$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/668c7565-d48b-3581-8b27-87e2b0cf2875.roa File: 668c7565-d48b-3581-8b27-87e2b0cf2875.roa (raw, json) Hash identifier: GJjHqtQT6Z/8QB3P90uoHFEZLD6cfJIbeTDxObFJUwE= Subject key identifier: 84:7F:64:63:D0:89:99:05:23:44:F6:20:BC:A3:03:28:37:0F:C3:FF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858490E16CF33F79097F5F22F6C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/668c7565-d48b-3581-8b27-87e2b0cf2875.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 7342 IP address blocks: 2620:74:37::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:cf:33:f7:90:97:f5:f2:2f:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=14389cc0-d2bc-45f4-b25a-3b695bcbd26c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6d:7f:5b:f5:83:a3:1c:00:fb:f9:82:f9:1c: 30:67:ab:4b:0a:f6:8d:69:e9:bc:10:4f:06:bb:23: 13:05:f6:41:3c:17:b4:76:96:28:20:3e:87:1e:13: 34:6d:95:64:ed:30:e5:34:9c:c3:33:e5:26:d7:b5: 19:59:51:e9:2a:2c:51:61:f0:23:2c:b8:72:9d:4c: f1:f1:a8:3b:73:c5:73:40:80:c1:2f:87:3e:10:59: 47:3f:c8:c7:bf:73:29:c6:35:e4:62:30:f4:c4:d9: a6:11:2b:80:20:6d:25:8c:4b:6a:96:f8:62:ca:6b: ee:03:78:56:ba:3c:90:89:a4:bf:98:0d:8c:84:9b: e5:6e:fd:b9:47:d0:94:0b:60:fd:ae:09:5a:46:96: 74:a1:d4:eb:e2:85:7c:1c:0b:e4:3a:32:e2:1c:b9: 94:69:a0:89:5e:99:bb:26:04:5e:b9:d6:2b:77:70: 33:d6:e3:2d:41:93:05:6b:85:33:43:d5:e1:2d:f5: a4:97:26:0a:69:b0:06:9e:7b:b5:3c:83:2b:fb:00: f1:2e:5a:49:19:e5:ba:d2:55:32:da:f4:e4:30:be: 0e:33:40:89:d0:a3:5b:9a:75:e2:5b:5f:91:2a:4e: 47:ff:61:55:a3:86:f0:be:ef:91:38:bb:a5:7c:72: a1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7F:64:63:D0:89:99:05:23:44:F6:20:BC:A3:03:28:37:0F:C3:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/668c7565-d48b-3581-8b27-87e2b0cf2875.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:37::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:e2:16:43:06:4e:78:86:7b:83:76:50:5f:72:0a:1a:6b:43: 4e:fe:12:81:ab:f2:03:2d:0e:c6:37:2e:9d:b8:c9:f5:b8:8d: 97:cd:b2:7e:5b:ca:17:95:57:a3:b8:61:59:ab:56:cb:29:a2: 17:89:ef:f6:84:db:f6:c4:82:10:a6:8c:67:cd:02:00:fa:53: 0f:b7:11:4b:28:53:99:3a:11:ef:3d:b1:0d:ba:c1:35:76:22: f3:63:c1:47:ed:95:3e:cc:3a:f7:11:e3:6f:35:2b:ec:bf:f1: 5f:6f:09:47:76:77:bc:6d:ed:59:3e:64:ac:ea:8a:cc:bb:d6: 70:de:c7:61:44:74:48:7c:70:be:ca:b5:04:90:24:25:b3:47: 7e:e4:c1:47:97:2e:a7:de:1c:6b:95:e0:18:f7:6e:91:5a:7f: 5e:c5:c1:0b:94:37:ee:3c:23:4d:15:da:53:e4:7e:3d:9c:e2: ea:eb:a8:88:d0:18:f6:3f:67:5e:25:b1:7d:0c:ba:23:7c:b8: f8:a4:19:9d:98:2c:54:74:2f:21:c2:75:bf:af:dd:10:bd:c5: 0e:f7:01:04:1d:3e:e8:f5:ea:55:02:e0:31:fc:52:b4:1d:8a: a7:31:08:93:96:9b:e0:7c:93:6f:dc:c6:2d:c8:b3:db:2b:cb: e6:01:b4:9b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkOFs8z95CX9fIvbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk MTQzODljYzAtZDJiYy00NWY0LWIyNWEtM2I2OTViY2JkMjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG1/W/WDoxwA+/mC+RwwZ6tLCvaNaem8EE8G uyMTBfZBPBe0dpYoID6HHhM0bZVk7TDlNJzDM+Um17UZWVHpKixRYfAjLLhynUzx 8ag7c8VzQIDBL4c+EFlHP8jHv3MpxjXkYjD0xNmmESuAIG0ljEtqlvhiymvuA3hW ujyQiaS/mA2MhJvlbv25R9CUC2D9rglaRpZ0odTr4oV8HAvkOjLiHLmUaaCJXpm7 JgReudYrd3Az1uMtQZMFa4UzQ9XhLfWklyYKabAGnnu1PIMr+wDxLlpJGeW60lUy 2vTkML4OM0CJ0KNbmnXiW1+RKk5H/2FVo4bwvu+ROLulfHKhrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIR/ZGPQiZkFI0T2ILyjAyg3D8P/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjY4Yzc1NjUtZDQ4Yi0z NTgxLThiMjctODdlMmIwY2YyODc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAA3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHniFkMGTniGe4N2UF9yChprQ07+EoGr8gMtDsY3Lp24yfW4jZfN sn5byheVV6O4YVmrVsspoheJ7/aE2/bEghCmjGfNAgD6Uw+3EUsoU5k6Ee89sQ26 wTV2IvNjwUftlT7MOvcR4281K+y/8V9vCUd2d7xt7Vk+ZKzqisy71nDex2FEdEh8 cL7KtQSQJCWzR37kwUeXLqfeHGuV4Bj3bpFaf17FwQuUN+48I00V2lPkfj2c4urr qIjQGPY/Z14lsX0MuiN8uPikGZ2YLFR0LyHCdb+v3RC9xQ73AQQdPuj16lUC4DH8 UrQdiqcxCJOWm+B8k2/cxi3Is9sry+YBtJs= -----END CERTIFICATE-----Generated at Mon Apr 28 22:13:25 2025 by rpki-client