$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2044af53-1751-3c14-b88d-8a21757b959c.roa File: 2044af53-1751-3c14-b88d-8a21757b959c.roa (raw, json) Hash identifier: DF/yYF51O5QooB0Qva+rv5nKh2c5etd3T0e1bLGDlWQ= Subject key identifier: C2:F0:E1:C2:43:E9:12:13:0C:9D:B9:64:2E:8B:D3:7A:0E:EC:7D:EC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C21FEDB983500367CA1377 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2044af53-1751-3c14-b88d-8a21757b959c.roa Signing time: Tue 15 Apr 2025 12:34:54 +0000 ROA not before: Tue 15 Apr 2025 12:34:54 +0000 ROA not after: Mon 14 Jul 2025 12:34:54 +0000 asID: 396575 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:1f:ed:b9:83:50:03:67:ca:13:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:54 2025 GMT Not After : Jul 14 12:34:54 2025 GMT Subject: CN=68163dd6-96a0-40e5-8b5c-e42d0a7fad07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ce:e4:99:98:d7:31:01:17:f5:8d:1e:de:ef: 97:92:05:37:c7:ab:94:4d:77:86:b6:98:ad:09:c8: 00:df:58:0b:ff:4c:7b:68:9f:06:52:f0:7d:05:2f: 32:a0:41:23:42:c1:12:cc:6b:9c:d2:d6:36:2a:f9: d1:2e:fd:55:05:bf:cd:07:e8:9e:4e:25:09:5c:d5: da:de:26:0b:e4:91:6d:e4:37:63:71:8f:4d:42:26: 0e:c3:5f:7f:4b:28:6b:f6:cd:bd:97:a3:fa:16:69: fe:62:64:ce:ac:7b:1f:e6:54:0f:c6:6b:11:7b:3c: 87:3f:fe:c9:bd:4e:18:2d:94:d7:34:d0:c8:00:75: 29:16:d0:45:f1:78:b5:af:e9:74:d4:3e:5e:37:c9: cb:e4:eb:7e:2a:be:e7:d3:91:7f:ae:71:2a:62:0c: a9:ab:f0:f3:3e:2f:b6:70:62:c8:c0:75:0e:13:1c: 93:c1:04:2e:f5:cb:32:f1:55:36:18:f0:7e:93:16: b3:b7:15:8a:79:ec:e3:dc:15:6a:b9:17:00:11:99: 53:3e:2a:39:a3:19:77:01:88:e2:52:5b:fd:db:97: 66:3c:a3:42:d9:33:96:be:ff:25:3d:ae:30:d0:67: 76:17:10:b9:a7:7a:d7:7b:a0:93:8e:5e:80:30:34: 94:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F0:E1:C2:43:E9:12:13:0C:9D:B9:64:2E:8B:D3:7A:0E:EC:7D:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2044af53-1751-3c14-b88d-8a21757b959c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:5c:58:da:90:59:59:9f:00:e5:8d:e8:f4:36:4b:18:6a:8d: 9a:79:4a:bc:b6:bc:5f:c4:98:1e:8f:c1:4d:2b:45:45:73:df: 50:77:44:b5:bc:7d:b7:f9:33:4e:bd:02:53:35:4b:27:1f:12: b3:49:d2:e1:76:25:5a:5b:78:2c:7d:af:54:4b:0a:7f:73:9b: 18:12:45:80:05:18:5a:92:9f:aa:54:c3:da:68:40:66:92:ba: 6b:dd:be:2a:00:b4:4c:a3:17:90:33:00:d8:60:4d:e8:a2:e7: d2:23:a3:f6:66:91:69:23:22:1d:d0:8e:b0:98:06:dd:bc:d6: 71:a7:d3:05:ae:51:22:5b:fc:29:98:44:19:08:db:48:e6:df: 41:c7:85:ff:26:62:d4:9b:62:68:e1:04:e8:e9:55:21:2b:d4: 15:68:f7:d6:16:68:c2:3b:d7:2f:c3:f7:92:d2:34:a1:5a:32: 81:c2:96:64:19:69:be:f7:b9:ff:d8:9e:d7:88:1f:2d:b3:9c: a6:08:7b:a2:60:0e:3f:97:26:0d:1c:8e:9d:ef:53:28:9e:f4: d1:2a:0e:b3:06:79:db:0f:05:86:31:cc:8e:10:7e:3e:01:53: 4e:aa:b0:3d:22:95:2f:2e:21:b3:0a:4b:0e:ea:b3:b8:96:0a: 5e:c5:1a:76 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwh/tuYNQA2fKE3cwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NFoXDTI1MDcxNDEyMzQ1NFowLzEtMCsGA1UEAxMk NjgxNjNkZDYtOTZhMC00MGU1LThiNWMtZTQyZDBhN2ZhZDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiM7kmZjXMQEX9Y0e3u+XkgU3x6uUTXeGtpit CcgA31gL/0x7aJ8GUvB9BS8yoEEjQsESzGuc0tY2KvnRLv1VBb/NB+ieTiUJXNXa 3iYL5JFt5DdjcY9NQiYOw19/Syhr9s29l6P6Fmn+YmTOrHsf5lQPxmsRezyHP/7J vU4YLZTXNNDIAHUpFtBF8Xi1r+l01D5eN8nL5Ot+Kr7n05F/rnEqYgypq/DzPi+2 cGLIwHUOExyTwQQu9csy8VU2GPB+kxaztxWKeezj3BVquRcAEZlTPio5oxl3AYji Ulv925dmPKNC2TOWvv8lPa4w0Gd2FxC5p3rXe6CTjl6AMDSUvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMLw4cJD6RITDJ25ZC6L03oO7H3sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjA0NGFmNTMtMTc1MS0z YzE0LWI4OGQtOGEyMTc1N2I5NTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAANcWNqQWVmfAOWN6PQ2SxhqjZp5Sry2vF/EmB6PwU0rRUVz31B3 RLW8fbf5M069AlM1SycfErNJ0uF2JVpbeCx9r1RLCn9zmxgSRYAFGFqSn6pUw9po QGaSumvdvioAtEyjF5AzANhgTeii59Ijo/ZmkWkjIh3QjrCYBt281nGn0wWuUSJb /CmYRBkI20jm30HHhf8mYtSbYmjhBOjpVSEr1BVo99YWaMI71y/D95LSNKFaMoHC lmQZab73uf/YnteIHy2znKYIe6JgDj+XJg0cjp3vUyie9NEqDrMGedsPBYYxzI4Q fj4BU06qsD0ilS8uIbMKSw7qs7iWCl7FGnY= -----END CERTIFICATE-----Generated at Sun Apr 27 20:22:04 2025 by rpki-client