$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c0dc7cc-fd5b-3d54-90f8-467ddc950091.roa File: 4c0dc7cc-fd5b-3d54-90f8-467ddc950091.roa (raw, json) Hash identifier: 6Du9OcdUuh3uswnNRgy6+SP+wtiiwJqicH+imz6W4lQ= Subject key identifier: 49:4C:20:91:AE:C7:19:19:5F:57:D3:EF:98:E7:3B:9B:08:7F:CC:DE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E383634F4CE3585984E580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c0dc7cc-fd5b-3d54-90f8-467ddc950091.roa Signing time: Thu 24 Apr 2025 12:37:23 +0000 ROA not before: Thu 24 Apr 2025 12:37:23 +0000 ROA not after: Wed 23 Jul 2025 12:37:23 +0000 asID: 396584 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:83:63:4f:4c:e3:58:59:84:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:23 2025 GMT Not After : Jul 23 12:37:23 2025 GMT Subject: CN=a99ca079-f8ea-429e-b744-8c08f19ecc3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d5:c3:38:14:6b:21:fb:9a:98:ee:ed:ae:f8: c1:ef:e8:df:07:5f:6b:a5:cf:68:76:84:6e:39:45: f4:f4:f7:3d:7e:f6:74:b9:c2:0d:46:40:68:07:20: 34:6e:fe:33:96:bc:10:17:bf:62:6b:a2:82:7d:c9: 8f:1a:fd:fd:82:88:00:41:1b:08:ab:4d:29:95:12: 4c:93:97:42:97:85:4c:78:d0:87:3c:ad:0c:ba:e3: 2c:c1:2c:83:33:31:bc:13:16:3e:4b:62:a1:4d:78: 6a:59:e3:69:d6:2b:48:3c:62:3f:05:01:0f:64:57: 77:02:ea:05:06:03:45:11:89:08:05:b2:02:b9:9e: 93:ad:e4:64:f6:43:97:22:34:e0:d3:c4:63:63:88: 48:98:53:27:81:29:59:0c:f4:aa:12:e7:f5:1f:2c: ce:66:a8:af:f4:5f:7b:ad:84:ac:34:2b:31:09:5d: 86:bb:bf:67:e3:64:33:ef:47:6c:68:d1:f4:94:11: 89:5e:c6:ca:50:78:a7:86:78:93:53:f3:9b:d2:32: 8c:42:ba:68:f4:6a:af:19:3a:7a:29:81:43:c9:31: 23:94:ad:7c:db:67:c9:fa:21:c4:3d:b7:78:9d:b2: 8a:ce:24:24:b1:ea:3e:a4:be:4f:9a:c3:e4:6b:23: 35:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4C:20:91:AE:C7:19:19:5F:57:D3:EF:98:E7:3B:9B:08:7F:CC:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c0dc7cc-fd5b-3d54-90f8-467ddc950091.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:96:7c:af:3c:5c:98:56:a3:51:ba:27:5f:16:53:cb:54:d2: b3:83:26:99:69:d5:45:1c:1f:40:20:cd:75:33:37:a4:30:87: 04:b8:75:37:d6:ec:03:b2:c6:5c:30:51:f8:eb:64:31:19:9e: 68:81:b1:77:90:66:4a:76:aa:2d:eb:97:21:c3:f9:3f:98:cf: b3:e4:5f:5b:e6:ad:fa:a0:ea:f0:f8:b3:2a:2d:30:93:2e:b2: a1:d4:ee:84:27:c0:cd:0b:ac:6e:25:7b:b9:f2:5e:48:a9:6e: b1:b2:a0:b8:30:46:0f:ac:4d:bf:98:28:5c:55:e6:ca:ab:94: 3d:c2:83:55:61:53:16:51:ac:78:59:b4:65:d6:28:8f:26:0a: f1:2d:68:b8:ef:96:0e:f9:e1:d8:10:86:b3:5b:ca:4c:8c:1e: 2e:a1:bf:6c:8c:e7:f8:fc:2b:8a:3b:72:8e:86:66:6c:3c:ea: 9a:c2:e0:97:b5:10:44:65:90:3b:6d:01:d1:24:70:5b:bb:6e: 0f:bb:a0:a8:7b:c1:26:d0:bc:83:76:aa:f9:b8:e4:8c:4e:49: 35:4c:89:0c:8a:6f:e2:ad:5e:07:41:1a:a5:8f:d9:63:dd:f0: 9b:55:36:dc:9f:f6:29:d8:be:0a:a1:09:db:c5:65:5b:13:7b: c1:75:e8:88 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44NjT0zjWFmE5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyM1oXDTI1MDcyMzEyMzcyM1owLzEtMCsGA1UEAxMk YTk5Y2EwNzktZjhlYS00MjllLWI3NDQtOGMwOGYxOWVjYzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndXDOBRrIfuamO7trvjB7+jfB19rpc9odoRu OUX09Pc9fvZ0ucINRkBoByA0bv4zlrwQF79ia6KCfcmPGv39gogAQRsIq00plRJM k5dCl4VMeNCHPK0MuuMswSyDMzG8ExY+S2KhTXhqWeNp1itIPGI/BQEPZFd3AuoF BgNFEYkIBbICuZ6TreRk9kOXIjTg08RjY4hImFMngSlZDPSqEuf1HyzOZqiv9F97 rYSsNCsxCV2Gu79n42Qz70dsaNH0lBGJXsbKUHinhniTU/Ob0jKMQrpo9GqvGTp6 KYFDyTEjlK1822fJ+iHEPbd4nbKKziQkseo+pL5PmsPkayM17QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFElMIJGuxxkZX1fT75jnO5sIf8zeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGMwZGM3Y2MtZmQ1Yi0z ZDU0LTkwZjgtNDY3ZGRjOTUwMDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHeWfK88XJhWo1G6J18WU8tU0rODJplp1UUcH0AgzXUzN6QwhwS4 dTfW7AOyxlwwUfjrZDEZnmiBsXeQZkp2qi3rlyHD+T+Yz7PkX1vmrfqg6vD4syot MJMusqHU7oQnwM0LrG4le7nyXkipbrGyoLgwRg+sTb+YKFxV5sqrlD3Cg1VhUxZR rHhZtGXWKI8mCvEtaLjvlg754dgQhrNbykyMHi6hv2yM5/j8K4o7co6GZmw86prC 4Je1EERlkDttAdEkcFu7bg+7oKh7wSbQvIN2qvm45IxOSTVMiQyKb+KtXgdBGqWP 2WPd8JtVNtyf9inYvgqhCdvFZVsTe8F16Ig= -----END CERTIFICATE-----Generated at Mon Apr 28 14:25:18 2025 by rpki-client