$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e43ef988-8eaf-303f-8f5b-c762e2f12e32.roa File: e43ef988-8eaf-303f-8f5b-c762e2f12e32.roa (raw, json) Hash identifier: MME5PtQ7zCG54eGsRrkupPgoj9rP5bJ4HHFkwwgqDuk= Subject key identifier: 42:19:CB:9F:3B:D7:63:BB:A3:FE:B0:56:33:8B:CE:EA:36:55:34:27 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849D85FD3A106511DD0054AAE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e43ef988-8eaf-303f-8f5b-c762e2f12e32.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 36627 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:d3:a1:06:51:1d:d0:05:4a:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=7672290c-a454-4a97-8670-690c0523ed0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1c:36:c1:42:46:3a:d8:88:44:2a:ea:7c:f1: 33:00:42:de:c4:8e:87:e8:a1:3a:f7:03:55:1c:89: 94:9d:07:47:3a:cb:29:58:b9:bd:86:23:0a:9f:0d: 4b:b3:ae:d9:bc:28:20:11:df:7e:04:ea:7f:d5:4f: 9d:bb:4c:e9:92:96:2f:33:33:e6:93:35:38:35:2b: fd:17:11:dc:29:6c:ff:7a:89:26:6f:dc:b2:3f:88: 8a:fc:4a:3e:4c:ac:14:e6:73:8b:c2:52:83:77:63: 50:a2:20:0c:ab:81:fb:0b:cf:22:7f:06:e7:50:a1: 48:f7:15:ff:30:ae:3d:c6:2b:0b:6e:8d:5e:a8:74: 0b:85:34:0c:ed:fd:32:6a:07:d5:28:ff:44:29:af: 3c:24:48:13:04:43:b6:4a:f2:58:bc:a2:2c:49:f1: 9c:c9:d4:f8:b5:85:5d:db:27:b7:a5:c9:b9:d4:02: eb:68:87:a1:d9:7f:a2:28:8c:81:77:42:78:df:92: 71:4e:e8:80:ea:38:37:85:82:3f:5b:cc:55:a8:b8: 97:a2:74:e9:b2:96:f8:6a:14:59:d6:75:8d:a7:05: 1b:03:aa:3e:14:e0:82:a6:aa:0a:82:a8:aa:88:ef: 97:9a:6c:7b:e3:f1:db:27:fb:91:05:e7:37:72:cf: b4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:19:CB:9F:3B:D7:63:BB:A3:FE:B0:56:33:8B:CE:EA:36:55:34:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e43ef988-8eaf-303f-8f5b-c762e2f12e32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:78:d4:16:47:8b:b5:81:4d:40:9d:15:de:60:d9:fe:6e:d1: 21:61:bd:17:b5:b8:5e:bb:8d:cf:35:17:a5:78:0d:c8:bd:7a: cb:12:98:bd:e4:74:5a:8c:fe:d3:6d:31:10:8e:70:83:c4:0a: a9:58:e0:0f:9a:db:90:94:5c:d7:fa:56:39:49:e4:8d:bf:f0: fe:92:1f:3e:31:7e:52:bd:84:76:5f:19:89:62:27:e6:6b:94: 05:ad:e6:1a:22:83:17:5f:d3:78:be:e0:5b:21:93:67:11:c4: c1:95:2c:a5:39:5a:52:a8:67:04:8f:bf:eb:3c:50:cf:ae:c9: ec:7b:8a:76:5c:d3:f8:63:b9:83:24:d7:38:06:88:4c:04:6b: 44:61:0e:a9:2c:18:81:60:5d:d3:06:10:15:5e:6d:79:e3:2f: f3:2a:8c:20:12:5b:de:28:19:3f:3d:f6:d2:f8:ba:15:4c:1a: 27:a7:6b:34:d1:f2:65:a9:57:47:af:36:ee:cd:4e:e7:31:0d: d7:ec:33:6d:ce:db:1c:69:49:e0:87:27:f9:29:f8:47:aa:35: 98:28:f9:0f:d5:2a:0f:5a:80:67:61:90:31:25:78:3c:e4:76: 0b:20:10:2c:1f:c6:b6:1e:f3:6c:1f:20:86:1c:4b:a5:bf:e2: 63:19:ff:71 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnYX9OhBlEd0AVKroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NzY3MjI5MGMtYTQ1NC00YTk3LTg2NzAtNjkwYzA1MjNlZDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hw2wUJGOtiIRCrqfPEzAELexI6H6KE69wNV HImUnQdHOsspWLm9hiMKnw1Ls67ZvCggEd9+BOp/1U+du0zpkpYvMzPmkzU4NSv9 FxHcKWz/eokmb9yyP4iK/Eo+TKwU5nOLwlKDd2NQoiAMq4H7C88ifwbnUKFI9xX/ MK49xisLbo1eqHQLhTQM7f0yagfVKP9EKa88JEgTBEO2SvJYvKIsSfGcydT4tYVd 2ye3pcm51ALraIeh2X+iKIyBd0J435JxTuiA6jg3hYI/W8xVqLiXonTpspb4ahRZ 1nWNpwUbA6o+FOCCpqoKgqiqiO+Xmmx74/HbJ/uRBec3cs+07QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEIZy58712O7o/6wVjOLzuo2VTQnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTQzZWY5ODgtOGVhZi0z MDNmLThmNWItYzc2MmUyZjEyZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBdeNQWR4u1gU1AnRXeYNn+btEhYb0Xtbheu43P NReleA3IvXrLEpi95HRajP7TbTEQjnCDxAqpWOAPmtuQlFzX+lY5SeSNv/D+kh8+ MX5SvYR2XxmJYifma5QFreYaIoMXX9N4vuBbIZNnEcTBlSylOVpSqGcEj7/rPFDP rsnse4p2XNP4Y7mDJNc4BohMBGtEYQ6pLBiBYF3TBhAVXm154y/zKowgElveKBk/ PfbS+LoVTBonp2s00fJlqVdHrzbuzU7nMQ3X7DNtztscaUnghyf5KfhHqjWYKPkP 1SoPWoBnYZAxJXg85HYLIBAsH8a2HvNsHyCGHEulv+JjGf9x -----END CERTIFICATE-----Generated at Fri Jun 6 19:35:06 2025 by rpki-client