$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70e77b37-bfa5-3593-b194-66341a60ae52.roa File: 70e77b37-bfa5-3593-b194-66341a60ae52.roa (raw, json) Hash identifier: abHBFvJfknrDI5KjTbCrVd+JXF6OQHlXR25EsSzHAtc= Subject key identifier: C3:4B:74:B3:6B:28:12:F2:3C:7F:19:F9:F5:75:05:CC:85:91:11:FB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A29A0519ED0CC3D140220 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70e77b37-bfa5-3593-b194-66341a60ae52.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396582 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:29:a0:51:9e:d0:cc:3d:14:02:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=1d292af8-b2e6-4b9a-a696-d8d2b6194818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:45:51:75:6c:99:47:6c:49:29:a7:de:55:2b: c2:35:52:3e:93:5a:63:19:9f:48:7c:f0:e6:e2:18: b4:38:3b:44:1d:af:dd:46:d1:8e:e7:21:ca:8d:cd: 0e:d9:21:9d:3d:94:87:d1:ca:86:b0:6c:6a:5c:f2: 3a:29:2b:c0:47:4f:d5:c2:36:0c:6b:42:72:18:08: cf:e7:60:03:a1:77:56:27:cd:de:19:90:e5:bf:b0: 0f:e8:cb:60:e6:ef:cc:ac:f6:22:79:34:81:ad:49: 61:17:55:05:e4:a5:51:45:ef:bd:1a:f9:c8:e9:67: e5:c7:18:eb:39:58:0e:8e:2a:e0:f1:a8:ca:b8:1f: 14:d2:c8:af:c9:21:62:e3:75:66:7e:27:4b:eb:d3: eb:6a:11:50:f3:71:c0:80:ae:2a:93:6c:0d:d6:ae: 26:71:e6:df:1b:ce:64:58:b3:c8:0f:60:12:b2:d5: 38:87:da:61:3b:3d:75:e1:01:21:1e:99:3d:3c:a1: 93:82:5b:a5:49:83:32:ce:77:93:af:57:c0:6c:9a: 56:3b:f7:ac:fa:7e:2b:f2:be:2f:23:e0:f9:f2:fb: 20:af:05:07:2a:f2:6c:e8:3b:ae:cc:38:81:a0:77: 0c:51:ce:2b:74:37:c8:97:46:eb:75:11:2f:24:3f: 28:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4B:74:B3:6B:28:12:F2:3C:7F:19:F9:F5:75:05:CC:85:91:11:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70e77b37-bfa5-3593-b194-66341a60ae52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:0a:1d:c8:10:82:6d:0a:9d:6f:f5:c8:15:16:4d:8c:f5:77: 8b:33:fe:a8:e2:1c:4e:35:f6:4f:83:01:49:1a:bb:de:88:1d: 05:f1:5a:ce:a4:5d:1b:28:33:52:56:b1:b5:b1:bc:9b:9c:25: 7b:b0:6f:22:03:a7:94:d1:2b:05:c8:1b:78:7a:48:7f:3a:be: b6:ca:dd:b7:84:ec:84:95:4b:71:06:e2:86:99:3a:a0:cd:e8: 7c:fd:da:46:ec:90:3e:a4:a8:3d:93:56:be:e7:f8:6a:87:95: e5:de:4f:29:00:fd:07:76:61:0b:23:61:49:fd:78:d5:bd:e7: cd:f7:b6:ad:b3:7d:f6:bd:aa:11:56:c7:6d:68:7c:ef:eb:69: 34:02:a6:ce:c3:6b:a7:22:df:23:b3:96:53:49:5a:48:66:5b: 5a:49:26:5f:aa:3d:6c:f5:29:23:f3:97:03:5c:64:18:78:09: 7d:79:57:6c:36:56:d9:44:7f:4f:ac:ad:2d:8d:4d:a2:29:70: 4f:f0:8c:88:d8:13:e1:e4:70:3d:2c:61:dd:b9:6a:81:2f:08: 9e:20:9f:5a:d9:ee:dc:a6:c2:34:07:b1:1d:4e:14:43:0b:57: 48:57:7a:a3:34:0b:2f:a3:3e:f1:fa:fd:20:4b:ef:85:ac:18: f4:bc:4d:8b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSimgUZ7QzD0UAiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MWQyOTJhZjgtYjJlNi00YjlhLWE2OTYtZDhkMmI2MTk0ODE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEVRdWyZR2xJKafeVSvCNVI+k1pjGZ9IfPDm 4hi0ODtEHa/dRtGO5yHKjc0O2SGdPZSH0cqGsGxqXPI6KSvAR0/VwjYMa0JyGAjP 52ADoXdWJ83eGZDlv7AP6Mtg5u/MrPYieTSBrUlhF1UF5KVRRe+9GvnI6Wflxxjr OVgOjirg8ajKuB8U0sivySFi43VmfidL69PrahFQ83HAgK4qk2wN1q4mcebfG85k WLPID2ASstU4h9phOz114QEhHpk9PKGTglulSYMyzneTr1fAbJpWO/es+n4r8r4v I+D58vsgrwUHKvJs6DuuzDiBoHcMUc4rdDfIl0brdREvJD8oMwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMNLdLNrKBLyPH8Z+fV1BcyFkRH7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzBlNzdiMzctYmZhNS0z NTkzLWIxOTQtNjYzNDFhNjBhZTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBkCh3IEIJtCp1v9cgVFk2M9XeLM/6o4hxONfZP gwFJGrveiB0F8VrOpF0bKDNSVrG1sbybnCV7sG8iA6eU0SsFyBt4ekh/Or62yt23 hOyElUtxBuKGmTqgzeh8/dpG7JA+pKg9k1a+5/hqh5Xl3k8pAP0HdmELI2FJ/XjV vefN97ats332vaoRVsdtaHzv62k0AqbOw2unIt8js5ZTSVpIZltaSSZfqj1s9Skj 85cDXGQYeAl9eVdsNlbZRH9PrK0tjU2iKXBP8IyI2BPh5HA9LGHduWqBLwieIJ9a 2e7cpsI0B7EdThRDC1dIV3qjNAsvoz7x+v0gS++FrBj0vE2L -----END CERTIFICATE-----Generated at Thu May 1 03:06:22 2025 by rpki-client