$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af204db8-7a83-31ab-ab57-ce984a580492.roa File: af204db8-7a83-31ab-ab57-ce984a580492.roa (raw, json) Hash identifier: Fem91LrFT/eJIR3iSATRCWlCJsa3B9s5M9W9vlqnj5s= Subject key identifier: 86:73:FF:AF:B3:D2:86:FE:B8:95:71:C1:79:FC:0D:96:4E:FD:AD:48 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C222150EDCB60896CE1740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af204db8-7a83-31ab-ab57-ce984a580492.roa Signing time: Tue 15 Apr 2025 12:34:55 +0000 ROA not before: Tue 15 Apr 2025 12:34:55 +0000 ROA not after: Mon 14 Jul 2025 12:34:55 +0000 asID: 36622 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:22:15:0e:dc:b6:08:96:ce:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:55 2025 GMT Not After : Jul 14 12:34:55 2025 GMT Subject: CN=41a1aefd-26f8-48c0-8e71-8df55894f894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a5:2a:4d:69:35:82:6d:ad:46:97:42:66:98: 63:36:d4:cd:f3:35:46:d3:21:bc:59:e6:8d:1e:a0: 18:2d:97:13:f3:db:26:67:dd:12:4d:4c:44:d6:d1: a1:ff:3c:ad:77:1f:e8:d9:ce:3a:ef:33:15:37:c0: 3c:f0:f2:bb:3c:ec:6f:7b:a7:d6:2b:c0:d4:73:df: 3d:35:03:cb:86:24:58:15:0f:3d:00:a3:07:f0:af: e2:93:f5:56:8d:e7:e5:67:f2:49:a5:bf:94:35:8f: 94:8d:1f:4c:69:2b:77:9e:69:ee:d0:c1:82:fc:b7: 94:5a:cb:c5:0f:7f:1f:ae:c9:ee:ee:42:30:41:f2: bc:67:59:e2:c4:21:8f:fa:ed:52:5a:3a:f3:3b:fe: 6e:e5:70:3f:4e:5b:a6:82:94:cf:ff:7d:96:bd:50: 90:f8:81:40:5b:69:b6:b4:36:33:9a:4d:4c:88:d5: 58:5d:23:ad:25:63:a4:8a:3e:78:87:e7:42:37:83: 77:9b:e9:1f:cf:aa:12:ae:d2:6c:bd:d2:3e:08:59: f5:04:56:5e:ff:0f:e3:cf:2e:84:bf:dc:44:1b:c0: 61:c0:b1:7f:2e:4f:f8:c8:9e:c3:b3:dd:57:94:c3: 70:16:5c:c2:8c:61:96:41:2b:23:ac:57:a7:9d:5f: e0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:73:FF:AF:B3:D2:86:FE:B8:95:71:C1:79:FC:0D:96:4E:FD:AD:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af204db8-7a83-31ab-ab57-ce984a580492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:f4:42:52:bc:ce:67:ab:34:ce:28:72:8d:17:6f:43:f9:54: 67:3d:d5:fb:53:91:07:03:4a:4a:a5:da:a3:72:b1:45:5c:65: b9:e0:b7:e1:da:71:e3:7d:8f:bc:d3:ce:69:8e:d0:c5:04:7b: 9d:23:d4:86:8d:99:94:c4:18:5a:9f:da:98:9b:23:4c:ab:5f: 73:94:c0:a2:aa:6b:cd:dc:41:db:5e:ef:9c:a1:f2:2a:f7:8c: 90:03:f6:69:da:3e:a9:57:41:70:1f:7b:72:a5:e8:44:be:e4: 33:68:1b:dd:30:09:bc:f6:56:35:80:07:1e:d6:c7:d7:d6:52: e7:53:9a:0b:97:0e:0e:f8:0e:48:09:74:25:da:fa:a7:5b:1e: 37:a3:99:0e:01:84:56:b1:31:c1:f4:b3:04:c0:f8:92:24:34: d5:79:a4:fd:8e:43:11:5f:89:74:9d:ea:cd:d9:60:a4:75:37: aa:a8:ad:ca:e9:3a:00:fd:ea:2e:f6:8e:71:6e:e4:e1:9b:69: cf:72:f4:2e:ec:c3:21:2c:56:6a:4e:b0:58:b8:91:b6:82:79: 9c:83:a6:4e:ff:2a:e4:2b:fc:43:5c:f6:14:01:03:d1:37:24: 04:7d:e2:72:58:7f:48:c2:cc:68:a3:56:77:b3:b9:37:04:cf: 91:8f:3c:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwiIVDty2CJbOF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NVoXDTI1MDcxNDEyMzQ1NVowLzEtMCsGA1UEAxMk NDFhMWFlZmQtMjZmOC00OGMwLThlNzEtOGRmNTU4OTRmODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKUqTWk1gm2tRpdCZphjNtTN8zVG0yG8WeaN HqAYLZcT89smZ90STUxE1tGh/zytdx/o2c467zMVN8A88PK7POxve6fWK8DUc989 NQPLhiRYFQ89AKMH8K/ik/VWjeflZ/JJpb+UNY+UjR9MaSt3nmnu0MGC/LeUWsvF D38frsnu7kIwQfK8Z1nixCGP+u1SWjrzO/5u5XA/TlumgpTP/32WvVCQ+IFAW2m2 tDYzmk1MiNVYXSOtJWOkij54h+dCN4N3m+kfz6oSrtJsvdI+CFn1BFZe/w/jzy6E v9xEG8BhwLF/Lk/4yJ7Ds91XlMNwFlzCjGGWQSsjrFennV/glQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIZz/6+z0ob+uJVxwXn8DZZO/a1IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWYyMDRkYjgtN2E4My0z MWFiLWFiNTctY2U5ODRhNTgwNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAz0QlK8zmerNM4oco0Xb0P5VGc91ftTkQcDSkql2qNysUVcZbng t+HaceN9j7zTzmmO0MUEe50j1IaNmZTEGFqf2pibI0yrX3OUwKKqa83cQdte75yh 8ir3jJAD9mnaPqlXQXAfe3Kl6ES+5DNoG90wCbz2VjWABx7Wx9fWUudTmguXDg74 DkgJdCXa+qdbHjejmQ4BhFaxMcH0swTA+JIkNNV5pP2OQxFfiXSd6s3ZYKR1N6qo rcrpOgD96i72jnFu5OGbac9y9C7swyEsVmpOsFi4kbaCeZyDpk7/KuQr/ENc9hQB A9E3JAR94nJYf0jCzGijVnezuTcEz5GPPLk= -----END CERTIFICATE-----Generated at Mon Apr 28 03:24:23 2025 by rpki-client