:81:7c:81:2a:d1:c9:70:c2:93:a3:61: 97:02:4f:ff:5b:38:00:2e:1a:e3:b2:85:77:58:26:ce:cb:b9: e9:63:1d:eb:d1:47:d6:f6:93:82:5e:a9:4d:11:00:01:28:2d: 7b:03:9e:b0:01:54:3b:23:aa:8d:df:1d:c2:59:aa:b9:5e:9a: 4c:32:f5:43:ff:a8:86:c2:2b:e7:06:0e:12:84:ca:69:5d:3c: 87:e8:7d:5b:19:a0:7e:a9:58:15:c0:b5:b7:9b:85:59:bc:e0: 50:6c:fd:5b:f2:7b:53:89:a4:c8:a4:5a:1f:1b:91:74:e0:b5: 67:e3:bb:0e:22:16:fe:59:03:21:1e:9b:59:29:b4:78:39:9a: 58:49:7f:36:bf:87:44:25:ba:a6:8a:82:bf:12:d8:07:d7:80: 7b:9b:5a:b3:f0:2a:04:15:06:9f:ae:d5:ac:56:40:0c:a4:56: 1e:46:a8:e2:d7:13:3d:5d:fa:3c:cc:dd:69:a8:c2:63:ed:7f: 28:0a:6c:b1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnYX9OJr0Tu88kSFlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MWMyZDMzNjAtYThhNC00YzA3LTg4MWItZmZkYWJmODA5ODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXnQSgxDYQDEQWNkZq2TPQc9DH1a41h4XQKG uOKA4zQ5VsZFqW96aiO4PZHUEPBSeVR+qTZtOL/51dmNK3LkzwwN5pglgA9MbUvt LhIZtDGgBoPQszsphXnfU0O5LVuJ8iGmB9UE1XtJ2Ax0esULnYyBjnIx5/Wg7Y4R 9JBgMW2VAbRmdcI71cZ/e3OCBhtM1SGZ3s7eid+/2zH8grN3pagd3AaDrhr2Wg7B zOq/h+3eYShFi9CnbAxO6hGkyHai+eW0sqdo35wTZkcbz1ehPCV7q7xFaseZdN5R dn0jTLS7zghQLrvwRaC1+JVM9g2yzbkFg/m0QV2+ISYdmFqzswIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKQ4qGGz8mq1tko+Ow8iXz+tBCv1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTM3ZjRhOGEtNjMxNy0z ZDM5LWExNTktZGI4OTI5YWUyMWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAxLfEroqoxbLTzTBzANrt6sYw4ro0sLB82EjLz T1FsGPed2PYrFcQpO4xjY/lix4cS4eMDVOGWd3ExCM5dgXyBKtHJcMKTo2GXAk// WzgALhrjsoV3WCbOy7npYx3r0UfW9pOCXqlNEQABKC17A56wAVQ7I6qN3x3CWaq5 XppMMvVD/6iGwivnBg4ShMppXTyH6H1bGaB+qVgVwLW3m4VZvOBQbP1b8ntTiaTI pFofG5F04LVn47sOIhb+WQMhHptZKbR4OZpYSX82v4dEJbqmioK/EtgH14B7m1qz 8CoEFQafrtWsVkAMpFYeRqji1xM9Xfo8zN1pqMJj7X8oCmyx -----END CERTIFICATE-----Generated at Fri Jun 6 19:13:14 2025 by rpki-client