$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/924a3ec1-874c-311e-9203-35d1f1b5b990.roa File: 924a3ec1-874c-311e-9203-35d1f1b5b990.roa (raw, json) Hash identifier: Q/rDtvWsl7I0UyzH2+yZCIQP+c4kgGDcs6fupC8uU3g= Subject key identifier: E2:79:90:9E:98:65:7F:CC:11:19:6A:BA:A3:90:0D:5D:19:91:98:D2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858493C09378C89CED474729AE180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/924a3ec1-874c-311e-9203-35d1f1b5b990.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 7342 IP address blocks: 2620:74:6f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:37:8c:89:ce:d4:74:72:9a:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=2419980b-6532-4bd4-bc28-7e50f90c11ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:16:70:41:a2:34:de:84:6f:9d:06:3a:70:99: ba:cd:73:18:b0:c7:c0:7f:ca:a7:43:af:15:af:da: 94:42:75:ad:1b:df:7d:66:3b:a8:8d:05:81:2f:fe: 26:e2:12:62:01:bb:b0:0a:a2:7e:50:6c:7e:17:af: 87:0e:0c:fe:ab:64:fe:af:ad:11:d6:0c:cd:6b:ce: b6:13:88:c1:13:54:7a:92:b7:b5:ac:b0:51:55:0c: a1:ab:98:98:6c:63:aa:18:62:d4:ec:c2:47:4d:34: 57:46:20:83:02:1e:e7:da:d0:ca:26:e3:ba:9a:ca: 72:d9:01:68:81:77:45:05:6d:95:6c:21:8e:9b:fa: e5:3d:6d:46:92:fb:fc:c7:72:00:59:6e:23:26:a9: 99:de:15:c0:04:a7:c8:de:91:27:8c:86:f9:47:09: 93:ab:d7:a8:b0:93:b8:77:e1:9a:37:90:3b:5e:36: cf:b9:ee:a0:0d:8f:30:37:3c:50:7a:06:09:8e:36: 6b:c9:76:66:d2:02:9f:74:4a:ec:fd:4a:a5:5e:ab: c3:82:1b:97:2e:ec:d4:e8:72:9e:ed:79:0f:c0:2d: c2:4e:5c:83:e8:c8:f6:d5:80:39:f0:5b:ea:e8:79: 67:88:0c:09:1b:67:b0:92:fb:1e:9f:56:0e:93:27: b2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:79:90:9E:98:65:7F:CC:11:19:6A:BA:A3:90:0D:5D:19:91:98:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/924a3ec1-874c-311e-9203-35d1f1b5b990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:6f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:d9:a3:dd:f9:17:39:1c:4d:7a:e1:fb:82:91:f2:a3:b4:02: b9:63:18:02:18:94:94:92:99:8c:c3:9e:ad:77:96:0a:de:67: b0:e9:18:bc:fe:0d:d3:67:07:6d:1d:e4:36:0d:10:ec:50:00: 0e:45:b7:dc:3f:0e:51:41:85:8c:c6:50:f2:dc:49:48:10:fc: e8:d8:41:4a:d6:74:7f:ed:1d:cd:32:ea:92:86:7b:64:92:af: 4a:0d:7f:8d:ca:c7:d1:a3:5c:44:ff:9d:bb:ee:45:5b:b8:46: 74:5d:ba:60:8a:56:c3:00:e7:42:d2:3f:c7:77:b7:6f:44:a8: 3f:69:de:64:cb:a4:5a:3b:86:f2:e0:e3:c1:4f:4d:20:df:11: c2:6c:60:1b:6e:48:d7:b5:c2:f1:0d:af:76:83:b6:ae:b1:16: 01:fc:7f:a7:cc:af:52:7b:14:6b:a0:2c:19:6d:a3:4e:df:32: 17:ae:f5:8a:72:3d:49:06:a6:26:19:1a:4e:9d:a2:c5:9d:32: 09:a3:1a:3d:35:89:56:42:38:0e:69:72:33:c4:bf:97:8b:33: 68:b6:0a:91:ef:03:52:06:cd:12:fb:6b:51:55:e0:b0:2b:a5: 9b:ab:15:e8:ca:63:97:59:b6:cf:4d:1d:7f:9d:9c:94:dc:cc: 96:a6:18:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk8CTeMic7UdHKa4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk MjQxOTk4MGItNjUzMi00YmQ0LWJjMjgtN2U1MGY5MGMxMWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxZwQaI03oRvnQY6cJm6zXMYsMfAf8qnQ68V r9qUQnWtG999ZjuojQWBL/4m4hJiAbuwCqJ+UGx+F6+HDgz+q2T+r60R1gzNa862 E4jBE1R6kre1rLBRVQyhq5iYbGOqGGLU7MJHTTRXRiCDAh7n2tDKJuO6mspy2QFo gXdFBW2VbCGOm/rlPW1Gkvv8x3IAWW4jJqmZ3hXABKfI3pEnjIb5RwmTq9eosJO4 d+GaN5A7XjbPue6gDY8wNzxQegYJjjZryXZm0gKfdErs/UqlXqvDghuXLuzU6HKe 7XkPwC3CTlyD6Mj21YA58Fvq6HlniAwJG2ewkvsen1YOkyeyKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOJ5kJ6YZX/MERlquqOQDV0ZkZjSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTI0YTNlYzEtODc0Yy0z MTFlLTkyMDMtMzVkMWYxYjViOTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHrZo935FzkcTXrh+4KR8qO0ArljGAIYlJSSmYzDnq13lgreZ7Dp GLz+DdNnB20d5DYNEOxQAA5Ft9w/DlFBhYzGUPLcSUgQ/OjYQUrWdH/tHc0y6pKG e2SSr0oNf43Kx9GjXET/nbvuRVu4RnRdumCKVsMA50LSP8d3t29EqD9p3mTLpFo7 hvLg48FPTSDfEcJsYBtuSNe1wvENr3aDtq6xFgH8f6fMr1J7FGugLBlto07fMheu 9YpyPUkGpiYZGk6dosWdMgmjGj01iVZCOA5pcjPEv5eLM2i2CpHvA1IGzRL7a1FV 4LArpZurFejKY5dZts9NHX+dnJTczJamGDM= -----END CERTIFICATE-----Generated at Sun Apr 27 19:06:32 2025 by rpki-client