$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3e480c9-7065-379a-a7a0-3741030cb8a7.roa File: a3e480c9-7065-379a-a7a0-3741030cb8a7.roa (raw, json) Hash identifier: 7s/bd1AvvXY8IKZNtjXffo27kqxWAYcHhuQrBA1alX4= Subject key identifier: 10:6E:FE:5E:91:06:1D:A4:45:72:FD:0A:AD:80:D5:77:B1:28:68:76 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849D85FCF6C665A5B73A7F03480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3e480c9-7065-379a-a7a0-3741030cb8a7.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 396596 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:cf:6c:66:5a:5b:73:a7:f0:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=2b8cfc7f-f302-479d-bb71-38df0303f712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7c:58:b1:c7:2c:79:32:5d:0e:b4:4e:51:db: e1:cb:0d:21:99:92:7f:98:c3:75:10:01:bb:7f:76: 41:2c:26:6a:5a:af:91:f8:7f:fe:4c:32:61:0b:2d: 3f:4b:65:3a:e7:e6:9a:1e:67:cf:50:3c:5e:6a:7e: 08:6b:f0:c5:65:a7:9a:2c:d8:44:93:7f:d9:d4:e3: 99:36:42:c4:4b:5f:f3:e8:e1:a7:28:4b:3c:18:1b: 95:6e:af:50:07:a8:f3:79:8c:d4:31:2c:b2:c3:18: b7:e5:81:31:a1:c6:1d:50:19:38:f5:a7:a6:cf:e6: 20:2a:a3:00:5f:70:9f:9d:76:73:e1:6a:63:f3:80: c2:d5:3a:d0:40:1b:b4:2c:3f:3b:b0:a2:ec:79:6b: a9:e8:ce:2c:a1:0a:ac:86:6e:07:a3:14:de:89:18: 9d:50:ab:71:08:c9:ce:42:9c:70:08:ab:ce:66:1d: 56:41:ac:68:86:e6:c4:be:d5:6d:c2:1d:45:94:b9: 0b:32:b2:b8:bd:64:59:c8:79:97:43:59:3c:c5:a4: d6:76:6d:c2:18:29:1d:2e:5c:4f:41:3d:2e:40:d8: 84:04:95:f3:28:c9:16:3f:30:14:f4:1c:ff:ef:3c: 04:8a:db:62:50:d8:a3:c2:25:23:d3:5f:12:bf:af: bc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6E:FE:5E:91:06:1D:A4:45:72:FD:0A:AD:80:D5:77:B1:28:68:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a3e480c9-7065-379a-a7a0-3741030cb8a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:97:76:14:8c:35:fe:ca:3c:5a:01:b5:9f:4d:a8:ba:c4:45: ac:8b:27:12:82:41:61:40:f6:4b:d9:f0:89:6a:13:b6:79:2b: 8f:7c:25:fc:62:c1:11:e2:d0:6d:8e:b5:d6:39:78:e7:4b:3b: f3:97:f1:b5:a4:45:ea:68:a5:e1:be:cf:dd:47:2b:1a:56:e0: 25:08:87:0c:73:a6:68:52:81:77:0f:5d:5a:a3:f4:48:ba:68: 7d:8a:93:b4:0f:ef:53:4c:b5:25:71:50:68:f1:c0:95:97:9f: fa:21:0d:71:4b:7b:32:de:d2:a2:58:a0:a7:01:72:0b:76:d7: be:9a:7b:50:ea:a0:94:fb:0f:86:8f:aa:7b:dd:54:47:d3:3d: 78:f5:7c:4d:5f:64:67:62:59:eb:9a:59:cf:38:e5:bf:8f:50: c2:67:63:05:c5:d2:0f:64:22:00:02:5b:61:3a:74:98:a3:ae: 39:ba:23:c6:0b:39:77:3d:fa:b1:cd:67:13:b2:eb:21:8f:a5: f3:da:12:d6:5e:a6:0f:5e:16:ba:0c:e0:8a:a1:e9:4c:1b:43: 4b:56:ac:e6:1f:83:1b:5a:cf:25:b3:b3:c3:ab:8f:8e:6f:75: 72:8e:28:53:9c:ca:a6:b5:13:5b:24:08:24:5b:d1:f1:38:60: c6:17:4f:b2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnYX89sZlpbc6fwNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MmI4Y2ZjN2YtZjMwMi00NzlkLWJiNzEtMzhkZjAzMDNmNzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnxYsccseTJdDrROUdvhyw0hmZJ/mMN1EAG7 f3ZBLCZqWq+R+H/+TDJhCy0/S2U65+aaHmfPUDxean4Ia/DFZaeaLNhEk3/Z1OOZ NkLES1/z6OGnKEs8GBuVbq9QB6jzeYzUMSyywxi35YExocYdUBk49aemz+YgKqMA X3CfnXZz4Wpj84DC1TrQQBu0LD87sKLseWup6M4soQqshm4HoxTeiRidUKtxCMnO QpxwCKvOZh1WQaxohubEvtVtwh1FlLkLMrK4vWRZyHmXQ1k8xaTWdm3CGCkdLlxP QT0uQNiEBJXzKMkWPzAU9Bz/7zwEittiUNijwiUj018Sv6+80wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBBu/l6RBh2kRXL9Cq2A1XexKGh2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTNlNDgwYzktNzA2NS0z NzlhLWE3YTAtMzc0MTAzMGNiOGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBdl3YUjDX+yjxaAbWfTai6xEWsiycSgkFhQPZL 2fCJahO2eSuPfCX8YsER4tBtjrXWOXjnSzvzl/G1pEXqaKXhvs/dRysaVuAlCIcM c6ZoUoF3D11ao/RIumh9ipO0D+9TTLUlcVBo8cCVl5/6IQ1xS3sy3tKiWKCnAXIL dte+mntQ6qCU+w+Gj6p73VRH0z149XxNX2RnYlnrmlnPOOW/j1DCZ2MFxdIPZCIA AlthOnSYo645uiPGCzl3PfqxzWcTsushj6Xz2hLWXqYPXha6DOCKoelMG0NLVqzm H4MbWs8ls7PDq4+Ob3VyjihTnMqmtRNbJAgkW9HxOGDGF0+y -----END CERTIFICATE-----Generated at Sun Jun 15 17:53:00 2025 by rpki-client