$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/25320c62-7dd7-391a-a4ee-859cec9e5768.roa File: 25320c62-7dd7-391a-a4ee-859cec9e5768.roa (raw, json) Hash identifier: 47ssjWvSDTDB2MLVZgMHQdNawbQQcdND0bRLTl/7b4c= Subject key identifier: E6:7C:64:EA:CC:6F:DF:CB:5B:BF:3F:0C:57:81:23:00:6D:23:B0:14 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E384BE348E5F96625905E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/25320c62-7dd7-391a-a4ee-859cec9e5768.roa Signing time: Thu 24 Apr 2025 12:37:23 +0000 ROA not before: Thu 24 Apr 2025 12:37:23 +0000 ROA not after: Wed 23 Jul 2025 12:37:23 +0000 asID: 396552 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:84:be:34:8e:5f:96:62:59:05:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:23 2025 GMT Not After : Jul 23 12:37:23 2025 GMT Subject: CN=1176a9ac-4ecd-4f98-8e75-35594d87b03f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3e:23:16:10:f3:2e:d0:1a:36:2d:cd:b3:c2: 0a:a2:59:34:56:61:87:75:11:fc:d5:a7:4d:d5:6b: 9b:38:80:a4:e7:3e:c0:a2:4e:7c:a9:0b:98:95:d0: 69:6d:81:ab:bb:a6:41:69:e5:2f:03:65:22:7b:f1: 84:e6:26:06:ba:2e:d0:b1:cd:38:be:16:54:61:bd: 31:64:f1:bb:2f:1e:db:73:90:6f:e5:21:d4:3d:bd: 35:b7:10:4b:f2:8b:54:83:e2:78:cb:b9:35:9e:9e: a8:81:f6:40:54:56:8f:43:3b:84:f7:43:ae:9f:82: e2:d4:04:a7:f9:8f:a6:c7:b5:73:ab:43:e7:5c:97: 14:82:f9:c0:93:c9:65:80:41:31:13:47:d1:57:98: 70:6b:7e:6b:eb:4a:31:30:ff:e2:04:e8:07:40:e6: 02:b9:a4:c5:92:5f:d3:99:0c:71:e2:3d:d4:e0:5f: 1b:dd:9b:54:fc:22:c8:1d:9c:ef:58:d0:82:27:b5: da:26:6c:a1:f0:8e:24:8b:78:ff:52:98:45:51:47: 52:e5:a8:17:93:69:c3:1c:f0:4e:fa:c1:7d:47:61: a0:29:f1:83:f8:22:d2:c6:ed:21:06:22:d2:1b:17: 5f:c1:84:89:cc:36:a0:1e:ce:b2:d8:27:40:6a:d3: c8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:7C:64:EA:CC:6F:DF:CB:5B:BF:3F:0C:57:81:23:00:6D:23:B0:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/25320c62-7dd7-391a-a4ee-859cec9e5768.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:32:b1:4d:32:fc:c2:53:63:d1:80:84:0f:f5:f2:83:a2:ff: e0:d1:d2:3a:3e:08:00:19:38:c7:ca:c1:ef:67:2d:20:b8:48: 14:ad:51:20:f8:5e:dd:1c:86:63:e5:fb:60:3e:7c:7b:a3:9b: 85:dd:4c:98:4f:68:2d:21:56:da:94:b1:7c:df:14:66:6f:f7: da:08:49:a1:28:90:92:40:b5:b4:ac:58:a6:c9:76:b4:dd:61: 86:22:cf:ac:75:1b:70:68:06:85:d1:e6:28:c4:8d:32:d3:ad: b9:29:78:84:cd:a8:b3:6f:54:0f:d3:d8:d7:1a:45:8c:c2:09: b3:50:4c:45:f8:a3:72:d8:23:69:dd:f6:1a:7f:04:ba:25:2a: 97:e0:3b:8b:0e:1c:59:b8:5d:98:eb:15:07:ff:db:28:07:d3: 3f:fe:55:44:49:c8:c5:eb:0c:ab:40:55:8a:29:aa:01:e5:b5: 24:05:4f:1a:d9:bd:5c:29:43:86:30:67:e4:2d:4c:7c:56:72: cb:de:ec:00:82:ed:71:ad:10:45:96:c4:9b:9d:83:a0:dd:9e: 89:ba:b3:39:e0:ac:27:70:5d:dd:bf:57:8e:04:ae:a3:e2:72: 8e:ab:ee:aa:3d:40:9c:7c:da:46:12:a4:93:13:48:33:a0:db: 35:0f:ae:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44S+NI5flmJZBeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyM1oXDTI1MDcyMzEyMzcyM1owLzEtMCsGA1UEAxMk MTE3NmE5YWMtNGVjZC00Zjk4LThlNzUtMzU1OTRkODdiMDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD4jFhDzLtAaNi3Ns8IKolk0VmGHdRH81adN 1WubOICk5z7Aok58qQuYldBpbYGru6ZBaeUvA2Uie/GE5iYGui7Qsc04vhZUYb0x ZPG7Lx7bc5Bv5SHUPb01txBL8otUg+J4y7k1np6ogfZAVFaPQzuE90Oun4Li1ASn +Y+mx7Vzq0PnXJcUgvnAk8llgEExE0fRV5hwa35r60oxMP/iBOgHQOYCuaTFkl/T mQxx4j3U4F8b3ZtU/CLIHZzvWNCCJ7XaJmyh8I4ki3j/UphFUUdS5agXk2nDHPBO +sF9R2GgKfGD+CLSxu0hBiLSGxdfwYSJzDagHs6y2CdAatPIfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOZ8ZOrMb9/LW78/DFeBIwBtI7AUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjUzMjBjNjItN2RkNy0z OTFhLWE0ZWUtODU5Y2VjOWU1NzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE4ysU0y/MJTY9GAhA/18oOi/+DR0jo+CAAZOMfKwe9nLSC4SBSt USD4Xt0chmPl+2A+fHujm4XdTJhPaC0hVtqUsXzfFGZv99oISaEokJJAtbSsWKbJ drTdYYYiz6x1G3BoBoXR5ijEjTLTrbkpeITNqLNvVA/T2NcaRYzCCbNQTEX4o3LY I2nd9hp/BLolKpfgO4sOHFm4XZjrFQf/2ygH0z/+VURJyMXrDKtAVYopqgHltSQF TxrZvVwpQ4YwZ+QtTHxWcsve7ACC7XGtEEWWxJudg6Ddnom6szngrCdwXd2/V44E rqPico6r7qo9QJx82kYSpJMTSDOg2zUPrkw= -----END CERTIFICATE-----Generated at Sun Apr 27 17:50:56 2025 by rpki-client