$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e2c8594-7a4c-3d65-a503-33adbe29a328.roa File: 2e2c8594-7a4c-3d65-a503-33adbe29a328.roa (raw, json) Hash identifier: 0Hw9qJxNhGFCqYuwvEJMEgGgmqpc0PBFUb301OdKLdY= Subject key identifier: C5:2C:BA:CA:DC:8D:EA:47:E3:F3:23:7F:70:EA:0A:59:51:2F:6A:9F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849D85FCF5F66D0701AF619C100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e2c8594-7a4c-3d65-a503-33adbe29a328.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 396545 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:cf:5f:66:d0:70:1a:f6:19:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=d0f3b736-734a-4ca4-83c8-5503e3a68b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:27:43:c6:7c:7e:45:61:f5:98:b0:55:68:97: 33:00:28:a5:a2:23:05:8c:1b:e2:15:f0:40:36:38: 70:35:5e:83:df:e1:2c:1e:ca:63:e4:99:54:fa:ad: 91:52:4c:04:70:f1:c3:e8:8c:f7:8d:87:5d:cb:c7: 05:07:5c:5b:ad:38:b2:e3:78:27:de:c4:6e:d1:a0: f3:c7:e7:33:b7:da:c3:56:1a:fb:09:a9:67:af:4d: 68:14:a0:70:f7:04:a5:9c:04:8f:49:40:3e:c2:48: 75:4f:3d:db:89:66:1e:88:02:e1:e5:03:ac:48:7d: a1:19:e2:88:52:54:45:2c:18:96:ae:81:8a:1a:40: 86:2d:0d:8c:c9:99:56:2e:16:9d:bf:e6:4c:09:fd: 3b:3b:9a:f0:0e:09:88:27:39:8d:15:8b:99:66:84: 00:cc:a9:a4:0e:84:76:4b:ba:81:fc:c8:c1:ba:8b: 0c:47:6a:03:80:42:68:61:bb:a1:c2:64:f4:70:69: 25:69:27:24:cd:05:59:ac:00:d4:d7:07:6b:4f:e9: 8a:03:2e:10:d9:50:61:03:cc:b5:4d:84:25:7d:98: 68:ea:04:c2:2d:b7:57:04:d0:ce:45:19:22:17:4a: 96:68:64:22:4d:14:64:5c:46:d5:6e:e7:43:5b:b6: e0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2C:BA:CA:DC:8D:EA:47:E3:F3:23:7F:70:EA:0A:59:51:2F:6A:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e2c8594-7a4c-3d65-a503-33adbe29a328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:57:4c:40:7f:b2:c5:80:9d:41:84:69:38:7a:bd:e4:7a:97: 3e:c2:ac:85:de:5b:fd:95:da:8d:37:04:1c:52:6c:c3:60:58: cc:d0:73:2f:22:4b:a7:11:88:f1:c7:f0:55:e6:9b:c7:a3:22: 62:70:47:2b:b0:4e:df:85:f2:8f:58:aa:ac:ad:c9:47:02:81: 7a:a4:b4:1f:8f:ea:fd:01:f3:fd:fd:14:05:41:1a:47:d5:bb: 3e:bc:f7:c0:8c:00:cc:e3:40:f3:75:52:7f:35:db:1c:ef:fd: 0c:ad:ec:fd:de:02:9e:e9:30:cb:09:d8:35:91:41:48:9f:03: ed:f0:8e:01:b9:bb:2f:ad:39:dc:fa:29:29:26:a1:e5:84:bb: d6:84:d6:6b:89:e1:1b:40:22:8f:4b:b4:35:40:3d:ce:6c:f7: 8b:eb:5e:77:4c:63:24:9b:0a:5e:06:fe:0d:7d:36:3a:6d:fd: fc:46:9c:23:eb:08:19:bd:6c:7c:88:9c:5f:0a:fd:6b:35:f5: 09:f6:fe:bf:ad:d4:5f:1c:bf:9b:31:17:e9:f9:6a:ba:e3:41: d7:93:59:e3:10:c5:79:26:9f:cd:3d:ab:47:1e:13:63:fb:bd: e5:fd:ba:54:45:3e:65:fd:ca:3f:0a:c4:be:e8:f0:07:af:1e: 81:60:f0:fe -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnYX89fZtBwGvYZwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZDBmM2I3MzYtNzM0YS00Y2E0LTgzYzgtNTUwM2UzYTY4YjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2idDxnx+RWH1mLBVaJczACiloiMFjBviFfBA NjhwNV6D3+EsHspj5JlU+q2RUkwEcPHD6Iz3jYddy8cFB1xbrTiy43gn3sRu0aDz x+czt9rDVhr7Calnr01oFKBw9wSlnASPSUA+wkh1Tz3biWYeiALh5QOsSH2hGeKI UlRFLBiWroGKGkCGLQ2MyZlWLhadv+ZMCf07O5rwDgmIJzmNFYuZZoQAzKmkDoR2 S7qB/MjBuosMR2oDgEJoYbuhwmT0cGklaSckzQVZrADU1wdrT+mKAy4Q2VBhA8y1 TYQlfZho6gTCLbdXBNDORRkiF0qWaGQiTRRkXEbVbudDW7bgewIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMUsusrcjepH4/Mjf3DqCllRL2qfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmUyYzg1OTQtN2E0Yy0z ZDY1LWE1MDMtMzNhZGJlMjlhMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBHV0xAf7LFgJ1BhGk4er3kepc+wqyF3lv9ldqN NwQcUmzDYFjM0HMvIkunEYjxx/BV5pvHoyJicEcrsE7fhfKPWKqsrclHAoF6pLQf j+r9AfP9/RQFQRpH1bs+vPfAjADM40DzdVJ/Ndsc7/0Mrez93gKe6TDLCdg1kUFI nwPt8I4BubsvrTnc+ikpJqHlhLvWhNZrieEbQCKPS7Q1QD3ObPeL6153TGMkmwpe Bv4NfTY6bf38Rpwj6wgZvWx8iJxfCv1rNfUJ9v6/rdRfHL+bMRfp+Wq640HXk1nj EMV5Jp/NPatHHhNj+73l/bpURT5l/co/CsS+6PAHrx6BYPD+ -----END CERTIFICATE-----Generated at Sun Jun 15 15:52:27 2025 by rpki-client