$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce1ea1b9-485e-3652-9e8d-0e587ea4e507.roa File: ce1ea1b9-485e-3652-9e8d-0e587ea4e507.roa (raw, json) Hash identifier: ogDunUksCqPo1OAxh6/ibHkQMWVtSw9mU+GfnKDl+cA= Subject key identifier: 72:3F:19:B7:C0:ED:5D:A2:3D:9C:1F:52:C9:A7:C1:12:4C:CC:28:65 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D4C2EA1B9081DE416E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce1ea1b9-485e-3652-9e8d-0e587ea4e507.roa Signing time: Tue 03 Jun 2025 12:47:22 +0000 ROA not before: Tue 03 Jun 2025 12:47:22 +0000 ROA not after: Mon 01 Sep 2025 12:47:22 +0000 asID: 396572 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d4:c2:ea:1b:90:81:de:41:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:22 2025 GMT Not After : Sep 1 12:47:22 2025 GMT Subject: CN=1978020f-a3c0-4b98-aae9-d525c333a125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:33:68:ce:f4:cc:61:4a:0a:f3:8d:49:9e:3a: 5c:f8:a8:6d:2d:fc:63:8b:e1:4d:4a:20:f5:f8:25: 8a:bf:2c:93:19:90:5a:e9:74:58:1c:f7:4c:b6:22: 1e:9f:fe:4d:11:33:f6:b8:1d:d3:13:af:fa:fb:72: 05:52:8c:9c:38:26:05:84:7a:46:11:20:01:bd:b8: c9:fa:af:c7:6c:a8:88:53:1f:82:9e:f3:a5:43:54: a9:9b:63:b7:18:6b:d8:35:b7:eb:9f:7d:29:04:5f: ee:36:e5:07:d2:3c:0d:b7:24:0b:1e:9e:c8:52:4d: 2b:d3:27:76:63:bd:35:3c:c1:5a:a7:5e:da:a5:8f: ff:f9:0b:80:71:99:be:60:5a:fd:43:4d:a0:68:bf: 79:54:64:96:05:23:01:10:dd:c4:1f:ed:21:ce:bd: 94:f7:83:ba:d1:c5:df:ad:07:5b:c2:3c:1f:52:98: 10:90:55:0d:32:39:1b:73:f5:68:76:9a:57:02:0d: 07:f1:de:74:65:04:98:0f:64:31:2b:01:e5:9a:fb: 60:54:80:15:ee:ac:ed:09:66:c2:7d:d1:74:25:e9: b5:34:cd:e1:de:9b:24:96:14:6e:51:78:e5:74:0b: eb:1f:8b:ab:78:c6:d6:cd:d2:f5:87:ef:5f:d1:4a: 9b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:3F:19:B7:C0:ED:5D:A2:3D:9C:1F:52:C9:A7:C1:12:4C:CC:28:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce1ea1b9-485e-3652-9e8d-0e587ea4e507.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:09:96:95:a8:c6:3c:58:f6:0d:2a:a2:bd:d2:df:46:e2:99: 21:3b:a6:05:83:ed:d4:a0:9f:1a:9d:0e:1f:25:fa:2f:34:64: 31:06:c0:1f:cf:b3:5d:43:4b:70:9b:bb:1c:90:ee:85:ae:89: 85:f6:13:98:29:52:f4:7c:56:11:8a:aa:30:93:a4:87:75:f1: f7:cc:3e:77:4d:9b:36:f3:57:08:88:a2:7d:4a:7f:cd:ab:f3: 3f:d2:ae:cd:65:68:5a:34:00:28:46:ee:3c:80:25:61:43:60: ee:ba:61:67:78:be:8f:ac:49:5c:74:f8:bd:6f:00:94:85:e5: d4:dd:e9:c6:6b:bf:69:82:0e:7b:45:11:18:38:88:94:d9:6e: b6:74:1b:23:96:da:aa:f8:1c:e0:de:80:02:ce:74:7b:4b:d0: 4c:86:82:f0:18:df:f8:7d:86:90:89:17:58:2c:03:e6:70:94: a9:9d:26:83:a7:66:89:4b:d7:da:fe:6c:24:d3:7d:b9:56:9e: 84:5b:de:50:31:c8:fd:96:dc:e8:69:3c:24:d7:7b:95:00:6f: c9:ac:6f:c1:48:cb:22:4f:24:0f:8b:dd:6a:ae:71:4a:1d:73: 72:4c:68:69:8d:17:af:a0:55:17:92:d5:de:82:34:21:03:e1: b6:25:8f:9c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9TC6huQgd5BboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMloXDTI1MDkwMTEyNDcyMlowLzEtMCsGA1UEAxMk MTk3ODAyMGYtYTNjMC00Yjk4LWFhZTktZDUyNWMzMzNhMTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijNozvTMYUoK841Jnjpc+KhtLfxji+FNSiD1 +CWKvyyTGZBa6XRYHPdMtiIen/5NETP2uB3TE6/6+3IFUoycOCYFhHpGESABvbjJ +q/HbKiIUx+CnvOlQ1Spm2O3GGvYNbfrn30pBF/uNuUH0jwNtyQLHp7IUk0r0yd2 Y701PMFap17apY//+QuAcZm+YFr9Q02gaL95VGSWBSMBEN3EH+0hzr2U94O60cXf rQdbwjwfUpgQkFUNMjkbc/VodppXAg0H8d50ZQSYD2QxKwHlmvtgVIAV7qztCWbC fdF0Jem1NM3h3psklhRuUXjldAvrH4ureMbWzdL1h+9f0UqbUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHI/GbfA7V2iPZwfUsmnwRJMzChlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2UxZWExYjktNDg1ZS0z NjUyLTllOGQtMGU1ODdlYTRlNTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFoJlpWoxjxY9g0qor3S30bimSE7pgWD7dSgnxqdDh8l+i80ZDEG wB/Ps11DS3CbuxyQ7oWuiYX2E5gpUvR8VhGKqjCTpId18ffMPndNmzbzVwiIon1K f82r8z/Srs1laFo0AChG7jyAJWFDYO66YWd4vo+sSVx0+L1vAJSF5dTd6cZrv2mC DntFERg4iJTZbrZ0GyOW2qr4HODegALOdHtL0EyGgvAY3/h9hpCJF1gsA+ZwlKmd JoOnZolL19r+bCTTfblWnoRb3lAxyP2W3OhpPCTXe5UAb8msb8FIyyJPJA+L3Wqu cUodc3JMaGmNF6+gVReS1d6CNCED4bYlj5w= -----END CERTIFICATE-----Generated at Sun Jun 15 22:03:25 2025 by rpki-client