$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a80e6369-f02d-3706-83f3-4405cb85c0d3.roa File: a80e6369-f02d-3706-83f3-4405cb85c0d3.roa (raw, json) Hash identifier: FzuFlTKEchhwdmjdBfGFqM+Je8eVzAlgpKL8fgMBWkw= Subject key identifier: 0E:E7:21:56:E5:7B:9E:7D:33:30:B0:91:9D:8A:2F:BC:73:69:9E:D5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C21E60F0742F5FF16A8C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a80e6369-f02d-3706-83f3-4405cb85c0d3.roa Signing time: Tue 15 Apr 2025 12:34:53 +0000 ROA not before: Tue 15 Apr 2025 12:34:53 +0000 ROA not after: Mon 14 Jul 2025 12:34:53 +0000 asID: 36626 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:1e:60:f0:74:2f:5f:f1:6a:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:53 2025 GMT Not After : Jul 14 12:34:53 2025 GMT Subject: CN=2bec9f2e-64af-45f1-be0f-420505b08dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ba:d4:1e:b4:d7:b2:d6:a7:75:34:c4:03:36: e9:82:cb:56:8c:84:0f:b5:94:a5:d4:bd:88:74:8e: c0:34:d7:68:fc:a4:5d:ed:d7:32:b5:58:e8:c4:ef: 6c:34:3d:28:a6:d7:82:02:86:1d:fc:32:a4:cd:ed: 4e:da:c4:da:ac:7a:2e:f1:7f:93:61:5a:94:62:39: 7d:dc:0b:66:0c:f0:7b:4d:8e:56:6f:1a:54:b1:87: 4a:06:a5:0c:93:ed:08:bd:59:16:1e:11:0e:00:f7: d8:0e:b0:4d:ef:ae:e3:ab:13:87:a1:9a:01:32:a0: 5f:16:04:37:fd:4e:3c:cc:1c:e6:fe:e3:79:12:b5: 1c:65:14:fb:d5:83:8a:ad:6e:1b:f9:2e:87:c9:a6: 09:59:0a:fd:6a:01:a3:c4:7b:3b:e2:17:ae:52:16: 13:d5:01:8a:28:ec:f6:27:fb:8f:9e:71:fc:23:56: 5c:01:4a:25:0d:13:6c:bb:d8:d4:aa:4a:88:c4:3b: f4:9a:b9:d5:44:85:36:37:d1:17:b2:21:f1:5f:89: 1b:96:46:30:51:17:06:fa:93:45:82:56:59:7e:1c: 17:ad:9a:e0:ae:73:86:54:b5:9f:53:5e:9f:72:2c: 73:da:99:0a:3a:38:8e:a2:75:4f:bb:d3:03:8a:6c: 14:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E7:21:56:E5:7B:9E:7D:33:30:B0:91:9D:8A:2F:BC:73:69:9E:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a80e6369-f02d-3706-83f3-4405cb85c0d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:9e:ee:3b:c1:1d:d7:8b:86:d9:83:10:01:4f:7d:2d:32:e9: 94:21:56:55:c8:25:ef:3e:94:6d:ba:7d:02:a2:39:d8:32:4a: 83:95:8a:0d:c1:e1:25:b1:be:c4:01:69:13:36:8f:c8:4c:1f: 89:60:6b:d6:a1:c0:4b:1c:61:01:fc:e9:53:c5:95:89:0b:97: 5e:ef:2b:a4:16:6f:99:cc:51:d7:e3:89:85:7c:18:1f:34:80: 66:f2:a0:d2:f9:9c:67:7b:56:5b:3b:6c:f0:8d:05:a4:4c:6f: 35:42:85:16:3f:de:1c:18:58:cb:f9:30:34:9d:90:fe:3f:2f: f1:ec:6d:e3:c1:83:ef:15:fe:e6:3b:e3:a5:3d:5e:97:25:7e: b4:20:37:6a:fd:48:10:b8:e7:fd:08:49:2e:1d:81:56:3b:41: d1:53:ae:02:a2:b4:b1:db:dc:bb:16:42:38:02:8d:91:30:b9: c6:1a:80:26:ae:34:59:6f:e8:0b:65:e0:b3:47:81:38:fa:25: 0f:f2:85:65:c1:fa:a6:89:0b:51:88:c4:e4:56:df:11:47:bd: 0a:4a:86:17:c2:fe:df:60:d5:45:46:91:70:b6:23:4d:0d:ba: 6f:24:b0:ae:79:09:a7:d4:81:6b:08:77:34:96:bd:34:ef:f6: 59:99:bd:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwh5g8HQvX/FqjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1M1oXDTI1MDcxNDEyMzQ1M1owLzEtMCsGA1UEAxMk MmJlYzlmMmUtNjRhZi00NWYxLWJlMGYtNDIwNTA1YjA4ZGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLrUHrTXstandTTEAzbpgstWjIQPtZSl1L2I dI7ANNdo/KRd7dcytVjoxO9sND0opteCAoYd/DKkze1O2sTarHou8X+TYVqUYjl9 3AtmDPB7TY5WbxpUsYdKBqUMk+0IvVkWHhEOAPfYDrBN767jqxOHoZoBMqBfFgQ3 /U48zBzm/uN5ErUcZRT71YOKrW4b+S6HyaYJWQr9agGjxHs74heuUhYT1QGKKOz2 J/uPnnH8I1ZcAUolDRNsu9jUqkqIxDv0mrnVRIU2N9EXsiHxX4kblkYwURcG+pNF glZZfhwXrZrgrnOGVLWfU16fcixz2pkKOjiOonVPu9MDimwUvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA7nIVble559MzCwkZ2KL7xzaZ7VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTgwZTYzNjktZjAyZC0z NzA2LTgzZjMtNDQwNWNiODVjMGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIae7jvBHdeLhtmDEAFPfS0y6ZQhVlXIJe8+lG26fQKiOdgySoOV ig3B4SWxvsQBaRM2j8hMH4lga9ahwEscYQH86VPFlYkLl17vK6QWb5nMUdfjiYV8 GB80gGbyoNL5nGd7Vls7bPCNBaRMbzVChRY/3hwYWMv5MDSdkP4/L/HsbePBg+8V /uY746U9XpclfrQgN2r9SBC45/0ISS4dgVY7QdFTrgKitLHb3LsWQjgCjZEwucYa gCauNFlv6Atl4LNHgTj6JQ/yhWXB+qaJC1GIxORW3xFHvQpKhhfC/t9g1UVGkXC2 I00Num8ksK55CafUgWsIdzSWvTTv9lmZvYM= -----END CERTIFICATE-----Generated at Mon Apr 28 06:42:18 2025 by rpki-client