$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a411e2c6-3ae4-3048-a6b9-10b9f44ecdef.roa File: a411e2c6-3ae4-3048-a6b9-10b9f44ecdef.roa (raw, json) Hash identifier: nc9QqU6/Twb0obUY62ESLHOGEQHhxnBD0oDVHmxj/dM= Subject key identifier: 6C:B6:04:C5:A1:9A:2F:6A:8C:B1:F5:D8:E7:0B:B1:2F:42:B3:23:54 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858494CC94B1528E842B87452F980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a411e2c6-3ae4-3048-a6b9-10b9f44ecdef.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 0 IP address blocks: 2620:74:c::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:4b:15:28:e8:42:b8:74:52:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=df7a69b8-32cb-4a70-acfd-e311fddb41de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bd:2d:99:09:35:c9:b1:0d:14:15:22:4f:2b: 5a:32:48:36:3b:5f:52:1a:dc:16:a0:e9:d6:e3:2f: e3:e5:7c:f1:96:e7:37:bb:b0:1b:ba:51:7d:fe:c9: ee:38:f7:13:3c:13:e9:2a:ac:4b:ac:84:25:7a:0c: 05:91:6e:74:44:c3:87:9c:d1:bc:e0:6b:98:5a:80: 9f:27:2f:41:b0:c5:47:f8:b5:56:22:05:4a:94:72: 41:82:03:9e:61:f4:6e:0d:ac:4c:3a:6e:2e:4e:d8: 2c:df:72:c7:89:34:d3:57:4e:57:82:d8:2f:b5:df: ae:c0:28:41:5d:cf:af:4a:9b:c7:b2:36:fb:c7:f0: e5:42:3c:41:bf:05:43:0f:f7:ec:02:cf:90:10:c7: 03:78:f8:05:5a:41:8f:6d:38:e0:17:83:9f:88:89: 02:e7:c9:72:2a:b6:af:12:d0:4c:62:2b:48:7d:c1: 06:a6:ff:b9:b4:37:7e:94:5f:61:f9:61:09:a8:95: b2:09:45:a0:47:6f:f4:74:be:63:6e:5c:1a:54:0f: 08:98:16:23:89:e9:8e:9d:f2:7f:d6:46:10:26:19: 52:a1:b6:3a:e8:0e:b4:f3:b7:dd:d7:13:1e:4c:2f: 9e:f4:bd:91:94:63:9a:28:c8:59:9e:94:95:a1:ae: 8b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B6:04:C5:A1:9A:2F:6A:8C:B1:F5:D8:E7:0B:B1:2F:42:B3:23:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a411e2c6-3ae4-3048-a6b9-10b9f44ecdef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:c::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:d0:b6:74:13:da:44:9d:6c:90:be:d2:8f:0b:dd:d5:e0:11: 05:19:6f:6c:f3:92:a6:41:82:4b:37:01:cf:cf:29:10:2d:88: 4a:11:a7:13:79:ac:64:c3:b6:c9:0b:9c:68:f5:60:c6:2a:8d: 25:7e:4a:17:74:95:12:0d:de:2e:a4:b9:9b:80:92:07:f2:c9: 65:fa:11:34:18:9a:c7:fd:e6:48:61:9c:14:be:13:10:4a:91: c8:fe:66:30:ba:fb:04:c9:8e:60:6a:7c:53:97:64:f7:cf:d7: a3:a0:d8:92:1c:82:3e:e0:37:8b:64:d0:32:e7:3f:c0:8b:2a: ad:b6:bc:0e:6f:84:c1:41:d3:8b:e4:4b:a7:f9:72:65:18:12: 8e:8b:5e:ef:25:16:dc:49:e9:d3:0d:72:eb:ae:71:47:9e:c2: 05:78:b5:c1:18:dc:fb:ed:ea:d2:9a:af:af:3b:e9:8f:d3:2f: 20:65:8e:0c:13:a3:24:77:1c:c8:c8:73:d9:44:59:ec:cd:9f: e6:90:0c:21:18:13:de:e6:91:90:5b:fa:99:38:4a:1d:6c:59: 22:08:63:d6:dd:c8:6c:c8:0c:9e:d2:ca:f2:4d:4a:23:70:3b: 66:38:6d:3a:be:71:c9:03:46:bd:b9:97:6e:07:b5:73:71:43: 5e:2a:73:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElMyUsVKOhCuHRS+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk ZGY3YTY5YjgtMzJjYi00YTcwLWFjZmQtZTMxMWZkZGI0MWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL0tmQk1ybENFBUiTytaMkg2O19SGtwWoOnW 4y/j5Xzxluc3u7AbulF9/snuOPcTPBPpKqxLrIQlegwFkW50RMOHnNG84GuYWoCf Jy9BsMVH+LVWIgVKlHJBggOeYfRuDaxMOm4uTtgs33LHiTTTV05Xgtgvtd+uwChB Xc+vSpvHsjb7x/DlQjxBvwVDD/fsAs+QEMcDePgFWkGPbTjgF4OfiIkC58lyKrav EtBMYitIfcEGpv+5tDd+lF9h+WEJqJWyCUWgR2/0dL5jblwaVA8ImBYjiemOnfJ/ 1kYQJhlSobY66A6087fd1xMeTC+e9L2RlGOaKMhZnpSVoa6LYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGy2BMWhmi9qjLH12OcLsS9CsyNUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTQxMWUyYzYtM2FlNC0z MDQ4LWE2YjktMTBiOWY0NGVjZGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAdAAM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABrQtnQT2kSdbJC+0o8L3dXgEQUZb2zzkqZBgks3Ac/PKRAtiEoR pxN5rGTDtskLnGj1YMYqjSV+Shd0lRIN3i6kuZuAkgfyyWX6ETQYmsf95khhnBS+ ExBKkcj+ZjC6+wTJjmBqfFOXZPfP16Og2JIcgj7gN4tk0DLnP8CLKq22vA5vhMFB 04vkS6f5cmUYEo6LXu8lFtxJ6dMNcuuucUeewgV4tcEY3Pvt6tKar6876Y/TLyBl jgwToyR3HMjIc9lEWezNn+aQDCEYE97mkZBb+pk4Sh1sWSIIY9bdyGzIDJ7SyvJN SiNwO2Y4bTq+cckDRr25l24HtXNxQ14qczE= -----END CERTIFICATE-----Generated at Sat Apr 26 12:51:23 2025 by rpki-client