$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eaadea3c-542f-30d9-9dc2-9e1e1c1cca7a.roa File: eaadea3c-542f-30d9-9dc2-9e1e1c1cca7a.roa (raw, json) Hash identifier: GfBwOhI0R0lPbguhJqdPypl/UCTQMsGGuGO58Ppc264= Subject key identifier: 20:A3:DE:33:C5:F0:45:FA:22:B9:0F:B5:3C:6D:77:3A:13:3A:C7:B4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F87A964DB044CD00A6590A40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eaadea3c-542f-30d9-9dc2-9e1e1c1cca7a.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 396545 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:96:4d:b0:44:cd:00:a6:59:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=c666eb35-4653-472f-8989-84d2c568e7a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5a:f9:2b:cb:55:99:93:e1:21:9b:55:23:2b: 34:ec:34:a9:cc:65:56:01:31:f4:35:f1:6d:54:37: 47:ef:19:ee:21:68:22:1f:20:47:64:a0:20:b6:f9: d2:b9:14:58:6c:31:8b:c2:f7:99:e3:e6:0f:96:39: 3c:53:fe:5d:58:e5:9a:44:a6:82:18:cd:c7:f3:7e: 4c:3c:07:6d:e2:74:f6:99:ab:52:d4:01:ca:15:f2: 2b:68:82:ba:3c:dc:37:fe:4e:f5:32:1e:f1:ee:c6: f3:9f:a6:48:05:57:b9:84:8a:e9:be:67:03:34:3a: 0d:b7:ec:ff:af:c3:87:45:47:ee:e5:99:8a:67:a8: 8f:56:e2:5a:44:69:13:24:63:bf:3d:aa:7e:9d:56: 4f:fd:08:a0:18:6a:c8:c8:de:aa:77:72:48:8a:eb: a2:49:05:8c:e3:d0:33:df:6c:50:14:53:69:80:08: 9c:65:e6:d9:65:42:3d:90:98:67:3c:24:73:9b:d4: 48:c1:34:43:a2:20:20:22:0c:91:7f:66:25:a8:d4: b3:89:8d:ba:94:6a:fb:9d:49:94:29:e4:3c:1c:03: 80:8f:56:15:7a:c0:7d:14:a9:a9:b2:bc:81:5d:96: 80:cb:47:c3:5c:30:80:4c:1e:6a:6d:e7:1a:31:f3: 96:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A3:DE:33:C5:F0:45:FA:22:B9:0F:B5:3C:6D:77:3A:13:3A:C7:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eaadea3c-542f-30d9-9dc2-9e1e1c1cca7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:9e:01:0c:55:27:7c:cb:84:90:4b:89:44:cd:f2:49:08:bf: b8:16:89:03:45:b6:6c:5b:27:9d:ee:81:25:ad:b6:02:fa:20: fb:c9:69:30:9a:00:3f:24:27:39:d9:c7:04:c1:d5:54:df:1f: 45:73:73:c6:85:c8:3a:f3:3a:c1:6a:19:b5:e4:c0:79:be:39: 3e:b7:17:73:da:f9:30:11:56:5a:b6:cd:c9:bf:cf:52:46:df: b0:17:ba:f6:02:c3:6f:48:16:77:34:2f:63:2a:61:6a:19:51: 47:d4:70:64:11:3a:1d:aa:cc:17:94:3a:71:d2:22:2e:3c:40: d2:8b:d0:2a:83:77:05:04:a9:d2:e3:85:27:b3:9f:2b:7c:ba: 0b:62:4f:4e:48:1a:db:b8:b0:8c:cd:34:6e:95:9e:3d:07:24: 8d:b3:1a:76:bd:20:99:d8:f1:e4:76:99:52:02:52:38:28:ee: 89:ac:be:49:14:6a:fd:fc:61:49:53:4d:6e:a4:6f:3d:b2:c8: 74:f0:f1:50:6f:8f:da:c8:fc:ab:17:13:a7:ed:b5:ef:c8:27: 09:94:5c:96:e2:a9:f8:79:38:d5:14:b1:02:9b:fd:af:1b:dc: bb:64:16:1c:98:ea:03:d7:66:4c:f9:2d:a9:8c:8f:d1:ad:b3: 84:49:0a:68 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn4epZNsETNAKZZCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk YzY2NmViMzUtNDY1My00NzJmLTg5ODktODRkMmM1NjhlN2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVr5K8tVmZPhIZtVIys07DSpzGVWATH0NfFt VDdH7xnuIWgiHyBHZKAgtvnSuRRYbDGLwveZ4+YPljk8U/5dWOWaRKaCGM3H835M PAdt4nT2matS1AHKFfIraIK6PNw3/k71Mh7x7sbzn6ZIBVe5hIrpvmcDNDoNt+z/ r8OHRUfu5ZmKZ6iPVuJaRGkTJGO/Pap+nVZP/QigGGrIyN6qd3JIiuuiSQWM49Az 32xQFFNpgAicZebZZUI9kJhnPCRzm9RIwTRDoiAgIgyRf2YlqNSziY26lGr7nUmU KeQ8HAOAj1YVesB9FKmpsryBXZaAy0fDXDCATB5qbecaMfOWLwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCCj3jPF8EX6IrkPtTxtdzoTOse0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWFhZGVhM2MtNTQyZi0z MGQ5LTlkYzItOWUxZTFjMWNjYTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBSngEMVSd8y4SQS4lEzfJJCL+4FokDRbZsWyed 7oElrbYC+iD7yWkwmgA/JCc52ccEwdVU3x9Fc3PGhcg68zrBahm15MB5vjk+txdz 2vkwEVZats3Jv89SRt+wF7r2AsNvSBZ3NC9jKmFqGVFH1HBkETodqswXlDpx0iIu PEDSi9Aqg3cFBKnS44Uns58rfLoLYk9OSBrbuLCMzTRulZ49BySNsxp2vSCZ2PHk dplSAlI4KO6JrL5JFGr9/GFJU01upG89ssh08PFQb4/ayPyrFxOn7bXvyCcJlFyW 4qn4eTjVFLECm/2vG9y7ZBYcmOoD12ZM+S2pjI/RrbOESQpo -----END CERTIFICATE-----Generated at Sat Jun 7 04:20:17 2025 by rpki-client