$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd086f0e-671f-39ba-b6cf-e3369acc32c1.roa File: cd086f0e-671f-39ba-b6cf-e3369acc32c1.roa (raw, json) Hash identifier: bgcyJzTiq4NW+J2BvaLstySnrDdapLqHG49dRqt18zA= Subject key identifier: 36:CA:34:E3:C8:BA:81:C2:01:1E:97:3D:A5:54:8E:9C:99:3B:6B:3C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E3893D18D25986E13FB9E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd086f0e-671f-39ba-b6cf-e3369acc32c1.roa Signing time: Thu 24 Apr 2025 12:37:26 +0000 ROA not before: Thu 24 Apr 2025 12:37:26 +0000 ROA not after: Wed 23 Jul 2025 12:37:26 +0000 asID: 19836 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:89:3d:18:d2:59:86:e1:3f:b9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:26 2025 GMT Not After : Jul 23 12:37:26 2025 GMT Subject: CN=196e7edc-0658-4536-b060-0333913a7069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e4:61:8e:67:95:ba:fa:de:e4:ee:8f:d1:29: 77:f2:e8:b2:69:f7:7f:3d:e6:c3:fb:99:a2:d1:4a: 5c:34:28:36:97:a1:1e:2b:a4:4b:7e:9f:ee:07:11: 09:76:99:55:44:6a:f2:ff:0a:0d:15:34:0e:2e:a0: d8:49:47:f7:19:f3:46:3b:f1:f5:94:61:84:65:6e: a4:a6:f3:9c:a4:4b:4e:44:ee:eb:79:66:96:8d:c5: 63:25:ea:7c:cb:89:af:bb:aa:6c:4d:2c:4e:f5:fa: 62:98:ec:0b:7f:9e:86:bd:e6:07:ec:19:80:47:91: 14:ee:4f:95:2b:d5:4d:27:b0:ea:71:f7:ae:27:9a: 05:72:ea:0b:c7:22:0f:e8:f2:3d:e7:31:c2:9c:6d: bd:e7:80:28:99:3e:f5:94:40:15:0e:f2:88:b5:d5: 1f:b9:65:cf:16:be:44:bd:85:46:4c:37:37:b7:d6: cf:34:eb:10:24:fc:0e:65:55:f1:62:ce:2a:cc:33: 57:bb:17:bc:a6:22:35:0d:69:d9:57:70:17:63:2f: b8:b8:9f:79:9e:36:98:56:11:9b:29:62:38:15:c0: a9:b3:bf:cc:d0:7d:21:aa:f3:2e:00:aa:31:97:b2: 2f:06:3f:70:d7:9c:01:6b:4d:5d:b7:10:ba:99:97: 8f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CA:34:E3:C8:BA:81:C2:01:1E:97:3D:A5:54:8E:9C:99:3B:6B:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd086f0e-671f-39ba-b6cf-e3369acc32c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:99:02:68:c1:ba:64:4b:c0:ee:f6:bd:cf:07:cc:d2:98:47: 2a:36:18:37:98:b1:37:7e:51:85:88:97:77:d4:3e:43:bf:aa: c9:7f:1d:d8:85:a2:89:2d:f0:6d:8d:be:59:8e:52:a1:a1:6c: 52:87:78:e3:75:8c:50:b4:7c:0b:3b:77:dd:56:66:65:73:76: c1:8d:e0:46:f1:77:c0:b8:2d:ee:19:1a:02:c3:2b:ef:74:04: 2a:62:37:5e:93:0a:89:14:6b:3d:af:38:9f:75:c8:64:13:5e: f9:e6:66:85:0f:c0:8c:ec:13:b5:fc:99:67:5b:65:e4:67:c0: c5:5f:12:b1:06:12:f5:88:f6:97:2b:7d:12:9b:28:00:30:45: 5f:1c:71:9d:47:8e:32:fe:b1:68:b8:2b:cb:b3:a4:aa:4e:47: 60:d6:48:85:14:32:55:c4:51:d9:8d:24:c6:6e:89:cf:9b:cd: d7:1a:ff:c0:20:79:a4:5c:fd:4b:49:1f:84:88:7d:e4:2b:5e: 55:c5:84:20:81:bd:5f:57:3c:58:38:04:09:c1:2d:b6:2a:1c: cd:09:b3:55:83:13:75:03:77:ac:dc:02:7d:be:08:ea:87:2d: ee:e2:2a:df:2a:aa:d5:0c:f8:59:17:1a:68:db:f9:e2:d0:f6: 98:14:06:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44k9GNJZhuE/ueAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyNloXDTI1MDcyMzEyMzcyNlowLzEtMCsGA1UEAxMk MTk2ZTdlZGMtMDY1OC00NTM2LWIwNjAtMDMzMzkxM2E3MDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeRhjmeVuvre5O6P0Sl38uiyafd/PebD+5mi 0UpcNCg2l6EeK6RLfp/uBxEJdplVRGry/woNFTQOLqDYSUf3GfNGO/H1lGGEZW6k pvOcpEtORO7reWaWjcVjJep8y4mvu6psTSxO9fpimOwLf56GveYH7BmAR5EU7k+V K9VNJ7DqcfeuJ5oFcuoLxyIP6PI95zHCnG2954AomT71lEAVDvKItdUfuWXPFr5E vYVGTDc3t9bPNOsQJPwOZVXxYs4qzDNXuxe8piI1DWnZV3AXYy+4uJ95njaYVhGb KWI4FcCps7/M0H0hqvMuAKoxl7IvBj9w15wBa01dtxC6mZeP+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDbKNOPIuoHCAR6XPaVUjpyZO2s8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2QwODZmMGUtNjcxZi0z OWJhLWI2Y2YtZTMzNjlhY2MzMmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB6ZAmjBumRLwO72vc8HzNKYRyo2GDeYsTd+UYWIl3fUPkO/qsl/ HdiFookt8G2NvlmOUqGhbFKHeON1jFC0fAs7d91WZmVzdsGN4Ebxd8C4Le4ZGgLD K+90BCpiN16TCokUaz2vOJ91yGQTXvnmZoUPwIzsE7X8mWdbZeRnwMVfErEGEvWI 9pcrfRKbKAAwRV8ccZ1HjjL+sWi4K8uzpKpOR2DWSIUUMlXEUdmNJMZuic+bzdca /8AgeaRc/UtJH4SIfeQrXlXFhCCBvV9XPFg4BAnBLbYqHM0Js1WDE3UDd6zcAn2+ COqHLe7iKt8qqtUM+FkXGmjb+eLQ9pgUBtE= -----END CERTIFICATE-----Generated at Mon Apr 28 02:09:01 2025 by rpki-client