$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1f640a7-5a4a-357a-8532-645c9226a461.roa File: c1f640a7-5a4a-357a-8532-645c9226a461.roa (raw, json) Hash identifier: GMB6l29ryJhwTqF0UWF0L+Rs8TIljekkK6jhxlstqI8= Subject key identifier: 46:70:50:03:0D:35:7F:CC:55:8F:CB:60:D3:FD:9C:42:B7:19:DD:79 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584975447040332E983768E0DE00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1f640a7-5a4a-357a-8532-645c9226a461.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 396567 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:70:40:33:2e:98:37:68:e0:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=6526ec34-1fb5-4c4f-b2e1-33125ea4d6de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:77:39:a9:b4:99:54:1e:39:b9:c8:09:1a:cd: 7c:23:39:38:e1:6e:83:85:a1:69:c9:bc:1e:ec:84: bc:6b:de:e9:bd:3a:df:02:a6:26:c8:32:3a:42:c5: e3:a4:b4:88:11:26:91:27:f0:36:44:89:7e:9f:cc: 69:ae:83:98:b4:0a:2a:ba:09:ac:73:42:69:46:bd: 7e:8c:8f:22:40:42:46:eb:1f:c4:df:7c:7e:59:8f: f6:80:8c:ab:e1:e3:50:94:dd:0b:62:17:4d:90:02: 91:4c:66:44:53:74:16:92:98:83:cf:d6:5d:5c:4d: 5f:39:c7:d6:16:7d:43:c8:52:89:f2:47:93:de:ee: a8:04:9b:06:62:96:33:7c:bd:06:9a:fb:a4:4b:70: 23:6e:6b:b6:f9:e8:66:6c:10:ed:92:c1:28:ba:ef: ab:ef:a5:69:cb:80:e5:d2:ff:0b:e1:82:0a:73:ea: 67:b9:57:43:15:02:3e:5c:b7:ea:0b:30:3b:a1:b4: 34:10:21:1d:e3:7b:05:fa:ea:1b:8c:25:65:e9:fa: f8:2c:9b:92:2c:59:c7:23:98:05:94:33:f3:95:72: ba:ed:38:98:f1:fd:86:b9:9f:0e:59:59:fb:6b:a4: ba:bc:91:92:0c:77:cd:07:e2:08:06:8d:ff:54:35: 6c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:70:50:03:0D:35:7F:CC:55:8F:CB:60:D3:FD:9C:42:B7:19:DD:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1f640a7-5a4a-357a-8532-645c9226a461.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:04:45:b6:f3:99:70:ff:3b:35:c7:e4:31:55:be:9c:be:c9: 61:53:59:b8:7f:79:fb:85:61:e2:6d:4e:c6:2e:f9:22:36:a9: e7:57:e1:b8:31:f7:22:d6:90:1c:03:20:d9:41:cd:0b:24:96: 81:93:4c:2e:14:cd:a7:80:93:9c:65:ca:21:e2:55:c5:e4:15: ad:65:c4:6b:ff:a1:c4:31:56:5a:b9:ac:d0:63:ee:a5:a9:87: 57:d7:e6:ce:57:69:d6:21:85:c8:b3:03:08:b5:71:39:29:cf: aa:0f:4d:d8:8e:5a:a8:43:73:53:99:41:f3:8a:b0:89:a3:07: 9e:df:5a:9e:e7:8a:82:6a:99:09:b5:e7:b6:ed:da:da:30:1d: 33:54:ed:18:3d:5b:72:ee:c0:4a:34:c5:bc:25:58:ac:f5:19: 07:a4:96:33:3a:27:3f:4f:8c:90:64:3a:74:75:41:93:44:57: 38:68:f4:d9:51:11:00:e6:60:80:0c:81:f5:13:05:44:1a:33: 5b:0a:e6:b4:73:28:b2:cb:1b:32:55:7d:7c:08:86:41:ca:55: 7f:4d:87:89:42:01:05:ef:26:7b:25:84:9f:69:4c:24:a6:fc: bb:31:79:0c:43:82:51:0b:57:54:e5:eb:13:58:0f:64:b8:ab: 2c:22:c3:51 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEl1RHBAMy6YN2jg3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk NjUyNmVjMzQtMWZiNS00YzRmLWIyZTEtMzMxMjVlYTRkNmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHc5qbSZVB45ucgJGs18Izk44W6DhaFpybwe 7IS8a97pvTrfAqYmyDI6QsXjpLSIESaRJ/A2RIl+n8xproOYtAoqugmsc0JpRr1+ jI8iQEJG6x/E33x+WY/2gIyr4eNQlN0LYhdNkAKRTGZEU3QWkpiDz9ZdXE1fOcfW Fn1DyFKJ8keT3u6oBJsGYpYzfL0GmvukS3Ajbmu2+ehmbBDtksEouu+r76Vpy4Dl 0v8L4YIKc+pnuVdDFQI+XLfqCzA7obQ0ECEd43sF+uobjCVl6fr4LJuSLFnHI5gF lDPzlXK67TiY8f2GuZ8OWVn7a6S6vJGSDHfNB+IIBo3/VDVsfQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEZwUAMNNX/MVY/LYNP9nEK3Gd15MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzFmNjQwYTctNWE0YS0z NTdhLTg1MzItNjQ1YzkyMjZhNDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAqBEW285lw/zs1x+QxVb6cvslhU1m4f3n7hWHi bU7GLvkiNqnnV+G4Mfci1pAcAyDZQc0LJJaBk0wuFM2ngJOcZcoh4lXF5BWtZcRr /6HEMVZauazQY+6lqYdX1+bOV2nWIYXIswMItXE5Kc+qD03YjlqoQ3NTmUHzirCJ owee31qe54qCapkJtee27draMB0zVO0YPVty7sBKNMW8JVis9RkHpJYzOic/T4yQ ZDp0dUGTRFc4aPTZUREA5mCADIH1EwVEGjNbCua0cyiyyxsyVX18CIZBylV/TYeJ QgEF7yZ7JYSfaUwkpvy7MXkMQ4JRC1dU5esTWA9kuKssIsNR -----END CERTIFICATE-----Generated at Sun Apr 27 17:46:26 2025 by rpki-client