$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/81bf70f2-010c-3aa8-8401-8e4aa9a2548b.roa File: 81bf70f2-010c-3aa8-8401-8e4aa9a2548b.roa (raw, json) Hash identifier: G4lSevYBkV++37lzOH+eUTISfF03RfSfow/sWIzMvWs= Subject key identifier: EE:FA:B9:E4:6B:EC:21:ED:B5:8D:43:E4:44:FB:11:15:69:3F:8A:12 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C222CA1B2B734F82C936E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/81bf70f2-010c-3aa8-8401-8e4aa9a2548b.roa Signing time: Tue 15 Apr 2025 12:34:55 +0000 ROA not before: Tue 15 Apr 2025 12:34:55 +0000 ROA not after: Mon 14 Jul 2025 12:34:55 +0000 asID: 396546 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:22:ca:1b:2b:73:4f:82:c9:36:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:55 2025 GMT Not After : Jul 14 12:34:55 2025 GMT Subject: CN=a40174f3-c4e3-4f0b-a9de-49a4408b36f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:04:65:50:10:d6:6d:44:2f:78:33:14:db:f3: d1:ae:1e:be:10:29:bd:03:f2:20:f4:41:61:34:1b: 41:90:bb:2b:3d:c3:1f:97:55:f9:53:d5:08:96:4a: af:d2:e1:f4:12:94:11:6f:b8:71:12:fe:fc:78:d6: 19:5a:72:fc:f1:70:43:c2:bf:58:c9:3b:24:19:13: c6:c3:97:c5:a6:ab:1d:22:73:d7:c8:c4:08:d7:64: 2f:50:1e:fd:b1:38:5e:81:01:51:99:fe:0c:d1:fe: 5f:08:c1:3b:0b:30:eb:6e:87:eb:8b:f3:59:92:39: 61:48:96:5a:4b:81:7e:e0:21:fa:0d:5b:fb:38:56: 98:c8:28:e8:83:5b:c6:a4:a5:2e:18:99:f6:c7:b4: 8b:f9:7a:a6:9a:d5:4a:74:58:1c:a6:d7:3d:67:63: 96:39:0a:a8:d0:ce:b2:8e:3a:67:70:4b:b1:74:6d: fb:96:7a:b6:8b:d9:39:38:df:2b:13:8f:83:8e:75: b9:06:87:91:fc:00:17:68:fa:95:cc:97:20:e9:bf: f6:59:ca:49:74:cf:92:1f:86:82:9f:5d:b2:b8:fe: 95:12:fd:8f:35:53:ea:66:57:b5:db:51:82:08:9a: 12:e3:37:ae:35:bf:34:31:e5:b2:1a:55:75:d5:e3: da:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FA:B9:E4:6B:EC:21:ED:B5:8D:43:E4:44:FB:11:15:69:3F:8A:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/81bf70f2-010c-3aa8-8401-8e4aa9a2548b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:98:58:d7:c5:27:a6:00:d2:5c:84:04:d5:8e:c3:23:59:ff: 22:2f:32:7d:bd:07:42:04:f6:57:c1:b8:7e:9d:f8:74:6f:09: 58:bc:32:7f:f7:5a:18:46:ad:e7:e4:0d:13:33:33:47:e0:a3: f7:7a:46:40:43:72:f7:78:40:e1:76:58:24:1c:cc:68:77:40: 9d:ff:84:93:c6:3d:e9:c3:44:c7:9e:cd:8b:55:6b:b8:d7:0e: f4:08:ba:45:1f:2a:bd:7c:60:4c:59:db:89:08:71:71:29:86: f2:8e:11:eb:64:42:0c:5f:bc:f9:87:7b:85:ef:02:55:ff:d9: 6c:89:4d:0a:82:2b:c9:4e:69:40:06:31:e7:80:b3:8b:53:c0: c3:f4:f0:6b:80:39:87:a9:7a:c6:13:6b:d2:6b:02:9d:13:6a: 66:f1:fb:b7:31:31:6c:a1:44:24:53:41:ee:37:35:65:50:ee: 65:13:8f:e4:30:73:22:5e:02:11:ba:77:62:2b:04:ba:44:7c: c7:88:29:67:84:b6:b7:0e:dc:ec:80:31:0a:9f:c3:d9:f8:5b: 70:75:ea:f7:52:20:d2:09:22:29:2c:6d:cd:8f:00:e6:70:8f: 9d:74:f9:69:e0:89:d4:a7:66:99:3e:9d:3b:12:4a:8e:ab:c2: 01:96:ed:42 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwiLKGytzT4LJNuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NVoXDTI1MDcxNDEyMzQ1NVowLzEtMCsGA1UEAxMk YTQwMTc0ZjMtYzRlMy00ZjBiLWE5ZGUtNDlhNDQwOGIzNmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxARlUBDWbUQveDMU2/PRrh6+ECm9A/Ig9EFh NBtBkLsrPcMfl1X5U9UIlkqv0uH0EpQRb7hxEv78eNYZWnL88XBDwr9YyTskGRPG w5fFpqsdInPXyMQI12QvUB79sThegQFRmf4M0f5fCME7CzDrbofri/NZkjlhSJZa S4F+4CH6DVv7OFaYyCjog1vGpKUuGJn2x7SL+XqmmtVKdFgcptc9Z2OWOQqo0M6y jjpncEuxdG37lnq2i9k5ON8rE4+DjnW5BoeR/AAXaPqVzJcg6b/2WcpJdM+SH4aC n12yuP6VEv2PNVPqZle121GCCJoS4zeuNb80MeWyGlV11ePaYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO76ueRr7CHttY1D5ET7ERVpP4oSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODFiZjcwZjItMDEwYy0z YWE4LTg0MDEtOGU0YWE5YTI1NDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA+YWNfFJ6YA0lyEBNWOwyNZ/yIvMn29B0IE9lfBuH6d+HRvCVi8 Mn/3WhhGrefkDRMzM0fgo/d6RkBDcvd4QOF2WCQczGh3QJ3/hJPGPenDRMeezYtV a7jXDvQIukUfKr18YExZ24kIcXEphvKOEetkQgxfvPmHe4XvAlX/2WyJTQqCK8lO aUAGMeeAs4tTwMP08GuAOYepesYTa9JrAp0Tambx+7cxMWyhRCRTQe43NWVQ7mUT j+QwcyJeAhG6d2IrBLpEfMeIKWeEtrcO3OyAMQqfw9n4W3B16vdSINIJIiksbc2P AOZwj510+WngidSnZpk+nTsSSo6rwgGW7UI= -----END CERTIFICATE-----Generated at Sun Apr 27 21:31:35 2025 by rpki-client