$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1c698406-1d8f-3f51-bfd2-b1a159af0a58.roa File: 1c698406-1d8f-3f51-bfd2-b1a159af0a58.roa (raw, json) Hash identifier: rxiJXC/VVve+CCAgtEkgFJgAg7sT31/P3Ibq8DYBVIA= Subject key identifier: 71:AB:81:F5:AE:05:18:0E:C5:9C:91:0F:50:20:06:6B:7B:67:CB:A7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E3896C4C2A1AF99AD94100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1c698406-1d8f-3f51-bfd2-b1a159af0a58.roa Signing time: Thu 24 Apr 2025 12:37:26 +0000 ROA not before: Thu 24 Apr 2025 12:37:26 +0000 ROA not after: Wed 23 Jul 2025 12:37:26 +0000 asID: 36619 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:89:6c:4c:2a:1a:f9:9a:d9:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:26 2025 GMT Not After : Jul 23 12:37:26 2025 GMT Subject: CN=2e688b34-3741-483f-91fa-abcf24948778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0d:f6:1f:f7:61:98:6e:e1:2d:fb:d3:ed:60: 3a:bb:5e:bd:68:59:14:1e:1a:bf:bf:c5:65:a0:4f: 5a:76:de:06:6b:34:58:d3:15:d8:a1:56:7e:11:55: 15:83:90:68:5d:57:08:35:12:53:1a:54:7f:cc:d0: 8b:8b:65:1c:71:19:0f:ee:b1:4d:09:1b:ea:50:45: 80:56:93:ac:de:8d:0b:d4:23:36:f3:3b:41:ac:6c: 8f:c7:0f:25:61:84:6a:79:aa:27:dd:3c:4c:09:5d: c6:10:74:b9:c3:72:7d:b0:0e:23:e5:f3:6a:58:d3: 87:fc:2f:34:d7:a0:b4:dc:ed:9f:31:eb:ce:3b:34: fb:24:fc:bc:a7:5c:6f:82:8d:7b:2a:bf:83:9c:b8: e0:22:bc:37:bf:cf:83:a0:67:ef:18:98:57:02:a6: 71:a1:a2:df:63:0e:30:7b:89:79:e2:d0:a8:73:9e: c4:ed:d8:2e:b6:e2:a8:de:88:dd:ca:b9:71:2a:8a: 49:e5:ce:d3:35:53:57:35:43:ad:1f:eb:0f:7b:e7: cc:ad:b1:a1:39:3b:d0:52:7c:92:f2:0c:75:c5:24: 40:c1:4a:27:38:dc:65:5f:5d:1a:30:9a:03:8b:3d: 13:36:13:15:d0:c9:93:2b:db:54:44:ce:f8:83:81: f1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:AB:81:F5:AE:05:18:0E:C5:9C:91:0F:50:20:06:6B:7B:67:CB:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1c698406-1d8f-3f51-bfd2-b1a159af0a58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:06:4e:31:0b:ba:aa:9a:84:39:dc:8f:cf:0c:b6:35:17:ba: 5f:8b:ba:7d:c2:b1:be:c6:9b:35:d3:b7:c5:25:0c:1b:66:3b: 22:95:5e:4d:55:d2:75:41:0b:90:7f:46:f5:fe:98:ad:e4:4c: a6:cc:9c:66:3a:1d:74:5a:f8:28:20:ec:82:a9:8a:3f:73:53: 7e:d0:cb:58:9a:7b:66:c6:87:3b:89:1d:f7:5e:2e:0d:25:53: 3e:0c:2a:4e:75:e8:4f:10:41:02:00:74:23:13:a8:c8:01:2e: 11:a5:12:dc:d1:ae:bd:82:a5:62:dd:3a:01:04:62:23:5c:2d: a8:9f:20:2b:c5:9f:91:89:5a:ca:05:f2:95:70:fd:2d:fd:64: 6c:00:1d:2c:cc:42:43:0d:8c:9d:c9:02:cb:c0:6e:d6:e0:c0: 01:85:26:f5:2a:ae:72:33:b5:9e:83:e3:fd:96:24:52:a2:64: e3:3a:fe:c8:f0:74:7a:9c:4b:41:85:52:26:a2:18:6b:d1:fa: c9:e6:8b:95:cf:9e:56:2b:ac:cb:ef:5c:59:e5:c9:f1:2e:64: 1e:b7:a6:3e:3d:00:73:45:38:f0:22:a6:67:9b:6a:ae:7a:1b: 3c:7e:fc:00:de:98:5a:9c:a2:b8:cf:f7:f1:11:e8:d2:e3:9e: 47:bc:88:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44lsTCoa+ZrZQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNloXDTI1MDcyMzEyMzcyNlowLzEtMCsGA1UEAxMk MmU2ODhiMzQtMzc0MS00ODNmLTkxZmEtYWJjZjI0OTQ4Nzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlw32H/dhmG7hLfvT7WA6u169aFkUHhq/v8Vl oE9adt4GazRY0xXYoVZ+EVUVg5BoXVcINRJTGlR/zNCLi2UccRkP7rFNCRvqUEWA VpOs3o0L1CM28ztBrGyPxw8lYYRqeaon3TxMCV3GEHS5w3J9sA4j5fNqWNOH/C80 16C03O2fMevOOzT7JPy8p1xvgo17Kr+DnLjgIrw3v8+DoGfvGJhXAqZxoaLfYw4w e4l54tCoc57E7dgutuKo3ojdyrlxKopJ5c7TNVNXNUOtH+sPe+fMrbGhOTvQUnyS 8gx1xSRAwUonONxlX10aMJoDiz0TNhMV0MmTK9tURM74g4HxZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHGrgfWuBRgOxZyRD1AgBmt7Z8unMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWM2OTg0MDYtMWQ4Zi0z ZjUxLWJmZDItYjFhMTU5YWYwYTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEwGTjELuqqahDncj88MtjUXul+Lun3Csb7GmzXTt8UlDBtmOyKV Xk1V0nVBC5B/RvX+mK3kTKbMnGY6HXRa+Cgg7IKpij9zU37Qy1iae2bGhzuJHfde Lg0lUz4MKk516E8QQQIAdCMTqMgBLhGlEtzRrr2CpWLdOgEEYiNcLaifICvFn5GJ WsoF8pVw/S39ZGwAHSzMQkMNjJ3JAsvAbtbgwAGFJvUqrnIztZ6D4/2WJFKiZOM6 /sjwdHqcS0GFUiaiGGvR+snmi5XPnlYrrMvvXFnlyfEuZB63pj49AHNFOPAipmeb aq56Gzx+/ADemFqcorjP9/ER6NLjnke8iJg= -----END CERTIFICATE-----Generated at Sun Apr 27 19:05:56 2025 by rpki-client