$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ab73f9d-44f7-3713-aada-20aa6abfe251.roa File: 3ab73f9d-44f7-3713-aada-20aa6abfe251.roa (raw, json) Hash identifier: cE6OdxaW/YXRorVLa3H+1tPumzaSTeji+K5S4WN1JOc= Subject key identifier: 1A:7D:D6:31:79:C2:C4:E7:AD:AB:F3:D2:44:C7:B4:24:00:55:90:72 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848F92688455BE03D217C18F000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ab73f9d-44f7-3713-aada-20aa6abfe251.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 397205 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:88:45:5b:e0:3d:21:7c:18:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=86481209-75d3-4f36-82db-5452595e9e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:86:4f:5e:ed:66:71:bd:de:9c:32:99:41:e5: 1f:bc:70:5f:43:37:e5:67:7f:55:99:09:d2:a2:2f: f1:62:1e:49:44:01:c2:f0:9f:ab:99:51:46:45:b9: 57:1b:a0:e7:c4:51:11:4c:0e:44:47:6a:33:7a:af: d2:d9:33:f4:52:32:ba:46:63:f8:0a:97:d8:ef:6a: 1e:82:ed:38:f9:55:53:f8:bb:d1:9e:91:ff:b1:8f: 9e:a4:3c:ed:8e:4e:77:14:2a:6b:af:84:bc:f2:fe: c8:5d:eb:92:2a:d5:ae:b8:96:fb:59:b0:c3:0c:6a: ba:8a:ab:ad:30:27:1e:83:22:d3:ec:f9:ae:3e:85: 18:60:f6:fe:9c:10:cb:13:d1:67:68:2b:50:00:1c: 19:a3:cb:49:91:93:b9:07:95:a4:0a:45:63:51:26: 7c:fb:05:ae:8d:de:66:1b:06:7f:da:21:73:88:b1: a1:45:00:22:31:07:37:3c:87:8a:9a:eb:a2:7a:de: 27:66:d7:be:83:ed:e6:c9:63:9b:fa:d1:00:92:a9: 94:ff:92:e0:7a:26:01:9b:ae:05:a4:90:9e:bd:48: 92:a9:91:95:18:68:98:e1:9f:67:d2:7b:53:56:57: e6:d6:5b:6a:05:f2:b0:ec:7c:bd:2f:b8:d0:61:f5: 6e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:7D:D6:31:79:C2:C4:E7:AD:AB:F3:D2:44:C7:B4:24:00:55:90:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ab73f9d-44f7-3713-aada-20aa6abfe251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:47:7b:e0:fc:d4:ce:34:43:da:a2:99:d6:5e:aa:eb:94:6f: 4b:36:db:21:15:90:ff:95:29:cf:fb:3b:76:92:48:ef:2f:17: c4:d3:ca:8d:6d:79:11:b9:44:56:db:a0:2d:f3:e9:52:52:2a: 99:e5:a6:75:b8:00:68:e2:c3:d8:cb:5f:50:66:c3:95:6f:09: 6b:32:27:c0:b3:bc:0c:93:5e:60:69:1b:5d:cb:af:5f:0c:f1: 29:f1:ff:9b:02:30:7f:05:94:ba:1f:7d:c4:aa:41:8a:8c:be: ae:b7:68:aa:12:f9:de:49:f4:7a:da:a6:55:8d:3d:b4:b5:b2: f3:7f:28:d4:1d:0b:de:f8:b3:65:43:b3:39:46:5b:8b:f3:52: 4e:e5:c9:8c:b2:82:77:30:02:af:20:73:bf:5b:92:e7:53:57: d8:df:1f:06:5e:bb:bc:b6:4e:f5:df:bd:c3:48:8a:f3:f3:fd: 70:e4:a5:2f:92:ba:cc:88:05:ad:5a:09:a3:dc:92:c0:b9:03: 6a:a3:fd:71:20:78:93:39:64:09:1d:e6:dc:d3:12:5c:5b:3e: ca:dc:4d:83:3a:7f:00:d6:0f:22:67:51:8a:5f:3f:33:0a:43: 61:a2:24:83:db:84:a3:74:5f:f1:85:17:03:ff:33:61:04:60: 28:28:0b:d7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEj5JohFW+A9IXwY8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ODY0ODEyMDktNzVkMy00ZjM2LTgyZGItNTQ1MjU5NWU5ZTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYZPXu1mcb3enDKZQeUfvHBfQzflZ39VmQnS oi/xYh5JRAHC8J+rmVFGRblXG6DnxFERTA5ER2ozeq/S2TP0UjK6RmP4CpfY72oe gu04+VVT+LvRnpH/sY+epDztjk53FCprr4S88v7IXeuSKtWuuJb7WbDDDGq6iqut MCcegyLT7PmuPoUYYPb+nBDLE9FnaCtQABwZo8tJkZO5B5WkCkVjUSZ8+wWujd5m GwZ/2iFziLGhRQAiMQc3PIeKmuuiet4nZte+g+3myWOb+tEAkqmU/5LgeiYBm64F pJCevUiSqZGVGGiY4Z9n0ntTVlfm1ltqBfKw7Hy9L7jQYfVuaQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBp91jF5wsTnravz0kTHtCQAVZByMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2FiNzNmOWQtNDRmNy0z NzEzLWFhZGEtMjBhYTZhYmZlMjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBUR3vg/NTONEPaopnWXqrrlG9LNtshFZD/lSnP +zt2kkjvLxfE08qNbXkRuURW26At8+lSUiqZ5aZ1uABo4sPYy19QZsOVbwlrMifA s7wMk15gaRtdy69fDPEp8f+bAjB/BZS6H33EqkGKjL6ut2iqEvneSfR62qZVjT20 tbLzfyjUHQve+LNlQ7M5RluL81JO5cmMsoJ3MAKvIHO/W5LnU1fY3x8GXru8tk71 373DSIrz8/1w5KUvkrrMiAWtWgmj3JLAuQNqo/1xIHiTOWQJHebc0xJcWz7K3E2D On8A1g8iZ1GKXz8zCkNhoiSD24SjdF/xhRcD/zNhBGAoKAvX -----END CERTIFICATE-----Generated at Mon Apr 28 08:23:12 2025 by rpki-client