$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0e36bde-1aee-3fb3-8c03-5f4131a472e5.roa File: a0e36bde-1aee-3fb3-8c03-5f4131a472e5.roa (raw, json) Hash identifier: Le/rnBInKVuH1rGUgW92XKGP/FlgyRHcTLiBhVOtkAk= Subject key identifier: 75:53:49:10:F9:7C:FD:57:C4:9E:A1:64:2E:48:59:34:AF:FF:9E:29 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E38699A82902FA00517180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0e36bde-1aee-3fb3-8c03-5f4131a472e5.roa Signing time: Thu 24 Apr 2025 12:37:24 +0000 ROA not before: Thu 24 Apr 2025 12:37:24 +0000 ROA not after: Wed 23 Jul 2025 12:37:24 +0000 asID: 25485 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:86:99:a8:29:02:fa:00:51:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:24 2025 GMT Not After : Jul 23 12:37:24 2025 GMT Subject: CN=ea616537-b2f0-4682-9207-8f7def82cbee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d4:52:27:b9:d0:c5:b6:94:d1:c7:dc:d3:05: 59:fb:50:9a:b8:3f:45:8c:b2:0b:38:ad:c3:5b:bc: e8:3b:37:6c:6c:1d:14:ae:63:39:9d:f6:4f:0f:5e: d9:25:21:b5:d9:99:1e:7b:98:f8:c6:5b:f2:ce:ce: c3:cb:0b:3f:62:44:dc:df:c1:c3:56:46:24:07:e8: 6c:00:a8:2a:6f:85:c9:b3:9a:2c:d2:b0:1c:a4:67: 31:c7:bd:32:36:82:da:28:c4:92:be:52:de:d3:89: 60:41:c8:c0:37:1d:8a:5c:d4:67:28:f6:72:38:60: 04:24:ff:b2:7d:ca:63:50:b6:fc:e8:4e:4e:fc:fb: 28:4e:35:cf:7a:ef:99:04:ca:28:63:64:72:a5:14: bb:68:30:ce:ef:3e:23:5c:ea:34:b7:a5:4e:1b:dd: 89:56:81:02:6d:57:a7:15:fc:a9:02:d0:dd:18:ab: 0b:32:28:81:6f:4b:b8:76:cd:ca:51:a5:15:66:c7: 64:48:4b:1f:e4:5f:df:7c:d7:2a:88:93:f8:25:9f: 73:07:fc:3b:e2:f6:76:21:e7:17:e6:91:ed:f6:a5: b6:7d:cf:11:23:7a:6d:43:1a:3e:e7:92:05:f8:e2: 5e:54:3a:80:44:de:ae:95:f8:c2:40:b6:9c:0d:a4: 23:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:53:49:10:F9:7C:FD:57:C4:9E:A1:64:2E:48:59:34:AF:FF:9E:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0e36bde-1aee-3fb3-8c03-5f4131a472e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:2f:16:bb:a5:67:ea:33:3b:5f:d2:8f:dc:95:b8:b5:67:cb: 89:de:76:a9:eb:0e:c1:95:8a:ad:de:1e:a5:97:c7:6a:80:74: 4a:dc:c0:2a:bc:99:d8:ad:8c:94:36:24:51:01:1f:6a:e2:0c: 44:53:19:51:23:f4:e9:8d:4c:cf:50:a5:79:f5:88:68:f8:5b: 39:25:6d:86:6f:56:9c:70:80:09:74:90:6a:ba:7a:6e:70:42: b8:1b:47:30:3f:30:4b:44:eb:6b:0a:29:2b:9d:f4:72:ca:6f: 56:1d:fc:2f:48:8a:66:e6:3c:9c:49:5c:7c:f1:1f:cf:90:07: 2b:9c:6d:68:8c:3a:21:76:cb:97:a2:41:3e:62:0f:da:4a:c8: 09:ae:f2:7e:9e:42:3f:08:00:e7:35:b3:e2:fc:fb:d3:12:8e: 13:32:60:1c:85:2f:71:b3:b2:df:b1:b2:a5:bb:f7:45:22:73: de:29:7a:88:3b:19:cc:04:a3:e4:12:58:41:de:39:b4:05:c1: 15:f1:57:ac:86:8f:9e:b0:5a:67:91:22:98:cf:09:7b:36:87: 0e:a5:94:15:b0:1a:bf:f0:d6:ac:ce:46:b3:94:0f:8e:99:cf: 85:19:06:23:0a:c0:81:b2:5b:19:81:dd:ba:68:0f:3c:49:9d: 9a:73:ab:23 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44aZqCkC+gBRcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNFoXDTI1MDcyMzEyMzcyNFowLzEtMCsGA1UEAxMk ZWE2MTY1MzctYjJmMC00NjgyLTkyMDctOGY3ZGVmODJjYmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdRSJ7nQxbaU0cfc0wVZ+1CauD9FjLILOK3D W7zoOzdsbB0UrmM5nfZPD17ZJSG12Zkee5j4xlvyzs7Dyws/YkTc38HDVkYkB+hs AKgqb4XJs5os0rAcpGcxx70yNoLaKMSSvlLe04lgQcjANx2KXNRnKPZyOGAEJP+y fcpjULb86E5O/PsoTjXPeu+ZBMooY2RypRS7aDDO7z4jXOo0t6VOG92JVoECbVen FfypAtDdGKsLMiiBb0u4ds3KUaUVZsdkSEsf5F/ffNcqiJP4JZ9zB/w74vZ2IecX 5pHt9qW2fc8RI3ptQxo+55IF+OJeVDqARN6ulfjCQLacDaQjewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHVTSRD5fP1XxJ6hZC5IWTSv/54pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTBlMzZiZGUtMWFlZS0z ZmIzLThjMDMtNWY0MTMxYTQ3MmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHwvFrulZ+ozO1/Sj9yVuLVny4nedqnrDsGViq3eHqWXx2qAdErc wCq8mditjJQ2JFEBH2riDERTGVEj9OmNTM9QpXn1iGj4WzklbYZvVpxwgAl0kGq6 em5wQrgbRzA/MEtE62sKKSud9HLKb1Yd/C9IimbmPJxJXHzxH8+QByucbWiMOiF2 y5eiQT5iD9pKyAmu8n6eQj8IAOc1s+L8+9MSjhMyYByFL3Gzst+xsqW790Uic94p eog7GcwEo+QSWEHeObQFwRXxV6yGj56wWmeRIpjPCXs2hw6llBWwGr/w1qzORrOU D46Zz4UZBiMKwIGyWxmB3bpoDzxJnZpzqyM= -----END CERTIFICATE-----Generated at Mon Apr 28 00:38:39 2025 by rpki-client