$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0afe0861-e80d-3103-9a48-663680ed8ed8.roa File: 0afe0861-e80d-3103-9a48-663680ed8ed8.roa (raw, json) Hash identifier: Z20HPwA/m29ytgACcZrsxRnoO53EYc5llnLIALCIEl8= Subject key identifier: DE:1F:93:6F:25:5D:4F:41:AE:96:1C:FE:9F:8A:6C:C7:75:C6:55:15 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C21DB0C35B596420EEFC00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0afe0861-e80d-3103-9a48-663680ed8ed8.roa Signing time: Tue 15 Apr 2025 12:34:53 +0000 ROA not before: Tue 15 Apr 2025 12:34:53 +0000 ROA not after: Mon 14 Jul 2025 12:34:53 +0000 asID: 396576 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:1d:b0:c3:5b:59:64:20:ee:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:53 2025 GMT Not After : Jul 14 12:34:53 2025 GMT Subject: CN=38426445-a6ec-4911-b739-6cf44fff0a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c7:fb:80:17:30:c3:9b:fd:91:17:d9:b0:0c: 5e:ab:5d:98:b7:bc:e6:8c:1f:5d:d9:8d:dd:ea:62: 4a:13:18:44:63:08:0c:c3:a8:36:fc:f9:8e:38:18: 06:67:03:e6:37:ef:8b:14:19:f7:57:7c:2e:db:f7: d7:3e:72:94:56:dc:6a:e9:0b:5e:82:57:65:05:cd: 90:95:b2:c6:d0:4e:28:28:10:10:fe:af:19:c9:11: b6:5d:c8:ce:c2:80:de:35:19:0a:00:62:09:5f:09: 6f:90:71:49:ee:0f:20:bd:fa:fb:77:08:21:e4:21: bb:9e:67:02:f5:d6:0a:34:77:95:7f:39:95:df:c1: 4c:36:09:39:24:14:dc:72:a5:d4:2f:63:95:42:f6: 77:16:9a:6c:91:08:f3:97:30:e9:65:66:29:66:e1: 65:ee:89:90:e1:63:87:bf:05:f5:ca:79:74:fa:3c: fc:1e:a1:52:38:ce:37:ea:f0:35:09:89:6f:0b:90: ae:5d:eb:e7:a2:e2:94:03:70:6e:85:41:0d:2e:42: ce:aa:80:31:2f:7a:1f:73:21:0d:e3:a5:28:cf:51: 93:c8:a0:9a:ff:c6:f2:ff:de:01:c8:a0:08:8b:ac: 00:9f:db:ec:29:05:75:eb:1a:2b:e2:d9:86:b4:1b: 86:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1F:93:6F:25:5D:4F:41:AE:96:1C:FE:9F:8A:6C:C7:75:C6:55:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0afe0861-e80d-3103-9a48-663680ed8ed8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:f4:2b:5f:1c:a6:80:db:7f:01:77:d1:02:f0:ad:d6:25:6e: b3:d2:93:dc:c1:49:b0:9a:6f:38:b5:9c:09:68:44:55:c6:b5: ed:02:63:96:81:27:b2:35:aa:fe:f7:b7:4a:ff:7f:70:ba:99: a3:c7:15:97:fe:76:be:26:0f:ee:14:fd:26:d1:11:35:fc:f1: 4d:14:ec:48:78:05:94:49:2b:83:eb:0f:69:4b:c8:d0:e8:14: d2:f8:da:c0:30:8d:29:41:2b:eb:5b:b9:81:9a:8a:fd:b2:ad: 99:41:67:e0:1c:e4:4a:f5:f9:b1:6d:cd:f2:bd:e4:80:ff:69: a7:f1:a9:65:ee:60:07:df:3a:86:6b:4e:c5:c2:65:03:ab:48: a0:3d:e0:54:34:75:82:41:57:ff:c0:f1:ee:90:07:82:d4:8a: ff:3f:89:9f:98:cc:ab:b0:e5:62:20:eb:7f:80:fb:1d:4b:79: 1b:d5:7e:81:c4:76:86:84:af:a9:e6:a2:3d:d0:12:38:e2:2a: 0a:e2:9d:5a:0d:ed:9b:84:16:b8:29:a0:58:f1:6b:4c:08:01: d4:8f:db:7c:78:fa:17:4d:f6:6e:d6:13:09:ce:62:88:61:7f: 04:16:67:31:a4:92:d7:96:52:84:62:61:b7:dc:bd:70:ab:74: 76:85:e2:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwh2ww1tZZCDu/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1M1oXDTI1MDcxNDEyMzQ1M1owLzEtMCsGA1UEAxMk Mzg0MjY0NDUtYTZlYy00OTExLWI3MzktNmNmNDRmZmYwYTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMf7gBcww5v9kRfZsAxeq12Yt7zmjB9d2Y3d 6mJKExhEYwgMw6g2/PmOOBgGZwPmN++LFBn3V3wu2/fXPnKUVtxq6QtegldlBc2Q lbLG0E4oKBAQ/q8ZyRG2XcjOwoDeNRkKAGIJXwlvkHFJ7g8gvfr7dwgh5CG7nmcC 9dYKNHeVfzmV38FMNgk5JBTccqXUL2OVQvZ3FppskQjzlzDpZWYpZuFl7omQ4WOH vwX1ynl0+jz8HqFSOM436vA1CYlvC5CuXevnouKUA3BuhUENLkLOqoAxL3ofcyEN 46Uoz1GTyKCa/8by/94ByKAIi6wAn9vsKQV16xor4tmGtBuGuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN4fk28lXU9BrpYc/p+KbMd1xlUVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGFmZTA4NjEtZTgwZC0z MTAzLTlhNDgtNjYzNjgwZWQ4ZWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACT0K18cpoDbfwF30QLwrdYlbrPSk9zBSbCabzi1nAloRFXGte0C Y5aBJ7I1qv73t0r/f3C6maPHFZf+dr4mD+4U/SbRETX88U0U7Eh4BZRJK4PrD2lL yNDoFNL42sAwjSlBK+tbuYGaiv2yrZlBZ+Ac5Er1+bFtzfK95ID/aafxqWXuYAff OoZrTsXCZQOrSKA94FQ0dYJBV//A8e6QB4LUiv8/iZ+YzKuw5WIg63+A+x1LeRvV foHEdoaEr6nmoj3QEjjiKgrinVoN7ZuEFrgpoFjxa0wIAdSP23x4+hdN9m7WEwnO YohhfwQWZzGkkteWUoRiYbfcvXCrdHaF4hc= -----END CERTIFICATE-----Generated at Mon Apr 28 02:42:07 2025 by rpki-client