$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb6de86b-3bcc-3227-a45e-2e6391eb3dfd.roa File: cb6de86b-3bcc-3227-a45e-2e6391eb3dfd.roa (raw, json) Hash identifier: 6j6+IEkqRDdy4Z+u0hKJ+NaH6TNj8wdL7dcV0cXG7ig= Subject key identifier: C2:94:0D:D9:26:43:84:FA:EC:2A:28:C8:5D:69:6F:59:39:55:06:58 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E384ECDE4803A8649EFE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb6de86b-3bcc-3227-a45e-2e6391eb3dfd.roa Signing time: Thu 24 Apr 2025 12:37:24 +0000 ROA not before: Thu 24 Apr 2025 12:37:24 +0000 ROA not after: Wed 23 Jul 2025 12:37:24 +0000 asID: 396581 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:84:ec:de:48:03:a8:64:9e:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:24 2025 GMT Not After : Jul 23 12:37:24 2025 GMT Subject: CN=1de24b84-c021-4faf-a8bc-06a3187a87b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d1:1c:2d:4e:69:05:54:39:4f:e7:b5:9f:d3: d7:55:9f:2d:78:39:30:ac:ae:31:8c:1e:d7:32:1c: 01:da:93:02:b8:b7:98:80:50:c6:bc:82:d9:b5:07: a8:a1:74:ff:22:70:5c:eb:c6:5f:b1:57:0d:17:b6: ad:1b:d2:8f:41:17:a4:52:84:e0:07:fc:23:8e:e8: fa:26:be:a4:46:54:c1:7e:44:66:06:12:fa:1e:b4: e4:c5:8b:8f:2f:87:92:6c:de:3d:25:4b:a2:4b:a4: 80:33:a8:5f:bb:aa:c5:9a:ba:99:31:ec:8f:f3:c9: 78:6c:eb:99:79:6a:dd:a0:d5:e4:a3:72:ca:a4:0c: e7:5c:17:96:4d:22:41:24:44:78:14:f0:be:ac:a4: 22:1f:a7:d6:cf:4c:ed:6f:11:72:52:96:65:38:84: 54:a4:e6:1f:da:c0:dd:74:0d:8d:eb:fe:fd:64:0f: 54:a0:d1:45:c5:e2:a1:21:ad:2f:4d:83:1e:3a:e0: d4:50:43:12:91:84:8a:a3:2e:7f:d1:4a:8c:7f:57: 1b:07:8d:c2:84:26:d2:69:66:fd:ce:35:e2:66:61: 8a:ad:0e:41:2d:19:c1:e0:a7:b6:1a:87:3e:33:96: a2:46:23:1b:90:ba:06:68:71:7c:4f:e0:51:13:53: 67:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:94:0D:D9:26:43:84:FA:EC:2A:28:C8:5D:69:6F:59:39:55:06:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cb6de86b-3bcc-3227-a45e-2e6391eb3dfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:a8:04:97:96:40:ba:f2:9c:40:91:15:b4:a6:f2:32:95:89: 80:97:26:52:4b:a0:9c:1f:b5:73:6c:2d:db:0b:36:5c:ed:c7: b5:22:3f:d1:b9:99:f8:be:85:6d:40:7f:52:30:5d:37:81:14: 87:47:34:e8:5a:8f:02:8d:4d:64:7b:41:b5:b7:9c:81:7d:4b: f7:51:59:a9:d8:ae:8a:17:72:8a:7e:4e:c5:a0:72:10:9e:de: b1:1f:f8:6b:fd:c7:e7:2a:e2:40:43:97:35:02:a1:03:73:ae: 66:ff:2f:9a:2f:80:cd:42:aa:27:af:e5:15:3b:53:bd:d5:77: 6b:43:a0:e9:b4:9e:4e:e3:2e:36:e4:89:3e:16:f0:8e:af:2c: ae:56:46:c8:96:8b:ec:e4:da:16:b8:0d:ac:b5:00:8d:d1:99: 3f:87:72:05:e1:8b:eb:a8:36:2b:63:cb:cd:4c:37:34:71:08: 9f:b0:14:10:6c:02:55:5a:83:49:ae:18:1e:cf:8c:d6:11:6d: f9:25:87:63:28:3b:65:40:81:54:99:e1:dc:f3:a1:22:b8:4c: 96:56:fb:d7:bf:d2:cb:04:00:fd:d5:d2:60:c8:97:16:35:ef: 5e:16:b9:c7:7a:e6:1c:71:71:0b:d1:e9:62:73:bf:ad:07:f5: 59:92:bb:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44Ts3kgDqGSe/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNFoXDTI1MDcyMzEyMzcyNFowLzEtMCsGA1UEAxMk MWRlMjRiODQtYzAyMS00ZmFmLWE4YmMtMDZhMzE4N2E4N2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59EcLU5pBVQ5T+e1n9PXVZ8teDkwrK4xjB7X MhwB2pMCuLeYgFDGvILZtQeooXT/InBc68ZfsVcNF7atG9KPQRekUoTgB/wjjuj6 Jr6kRlTBfkRmBhL6HrTkxYuPL4eSbN49JUuiS6SAM6hfu6rFmrqZMeyP88l4bOuZ eWrdoNXko3LKpAznXBeWTSJBJER4FPC+rKQiH6fWz0ztbxFyUpZlOIRUpOYf2sDd dA2N6/79ZA9UoNFFxeKhIa0vTYMeOuDUUEMSkYSKoy5/0UqMf1cbB43ChCbSaWb9 zjXiZmGKrQ5BLRnB4Ke2Goc+M5aiRiMbkLoGaHF8T+BRE1NnaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMKUDdkmQ4T67CooyF1pb1k5VQZYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2I2ZGU4NmItM2JjYy0z MjI3LWE0NWUtMmU2MzkxZWIzZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAyoBJeWQLrynECRFbSm8jKViYCXJlJLoJwftXNsLdsLNlztx7Ui P9G5mfi+hW1Af1IwXTeBFIdHNOhajwKNTWR7QbW3nIF9S/dRWanYrooXcop+TsWg chCe3rEf+Gv9x+cq4kBDlzUCoQNzrmb/L5ovgM1Cqiev5RU7U73Vd2tDoOm0nk7j LjbkiT4W8I6vLK5WRsiWi+zk2ha4Day1AI3RmT+HcgXhi+uoNitjy81MNzRxCJ+w FBBsAlVag0muGB7PjNYRbfklh2MoO2VAgVSZ4dzzoSK4TJZW+9e/0ssEAP3V0mDI lxY1714Wucd65hxxcQvR6WJzv60H9VmSu8A= -----END CERTIFICATE-----Generated at Sun Apr 27 22:24:03 2025 by rpki-client