$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/433e3b39-3064-39d7-b7a6-05e755cd825a.roa File: 433e3b39-3064-39d7-b7a6-05e755cd825a.roa (raw, json) Hash identifier: 9DWdNMgMprKYHU2LH0wyehS6ZTMy7+xAHSq0tK6uklo= Subject key identifier: 0D:78:54:FF:AA:C3:74:5B:82:ED:AC:02:23:7B:85:BF:D3:21:28:D2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A2CB2EE642A27CDCAA340 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/433e3b39-3064-39d7-b7a6-05e755cd825a.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 397210 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:2c:b2:ee:64:2a:27:cd:ca:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=8925219b-8a0c-4e81-ae5c-b37a6e79d490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:48:db:76:eb:eb:3d:cc:ba:84:a2:48:5d:76: eb:ee:97:51:81:f5:92:d3:79:65:5e:41:cf:86:63: f4:27:b4:f2:0c:21:8f:1a:62:52:f1:e7:ca:d1:cb: b5:a5:b9:cd:93:bd:16:da:1b:44:3a:0b:c4:7c:85: 5a:19:9e:f2:8c:a4:bd:48:85:2c:4f:75:e0:ee:95: b7:41:0e:74:2f:30:ed:0f:b8:d8:a4:db:c1:dd:e3: f9:0a:1e:43:1c:9e:5e:23:69:67:a2:d5:c3:07:ae: b9:92:2e:e6:a3:cb:4c:a7:3e:4c:90:9e:be:2f:6b: 42:f1:42:c7:51:3a:06:53:1c:c1:12:e7:85:4d:98: 38:8f:98:88:9b:35:d9:34:6d:64:52:6c:d8:94:9d: 71:08:ac:23:db:7f:b1:19:cb:9e:34:e2:ec:83:0a: 52:20:ea:ee:e9:36:66:cc:43:4b:40:f5:c0:a1:41: a4:95:2b:3a:22:8a:ad:9d:c5:a8:c1:63:b2:ee:31: df:2c:a2:78:5f:b3:b7:d7:93:ed:7c:4c:05:3f:cc: e8:e3:3a:75:e3:46:3f:5d:49:b1:b7:2a:56:7f:67: c2:9e:c7:d6:eb:53:5e:e3:0e:d5:6d:84:f1:c6:aa: fc:5c:f5:d5:26:72:30:a0:a5:18:6c:b3:3f:d1:17: 6f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:78:54:FF:AA:C3:74:5B:82:ED:AC:02:23:7B:85:BF:D3:21:28:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/433e3b39-3064-39d7-b7a6-05e755cd825a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:b8:23:96:41:d1:f5:99:b0:cb:c3:14:42:f8:27:14:12:bf: 81:5f:0a:21:72:50:ec:a1:e3:7c:62:a3:a0:58:6c:a9:21:8d: f7:07:17:b9:7e:84:15:f2:7c:35:dd:ed:91:fe:10:93:5e:ce: 84:aa:c4:56:d0:37:68:52:74:fe:f5:c7:07:db:78:d3:99:34: 05:6c:9d:e5:69:c7:cf:13:ee:ea:14:49:dd:3d:e9:ec:fa:e6: 6c:6b:54:a4:56:ec:04:9f:57:76:40:3e:e7:d4:b6:cc:44:d1: 3d:66:85:85:69:3e:96:de:9e:49:5d:d4:9c:ae:38:62:57:ed: 16:07:a4:f0:12:53:5a:fc:64:6c:bc:42:db:2c:83:0a:9a:19: 3f:be:de:22:06:5d:93:66:aa:4c:da:e0:81:c3:f5:c7:6c:10: da:01:89:b0:7e:98:19:8d:d6:83:ee:15:ed:45:ef:cf:0b:eb: 51:d7:a5:7e:ef:fb:16:21:e1:85:12:7f:1b:4d:b5:4e:46:e1: 72:c7:40:e3:83:ea:27:39:ed:c4:af:8b:b2:4f:e3:d1:25:fe: cf:5a:d2:49:9d:d1:62:16:7a:1b:00:59:0c:27:9d:f9:ae:e3: 72:49:e9:45:d1:c7:f1:94:e1:1c:0b:b2:c9:fa:95:74:fd:ef: 14:94:e9:91 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSiyy7mQqJ83Ko0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ODkyNTIxOWItOGEwYy00ZTgxLWFlNWMtYjM3YTZlNzlkNDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEjbduvrPcy6hKJIXXbr7pdRgfWS03llXkHP hmP0J7TyDCGPGmJS8efK0cu1pbnNk70W2htEOgvEfIVaGZ7yjKS9SIUsT3Xg7pW3 QQ50LzDtD7jYpNvB3eP5Ch5DHJ5eI2lnotXDB665ki7mo8tMpz5MkJ6+L2tC8ULH UToGUxzBEueFTZg4j5iImzXZNG1kUmzYlJ1xCKwj23+xGcueNOLsgwpSIOru6TZm zENLQPXAoUGklSs6IoqtncWowWOy7jHfLKJ4X7O315PtfEwFP8zo4zp140Y/XUmx typWf2fCnsfW61Ne4w7VbYTxxqr8XPXVJnIwoKUYbLM/0Rdv2wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFA14VP+qw3Rbgu2sAiN7hb/TISjSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDMzZTNiMzktMzA2NC0z OWQ3LWI3YTYtMDVlNzU1Y2Q4MjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAluCOWQdH1mbDLwxRC+CcUEr+BXwohclDsoeN8 YqOgWGypIY33Bxe5foQV8nw13e2R/hCTXs6EqsRW0DdoUnT+9ccH23jTmTQFbJ3l acfPE+7qFEndPens+uZsa1SkVuwEn1d2QD7n1LbMRNE9ZoWFaT6W3p5JXdScrjhi V+0WB6TwElNa/GRsvELbLIMKmhk/vt4iBl2TZqpM2uCBw/XHbBDaAYmwfpgZjdaD 7hXtRe/PC+tR16V+7/sWIeGFEn8bTbVORuFyx0Djg+onOe3Er4uyT+PRJf7PWtJJ ndFiFnobAFkMJ535ruNySelF0cfxlOEcC7LJ+pV0/e8UlOmR -----END CERTIFICATE-----Generated at Sun Jun 15 17:25:49 2025 by rpki-client