$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8910b5ff-93cb-3e66-8352-5d8880ecbe80.roa File: 8910b5ff-93cb-3e66-8352-5d8880ecbe80.roa (raw, json) Hash identifier: jMXIFp7utpaoZLP90/cl7S8HmiNXM32tYK1ZBXnnZD0= Subject key identifier: 8B:18:99:32:D6:D9:C7:52:16:EC:A4:9D:EB:15:03:DD:B6:FB:E3:0A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849D85FD16F6A0C64100B03CB80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8910b5ff-93cb-3e66-8352-5d8880ecbe80.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 396611 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:d1:6f:6a:0c:64:10:0b:03:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=d817a20d-b68f-4ac5-a434-7e437c9a8f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7a:be:c6:38:bb:05:29:c7:3c:bc:03:32:50: 54:7a:73:ce:ef:76:46:f2:35:06:d0:26:16:0b:2e: a0:34:f1:32:be:98:23:71:23:c9:cd:cf:60:e9:a9: 24:62:2c:61:38:58:2f:a5:5d:9b:ce:e9:99:fe:1a: aa:c6:41:be:d9:d3:e7:b0:62:8b:96:ad:a2:1c:28: 6d:3b:a3:c6:75:36:82:0c:49:13:fb:f9:fe:71:18: 99:c1:46:87:91:71:45:94:5f:79:9b:93:b4:24:53: 16:83:20:e5:fa:e1:2e:e7:9a:bf:d3:c5:b3:d5:de: 83:c0:3f:91:28:90:16:77:83:5a:10:9d:ab:a1:12: b5:09:d3:3e:0b:2f:ed:cd:43:e8:2e:06:97:39:f6: 14:ce:0a:0d:9c:6a:6b:a9:27:64:83:5b:a5:49:9a: 77:66:40:81:da:83:00:04:b8:c8:cd:79:2a:b6:fb: 30:f8:8c:88:db:fe:78:68:b4:36:a2:72:86:e6:93: b1:a5:05:10:75:16:5d:6f:d7:78:66:81:98:36:a9: 4d:34:69:5f:34:82:62:00:19:22:97:6a:0f:cb:97: e7:93:ea:3b:7e:94:c5:72:c1:cb:02:d6:c1:3b:2f: 4f:79:a8:24:ab:a9:f4:26:b9:a5:54:cf:73:b6:09: 3e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:18:99:32:D6:D9:C7:52:16:EC:A4:9D:EB:15:03:DD:B6:FB:E3:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8910b5ff-93cb-3e66-8352-5d8880ecbe80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:4c:bd:80:5d:9d:ba:78:c5:e4:a0:52:bd:f5:a8:06:ac:b5: 53:a0:8c:8b:c3:2d:95:29:30:b9:4d:e7:cd:88:83:f0:d6:2d: 7c:e4:82:19:d4:f7:46:00:cd:45:0c:47:c4:b4:bb:1e:d6:a0: 52:ec:a6:a6:94:2c:6f:9a:5b:ad:f2:ba:cd:4f:c5:f2:8b:63: 81:ec:05:27:8d:70:0f:f0:85:b7:45:a1:99:29:1b:29:32:43: a4:9a:52:ac:11:25:14:8e:9d:94:76:fd:02:22:09:95:ae:a3: 15:d9:5b:99:3d:5c:66:c3:31:f0:ce:dc:af:7f:0e:03:78:2b: d8:88:8a:66:5b:6e:28:80:9c:d8:a0:c9:eb:37:fa:5e:86:1e: 42:28:4c:99:4c:2e:dc:7d:8b:e1:eb:4c:39:6b:1e:39:82:c4: 81:5b:ed:d6:2a:44:16:31:e1:b1:a0:23:6a:7c:83:37:19:67: d6:bf:d7:0a:33:25:3c:5f:04:58:9b:e2:0e:92:45:7f:89:92: 53:c7:07:a3:8f:f5:03:16:4c:74:d9:ca:cc:7d:f9:b7:54:98: f2:8f:5c:36:68:b7:c8:96:f2:1c:b1:de:da:1d:35:65:0d:2c: d1:14:a6:04:4c:e9:5b:54:87:2e:ee:30:49:18:50:9e:12:ee: 6d:3b:62:12 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnYX9FvagxkEAsDy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZDgxN2EyMGQtYjY4Zi00YWM1LWE0MzQtN2U0MzdjOWE4ZjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Hq+xji7BSnHPLwDMlBUenPO73ZG8jUG0CYW Cy6gNPEyvpgjcSPJzc9g6akkYixhOFgvpV2bzumZ/hqqxkG+2dPnsGKLlq2iHCht O6PGdTaCDEkT+/n+cRiZwUaHkXFFlF95m5O0JFMWgyDl+uEu55q/08Wz1d6DwD+R KJAWd4NaEJ2roRK1CdM+Cy/tzUPoLgaXOfYUzgoNnGprqSdkg1ulSZp3ZkCB2oMA BLjIzXkqtvsw+IyI2/54aLQ2onKG5pOxpQUQdRZdb9d4ZoGYNqlNNGlfNIJiABki l2oPy5fnk+o7fpTFcsHLAtbBOy9Peagkq6n0JrmlVM9ztgk+fQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIsYmTLW2cdSFuyknesVA922++MKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODkxMGI1ZmYtOTNjYi0z ZTY2LTgzNTItNWQ4ODgwZWNiZTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCMTL2AXZ26eMXkoFK99agGrLVToIyLwy2VKTC5 TefNiIPw1i185IIZ1PdGAM1FDEfEtLse1qBS7KamlCxvmlut8rrNT8Xyi2OB7AUn jXAP8IW3RaGZKRspMkOkmlKsESUUjp2Udv0CIgmVrqMV2VuZPVxmwzHwztyvfw4D eCvYiIpmW24ogJzYoMnrN/pehh5CKEyZTC7cfYvh60w5ax45gsSBW+3WKkQWMeGx oCNqfIM3GWfWv9cKMyU8XwRYm+IOkkV/iZJTxwejj/UDFkx02crMffm3VJjyj1w2 aLfIlvIcsd7aHTVlDSzRFKYETOlbVIcu7jBJGFCeEu5tO2IS -----END CERTIFICATE-----Generated at Sun Jun 15 17:42:25 2025 by rpki-client