$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7e2dd594-a608-33c1-909d-14e31d1f5bb9.roa File: 7e2dd594-a608-33c1-909d-14e31d1f5bb9.roa (raw, json) Hash identifier: hC246HQaEVslBY75R+qiv6RyPUyHYEaaevDwt0yaB8I= Subject key identifier: 4F:34:CE:60:49:97:D6:62:A7:E6:CB:86:1D:55:08:7F:D6:6A:C4:5A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E3852B2EB03E9759761F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7e2dd594-a608-33c1-909d-14e31d1f5bb9.roa Signing time: Thu 24 Apr 2025 12:37:24 +0000 ROA not before: Thu 24 Apr 2025 12:37:24 +0000 ROA not after: Wed 23 Jul 2025 12:37:24 +0000 asID: 396595 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:85:2b:2e:b0:3e:97:59:76:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:24 2025 GMT Not After : Jul 23 12:37:24 2025 GMT Subject: CN=873d4050-98ca-4967-9e1b-c376fd6886b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:84:9b:ff:ae:52:c1:0a:d4:b2:dd:aa:ce:96: 0c:13:80:9c:ad:42:02:6d:d9:b0:40:c7:49:88:eb: a4:2a:7a:99:b7:19:f5:82:60:c1:35:d0:a6:43:2c: 27:a0:02:77:1e:0e:bd:66:1e:37:f0:32:bf:c5:9d: 2d:1d:17:9b:d9:af:00:24:8e:b2:4b:66:b1:26:5c: 1b:16:09:18:31:19:b7:29:e4:67:4e:b6:92:07:07: 43:35:18:43:fb:19:c0:54:0e:92:23:d5:2e:dd:1d: b9:05:89:ff:6d:8c:65:8f:b9:69:74:1c:e2:60:bd: 8d:e4:75:97:87:95:16:b9:71:17:06:73:36:b5:5b: 35:ae:a7:59:6c:14:50:8d:db:bf:2d:ec:ce:bd:8e: d5:8f:f7:82:d3:70:4b:67:e0:4b:9c:26:5e:05:10: 22:75:a6:95:ba:3e:8a:7b:dc:57:8d:7f:38:dc:35: 7d:36:76:1c:7e:d3:4d:49:29:03:9c:35:0e:d5:3d: 66:2e:80:91:63:3f:cb:9d:21:68:2f:2c:e9:2d:ce: ac:22:0a:44:5c:4f:35:5f:cf:43:6c:51:06:65:bc: fc:b9:a8:6d:b8:10:00:1a:3e:dd:a5:59:82:20:bb: 0e:90:ce:28:e0:c6:8a:e5:65:bf:78:c4:bd:5a:b4: eb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:34:CE:60:49:97:D6:62:A7:E6:CB:86:1D:55:08:7F:D6:6A:C4:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7e2dd594-a608-33c1-909d-14e31d1f5bb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:cd:b0:67:f1:0d:e8:f8:5d:92:f3:ff:54:c6:16:79:df:d3: 20:94:14:bd:ac:75:2d:fe:19:30:22:c6:39:34:b2:fe:3b:8f: 6c:43:23:d9:51:e4:81:47:d8:c7:c9:56:e9:50:8b:48:94:7e: fe:74:65:cd:82:42:af:e4:15:ba:ac:69:a1:4c:90:e6:52:5e: 58:4f:f1:ca:ec:c9:d0:1a:2b:02:71:10:99:21:3a:d2:25:b7: 7e:90:89:a8:e3:c3:2b:c4:92:00:b2:2d:c4:ca:ee:b4:7f:ce: 6c:fd:12:0a:a7:88:ba:cb:d6:f5:ec:97:bb:0c:1f:0d:12:90: 08:c7:cc:c1:3f:7e:4f:60:68:73:58:a3:ce:3a:fb:3d:51:ee: 86:ce:84:33:1b:19:b0:91:d6:10:6b:95:33:46:7c:db:75:2e: 09:27:60:dd:14:8d:c8:37:96:56:24:60:70:6d:f0:a3:2a:14: 42:3e:36:1f:36:41:31:9f:08:fc:b1:7e:52:97:d7:dd:78:94: e7:cd:73:fe:8a:3b:5b:30:9f:22:86:09:d5:4c:29:96:b3:4b: de:d0:b2:45:a1:b0:2b:78:64:18:70:4a:a6:45:53:ae:fb:fe: 79:fb:61:7d:33:28:c5:cf:64:7d:a6:5f:3a:2a:85:43:fc:7e: c0:19:12:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44UrLrA+l1l2HwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNFoXDTI1MDcyMzEyMzcyNFowLzEtMCsGA1UEAxMk ODczZDQwNTAtOThjYS00OTY3LTllMWItYzM3NmZkNjg4NmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoSb/65SwQrUst2qzpYME4CcrUICbdmwQMdJ iOukKnqZtxn1gmDBNdCmQywnoAJ3Hg69Zh438DK/xZ0tHReb2a8AJI6yS2axJlwb FgkYMRm3KeRnTraSBwdDNRhD+xnAVA6SI9Uu3R25BYn/bYxlj7lpdBziYL2N5HWX h5UWuXEXBnM2tVs1rqdZbBRQjdu/LezOvY7Vj/eC03BLZ+BLnCZeBRAidaaVuj6K e9xXjX843DV9NnYcftNNSSkDnDUO1T1mLoCRYz/LnSFoLyzpLc6sIgpEXE81X89D bFEGZbz8uahtuBAAGj7dpVmCILsOkM4o4MaK5WW/eMS9WrTrEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE80zmBJl9Zip+bLhh1VCH/WasRaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2UyZGQ1OTQtYTYwOC0z M2MxLTkwOWQtMTRlMzFkMWY1YmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHfNsGfxDej4XZLz/1TGFnnf0yCUFL2sdS3+GTAixjk0sv47j2xD I9lR5IFH2MfJVulQi0iUfv50Zc2CQq/kFbqsaaFMkOZSXlhP8crsydAaKwJxEJkh OtIlt36QiajjwyvEkgCyLcTK7rR/zmz9EgqniLrL1vXsl7sMHw0SkAjHzME/fk9g aHNYo846+z1R7obOhDMbGbCR1hBrlTNGfNt1LgknYN0Ujcg3llYkYHBt8KMqFEI+ Nh82QTGfCPyxflKX1914lOfNc/6KO1swnyKGCdVMKZazS97QskWhsCt4ZBhwSqZF U677/nn7YX0zKMXPZH2mXzoqhUP8fsAZErU= -----END CERTIFICATE-----Generated at Sun Apr 27 17:51:32 2025 by rpki-client