$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ae757c2-fd54-34e5-b835-c80962e8a054.roa File: 1ae757c2-fd54-34e5-b835-c80962e8a054.roa (raw, json) Hash identifier: hllk9Kxdyn6L1B7HkYEu3equ610bwx0Pc5fnHCJaRI0= Subject key identifier: 3E:23:C7:0A:0D:21:3E:83:EB:F4:0A:34:BE:4A:8C:E9:1D:4C:8D:A0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E385BD07F2180BAE3BA400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ae757c2-fd54-34e5-b835-c80962e8a054.roa Signing time: Thu 24 Apr 2025 12:37:24 +0000 ROA not before: Thu 24 Apr 2025 12:37:24 +0000 ROA not after: Wed 23 Jul 2025 12:37:24 +0000 asID: 10515 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:85:bd:07:f2:18:0b:ae:3b:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:24 2025 GMT Not After : Jul 23 12:37:24 2025 GMT Subject: CN=430984ca-6416-4f01-9725-1dc9009c7134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e4:36:4c:ee:7c:48:a8:08:22:44:67:5f:c8: 0f:f5:3a:6f:16:67:c1:be:87:60:c3:ba:f7:36:9b: a0:ec:f4:69:b7:cb:4e:d4:13:3e:65:31:5b:49:d2: 74:1d:ac:4b:9d:1c:d4:e2:5e:b4:d5:45:d2:93:4d: d4:f5:43:c4:fd:11:45:33:45:4b:89:48:77:e6:fa: 55:c4:65:01:63:b6:93:8a:cc:2c:25:db:18:c1:59: 34:fd:7a:62:6e:ad:f7:b6:63:c0:f5:57:9e:b2:30: 6c:eb:16:37:74:ac:24:77:15:b1:61:e2:93:a7:2d: f6:04:f6:57:d0:3a:10:0c:6f:d1:1f:f7:ed:be:9e: c2:37:45:be:55:42:55:15:76:7d:06:60:17:d6:af: 5f:11:f4:45:31:ce:f1:66:f0:99:84:9c:fd:37:4d: 17:d5:61:84:bd:f3:0e:65:ba:d4:cd:c1:4e:33:ba: 20:a1:85:e2:5f:0d:10:f4:61:9c:53:47:4a:17:6d: 5f:fd:6c:e1:87:74:61:45:69:af:9e:e1:a7:39:d1: af:2d:5f:75:14:94:a7:8a:bc:68:83:69:b5:92:a4: 63:1e:50:a3:77:e5:fb:a1:fb:56:32:88:71:44:44: 59:cd:ca:eb:ec:09:c3:25:dd:c4:0b:1f:d7:83:39: a3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:23:C7:0A:0D:21:3E:83:EB:F4:0A:34:BE:4A:8C:E9:1D:4C:8D:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ae757c2-fd54-34e5-b835-c80962e8a054.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:52:44:0b:0f:3a:b3:e6:67:b4:a7:87:76:fe:3a:e8:3d:06: 54:34:8d:20:fc:68:e1:4b:91:61:23:03:ab:92:12:d3:b0:ce: ca:1c:43:97:6d:51:e0:39:33:da:4b:e8:64:5c:c1:aa:a1:9f: cc:37:1e:76:8c:f1:5b:bd:5b:e8:3b:68:92:41:0b:4c:b2:93: 7e:3d:ad:c5:17:19:59:92:24:a5:31:27:35:2b:f8:0b:ab:85: a8:02:b1:44:12:91:83:80:df:7d:95:64:dd:b1:34:6e:48:08: 94:50:10:bc:31:fd:bd:9f:af:4b:08:d9:39:6c:8e:5c:5b:b4: bf:e0:e0:5b:7d:d2:1b:ad:05:be:ae:47:e1:41:c1:d2:99:88: 28:38:e7:05:13:f4:36:ca:cb:2a:f3:0f:b3:73:99:82:e7:f3: e0:39:3a:39:0c:57:47:52:87:08:84:3f:a3:97:62:ac:b5:6c: d6:3a:bb:cc:11:3f:92:1d:eb:a0:9f:c0:38:ed:13:bb:94:a2: 6f:ac:d5:31:35:c3:ba:f9:36:7a:6d:b6:09:5f:fa:f2:ae:ee: f3:4f:c0:3a:6a:72:55:c6:f5:4f:0e:74:79:a4:01:d3:6b:0a: 36:ac:46:01:76:1d:ce:a6:24:60:d0:84:a8:f6:28:38:00:1a: 0a:b2:87:ba -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44W9B/IYC647pAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNFoXDTI1MDcyMzEyMzcyNFowLzEtMCsGA1UEAxMk NDMwOTg0Y2EtNjQxNi00ZjAxLTk3MjUtMWRjOTAwOWM3MTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOQ2TO58SKgIIkRnX8gP9TpvFmfBvodgw7r3 Npug7PRpt8tO1BM+ZTFbSdJ0HaxLnRzU4l601UXSk03U9UPE/RFFM0VLiUh35vpV xGUBY7aTiswsJdsYwVk0/Xpibq33tmPA9VeesjBs6xY3dKwkdxWxYeKTpy32BPZX 0DoQDG/RH/ftvp7CN0W+VUJVFXZ9BmAX1q9fEfRFMc7xZvCZhJz9N00X1WGEvfMO ZbrUzcFOM7ogoYXiXw0Q9GGcU0dKF21f/Wzhh3RhRWmvnuGnOdGvLV91FJSnirxo g2m1kqRjHlCjd+X7oftWMohxRERZzcrr7AnDJd3ECx/XgzmjdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD4jxwoNIT6D6/QKNL5KjOkdTI2gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWFlNzU3YzItZmQ1NC0z NGU1LWI4MzUtYzgwOTYyZThhMDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIBSRAsPOrPmZ7Snh3b+Oug9BlQ0jSD8aOFLkWEjA6uSEtOwzsoc Q5dtUeA5M9pL6GRcwaqhn8w3HnaM8Vu9W+g7aJJBC0yyk349rcUXGVmSJKUxJzUr +AurhagCsUQSkYOA332VZN2xNG5ICJRQELwx/b2fr0sI2TlsjlxbtL/g4Ft90hut Bb6uR+FBwdKZiCg45wUT9DbKyyrzD7NzmYLn8+A5OjkMV0dShwiEP6OXYqy1bNY6 u8wRP5Id66CfwDjtE7uUom+s1TE1w7r5Nnpttglf+vKu7vNPwDpqclXG9U8OdHmk AdNrCjasRgF2Hc6mJGDQhKj2KDgAGgqyh7o= -----END CERTIFICATE-----Generated at Sun Apr 27 17:51:13 2025 by rpki-client