$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e554928-7feb-3557-86a2-4b827d5925ae.roa File: 2e554928-7feb-3557-86a2-4b827d5925ae.roa (raw, json) Hash identifier: szBalydMJmXHLtMXgPTcyg0sMsv9dsM6zM+KAMiWtX0= Subject key identifier: 5E:6E:4A:AD:9C:D1:80:9E:A9:84:A8:43:5A:BB:00:75:4E:9C:74:05 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C220AEB75A77B71C7E3770 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e554928-7feb-3557-86a2-4b827d5925ae.roa Signing time: Tue 15 Apr 2025 12:34:54 +0000 ROA not before: Tue 15 Apr 2025 12:34:54 +0000 ROA not after: Mon 14 Jul 2025 12:34:54 +0000 asID: 396608 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:20:ae:b7:5a:77:b7:1c:7e:37:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:54 2025 GMT Not After : Jul 14 12:34:54 2025 GMT Subject: CN=9f536dd5-abd8-47e0-81c1-17ec52774971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0e:d4:19:ce:59:91:64:f0:87:f2:b4:f4:3b: d9:a8:51:58:2c:ff:f8:bd:80:d9:67:72:db:e1:27: ad:f6:d4:6d:d2:11:8d:59:de:7f:66:92:68:ef:d2: 4c:7d:c5:d7:97:9a:4b:7c:03:4c:00:9f:7b:61:3a: 2f:0b:8a:19:cb:4b:c7:fb:ba:bf:0f:ec:59:0f:90: 80:34:92:29:73:94:19:21:ad:8f:a6:c0:9b:94:1f: 8e:cc:87:23:b4:e1:c0:e0:ff:0c:ec:a4:cf:13:49: 69:91:f7:96:57:52:87:df:48:10:96:45:1a:b2:09: 76:92:f0:ca:88:84:ab:56:9c:8c:6f:2d:60:6d:87: 85:56:86:4e:c3:b0:60:bd:6b:29:45:af:fa:0a:98: ac:ca:de:69:18:a6:f1:47:bb:47:d3:cd:63:2f:a6: cf:25:06:61:41:f3:64:c9:7a:07:b5:1a:88:22:81: 11:95:c6:c8:12:b2:e6:d9:11:95:c0:70:4b:f2:55: 90:72:55:99:c0:df:33:30:f9:22:05:03:c5:30:01: cd:d4:60:cf:95:a5:7e:1d:32:64:3f:15:e5:e9:38: 28:9d:4b:e6:b7:a9:86:f6:c3:e7:a9:52:8a:a5:70: 55:ac:ad:66:c0:22:03:5a:80:e7:ac:c4:07:27:9c: 32:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:6E:4A:AD:9C:D1:80:9E:A9:84:A8:43:5A:BB:00:75:4E:9C:74:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e554928-7feb-3557-86a2-4b827d5925ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:00:20:70:20:2a:ec:9c:d6:02:7c:c1:67:96:ae:3f:5f:ef: 8b:dd:50:8e:73:5b:ce:22:e1:6e:9a:f4:c9:89:4b:8e:d8:55: 58:7f:97:26:8c:e2:5b:89:db:2f:a1:8a:da:a3:1e:88:de:d8: e2:7b:66:c3:e2:a3:b4:a0:cc:59:7a:05:5b:65:a8:3d:b7:30: d8:93:27:63:e1:ca:fc:5b:e2:84:08:45:43:fb:52:f5:c3:2e: b3:fc:10:18:e5:ad:1a:2a:0d:f7:63:e4:8b:b9:b8:75:be:94: e2:7d:6e:e8:18:55:72:96:49:86:09:71:27:35:17:5a:04:56: e8:75:85:e3:94:86:c9:9c:37:34:b4:82:eb:b2:f0:38:84:8e: af:52:0d:27:59:6a:64:03:ff:ec:e1:fa:8e:61:14:f3:11:c5: 03:ed:81:a9:ba:47:4d:d5:5b:db:80:36:fc:c0:a7:fa:9f:2f: 56:1c:6b:5f:5f:af:09:f1:e5:5a:c9:67:09:9f:12:cc:5f:dd: 68:a9:1c:7f:1a:da:b9:18:c5:0d:15:38:c7:df:b2:31:80:e9: 7b:9b:17:d6:a5:b2:a9:90:fa:a4:59:37:e5:ab:a6:8e:14:cd: f1:2f:69:82:03:f5:e2:1e:92:97:33:3f:f3:5d:68:5e:e7:33: 6d:91:42:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwiCut1p3txx+N3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NFoXDTI1MDcxNDEyMzQ1NFowLzEtMCsGA1UEAxMk OWY1MzZkZDUtYWJkOC00N2UwLTgxYzEtMTdlYzUyNzc0OTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw7UGc5ZkWTwh/K09DvZqFFYLP/4vYDZZ3Lb 4Set9tRt0hGNWd5/ZpJo79JMfcXXl5pLfANMAJ97YTovC4oZy0vH+7q/D+xZD5CA NJIpc5QZIa2PpsCblB+OzIcjtOHA4P8M7KTPE0lpkfeWV1KH30gQlkUasgl2kvDK iISrVpyMby1gbYeFVoZOw7BgvWspRa/6Cpisyt5pGKbxR7tH081jL6bPJQZhQfNk yXoHtRqIIoERlcbIErLm2RGVwHBL8lWQclWZwN8zMPkiBQPFMAHN1GDPlaV+HTJk PxXl6TgonUvmt6mG9sPnqVKKpXBVrK1mwCIDWoDnrMQHJ5wyUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF5uSq2c0YCeqYSoQ1q7AHVOnHQFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmU1NTQ5MjgtN2ZlYi0z NTU3LTg2YTItNGI4MjdkNTkyNWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI4AIHAgKuyc1gJ8wWeWrj9f74vdUI5zW84i4W6a9MmJS47YVVh/ lyaM4luJ2y+hitqjHoje2OJ7ZsPio7SgzFl6BVtlqD23MNiTJ2Phyvxb4oQIRUP7 UvXDLrP8EBjlrRoqDfdj5Iu5uHW+lOJ9bugYVXKWSYYJcSc1F1oEVuh1heOUhsmc NzS0guuy8DiEjq9SDSdZamQD/+zh+o5hFPMRxQPtgam6R03VW9uANvzAp/qfL1Yc a19frwnx5VrJZwmfEsxf3WipHH8a2rkYxQ0VOMffsjGA6XubF9alsqmQ+qRZN+Wr po4UzfEvaYID9eIekpczP/NdaF7nM22RQvE= -----END CERTIFICATE-----Generated at Sun Apr 27 19:09:40 2025 by rpki-client