$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab7f177a-9840-3156-a04e-bc0077842029.roa File: ab7f177a-9840-3156-a04e-bc0077842029.roa (raw, json) Hash identifier: JrWg5fSM66E8NskLUowLoRmDedAWdQC4G7//F30/ktg= Subject key identifier: 7F:05:72:20:BC:25:16:00:A1:5A:58:B9:AC:42:B6:A3:63:1B:05:20 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858494CC94C2BCE0DFAD8D48B0E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab7f177a-9840-3156-a04e-bc0077842029.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 0 IP address blocks: 2620:74:4e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:4c:2b:ce:0d:fa:d8:d4:8b:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=5a6331ae-57c7-4b83-a4ff-5a165e3b0a75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:88:b6:9b:97:7b:35:ed:47:6a:f9:f1:73:4e: e0:8a:33:46:74:7b:7f:4f:fa:b4:14:79:97:12:ba: 57:c2:ee:1b:3f:83:d9:cd:2f:62:71:08:5d:b6:e3: 6f:70:a5:57:0b:75:e6:b0:5a:d9:78:e2:1e:1c:0f: c1:26:81:ee:71:a4:ff:93:23:24:5e:76:d4:b0:9e: c8:b5:a9:92:c4:e3:48:76:1c:1b:bf:81:ea:c4:88: 6c:29:4e:5e:f2:8c:07:c9:69:9f:46:fc:88:76:f3: ec:0c:c9:7a:17:e3:20:f6:73:80:bc:02:5c:8f:7b: 4f:6b:31:95:6d:21:2a:a2:cd:08:7b:b8:e0:1c:12: 78:72:98:a5:f6:43:70:eb:27:b8:f1:3e:dd:8d:01: 18:54:36:37:9a:44:71:0e:e7:9c:ca:18:6b:ea:3c: 69:95:f5:4e:a5:70:73:ea:c3:96:a0:cd:04:85:2f: a6:7c:7c:17:50:63:8d:94:5a:ba:07:ae:19:c2:ce: c2:e6:42:89:77:1b:15:16:5c:b2:ff:e8:57:81:47: ec:20:c3:65:7c:ab:07:dd:1f:1b:58:f7:85:fe:31: d5:a7:5d:67:55:1f:df:ca:43:16:09:cb:94:f2:6d: 51:f7:48:55:f1:be:cc:a5:92:a0:fc:52:f2:b6:1c: 10:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:05:72:20:BC:25:16:00:A1:5A:58:B9:AC:42:B6:A3:63:1B:05:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab7f177a-9840-3156-a04e-bc0077842029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:4e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:52:29:c4:30:0c:6a:cc:a1:31:63:c6:57:0a:00:85:f7:e5: 99:84:23:5d:8d:7a:2d:4a:8b:93:68:ab:6e:e1:88:84:48:f1: 3d:1e:02:74:6a:98:8e:97:0d:11:a8:53:bb:e1:a3:c0:cf:49: c4:3d:46:ce:28:ba:9f:e5:2c:f7:5c:00:e5:1a:ff:0c:47:a9: 5b:2a:7f:59:53:ca:51:4c:cb:df:48:1a:91:00:ad:90:30:80: 58:e4:26:25:56:0d:b5:d9:cc:40:e3:d0:6a:e7:30:8d:23:f8: 22:32:26:2f:9e:1a:5c:00:0d:4a:77:7d:02:d7:38:9c:c8:90: 47:a8:5f:af:f3:15:9d:a7:46:82:82:6d:3c:c7:a1:2e:32:e3: 70:44:bb:ea:ca:80:22:11:6e:15:e8:e0:26:42:dc:99:fd:b8: 83:a5:a8:45:56:53:b2:29:94:78:5d:37:32:56:42:54:7c:34: e1:5b:6f:25:7b:cf:72:72:60:34:98:ba:ba:c3:e3:44:b8:1c: 5b:42:0a:60:6d:1a:e9:eb:cd:a0:07:a4:f2:4b:dd:a4:af:25: 10:a2:9e:cf:5b:42:92:28:23:84:db:37:64:d2:b1:01:4a:17: 5b:1f:f3:c8:9b:7f:67:43:2a:4b:0a:3a:0b:f1:ae:cb:a3:40: 29:92:39:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElMyUwrzg362NSLDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk NWE2MzMxYWUtNTdjNy00YjgzLWE0ZmYtNWExNjVlM2IwYTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoi2m5d7Ne1Havnxc07gijNGdHt/T/q0FHmX ErpXwu4bP4PZzS9icQhdtuNvcKVXC3XmsFrZeOIeHA/BJoHucaT/kyMkXnbUsJ7I tamSxONIdhwbv4HqxIhsKU5e8owHyWmfRvyIdvPsDMl6F+Mg9nOAvAJcj3tPazGV bSEqos0Ie7jgHBJ4cpil9kNw6ye48T7djQEYVDY3mkRxDuecyhhr6jxplfVOpXBz 6sOWoM0EhS+mfHwXUGONlFq6B64Zws7C5kKJdxsVFlyy/+hXgUfsIMNlfKsH3R8b WPeF/jHVp11nVR/fykMWCcuU8m1R90hV8b7MpZKg/FLythwQbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH8FciC8JRYAoVpYuaxCtqNjGwUgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWI3ZjE3N2EtOTg0MC0z MTU2LWEwNGUtYmMwMDc3ODQyMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIBSKcQwDGrMoTFjxlcKAIX35ZmEI12Nei1Ki5Noq27hiIRI8T0e AnRqmI6XDRGoU7vho8DPScQ9Rs4oup/lLPdcAOUa/wxHqVsqf1lTylFMy99IGpEA rZAwgFjkJiVWDbXZzEDj0GrnMI0j+CIyJi+eGlwADUp3fQLXOJzIkEeoX6/zFZ2n RoKCbTzHoS4y43BEu+rKgCIRbhXo4CZC3Jn9uIOlqEVWU7IplHhdNzJWQlR8NOFb byV7z3JyYDSYurrD40S4HFtCCmBtGunrzaAHpPJL3aSvJRCins9bQpIoI4TbN2TS sQFKF1sf88ibf2dDKksKOgvxrsujQCmSOTM= -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:24 2025 by rpki-client