$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd55cbf7-5ebf-3125-a495-8a7d32ad80e0.roa File: cd55cbf7-5ebf-3125-a495-8a7d32ad80e0.roa (raw, json) Hash identifier: yKpLX7uPbLSAtAzCKkE9zh0E3MCBZtG0bb2eF2cp4lI= Subject key identifier: 48:79:EF:96:4A:4C:EF:B2:66:7F:17:70:47:53:84:B9:1D:66:FC:39 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849D85FD158A2D2A4C0C1659300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd55cbf7-5ebf-3125-a495-8a7d32ad80e0.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 19836 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:d1:58:a2:d2:a4:c0:c1:65:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=1cd2c455-744b-42c7-a986-6da99e35e429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5d:6c:94:e6:47:cd:ae:81:a9:e8:28:a1:15: f7:52:b4:8a:e3:ab:66:ee:1c:c5:d8:cc:b7:92:29: 4c:97:74:14:19:42:3c:00:c4:dd:b0:13:00:9f:a3: d1:73:31:b7:80:a3:dd:37:51:42:62:5f:f5:55:d9: 4a:31:b6:f7:80:4b:08:84:1d:2d:e6:8f:d4:cc:48: 76:ed:d5:74:11:78:f4:99:71:99:8e:0c:67:c9:5b: 34:89:bc:e9:83:4a:a7:1c:ca:b8:72:78:a7:2c:21: f2:bd:9c:c3:93:62:d3:e7:53:26:a4:ab:e1:b4:1e: 9f:96:b3:7c:c5:fa:0b:4b:a0:f6:16:0a:8f:16:4a: 74:94:93:20:64:76:06:1b:a8:5d:18:1d:04:fd:32: 72:4c:8d:0d:a2:8a:f2:1b:28:f1:b7:a7:9c:89:eb: 8e:c3:b6:95:6b:10:fb:93:17:d2:7e:e8:c1:29:a4: 86:9c:76:f5:1e:e3:f5:14:21:e0:9e:b9:63:8b:d4: fe:fc:c2:30:a6:57:50:89:b7:73:ed:51:7d:a3:ee: b4:86:46:3f:76:86:df:86:fb:57:a1:68:01:4c:90: 93:9e:da:16:9c:8e:26:d1:97:3f:06:08:4e:62:6e: 48:64:0c:fe:a9:01:7c:3b:04:f2:e4:e9:63:1a:87: c0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:79:EF:96:4A:4C:EF:B2:66:7F:17:70:47:53:84:B9:1D:66:FC:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd55cbf7-5ebf-3125-a495-8a7d32ad80e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:49:c2:07:05:e1:56:25:65:00:8f:0f:48:d9:72:48:c7:d7: 98:da:3e:0d:07:fd:94:2f:3f:3c:50:aa:06:df:1d:09:06:99: 81:2c:bc:77:ec:61:b9:1b:23:d2:97:40:d1:f3:8f:09:1b:b0: 9b:e5:6e:70:96:e7:41:5f:9c:a5:d8:2c:53:34:e8:f1:88:2a: 43:27:d7:37:b8:5d:5f:ac:fa:9d:47:e8:87:bf:ff:6d:ac:2f: d3:52:ca:15:5d:b4:14:23:ca:1a:1b:59:42:48:eb:bf:42:ff: 16:25:4a:7c:ef:9b:54:75:37:25:0a:62:dd:ae:87:f7:fd:82: 8c:f8:e3:89:27:c3:0f:b6:85:d0:d0:aa:ba:4b:5d:92:43:d4: b5:55:94:1b:6f:80:1b:c2:a8:b1:5f:20:54:c9:7d:d8:0a:ef: cf:f0:d5:60:fc:a1:c8:56:89:a4:cf:42:1b:b7:ea:61:1c:e9: 5e:8e:0b:e3:a7:3c:ec:4e:5a:38:09:cb:84:cc:ea:3f:6d:48: 82:f4:11:97:ce:e0:57:16:c0:39:f1:ea:f7:d5:22:42:86:a5: b1:a7:e1:aa:ed:f7:8f:f5:f8:c1:c3:08:8d:c3:8a:09:2f:c3: 78:a1:c3:8c:8b:1c:4d:d5:22:df:56:fe:c4:41:52:83:37:ac: 9c:9c:bd:69 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnYX9FYotKkwMFlkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MWNkMmM0NTUtNzQ0Yi00MmM3LWE5ODYtNmRhOTllMzVlNDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F1slOZHza6BqegooRX3UrSK46tm7hzF2My3 kilMl3QUGUI8AMTdsBMAn6PRczG3gKPdN1FCYl/1VdlKMbb3gEsIhB0t5o/UzEh2 7dV0EXj0mXGZjgxnyVs0ibzpg0qnHMq4cninLCHyvZzDk2LT51MmpKvhtB6flrN8 xfoLS6D2FgqPFkp0lJMgZHYGG6hdGB0E/TJyTI0NooryGyjxt6ecieuOw7aVaxD7 kxfSfujBKaSGnHb1HuP1FCHgnrlji9T+/MIwpldQibdz7VF9o+60hkY/dobfhvtX oWgBTJCTntoWnI4m0Zc/BghOYm5IZAz+qQF8OwTy5OljGofAjQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEh575ZKTO+yZn8XcEdThLkdZvw5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2Q1NWNiZjctNWViZi0z MTI1LWE0OTUtOGE3ZDMyYWQ4MGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQALScIHBeFWJWUAjw9I2XJIx9eY2j4NB/2ULz88 UKoG3x0JBpmBLLx37GG5GyPSl0DR848JG7Cb5W5wludBX5yl2CxTNOjxiCpDJ9c3 uF1frPqdR+iHv/9trC/TUsoVXbQUI8oaG1lCSOu/Qv8WJUp875tUdTclCmLdrof3 /YKM+OOJJ8MPtoXQ0Kq6S12SQ9S1VZQbb4AbwqixXyBUyX3YCu/P8NVg/KHIVomk z0Ibt+phHOlejgvjpzzsTlo4CcuEzOo/bUiC9BGXzuBXFsA58er31SJChqWxp+Gq 7feP9fjBwwiNw4oJL8N4ocOMixxN1SLfVv7EQVKDN6ycnL1p -----END CERTIFICATE-----Generated at Sun Jun 15 17:36:38 2025 by rpki-client