$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45fa6d9c-9a58-3762-933a-ab420dcd2b9a.roa File: 45fa6d9c-9a58-3762-933a-ab420dcd2b9a.roa (raw, json) Hash identifier: 3jU2GC8mLVNL52Xj1NfO+F7EgGTDw8Z6rNFNRGxWqjI= Subject key identifier: 3B:B3:A1:0B:E6:9A:A6:51:77:C2:93:EF:90:9C:EA:84:F4:8C:46:E5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C221F965EDDE6B48F82480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45fa6d9c-9a58-3762-933a-ab420dcd2b9a.roa Signing time: Tue 15 Apr 2025 12:34:55 +0000 ROA not before: Tue 15 Apr 2025 12:34:55 +0000 ROA not after: Mon 14 Jul 2025 12:34:55 +0000 asID: 20431 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:21:f9:65:ed:de:6b:48:f8:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:55 2025 GMT Not After : Jul 14 12:34:55 2025 GMT Subject: CN=5ca90528-a731-41d3-8c66-5e69d16c6e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:49:ee:8a:e4:c9:db:4c:81:ab:a6:c0:ec:05: 22:e1:b9:ea:31:cb:13:df:8d:b1:e6:51:a0:e7:c2: 42:b9:39:8c:85:48:71:96:db:fc:45:9a:e2:32:ff: 1d:61:cc:a0:a7:9a:89:77:78:fa:bd:7d:08:68:8d: 66:b3:01:50:69:1e:ac:e8:23:c1:25:4a:80:f9:0c: 91:7d:25:f0:5f:33:8c:35:d0:ae:97:01:4e:42:c8: 47:e7:4c:49:6e:ef:09:d0:c3:49:ce:05:a4:80:5b: 2a:8e:44:1b:cb:cc:19:8c:a7:37:85:83:1c:e3:9d: 84:5b:41:dd:5f:e6:7f:2f:4b:e9:a5:53:21:5f:8e: 4c:18:fe:e1:03:d5:10:d1:39:30:e9:98:fd:b1:53: 1c:d6:c3:39:55:2d:66:f1:40:5c:09:2c:65:b8:4e: a7:ab:25:d7:8a:4e:1e:38:f9:53:0c:37:f4:7d:23: db:d5:40:92:b7:2b:dd:36:19:a8:ee:0c:5a:05:d1: 9b:a1:65:a6:a3:85:bf:1c:0a:1a:78:e8:37:8c:d9: 34:67:34:9a:b8:b8:86:42:a9:0e:6e:c9:f7:14:15: 02:21:aa:74:e4:59:ea:7f:25:6a:a3:66:88:96:26: 50:ad:35:79:56:5b:e7:14:49:2e:04:13:71:03:ca: 96:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B3:A1:0B:E6:9A:A6:51:77:C2:93:EF:90:9C:EA:84:F4:8C:46:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45fa6d9c-9a58-3762-933a-ab420dcd2b9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:f0:ee:24:a3:48:34:31:49:c5:a0:e9:11:5b:39:f5:69:f5: be:33:93:b7:a2:4f:9f:20:51:bd:b6:ab:ae:9c:21:be:17:1a: 40:d5:d0:28:ff:0f:fb:ff:aa:0f:77:61:3c:ac:a8:36:b7:bc: 68:e8:74:4f:30:28:41:26:d3:f0:6b:b0:3c:cf:12:6c:a1:0a: 3e:92:98:a1:c2:80:5e:e9:fb:db:74:7d:ca:93:4d:e1:e2:f2: 2b:19:17:ec:4d:14:95:09:64:ae:93:df:1f:fb:f6:e7:0f:6f: eb:a2:d7:e5:a7:18:a1:8c:38:91:ff:25:28:91:3a:d5:e4:5d: 88:8d:ad:71:6a:d7:c6:5e:3a:0a:65:a6:b2:a2:98:bf:89:de: 71:1f:25:6b:2b:ba:6d:89:83:99:3d:c8:a7:77:19:4e:40:e5: 43:df:7b:d5:31:d7:c0:df:18:89:14:a0:49:31:e5:b8:c6:ce: 4f:2f:29:26:6e:49:a2:49:8f:00:e6:05:ef:22:41:bd:e5:48: dc:16:1d:4f:dd:e7:c4:27:01:05:99:d1:09:f6:2d:6e:a2:a1: d8:bc:04:34:66:4f:8f:af:0e:13:bf:22:91:eb:4d:16:2b:e8: 8e:b1:e5:28:76:7a:73:0f:0e:db:40:0a:bf:1c:33:1d:19:e7: 77:bb:1b:a7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwiH5Ze3ea0j4JIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NVoXDTI1MDcxNDEyMzQ1NVowLzEtMCsGA1UEAxMk NWNhOTA1MjgtYTczMS00MWQzLThjNjYtNWU2OWQxNmM2ZTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUnuiuTJ20yBq6bA7AUi4bnqMcsT342x5lGg 58JCuTmMhUhxltv8RZriMv8dYcygp5qJd3j6vX0IaI1mswFQaR6s6CPBJUqA+QyR fSXwXzOMNdCulwFOQshH50xJbu8J0MNJzgWkgFsqjkQby8wZjKc3hYMc452EW0Hd X+Z/L0vppVMhX45MGP7hA9UQ0Tkw6Zj9sVMc1sM5VS1m8UBcCSxluE6nqyXXik4e OPlTDDf0fSPb1UCStyvdNhmo7gxaBdGboWWmo4W/HAoaeOg3jNk0ZzSauLiGQqkO bsn3FBUCIap05FnqfyVqo2aIliZQrTV5VlvnFEkuBBNxA8qWRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDuzoQvmmqZRd8KT75Cc6oT0jEblMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDVmYTZkOWMtOWE1OC0z NzYyLTkzM2EtYWI0MjBkY2QyYjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAILw7iSjSDQxScWg6RFbOfVp9b4zk7eiT58gUb22q66cIb4XGkDV 0Cj/D/v/qg93YTysqDa3vGjodE8wKEEm0/BrsDzPEmyhCj6SmKHCgF7p+9t0fcqT TeHi8isZF+xNFJUJZK6T3x/79ucPb+ui1+WnGKGMOJH/JSiROtXkXYiNrXFq18Ze OgplprKimL+J3nEfJWsrum2Jg5k9yKd3GU5A5UPfe9Ux18DfGIkUoEkx5bjGzk8v KSZuSaJJjwDmBe8iQb3lSNwWHU/d58QnAQWZ0Qn2LW6iodi8BDRmT4+vDhO/IpHr TRYr6I6x5Sh2enMPDttACr8cMx0Z53e7G6c= -----END CERTIFICATE-----Generated at Sun Apr 27 17:56:28 2025 by rpki-client