$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/72e592f2-1e84-318b-a25f-77e6ae4f5a00.roa File: 72e592f2-1e84-318b-a25f-77e6ae4f5a00.roa (raw, json) Hash identifier: XrBUCS94Yse/dObJ7Bfr4N2/oRInUicsb0mUB6UavJk= Subject key identifier: 5B:7A:58:24:E3:DA:65:00:B1:F3:86:F7:52:B6:A2:FA:EA:C6:26:46 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C22138F9258AD03D6DC0C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/72e592f2-1e84-318b-a25f-77e6ae4f5a00.roa Signing time: Tue 15 Apr 2025 12:34:54 +0000 ROA not before: Tue 15 Apr 2025 12:34:54 +0000 ROA not after: Mon 14 Jul 2025 12:34:54 +0000 asID: 396605 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:21:38:f9:25:8a:d0:3d:6d:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:54 2025 GMT Not After : Jul 14 12:34:54 2025 GMT Subject: CN=e9a0fec3-1ee8-4140-b380-bfd4bba57667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f2:b9:10:99:b7:3e:42:6e:de:81:85:6e:d2: 39:14:7b:a8:6b:a5:3c:68:27:0a:d3:ce:54:5b:82: d4:f3:30:e0:84:c0:a9:62:aa:9b:6b:10:be:77:f1: 8a:06:99:a8:0a:9e:b1:96:88:25:ad:d7:6f:9b:a8: 1b:1c:82:5d:77:7d:88:03:e8:b9:d1:4e:67:bf:62: ba:2c:16:94:ad:6c:25:b8:fc:67:46:75:8e:ac:a2: 84:07:16:9c:d1:cb:9c:31:b1:3c:56:fd:17:49:54: 10:be:cc:bc:6e:82:9a:20:c7:7e:27:2e:60:bc:da: 4c:b4:c2:10:f2:11:d7:b5:fc:2c:0f:05:1c:57:5c: 30:d8:23:c2:fb:5b:8c:28:25:41:f3:62:ff:1e:c7: 7b:61:44:04:bc:ff:45:75:57:7a:94:0d:cf:d9:a8: 27:1d:f4:b2:3a:4b:63:1c:d7:ee:64:3d:e0:1c:80: d8:81:d6:1b:4a:3d:ff:1e:b2:da:a2:bc:fa:76:97: f6:26:b9:02:d4:85:31:84:c7:76:e5:4d:e3:c0:5d: 62:77:0e:70:78:06:7b:ef:00:e9:40:9f:48:46:24: a5:d8:b1:a4:99:ad:0b:41:01:99:84:79:83:59:26: e9:5c:ad:6b:3b:cf:28:74:d4:3e:ba:14:a3:0b:19: a4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7A:58:24:E3:DA:65:00:B1:F3:86:F7:52:B6:A2:FA:EA:C6:26:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/72e592f2-1e84-318b-a25f-77e6ae4f5a00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:15:42:48:29:7b:46:61:ab:15:8d:a6:6f:62:6f:8b:cb:ae: 4a:14:56:c8:05:cd:24:fb:86:d8:fd:70:43:50:27:0c:9d:99: 7f:f5:a6:4f:42:db:9b:d2:f7:d7:7b:e2:0a:f4:66:a4:bd:46: 85:23:24:cd:ba:46:f9:cc:c4:71:eb:2a:09:9a:dc:5b:c7:ac: 3a:c1:04:c2:f3:c2:18:c2:cb:5a:01:7a:c6:d0:cd:24:aa:f9: 3d:1b:d9:49:1d:31:99:c3:83:0e:1d:5f:62:67:98:ae:2a:56: 3b:ce:fe:ce:de:e9:e1:7a:12:48:40:9c:83:96:78:1d:7a:2e: 7a:58:e4:d8:f3:41:56:d2:2f:d5:2c:46:a5:32:de:8a:8f:16: ac:79:86:98:c6:6c:e7:51:d9:6c:ad:c5:32:58:32:2f:77:63: ad:ef:4c:89:3c:ec:5a:9b:57:02:04:a5:5f:a5:a7:80:56:23: 5d:5c:0e:cc:12:73:8e:a9:c6:e3:85:1b:8f:52:ff:d1:74:9a: 58:13:06:d1:d0:9f:6f:b6:40:ea:78:85:c9:c9:e2:bc:0b:37: 4b:17:cd:86:cb:93:41:29:22:91:73:dc:bb:17:ca:78:8f:e7: 58:8a:61:c3:3f:e3:50:d6:35:47:c2:bd:1b:15:e4:4d:2e:5d: 05:9d:17:16 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwiE4+SWK0D1twMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NFoXDTI1MDcxNDEyMzQ1NFowLzEtMCsGA1UEAxMk ZTlhMGZlYzMtMWVlOC00MTQwLWIzODAtYmZkNGJiYTU3NjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/K5EJm3PkJu3oGFbtI5FHuoa6U8aCcK085U W4LU8zDghMCpYqqbaxC+d/GKBpmoCp6xloglrddvm6gbHIJdd32IA+i50U5nv2K6 LBaUrWwluPxnRnWOrKKEBxac0cucMbE8Vv0XSVQQvsy8boKaIMd+Jy5gvNpMtMIQ 8hHXtfwsDwUcV1ww2CPC+1uMKCVB82L/Hsd7YUQEvP9FdVd6lA3P2agnHfSyOktj HNfuZD3gHIDYgdYbSj3/HrLaorz6dpf2JrkC1IUxhMd25U3jwF1idw5weAZ77wDp QJ9IRiSl2LGkma0LQQGZhHmDWSbpXK1rO88odNQ+uhSjCxmkdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFt6WCTj2mUAsfOG91K2ovrqxiZGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzJlNTkyZjItMWU4NC0z MThiLWEyNWYtNzdlNmFlNGY1YTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB0VQkgpe0ZhqxWNpm9ib4vLrkoUVsgFzST7htj9cENQJwydmX/1 pk9C25vS99d74gr0ZqS9RoUjJM26RvnMxHHrKgma3FvHrDrBBMLzwhjCy1oBesbQ zSSq+T0b2UkdMZnDgw4dX2JnmK4qVjvO/s7e6eF6EkhAnIOWeB16LnpY5NjzQVbS L9UsRqUy3oqPFqx5hpjGbOdR2WytxTJYMi93Y63vTIk87FqbVwIEpV+lp4BWI11c DswSc46pxuOFG49S/9F0mlgTBtHQn2+2QOp4hcnJ4rwLN0sXzYbLk0EpIpFz3LsX yniP51iKYcM/41DWNUfCvRsV5E0uXQWdFxY= -----END CERTIFICATE-----Generated at Mon Apr 28 15:34:05 2025 by rpki-client