$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cde7ec80-ef62-3187-bdd3-52d126a43896.roa File: cde7ec80-ef62-3187-bdd3-52d126a43896.roa (raw, json) Hash identifier: p5E1YyudsLwPwzS4KzOLZOb7zAytBu/q94gQEzLXVXU= Subject key identifier: 28:B7:2A:F8:65:D6:BE:FD:95:66:FA:0A:5E:10:C0:F4:59:A3:97:DB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858494CC94B8C67AEE89BDFF29A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cde7ec80-ef62-3187-bdd3-52d126a43896.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 0 IP address blocks: 2620:74:b0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:4b:8c:67:ae:e8:9b:df:f2:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=b9415c04-19c5-4cdb-818c-08b8c74b9c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:78:09:97:3d:91:ce:69:ec:50:5e:a1:1b:d6: e6:62:fe:2d:5f:8c:8a:5c:15:f8:e8:9c:c8:fb:30: 62:b9:cb:f9:2e:7d:f0:6f:49:81:02:e9:8b:bc:9b: 5d:9e:8f:0c:a4:9e:e7:d6:6e:2f:c6:8a:97:37:1e: d8:83:4a:d4:33:41:9b:bc:2e:cc:7c:96:d4:04:dd: 01:a8:d9:0d:c4:7f:7a:20:59:a4:12:1b:fe:53:88: 18:1d:b3:9a:28:e5:a3:86:18:be:3f:fa:ce:b7:90: 6b:16:3c:52:98:a2:c5:14:92:09:fb:9a:8b:d3:85: d3:2a:39:60:47:14:e9:e6:d6:38:d9:60:f8:cc:90: 70:6a:42:b0:e7:18:26:19:00:2b:32:0e:fb:0e:0e: 7b:15:d7:fb:f0:64:67:07:51:9f:9a:1f:4c:6e:5b: b3:ba:9d:65:f9:ee:a8:24:3e:42:d5:3e:cc:b5:ae: 35:b6:ff:f4:be:3e:db:c7:6c:a7:bd:e1:b4:11:7d: b4:89:9f:ab:3b:bb:b1:73:33:18:7e:c0:d0:b2:00: e7:17:47:c2:ae:3b:e8:99:2e:3d:15:7c:3d:c4:c1: 74:c5:52:e9:5c:99:7d:d1:8c:92:bb:e6:19:52:ed: 64:53:f9:7b:75:2f:3e:d3:c4:ba:7c:ba:05:c4:3c: 7b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B7:2A:F8:65:D6:BE:FD:95:66:FA:0A:5E:10:C0:F4:59:A3:97:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cde7ec80-ef62-3187-bdd3-52d126a43896.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:b0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:be:71:72:df:2d:81:76:65:6b:61:b2:e8:cf:b3:fb:a8:b3: 35:c1:af:54:c4:db:9c:8f:f5:b0:ba:70:72:94:bf:d1:a9:28: 0f:93:d0:38:07:e7:1a:4b:0c:c2:89:2d:ae:d6:b4:81:ec:95: 05:db:82:c5:a9:b0:b2:9a:51:65:69:48:5b:51:f1:b6:e5:81: f5:ff:c1:98:7d:fb:5f:15:c7:f5:4c:28:3b:5a:41:02:84:f2: 56:29:19:36:e2:0b:6d:61:4e:bb:8f:80:0d:76:53:18:e0:16: 69:09:38:5c:2a:53:36:75:43:6f:5d:ac:a8:c5:1d:33:7c:2d: 35:61:6a:86:54:44:4d:11:e9:91:7f:2d:8b:6c:73:1e:fd:9e: 33:f4:af:2c:d9:eb:e6:3c:2b:1d:92:0e:cc:b9:46:15:5c:a4: 59:85:fd:06:6c:59:2a:1a:03:7e:c7:7c:f7:b9:97:97:80:7c: db:0f:b7:a4:43:0b:6d:bb:35:a1:87:89:42:87:84:93:80:8b: a5:84:75:de:e1:61:e2:1d:74:ca:26:77:9b:f7:86:16:c0:df: 93:5e:84:79:57:aa:52:3d:97:17:f4:fa:02:4c:f3:8a:84:9a: 4d:de:c9:0b:24:99:b6:b3:0c:4b:34:d0:06:dc:99:2b:6d:d4: f3:18:a3:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElMyUuMZ67om9/ymgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk Yjk0MTVjMDQtMTljNS00Y2RiLTgxOGMtMDhiOGM3NGI5YzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXgJlz2RzmnsUF6hG9bmYv4tX4yKXBX46JzI +zBiucv5Ln3wb0mBAumLvJtdno8MpJ7n1m4vxoqXNx7Yg0rUM0GbvC7MfJbUBN0B qNkNxH96IFmkEhv+U4gYHbOaKOWjhhi+P/rOt5BrFjxSmKLFFJIJ+5qL04XTKjlg RxTp5tY42WD4zJBwakKw5xgmGQArMg77Dg57Fdf78GRnB1Gfmh9Mbluzup1l+e6o JD5C1T7Mta41tv/0vj7bx2ynveG0EX20iZ+rO7uxczMYfsDQsgDnF0fCrjvomS49 FXw9xMF0xVLpXJl90YySu+YZUu1kU/l7dS8+08S6fLoFxDx74wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCi3Kvhl1r79lWb6Cl4QwPRZo5fbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2RlN2VjODAtZWY2Mi0z MTg3LWJkZDMtNTJkMTI2YTQzODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAdACw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADG+cXLfLYF2ZWthsujPs/uoszXBr1TE25yP9bC6cHKUv9GpKA+T 0DgH5xpLDMKJLa7WtIHslQXbgsWpsLKaUWVpSFtR8bblgfX/wZh9+18Vx/VMKDta QQKE8lYpGTbiC21hTruPgA12UxjgFmkJOFwqUzZ1Q29drKjFHTN8LTVhaoZURE0R 6ZF/LYtscx79njP0ryzZ6+Y8Kx2SDsy5RhVcpFmF/QZsWSoaA37HfPe5l5eAfNsP t6RDC227NaGHiUKHhJOAi6WEdd7hYeIddMomd5v3hhbA35NehHlXqlI9lxf0+gJM 84qEmk3eyQskmbazDEs00AbcmStt1PMYow0= -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:50 2025 by rpki-client