$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d846f66-2983-3b0b-8d4b-f4f1ec61913c.roa File: 5d846f66-2983-3b0b-8d4b-f4f1ec61913c.roa (raw, json) Hash identifier: Emh+CbyT2EmJxE3arhdBFrqisDL7qZrU7v5H/P7yq94= Subject key identifier: 23:79:AD:F4:83:3F:D2:45:4E:95:B4:10:60:F5:9E:9A:6A:97:6C:2B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584961B9A6F03AE8BB3F2A2FCFC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d846f66-2983-3b0b-8d4b-f4f1ec61913c.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 396584 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:a6:f0:3a:e8:bb:3f:2a:2f:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=ebcd38e8-abab-4194-ad8d-739f4c6782cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ad:08:54:5d:8d:cf:5d:3f:bb:b2:7d:0f:e6: 87:e9:45:a2:0c:88:0a:45:61:2a:32:65:cf:85:1a: ed:58:89:f7:8a:b2:ef:09:f2:e3:e2:c5:fd:84:43: f9:67:f3:66:cf:c4:0e:e3:e9:6c:73:cb:5d:23:e1: 71:97:a5:be:5d:e4:f2:14:43:d8:fe:62:73:6c:7d: 4e:2f:47:bd:bd:16:7e:6a:0a:75:35:fd:52:94:0e: a8:3a:16:28:18:b1:7e:f6:56:f4:91:65:71:49:a2: a6:ff:8b:ab:81:de:df:73:46:61:aa:3c:3a:5e:3c: f6:19:bd:08:00:2b:c6:d4:77:3d:6d:25:44:aa:cf: d9:ae:1c:45:b9:f0:83:30:a1:2b:8f:f1:be:01:cc: f7:8b:aa:31:25:1c:07:c4:2a:35:f3:95:d6:46:21: 40:80:f7:ec:31:55:ae:ef:8b:06:52:ca:f8:ec:5c: 8f:c5:83:87:ba:aa:a4:8c:7c:4f:c3:ab:b6:6c:14: c2:9c:2b:a6:8d:72:8a:86:60:af:4c:0b:cb:8e:06: b9:1b:d5:6d:a0:50:3f:6b:a2:bf:1d:40:41:3b:9a: a5:77:23:1d:a3:39:aa:c0:6a:7c:30:9d:a0:6c:34: 5e:8b:03:ba:55:6e:37:db:0b:f5:84:41:4a:b2:94: 58:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:79:AD:F4:83:3F:D2:45:4E:95:B4:10:60:F5:9E:9A:6A:97:6C:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d846f66-2983-3b0b-8d4b-f4f1ec61913c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:2b:fb:97:6f:f0:b5:a0:13:68:eb:12:72:da:47:77:8f:21: 02:75:a1:44:c8:74:e1:df:cf:37:9c:da:ba:6d:12:62:5e:d9: fd:58:e8:56:5b:78:4f:a2:e5:bb:10:d0:80:a4:1d:8e:d6:dc: 49:f3:22:bd:6e:24:4e:b9:15:a9:69:da:0a:13:8d:8b:ed:32: 64:07:0c:63:eb:e7:8a:9d:9f:3c:6f:e0:6f:dc:29:88:d5:b2: 62:92:3b:1e:c6:4a:3c:df:37:4e:80:f6:13:10:34:a7:d5:79: ac:e2:b8:42:7e:c3:3c:cc:a7:23:82:35:73:01:40:51:4d:46: a8:cd:35:29:5f:d8:9a:3e:db:dd:65:9f:9b:d5:36:4e:47:8d: 10:c0:1e:47:45:a8:64:8b:19:8d:a8:68:4e:82:47:fb:d8:53: 83:10:03:f1:db:3e:26:07:a8:d0:c4:b0:44:56:b7:a1:a4:c0: e9:64:83:26:0d:24:56:30:d2:db:54:f9:ed:66:a0:e7:16:0f: 54:81:61:e1:c8:eb:5e:33:3f:b9:4f:a6:08:1b:7d:9e:eb:41: ec:ba:64:b3:99:07:a0:20:ea:b8:c9:a9:c1:ef:ca:3e:0b:e9: 4d:be:03:7f:42:6d:9d:d6:0d:b7:94:99:92:a7:6c:05:01:a6: 15:30:1c:d1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWElhuabwOui7Pyovz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk ZWJjZDM4ZTgtYWJhYi00MTk0LWFkOGQtNzM5ZjRjNjc4MmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna0IVF2Nz10/u7J9D+aH6UWiDIgKRWEqMmXP hRrtWIn3irLvCfLj4sX9hEP5Z/Nmz8QO4+lsc8tdI+Fxl6W+XeTyFEPY/mJzbH1O L0e9vRZ+agp1Nf1SlA6oOhYoGLF+9lb0kWVxSaKm/4urgd7fc0Zhqjw6Xjz2Gb0I ACvG1Hc9bSVEqs/ZrhxFufCDMKErj/G+Acz3i6oxJRwHxCo185XWRiFAgPfsMVWu 74sGUsr47FyPxYOHuqqkjHxPw6u2bBTCnCumjXKKhmCvTAvLjga5G9VtoFA/a6K/ HUBBO5qldyMdozmqwGp8MJ2gbDReiwO6VW432wv1hEFKspRYfwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCN5rfSDP9JFTpW0EGD1nppql2wrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWQ4NDZmNjYtMjk4My0z YjBiLThkNGItZjRmMWVjNjE5MTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBfK/uXb/C1oBNo6xJy2kd3jyECdaFEyHTh3883 nNq6bRJiXtn9WOhWW3hPouW7ENCApB2O1txJ8yK9biROuRWpadoKE42L7TJkBwxj 6+eKnZ88b+Bv3CmI1bJikjsexko83zdOgPYTEDSn1Xms4rhCfsM8zKcjgjVzAUBR TUaozTUpX9iaPtvdZZ+b1TZOR40QwB5HRahkixmNqGhOgkf72FODEAPx2z4mB6jQ xLBEVrehpMDpZIMmDSRWMNLbVPntZqDnFg9UgWHhyOteMz+5T6YIG32e60HsumSz mQegIOq4yanB78o+C+lNvgN/Qm2d1g23lJmSp2wFAaYVMBzR -----END CERTIFICATE-----Generated at Sun Apr 27 17:45:24 2025 by rpki-client