$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b70a9d67-b5f6-31c8-a673-9673507f1355.roa File: b70a9d67-b5f6-31c8-a673-9673507f1355.roa (raw, json) Hash identifier: 2hnlTaTxab8K7+Ea6tPHIXXgukuIdZVwAKvpnFJvGRY= Subject key identifier: 1F:63:A0:94:43:60:0E:77:93:0C:54:33:8B:DB:B4:F4:1A:D4:21:55 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849D85FD1CDC042508954FDEB00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b70a9d67-b5f6-31c8-a673-9673507f1355.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 27544 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:d1:cd:c0:42:50:89:54:fd:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=ea58504d-1c46-44b0-b84a-fda3cc13f142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ba:37:fe:fd:81:77:84:bb:d7:ee:2b:08:c8: c6:09:d5:eb:a2:96:41:90:cc:1b:71:99:7d:17:83: 76:5a:d4:c8:26:0a:13:0f:9f:e2:68:6d:d0:f3:dc: e6:69:22:cc:cb:e6:4c:e3:20:d0:71:57:7c:f8:c3: e4:7d:8e:51:a1:ac:2b:30:bc:9a:d6:99:4a:66:70: de:75:e8:56:c2:e7:c7:c0:3c:73:ed:3f:32:5c:6a: f5:d0:83:ba:33:d5:f4:1b:d0:c7:38:bf:93:58:64: 6b:af:e8:cc:0f:da:e9:d1:4b:10:15:c2:e3:a4:2d: e5:95:be:b8:7e:e9:bf:53:b0:62:32:09:b6:7d:1b: 07:c0:c9:07:2c:ae:00:4a:c5:6a:9a:75:ef:77:23: 97:70:b4:29:2c:c4:c4:46:aa:14:a4:5b:d6:a4:96: 8e:d3:ec:ff:3a:3e:5e:ef:5e:26:0a:8c:3a:9d:e9: 09:39:9f:c7:78:09:06:24:48:e7:ce:23:aa:a7:80: 9b:f1:0a:2b:75:fe:53:ec:d8:10:de:44:df:6f:4f: 46:87:fa:e6:ae:eb:ee:21:64:ce:fa:ac:5b:28:05: ec:c7:8b:12:79:bb:ae:11:c1:c8:00:d1:cb:d9:97: 49:59:67:cf:c5:43:f3:80:72:4a:20:a5:fe:0e:44: 49:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:63:A0:94:43:60:0E:77:93:0C:54:33:8B:DB:B4:F4:1A:D4:21:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b70a9d67-b5f6-31c8-a673-9673507f1355.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:97:e7:a0:b8:92:f4:c6:f4:fe:1e:9c:3f:16:f3:d3:24:c8: a3:4d:3a:6e:81:f8:87:a6:37:a3:54:ef:f7:38:c7:86:b1:5b: 73:d2:07:a5:0d:86:fe:2c:46:97:c8:27:bb:d7:fb:59:9a:02: 01:b4:4b:1b:7f:ec:75:64:64:2c:43:b5:fb:0c:1b:20:20:48: e7:7f:a1:ed:61:70:25:4e:0d:00:ad:81:05:ea:80:62:f6:1c: 48:84:69:72:bf:89:f4:6f:0b:f2:06:37:e4:0d:6b:77:34:a8: b1:5a:09:0a:fa:e7:d7:85:d7:df:22:36:b9:84:0c:81:2b:7f: bc:55:d0:62:45:0f:25:cb:00:88:92:9d:3d:34:82:db:b4:6e: 2b:30:e1:fb:ba:62:f5:08:d9:24:c7:bf:a7:e0:ca:00:bc:c9: 39:db:ed:9c:f3:b7:5c:b4:e2:d3:d5:8e:54:06:41:92:f8:62: 34:5a:d7:5a:b5:79:9f:89:6a:45:d8:53:96:be:10:9a:c4:a0: 2f:ab:c4:dc:74:7a:32:ff:15:e9:33:72:22:ac:46:90:02:77: de:8c:17:e4:9d:5a:7d:b4:9b:7c:0d:d5:16:29:16:79:86:f6: 1c:81:b1:9f:7e:9f:63:75:01:79:27:bc:0d:83:6e:68:71:c8: c7:24:d1:0c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnYX9HNwEJQiVT96wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZWE1ODUwNGQtMWM0Ni00NGIwLWI4NGEtZmRhM2NjMTNmMTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLo3/v2Bd4S71+4rCMjGCdXropZBkMwbcZl9 F4N2WtTIJgoTD5/iaG3Q89zmaSLMy+ZM4yDQcVd8+MPkfY5RoawrMLya1plKZnDe dehWwufHwDxz7T8yXGr10IO6M9X0G9DHOL+TWGRrr+jMD9rp0UsQFcLjpC3llb64 fum/U7BiMgm2fRsHwMkHLK4ASsVqmnXvdyOXcLQpLMTERqoUpFvWpJaO0+z/Oj5e 714mCow6nekJOZ/HeAkGJEjnziOqp4Cb8Qordf5T7NgQ3kTfb09Gh/rmruvuIWTO +qxbKAXsx4sSebuuEcHIANHL2ZdJWWfPxUPzgHJKIKX+DkRJVwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFB9joJRDYA53kwxUM4vbtPQa1CFVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjcwYTlkNjctYjVmNi0z MWM4LWE2NzMtOTY3MzUwN2YxMzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBJl+eguJL0xvT+Hpw/FvPTJMijTTpugfiHpjej VO/3OMeGsVtz0gelDYb+LEaXyCe71/tZmgIBtEsbf+x1ZGQsQ7X7DBsgIEjnf6Ht YXAlTg0ArYEF6oBi9hxIhGlyv4n0bwvyBjfkDWt3NKixWgkK+ufXhdffIja5hAyB K3+8VdBiRQ8lywCIkp09NILbtG4rMOH7umL1CNkkx7+n4MoAvMk52+2c87dctOLT 1Y5UBkGS+GI0WtdatXmfiWpF2FOWvhCaxKAvq8TcdHoy/xXpM3IirEaQAnfejBfk nVp9tJt8DdUWKRZ5hvYcgbGffp9jdQF5J7wNg25occjHJNEM -----END CERTIFICATE-----Generated at Sun Jun 15 16:17:16 2025 by rpki-client