$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28ae1731-d313-32a5-b0e7-bf7e4a3bf612.roa File: 28ae1731-d313-32a5-b0e7-bf7e4a3bf612.roa (raw, json) Hash identifier: HzLAzU/exCndkM/fewLkTHrKCTnO+kV7mFsIQH/hVPQ= Subject key identifier: 9C:AE:64:76:E5:D3:94:F1:EE:1A:F2:6D:CF:BD:DD:1D:5F:25:EF:25 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E3883B10C3B1148A19F340 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28ae1731-d313-32a5-b0e7-bf7e4a3bf612.roa Signing time: Thu 24 Apr 2025 12:37:25 +0000 ROA not before: Thu 24 Apr 2025 12:37:25 +0000 ROA not after: Wed 23 Jul 2025 12:37:25 +0000 asID: 396604 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:88:3b:10:c3:b1:14:8a:19:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:25 2025 GMT Not After : Jul 23 12:37:25 2025 GMT Subject: CN=e169af97-85de-4995-9c28-c3c3a9400da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:77:59:e1:70:04:5e:1b:58:6c:89:a0:37:01: 98:fd:6c:bd:2e:25:2a:68:66:a8:da:e2:3e:84:38: a0:e4:e0:40:d8:24:1b:18:3e:45:28:59:28:e9:0d: ce:f5:4f:31:7a:fb:b4:ed:54:51:28:11:21:a5:92: ad:da:f6:a7:7f:4a:bf:47:3b:bb:5c:f6:c9:70:09: 01:43:d4:ba:95:91:e3:03:aa:f5:cc:62:40:96:7b: f5:59:11:80:f3:da:ac:97:ab:79:8d:fa:66:25:62: d1:b6:d0:a4:b9:ad:de:7d:2f:45:16:ca:d5:41:67: 5b:8d:0f:e9:cc:83:38:74:1e:1e:a3:63:ac:40:00: 92:0d:c9:53:85:80:fa:9e:5b:5c:ce:90:49:55:d2: 67:eb:eb:12:a6:e5:04:11:26:21:1c:85:e6:96:26: 1d:0d:8c:0e:02:36:0d:6b:e7:32:1f:dc:d2:93:15: a0:13:ea:18:b7:03:0e:e5:ad:22:31:e0:88:df:11: e5:1a:20:e4:6e:0f:39:35:27:68:21:65:54:33:4a: c7:de:7b:c1:5a:87:5a:00:e7:0d:c3:32:4d:b1:f4: 2f:58:85:6b:d9:be:7c:06:69:fa:2b:40:e6:93:91: 2e:cb:64:e7:06:17:65:e9:95:bf:86:27:61:86:f4: 65:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:AE:64:76:E5:D3:94:F1:EE:1A:F2:6D:CF:BD:DD:1D:5F:25:EF:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28ae1731-d313-32a5-b0e7-bf7e4a3bf612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:1f:16:10:9e:11:68:e2:03:da:81:67:2c:34:b0:7a:3b:be: 4e:d6:12:44:8d:ed:f9:2d:0b:ad:9b:d5:61:5e:39:51:dc:ca: e0:48:e3:e0:70:55:60:43:d8:28:e9:9d:75:07:72:f5:34:6f: 20:78:29:87:1a:33:70:86:35:80:7c:b8:6c:60:fa:e7:99:7f: 49:eb:5d:b8:ed:02:61:39:04:a7:08:4f:2b:f1:f5:7a:0a:cd: 0c:3d:c4:d1:f6:57:79:ff:fa:d8:9d:ea:f7:9c:c6:2d:db:1a: ed:87:5f:65:60:f7:49:7a:21:4d:12:1d:6c:8b:7d:ab:8f:b9: da:fa:a4:7c:c5:93:5d:04:eb:a7:eb:16:80:73:c9:7e:57:aa: d6:90:75:3f:84:79:d8:7e:1f:03:59:df:d1:23:2c:6e:b7:45: de:e0:59:a1:68:be:75:2e:25:2d:f4:44:b3:02:03:14:64:a6: 9b:f5:42:d2:aa:21:54:44:e5:71:74:91:1b:75:c4:51:f2:f8: 6e:11:68:72:9e:9f:f9:ab:16:f7:d5:34:93:db:f4:d0:af:09: 69:dd:2e:e1:90:69:6c:38:1d:39:eb:a0:b9:9b:f2:f5:8d:c7: 36:07:dc:81:9d:32:15:76:79:3c:68:40:e7:f9:2b:e8:b4:31: cd:b3:ab:bc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44g7EMOxFIoZ80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNVoXDTI1MDcyMzEyMzcyNVowLzEtMCsGA1UEAxMk ZTE2OWFmOTctODVkZS00OTk1LTljMjgtYzNjM2E5NDAwZGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXdZ4XAEXhtYbImgNwGY/Wy9LiUqaGao2uI+ hDig5OBA2CQbGD5FKFko6Q3O9U8xevu07VRRKBEhpZKt2vanf0q/Rzu7XPbJcAkB Q9S6lZHjA6r1zGJAlnv1WRGA89qsl6t5jfpmJWLRttCkua3efS9FFsrVQWdbjQ/p zIM4dB4eo2OsQACSDclThYD6nltczpBJVdJn6+sSpuUEESYhHIXmliYdDYwOAjYN a+cyH9zSkxWgE+oYtwMO5a0iMeCI3xHlGiDkbg85NSdoIWVUM0rH3nvBWodaAOcN wzJNsfQvWIVr2b58Bmn6K0Dmk5Euy2TnBhdl6ZW/hidhhvRljwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJyuZHbl05Tx7hrybc+93R1fJe8lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjhhZTE3MzEtZDMxMy0z MmE1LWIwZTctYmY3ZTRhM2JmNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHYfFhCeEWjiA9qBZyw0sHo7vk7WEkSN7fktC62b1WFeOVHcyuBI 4+BwVWBD2CjpnXUHcvU0byB4KYcaM3CGNYB8uGxg+ueZf0nrXbjtAmE5BKcITyvx 9XoKzQw9xNH2V3n/+tid6vecxi3bGu2HX2Vg90l6IU0SHWyLfauPudr6pHzFk10E 66frFoBzyX5XqtaQdT+Eedh+HwNZ39EjLG63Rd7gWaFovnUuJS30RLMCAxRkppv1 QtKqIVRE5XF0kRt1xFHy+G4RaHKen/mrFvfVNJPb9NCvCWndLuGQaWw4HTnroLmb 8vWNxzYH3IGdMhV2eTxoQOf5K+i0Mc2zq7w= -----END CERTIFICATE-----Generated at Sun Apr 27 22:58:58 2025 by rpki-client