$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/119fb2ce-88e5-3b28-96cf-003362526716.roa File: 119fb2ce-88e5-3b28-96cf-003362526716.roa (raw, json) Hash identifier: Eg1eCFHG/96BZc8FnbUH/hu4UlecbMHUFEOXWNuOLAo= Subject key identifier: 63:33:34:D7:04:3C:6A:B6:64:18:96:CA:35:C5:CE:69:3D:4D:8A:02 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E38829B97739519338AB80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/119fb2ce-88e5-3b28-96cf-003362526716.roa Signing time: Thu 24 Apr 2025 12:37:25 +0000 ROA not before: Thu 24 Apr 2025 12:37:25 +0000 ROA not after: Wed 23 Jul 2025 12:37:25 +0000 asID: 20362 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:88:29:b9:77:39:51:93:38:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:25 2025 GMT Not After : Jul 23 12:37:25 2025 GMT Subject: CN=ecd0449a-1f18-43ac-8a58-9449d9c21e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a9:55:ab:5c:3c:27:96:bb:bb:40:9f:18:60: 31:3b:4d:1e:21:69:24:e5:e1:77:75:9c:23:0b:5b: 8f:47:85:a3:6c:2b:60:95:53:a1:0c:88:c5:1d:71: 3e:74:8e:a6:0b:49:15:81:9b:20:03:1e:c1:1a:b0: 3f:33:92:83:81:4d:e3:c1:a1:b9:e6:0c:42:e3:dd: 66:54:1a:90:09:ab:dc:31:34:44:50:34:14:85:a5: d0:41:2f:76:8b:af:01:fc:88:d8:f0:bc:12:42:43: ce:04:51:a9:19:e8:15:0e:50:ef:0d:0a:17:f7:9f: 91:07:c4:a4:9c:bc:47:d1:60:89:31:ea:a1:3b:87: 76:f5:be:d7:f7:b0:19:83:2b:ef:39:ad:5a:3d:9a: 73:d5:60:90:84:65:9f:5c:b5:5b:93:77:a0:a6:15: b3:2d:44:45:cf:c5:3d:52:d7:f6:a7:41:ce:fa:a9: 99:2a:77:12:19:b3:b6:95:4e:3b:af:69:2e:69:36: 26:1d:5c:95:56:1a:33:bd:66:8b:80:27:e0:7f:60: 10:8e:50:f9:4f:0a:f8:68:1d:6f:a8:0e:af:dd:87: e8:0d:79:97:c5:7d:86:89:cf:4f:d3:68:ef:27:5d: 1b:4d:4d:37:1c:33:3e:ce:02:6f:1a:55:a9:90:50: f3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:33:34:D7:04:3C:6A:B6:64:18:96:CA:35:C5:CE:69:3D:4D:8A:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/119fb2ce-88e5-3b28-96cf-003362526716.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:c1:e0:87:b9:d6:c0:61:e2:33:de:b7:be:89:c0:26:e0:fd: 98:4e:f6:80:12:25:10:f1:8f:34:b6:ac:18:27:d3:ac:38:a0: 06:c7:3d:de:33:61:ce:21:76:a3:59:d4:ed:85:82:7a:fc:ec: 58:77:52:57:a1:ad:76:40:9a:e8:6b:39:26:c5:1d:ca:db:c5: 37:c1:8b:53:e4:34:9e:ba:d0:e7:c2:fb:3d:60:df:31:26:ee: db:84:95:b8:84:8a:fb:e1:db:d0:18:3a:a6:71:65:1f:c6:5f: cf:92:01:c1:51:fe:4b:b3:17:49:23:a0:04:83:e4:03:a6:49: 13:cb:b0:ed:48:ff:5f:c0:bf:51:40:c0:e3:e6:ae:23:c0:aa: 05:fd:06:27:71:1a:b9:2c:46:3d:5a:9e:ee:42:6d:f8:b3:19: 15:12:e7:65:e9:6c:67:20:31:b7:86:69:bb:f6:fa:c5:b8:96: ff:62:ea:a1:83:22:d9:d3:76:90:4c:8d:24:cf:19:ba:6e:ee: 95:84:52:7f:59:86:28:33:43:5b:32:98:56:0a:5c:26:a6:fb: 0d:c6:bc:e3:a2:f0:65:6f:ae:3e:e9:87:0d:67:e0:e8:b2:94: 50:7f:c8:64:12:de:68:be:35:0f:8e:d7:ba:27:4d:bf:97:57: 28:a3:15:80 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44gpuXc5UZM4q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNVoXDTI1MDcyMzEyMzcyNVowLzEtMCsGA1UEAxMk ZWNkMDQ0OWEtMWYxOC00M2FjLThhNTgtOTQ0OWQ5YzIxZThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6lVq1w8J5a7u0CfGGAxO00eIWkk5eF3dZwj C1uPR4WjbCtglVOhDIjFHXE+dI6mC0kVgZsgAx7BGrA/M5KDgU3jwaG55gxC491m VBqQCavcMTREUDQUhaXQQS92i68B/IjY8LwSQkPOBFGpGegVDlDvDQoX95+RB8Sk nLxH0WCJMeqhO4d29b7X97AZgyvvOa1aPZpz1WCQhGWfXLVbk3egphWzLURFz8U9 Utf2p0HO+qmZKncSGbO2lU47r2kuaTYmHVyVVhozvWaLgCfgf2AQjlD5Twr4aB1v qA6v3YfoDXmXxX2Gic9P02jvJ10bTU03HDM+zgJvGlWpkFDzawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGMzNNcEPGq2ZBiWyjXFzmk9TYoCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTE5ZmIyY2UtODhlNS0z YjI4LTk2Y2YtMDAzMzYyNTI2NzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACHB4Ie51sBh4jPet76JwCbg/ZhO9oASJRDxjzS2rBgn06w4oAbH Pd4zYc4hdqNZ1O2Fgnr87Fh3UlehrXZAmuhrOSbFHcrbxTfBi1PkNJ660OfC+z1g 3zEm7tuElbiEivvh29AYOqZxZR/GX8+SAcFR/kuzF0kjoASD5AOmSRPLsO1I/1/A v1FAwOPmriPAqgX9BidxGrksRj1anu5CbfizGRUS52XpbGcgMbeGabv2+sW4lv9i 6qGDItnTdpBMjSTPGbpu7pWEUn9ZhigzQ1symFYKXCam+w3GvOOi8GVvrj7phw1n 4OiylFB/yGQS3mi+NQ+O17onTb+XVyijFYA= -----END CERTIFICATE-----Generated at Sun Apr 27 17:57:44 2025 by rpki-client