$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/756d4b94-2aa1-382a-b5eb-78c92f78e602.roa File: 756d4b94-2aa1-382a-b5eb-78c92f78e602.roa (raw, json) Hash identifier: MI/oUGbu/HUXcPemx7qCcbkW9pR3zTWFrba6fuCY48U= Subject key identifier: B6:B4:0B:E4:67:C4:37:CE:4E:E1:1F:83:DC:E1:13:1C:72:02:42:58 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848D21109BCF6FC15DFB3AD0100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/756d4b94-2aa1-382a-b5eb-78c92f78e602.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 396550 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:09:bc:f6:fc:15:df:b3:ad:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=b069e488-79e2-4846-a0a2-0023e9d232f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bb:52:17:a9:d4:99:0b:0a:d1:88:c9:f7:30: cf:9f:0b:80:84:8d:ce:56:a8:e4:7c:b9:a0:ca:38: 20:cc:99:c6:ce:df:a0:8e:62:1d:a8:89:ed:e4:24: b5:ed:e4:90:1f:20:5b:54:52:da:89:6c:77:4a:a0: f1:13:78:66:2e:3c:e4:82:0b:60:3f:2f:18:06:5f: fd:1e:c2:8a:20:f9:83:0e:e1:66:f5:37:47:46:eb: 69:c5:8c:75:72:0b:b8:43:0a:d4:0d:24:cb:75:90: cb:62:9d:38:32:c5:1e:61:e5:94:c0:ec:40:df:ed: 17:a0:70:5b:c1:3c:75:0e:81:c5:a8:3f:55:10:fb: 41:ea:8b:34:69:b6:6f:41:1b:56:ca:d2:50:e9:95: a7:c1:30:50:d4:90:2c:5c:f7:df:a0:81:cd:e0:29: e2:84:47:9c:e6:d6:1b:f2:1a:e0:0a:77:33:3b:64: 0a:b2:5d:d4:fe:8e:c1:31:83:21:33:b8:d8:36:93: 75:79:2e:65:76:96:80:47:a1:72:a2:00:ec:67:49: 38:bd:8a:50:1b:8d:52:3e:3c:5f:7c:ec:90:7f:95: f7:4a:de:20:0e:65:1e:01:5c:58:36:f5:14:fe:7d: 6b:b0:02:a7:d6:9f:66:a0:ba:31:b0:14:a9:93:87: df:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B4:0B:E4:67:C4:37:CE:4E:E1:1F:83:DC:E1:13:1C:72:02:42:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/756d4b94-2aa1-382a-b5eb-78c92f78e602.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:10:d1:b4:66:17:72:22:e8:7e:18:f2:36:2c:06:2b:b9:d6: 86:8d:36:31:ee:2c:15:f6:69:25:f3:f6:7b:6f:52:84:40:ea: 3c:f7:0c:cd:5d:21:1c:6b:6e:29:c5:2d:8b:99:d5:ec:67:9c: c2:4d:e5:61:b4:0a:c1:8e:cd:26:dd:79:82:d0:c3:ea:3c:85: 42:bc:9a:39:af:d3:2e:64:fa:c6:89:8f:08:f8:5a:9c:bd:1f: 19:f5:da:41:f9:14:ec:eb:e5:7a:ab:6d:99:4e:d1:f0:40:60: 8a:e9:27:d2:02:d1:f1:23:4f:65:63:21:f4:d6:83:73:0d:9f: be:40:7c:c7:02:98:35:7f:fb:d8:ab:2c:70:0c:5a:ae:6a:d4: 24:dd:47:d2:c9:61:4c:80:b8:67:c8:31:c3:17:5d:3d:a1:22: cb:4d:6a:cb:3a:f0:f6:35:14:92:7c:2a:8d:8b:c1:4a:ab:4a: f1:97:2f:e0:64:c4:b7:2e:ca:23:30:71:59:8e:f7:4b:05:fa: 8d:ba:11:95:52:46:a8:7b:be:69:e7:d8:98:01:f2:31:12:0a: 66:59:f8:dc:36:c3:39:07:e5:b8:e2:cd:f0:da:05:8a:59:c4: 5c:13:7c:66:48:22:cf:d1:de:76:2a:40:6d:71:48:19:d8:df: 45:47:a1:36 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjSEQm89vwV37OtAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YjA2OWU0ODgtNzllMi00ODQ2LWEwYTItMDAyM2U5ZDIzMmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLtSF6nUmQsK0YjJ9zDPnwuAhI3OVqjkfLmg yjggzJnGzt+gjmIdqInt5CS17eSQHyBbVFLaiWx3SqDxE3hmLjzkggtgPy8YBl/9 HsKKIPmDDuFm9TdHRutpxYx1cgu4QwrUDSTLdZDLYp04MsUeYeWUwOxA3+0XoHBb wTx1DoHFqD9VEPtB6os0abZvQRtWytJQ6ZWnwTBQ1JAsXPffoIHN4CnihEec5tYb 8hrgCnczO2QKsl3U/o7BMYMhM7jYNpN1eS5ldpaAR6FyogDsZ0k4vYpQG41SPjxf fOyQf5X3St4gDmUeAVxYNvUU/n1rsAKn1p9moLoxsBSpk4ff+QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLa0C+RnxDfOTuEfg9zhExxyAkJYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzU2ZDRiOTQtMmFhMS0z ODJhLWI1ZWItNzhjOTJmNzhlNjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAjENG0ZhdyIuh+GPI2LAYrudaGjTYx7iwV9mkl 8/Z7b1KEQOo89wzNXSEca24pxS2LmdXsZ5zCTeVhtArBjs0m3XmC0MPqPIVCvJo5 r9MuZPrGiY8I+FqcvR8Z9dpB+RTs6+V6q22ZTtHwQGCK6SfSAtHxI09lYyH01oNz DZ++QHzHApg1f/vYqyxwDFquatQk3UfSyWFMgLhnyDHDF109oSLLTWrLOvD2NRSS fCqNi8FKq0rxly/gZMS3LsojMHFZjvdLBfqNuhGVUkaoe75p59iYAfIxEgpmWfjc NsM5B+W44s3w2gWKWcRcE3xmSCLP0d52KkBtcUgZ2N9FR6E2 -----END CERTIFICATE-----Generated at Sun Apr 27 22:06:10 2025 by rpki-client