$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea721aa1-deb0-3385-9462-2ac7ff519d80.roa File: ea721aa1-deb0-3385-9462-2ac7ff519d80.roa (raw, json) Hash identifier: lV32dixCfIEXLX1YIx+m0n+FyuOL6xRbGarFMCyaTDk= Subject key identifier: 1B:5E:9C:1D:22:C4:F0:A4:FA:4A:61:59:50:B0:C9:32:3B:6C:BC:90 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4DA99ECD075438536C000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea721aa1-deb0-3385-9462-2ac7ff519d80.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 396588 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:da:99:ec:d0:75:43:85:36:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=d9dce988-a307-4b69-ae69-9552bb7bf675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b0:72:22:66:cd:46:e3:53:0f:e7:ee:21:3b: 2c:3b:ed:f7:0a:a3:25:12:81:fb:d5:76:69:72:89: 9e:6c:d6:4f:fb:4c:b1:dc:e4:dc:d2:4a:74:3f:5d: 6e:5e:4a:46:71:e0:68:dc:2d:fc:c6:73:01:05:76: ec:ba:cb:35:7a:52:78:73:61:5f:22:37:00:38:47: 88:80:7e:01:5d:f2:16:7e:4c:c3:82:44:f1:db:7e: 5a:4e:4a:43:4e:c7:b3:01:94:1d:e7:f1:3b:6d:52: 18:a5:47:b5:d3:13:bd:d0:93:46:e9:cc:f9:fa:85: 65:d9:e7:40:73:e1:52:65:34:b0:3c:72:e5:ac:d1: 0a:b7:d7:ad:08:d7:b5:64:49:11:31:b8:b4:c0:c0: a3:ed:86:4c:bf:13:f8:da:3e:a2:cd:e5:bf:26:da: 88:5d:a0:df:b7:98:20:30:20:3f:22:7a:4d:b7:7e: a9:81:95:1d:3f:5c:d0:3c:8a:be:c3:6b:04:2e:12: f5:2a:21:09:88:ba:77:2f:e8:6a:1f:9c:3f:0a:b6: 3e:57:a8:45:83:a0:9d:f1:a0:d7:73:72:33:5d:4e: 07:70:39:d0:62:f5:bc:4b:3d:7b:99:99:d0:73:c3: de:89:f7:04:4b:e6:f0:6c:46:c3:bf:32:e9:29:31: 8f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:5E:9C:1D:22:C4:F0:A4:FA:4A:61:59:50:B0:C9:32:3B:6C:BC:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea721aa1-deb0-3385-9462-2ac7ff519d80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:e0:6b:40:da:0f:9a:cb:dd:2e:09:b2:85:98:24:d7:2d:85: 8b:ce:59:f0:95:8a:e5:59:e5:4d:a6:d2:8a:5f:db:04:f5:70: 54:7d:1f:3d:dc:96:a5:01:c1:36:3a:c4:27:6c:41:79:58:be: 09:7a:6d:1a:d8:9a:09:93:d7:c1:8c:b2:5c:d4:e3:4f:9a:2c: b9:02:e9:67:f1:aa:ae:7f:78:80:76:5e:42:b0:89:fe:3a:73: d9:eb:f1:21:9e:44:5a:c4:59:b7:ea:51:d5:1c:ed:4b:a8:59: 14:56:2f:b2:05:11:f0:f9:10:5c:5a:8d:c1:f6:0b:9e:78:5a: e2:4b:5d:03:8e:6c:be:4a:43:c5:e3:01:a5:50:80:4e:9c:11: f0:28:77:21:4e:7c:92:31:02:2f:ef:89:1e:02:1b:9b:9e:17: 3c:26:98:39:f0:c1:09:bb:f8:53:4b:0f:b4:6c:6b:50:61:32: 6f:2d:c7:f2:16:94:6b:61:21:b2:0d:2d:13:9b:30:03:2b:5b: b9:87:58:64:7c:ba:d6:77:e7:ad:d6:3c:7f:ed:5f:2c:9c:9f: d5:7c:57:75:6b:12:50:6a:94:70:b7:c1:9c:4a:6d:f3:e9:de: 01:66:7b:23:7f:d0:c1:1c:34:06:9c:f4:2e:ec:d1:15:14:33: 26:33:da:3d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1NqZ7NB1Q4U2wAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk ZDlkY2U5ODgtYTMwNy00YjY5LWFlNjktOTU1MmJiN2JmNjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7ByImbNRuNTD+fuITssO+33CqMlEoH71XZp comebNZP+0yx3OTc0kp0P11uXkpGceBo3C38xnMBBXbsuss1elJ4c2FfIjcAOEeI gH4BXfIWfkzDgkTx235aTkpDTsezAZQd5/E7bVIYpUe10xO90JNG6cz5+oVl2edA c+FSZTSwPHLlrNEKt9etCNe1ZEkRMbi0wMCj7YZMvxP42j6izeW/JtqIXaDft5gg MCA/InpNt36pgZUdP1zQPIq+w2sELhL1KiEJiLp3L+hqH5w/CrY+V6hFg6Cd8aDX c3IzXU4HcDnQYvW8Sz17mZnQc8PeifcES+bwbEbDvzLpKTGP5QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBtenB0ixPCk+kphWVCwyTI7bLyQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWE3MjFhYTEtZGViMC0z Mzg1LTk0NjItMmFjN2ZmNTE5ZDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAu4GtA2g+ay90uCbKFmCTXLYWLzlnwlYrlWeVN ptKKX9sE9XBUfR893JalAcE2OsQnbEF5WL4Jem0a2JoJk9fBjLJc1ONPmiy5Auln 8aquf3iAdl5CsIn+OnPZ6/EhnkRaxFm36lHVHO1LqFkUVi+yBRHw+RBcWo3B9gue eFriS10Djmy+SkPF4wGlUIBOnBHwKHchTnySMQIv74keAhubnhc8Jpg58MEJu/hT Sw+0bGtQYTJvLcfyFpRrYSGyDS0TmzADK1u5h1hkfLrWd+et1jx/7V8snJ/VfFd1 axJQapRwt8GcSm3z6d4BZnsjf9DBHDQGnPQu7NEVFDMmM9o9 -----END CERTIFICATE-----Generated at Fri Jun 6 19:39:53 2025 by rpki-client