$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97c023f1-83db-3711-916f-18fa4c5336b7.roa File: 97c023f1-83db-3711-916f-18fa4c5336b7.roa (raw, json) Hash identifier: MGhR0CNs/BzpmBxMH4GmFAiygFcvufN0Gn2UxCnaWj4= Subject key identifier: 98:62:E0:E9:B7:CB:FF:43:44:F7:9C:C5:C9:03:C4:6E:C6:D2:54:90 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849350EC539C3B0D0DD7830BC40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97c023f1-83db-3711-916f-18fa4c5336b7.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 7342 IP address blocks: 2620:74:5e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:c5:39:c3:b0:d0:dd:78:30:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=fd7101f2-a1b6-4194-928a-52d094aa163f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d6:a1:4f:f0:ae:f1:50:c5:37:f3:10:a6:38: 42:d7:c7:a4:56:05:a5:9f:da:52:08:da:0d:73:f6: 42:bd:10:df:c9:f5:12:0e:7c:85:b9:43:6f:11:f7: 3b:02:1b:45:ca:e2:21:c4:43:d8:ab:19:83:28:f7: 32:85:02:e5:f4:55:1e:24:cc:0f:49:59:51:3d:ee: da:6a:88:8a:70:34:1c:bb:50:a0:07:bc:1f:da:be: d6:a0:f6:a8:dc:3a:7f:0d:da:e9:1f:ed:21:1b:60: 9c:44:59:e4:bb:c5:6a:79:99:45:4d:fb:78:b4:a8: 98:b1:f5:86:7d:af:31:a2:7b:3a:a0:93:46:48:2c: 98:92:5f:8a:7f:17:4a:4a:84:05:cd:d1:03:ca:20: ca:76:2e:87:bc:f0:50:d8:d0:f8:ed:8c:4c:94:72: e3:2f:fc:10:fc:2d:d7:bf:87:4c:ac:77:9b:26:d3: 24:bb:ea:b4:a7:5d:64:8a:80:75:3c:01:06:b0:bf: 70:55:12:7e:ca:c6:0c:9f:c0:9e:c6:7c:40:7f:4d: 6c:f3:6d:4b:81:1c:7f:dc:7b:c8:ab:f9:78:dc:11: 82:ea:92:eb:f0:bf:3b:d9:5f:ff:65:ff:47:2f:38: d0:c9:7d:38:4e:b5:2c:f9:4e:12:03:5b:c2:03:95: f9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:62:E0:E9:B7:CB:FF:43:44:F7:9C:C5:C9:03:C4:6E:C6:D2:54:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/97c023f1-83db-3711-916f-18fa4c5336b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:5e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:d7:52:45:17:6a:4f:d3:31:cb:f5:b1:81:ab:74:5d:5c:d4: d4:81:8e:89:8a:fe:4f:87:bc:6d:53:bf:fe:02:d3:8e:0f:4a: 26:db:53:88:62:2d:4b:b7:5b:30:fb:03:40:6d:62:85:85:37: b7:93:af:a0:c9:15:dd:6e:9b:ec:32:e8:ad:fa:a6:a0:09:c2: a2:f1:70:a1:72:ab:92:1c:2d:4c:12:33:00:e9:29:f4:c6:ec: 6f:92:e0:cb:df:4f:e9:fa:33:ac:da:96:7b:17:f2:b7:3d:da: e0:6c:99:29:02:ca:b1:c0:e5:85:36:0f:ac:b2:02:23:40:1c: ff:a1:58:50:5e:a5:7e:2c:20:d2:1d:f6:ef:ea:fe:c4:5c:e7: cb:8d:54:1f:88:cd:24:26:c3:e4:a7:9f:0e:78:3c:9f:9b:13: ef:7d:0a:87:36:f6:e4:ce:2a:83:30:00:f4:0b:f4:6f:6c:73: 9e:7b:fa:24:d5:ce:e5:7e:42:c5:9d:53:b3:96:2f:4c:b3:a1: 91:92:23:dc:ae:41:62:0c:56:f7:23:09:c6:fa:d4:e4:9c:d8: ef:cc:23:ef:f7:8c:3a:a6:ab:19:8b:3d:96:89:e2:4b:3b:c2: 5d:ce:6f:1f:35:01:ea:78:fe:8f:83:92:33:02:df:40:3c:f9: 67:fc:24:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk1DsU5w7DQ3XgwvEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk ZmQ3MTAxZjItYTFiNi00MTk0LTkyOGEtNTJkMDk0YWExNjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtahT/Cu8VDFN/MQpjhC18ekVgWln9pSCNoN c/ZCvRDfyfUSDnyFuUNvEfc7AhtFyuIhxEPYqxmDKPcyhQLl9FUeJMwPSVlRPe7a aoiKcDQcu1CgB7wf2r7WoPao3Dp/DdrpH+0hG2CcRFnku8VqeZlFTft4tKiYsfWG fa8xons6oJNGSCyYkl+KfxdKSoQFzdEDyiDKdi6HvPBQ2ND47YxMlHLjL/wQ/C3X v4dMrHebJtMku+q0p11kioB1PAEGsL9wVRJ+ysYMn8CexnxAf01s821LgRx/3HvI q/l43BGC6pLr8L872V//Zf9HLzjQyX04TrUs+U4SA1vCA5X5UQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJhi4Om3y/9DRPecxckDxG7G0lSQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTdjMDIzZjEtODNkYi0z NzExLTkxNmYtMThmYTRjNTMzNmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIfXUkUXak/TMcv1sYGrdF1c1NSBjomK/k+HvG1Tv/4C044PSibb U4hiLUu3WzD7A0BtYoWFN7eTr6DJFd1um+wy6K36pqAJwqLxcKFyq5IcLUwSMwDp KfTG7G+S4MvfT+n6M6zalnsX8rc92uBsmSkCyrHA5YU2D6yyAiNAHP+hWFBepX4s INId9u/q/sRc58uNVB+IzSQmw+Snnw54PJ+bE+99Coc29uTOKoMwAPQL9G9sc557 +iTVzuV+QsWdU7OWL0yzoZGSI9yuQWIMVvcjCcb61OSc2O/MI+/3jDqmqxmLPZaJ 4ks7wl3Obx81Aep4/o+DkjMC30A8+Wf8JLY= -----END CERTIFICATE-----Generated at Sun Apr 27 18:49:26 2025 by rpki-client