$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b34e06af-905e-3aa4-a640-0b0ae99465a6.roa File: b34e06af-905e-3aa4-a640-0b0ae99465a6.roa (raw, json) Hash identifier: ziRb+O5GOnfyOHHixNXu73J5ZVmfhqcbF4df6e2Dsjo= Subject key identifier: 6F:BF:BD:11:48:B7:C9:7A:60:F4:A3:A6:F6:CB:5D:99:0B:CD:23:CF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C221D03F70CD0A6D3C5080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b34e06af-905e-3aa4-a640-0b0ae99465a6.roa Signing time: Tue 15 Apr 2025 12:34:55 +0000 ROA not before: Tue 15 Apr 2025 12:34:55 +0000 ROA not after: Mon 14 Jul 2025 12:34:55 +0000 asID: 396595 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:21:d0:3f:70:cd:0a:6d:3c:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:55 2025 GMT Not After : Jul 14 12:34:55 2025 GMT Subject: CN=a20db41f-f50b-475d-a396-2c130292b208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0c:a5:0f:c4:2d:e8:ed:0d:2f:a7:63:31:fa: ce:97:e7:46:cb:ce:30:5c:e3:a9:82:6b:e7:85:d8: b8:ee:a8:0b:b4:4a:72:a7:36:74:d8:0f:0e:d0:08: 80:3f:a5:ed:f9:05:3a:dd:2f:1d:b1:6d:76:74:ed: 96:0b:38:9e:66:da:c2:d7:cc:4d:64:77:14:d9:4c: 84:f7:67:df:37:5c:2d:a0:8e:9f:02:2c:b9:9e:a7: 2e:d1:a4:25:03:56:0d:6d:81:2c:e9:8b:0f:e2:05: f7:93:49:b9:42:2e:c3:f6:2a:b4:5d:e8:6c:3d:ed: e8:f8:3a:9f:b4:1a:80:5e:37:fe:e5:2c:c3:a1:19: f3:46:2e:0b:18:6a:a9:9d:36:29:c7:70:85:c6:01: 3a:d8:5f:44:5d:db:a4:0a:68:d7:9d:b3:c3:8f:8c: 84:42:c7:b9:63:7d:35:c3:9f:37:4a:01:fa:95:ec: 3e:44:24:b5:eb:57:c7:8b:21:db:ba:6e:1c:2d:8a: 4b:0d:aa:47:b8:3e:bc:77:c6:a8:ee:ff:4e:64:8b: e8:03:b5:f0:89:d3:d8:5b:ce:06:5f:0a:e3:3d:7f: fc:e1:5c:99:d2:52:ce:b7:ca:56:81:6c:df:2e:59: f8:4d:db:f1:17:23:7c:b0:eb:81:3e:c8:73:bd:4d: 9b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:BF:BD:11:48:B7:C9:7A:60:F4:A3:A6:F6:CB:5D:99:0B:CD:23:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b34e06af-905e-3aa4-a640-0b0ae99465a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:dc:00:70:0f:1b:80:80:84:25:cd:37:88:b8:62:58:cf:5c: aa:5d:cf:75:14:6b:56:53:3f:47:02:bd:21:a7:73:21:09:68: a3:7a:82:59:9a:9f:13:96:a5:3d:71:05:45:99:f3:39:e0:0f: bb:26:9d:06:b0:36:31:4b:8d:ee:e0:a9:8c:b4:10:02:47:15: d4:3f:df:27:66:38:43:52:27:8d:1b:be:9a:41:cd:d2:f7:94: 9a:d7:0f:7d:5c:2c:2c:12:72:56:67:1b:22:da:2a:37:f9:6e: 92:a2:c4:ef:3a:2d:b1:ee:0e:41:84:d3:2d:cb:9b:47:93:3d: 4e:2a:f2:3e:ca:88:c3:95:53:53:9b:bf:00:84:20:39:95:6f: 74:ee:7f:11:79:c6:6e:5a:f0:42:2e:44:dc:ec:70:16:28:75: b2:bc:fd:fa:e4:62:37:31:c9:ce:9b:9c:0c:05:0d:83:17:d0: 8b:b8:45:28:c8:37:d7:18:c9:bc:39:59:ed:b8:af:68:dc:0c: 8d:02:a2:b6:74:72:ec:98:a9:ca:6e:0b:84:e0:35:aa:37:aa: 92:96:a8:d5:e9:c4:e8:6e:eb:cf:84:16:6f:4b:6b:a2:a7:23: a4:a6:9a:3c:3d:69:8e:ac:5d:e3:55:43:29:e1:b2:a1:8c:f9: 68:a8:7a:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwiHQP3DNCm08UIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NVoXDTI1MDcxNDEyMzQ1NVowLzEtMCsGA1UEAxMk YTIwZGI0MWYtZjUwYi00NzVkLWEzOTYtMmMxMzAyOTJiMjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQylD8Qt6O0NL6djMfrOl+dGy84wXOOpgmvn hdi47qgLtEpypzZ02A8O0AiAP6Xt+QU63S8dsW12dO2WCzieZtrC18xNZHcU2UyE 92ffN1wtoI6fAiy5nqcu0aQlA1YNbYEs6YsP4gX3k0m5Qi7D9iq0XehsPe3o+Dqf tBqAXjf+5SzDoRnzRi4LGGqpnTYpx3CFxgE62F9EXdukCmjXnbPDj4yEQse5Y301 w583SgH6lew+RCS161fHiyHbum4cLYpLDapHuD68d8ao7v9OZIvoA7XwidPYW84G XwrjPX/84VyZ0lLOt8pWgWzfLln4TdvxFyN8sOuBPshzvU2bMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG+/vRFIt8l6YPSjpvbLXZkLzSPPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjM0ZTA2YWYtOTA1ZS0z YWE0LWE2NDAtMGIwYWU5OTQ2NWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACncAHAPG4CAhCXNN4i4YljPXKpdz3UUa1ZTP0cCvSGncyEJaKN6 glmanxOWpT1xBUWZ8zngD7smnQawNjFLje7gqYy0EAJHFdQ/3ydmOENSJ40bvppB zdL3lJrXD31cLCwSclZnGyLaKjf5bpKixO86LbHuDkGE0y3Lm0eTPU4q8j7KiMOV U1ObvwCEIDmVb3TufxF5xm5a8EIuRNzscBYodbK8/frkYjcxyc6bnAwFDYMX0Iu4 RSjIN9cYybw5We24r2jcDI0CorZ0cuyYqcpuC4TgNao3qpKWqNXpxOhu68+EFm9L a6KnI6Smmjw9aY6sXeNVQynhsqGM+WioejE= -----END CERTIFICATE-----Generated at Sun Apr 27 19:09:37 2025 by rpki-client