$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/34f1f1ac-60c2-3ec9-937b-a480daf3598d.roa File: 34f1f1ac-60c2-3ec9-937b-a480daf3598d.roa (raw, json) Hash identifier: NSJk5uo3qqtOuwoTGUCYdKnMXijLrvURFTT5PmtlMdY= Subject key identifier: 82:0C:A9:2B:3D:76:DA:BE:A4:A4:5C:07:0C:88:78:44:37:04:3B:BF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C2226800F7ED9377B63A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/34f1f1ac-60c2-3ec9-937b-a480daf3598d.roa Signing time: Tue 15 Apr 2025 12:34:55 +0000 ROA not before: Tue 15 Apr 2025 12:34:55 +0000 ROA not after: Mon 14 Jul 2025 12:34:55 +0000 asID: 27544 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:22:68:00:f7:ed:93:77:b6:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:55 2025 GMT Not After : Jul 14 12:34:55 2025 GMT Subject: CN=f481b08a-09e4-4d84-a080-81c381d4f4d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0c:5f:14:72:fb:b1:c3:70:1b:f0:bc:66:d0: 84:cf:fb:d8:71:0b:68:40:cb:64:69:92:44:e3:47: 9e:c4:13:03:57:22:47:ce:8c:08:a9:dc:76:b0:e0: 5c:eb:58:0f:56:17:f8:af:b4:f6:9d:95:fc:ee:b3: f9:42:9a:91:7d:c9:a9:42:c5:13:75:74:39:39:35: 06:3f:87:b2:a0:ff:5b:c3:ca:79:07:51:e3:a9:66: 18:cc:c6:2a:7a:64:f2:c8:1c:12:8c:6b:47:be:a9: 2b:1f:7f:f8:6d:ca:c7:21:0c:df:f3:2e:1c:40:89: 0c:51:93:e3:2b:f7:75:a5:5d:8b:6e:68:03:e6:49: ca:d8:d6:32:41:ed:4a:9e:c6:d6:cd:05:e4:11:fc: d7:a8:c1:97:39:b1:c1:f2:0c:cb:a9:15:32:8b:1a: 80:67:97:cd:f4:02:54:67:30:1f:ad:d9:0b:d7:28: 8c:e3:4b:0f:0f:dc:17:d4:95:73:b0:00:36:83:82: 5f:64:73:bb:18:5d:54:ad:3f:fd:fa:04:8f:5f:01: 81:20:59:8f:c5:41:57:33:5b:7d:b5:1c:8d:6a:3c: 9f:8e:52:ed:4c:cb:b2:83:ae:58:64:2d:98:46:83: ae:5d:15:24:c3:41:1c:56:bc:00:76:14:32:b2:cd: c5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:0C:A9:2B:3D:76:DA:BE:A4:A4:5C:07:0C:88:78:44:37:04:3B:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/34f1f1ac-60c2-3ec9-937b-a480daf3598d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:9d:50:bf:9f:8b:7f:4a:62:87:1d:a4:60:98:71:db:e0:11: 64:5d:93:57:0a:fa:1e:28:10:25:b1:ef:db:4c:1f:1c:ec:d5: 9c:55:92:27:22:4e:0d:90:17:cc:64:18:31:e7:a5:56:dc:fd: 09:5e:ab:57:2b:76:5b:b1:3e:0c:72:0c:7b:1f:7b:15:4c:3d: 50:62:69:e4:c5:6d:0e:97:f3:bf:86:ed:f6:8a:0a:40:b4:06: 11:70:41:98:32:77:b4:89:ed:fe:53:28:55:fc:30:44:34:72: af:a4:90:df:97:a8:3a:64:64:82:a4:61:33:4a:4d:fa:02:c7: df:89:7d:9a:25:4a:e8:b9:b1:c3:70:b5:2e:52:63:db:2e:68: 1a:86:81:06:51:5e:11:a7:08:e5:4e:7a:b3:64:de:5e:07:ef: 23:a9:2f:64:1f:bb:74:0c:2f:df:1f:ae:f1:67:8b:44:91:d7: 48:05:25:25:15:1a:04:2e:6d:6e:a2:a3:a3:a0:90:37:a7:07: 5b:5d:39:8e:ad:a0:bf:bd:2d:83:b5:c2:03:0e:93:b4:ac:65: 3a:30:5c:6b:44:e1:16:05:6e:3c:0d:ef:36:7a:c2:95:78:b6: 28:7c:46:49:23:8d:66:88:72:96:a8:93:88:90:ad:db:b0:cb: 0a:b5:1d:81 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwiJoAPftk3e2OgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NVoXDTI1MDcxNDEyMzQ1NVowLzEtMCsGA1UEAxMk ZjQ4MWIwOGEtMDllNC00ZDg0LWEwODAtODFjMzgxZDRmNGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wxfFHL7scNwG/C8ZtCEz/vYcQtoQMtkaZJE 40eexBMDVyJHzowIqdx2sOBc61gPVhf4r7T2nZX87rP5QpqRfcmpQsUTdXQ5OTUG P4eyoP9bw8p5B1HjqWYYzMYqemTyyBwSjGtHvqkrH3/4bcrHIQzf8y4cQIkMUZPj K/d1pV2LbmgD5knK2NYyQe1KnsbWzQXkEfzXqMGXObHB8gzLqRUyixqAZ5fN9AJU ZzAfrdkL1yiM40sPD9wX1JVzsAA2g4JfZHO7GF1UrT/9+gSPXwGBIFmPxUFXM1t9 tRyNajyfjlLtTMuyg65YZC2YRoOuXRUkw0EcVrwAdhQyss3FiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIIMqSs9dtq+pKRcBwyIeEQ3BDu/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzRmMWYxYWMtNjBjMi0z ZWM5LTkzN2ItYTQ4MGRhZjM1OThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABGdUL+fi39KYocdpGCYcdvgEWRdk1cK+h4oECWx79tMHxzs1ZxV kiciTg2QF8xkGDHnpVbc/Qleq1crdluxPgxyDHsfexVMPVBiaeTFbQ6X87+G7faK CkC0BhFwQZgyd7SJ7f5TKFX8MEQ0cq+kkN+XqDpkZIKkYTNKTfoCx9+JfZolSui5 scNwtS5SY9suaBqGgQZRXhGnCOVOerNk3l4H7yOpL2Qfu3QML98frvFni0SR10gF JSUVGgQubW6io6OgkDenB1tdOY6toL+9LYO1wgMOk7SsZTowXGtE4RYFbjwN7zZ6 wpV4tih8RkkjjWaIcpaok4iQrduwywq1HYE= -----END CERTIFICATE-----Generated at Sun Jun 15 23:12:53 2025 by rpki-client