$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cea259b2-44a0-3914-b4f2-67745aa1ec38.roa File: cea259b2-44a0-3914-b4f2-67745aa1ec38.roa (raw, json) Hash identifier: WFTUOxjR6MgLF5OsCHXUFU3l1yKuvhOLrkrL6YHzSaA= Subject key identifier: 37:BE:D2:A4:B6:24:CC:BB:16:2B:EA:92:38:1C:47:D5:14:3B:D1:06 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C2233AE20AD9C3ED4DC600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cea259b2-44a0-3914-b4f2-67745aa1ec38.roa Signing time: Tue 15 Apr 2025 12:34:55 +0000 ROA not before: Tue 15 Apr 2025 12:34:55 +0000 ROA not after: Mon 14 Jul 2025 12:34:55 +0000 asID: 396540 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:23:3a:e2:0a:d9:c3:ed:4d:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:55 2025 GMT Not After : Jul 14 12:34:55 2025 GMT Subject: CN=8a689253-f361-4fa9-87a8-9bee044c8ee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:43:f4:f0:d7:e1:05:87:a8:56:09:86:b7:aa: 34:04:36:73:d9:0b:f8:ef:65:e7:61:46:68:b2:bb: cd:e4:08:e1:64:43:0f:08:aa:a3:f9:82:90:51:e0: d1:f9:2a:76:6c:34:5b:b9:cf:13:4f:a1:1e:1b:70: bc:d7:26:42:90:18:dd:88:b3:e5:ed:0d:d4:3c:44: e7:7d:64:51:63:c9:ea:58:9c:34:40:ec:ba:f8:20: ad:3b:3d:70:07:4a:12:95:3d:9c:01:9e:6b:3f:db: c7:0e:74:be:a0:f4:1e:70:7a:c0:d2:8e:cc:30:cc: ee:42:92:87:a5:44:33:f8:5e:7e:a3:e2:77:16:74: f5:6f:99:f2:4c:fc:68:cb:42:38:17:31:aa:54:b9: 07:d6:e1:28:c7:ab:db:fc:a1:9c:3f:bc:0f:bc:f3: f0:92:3c:dd:3c:3e:7e:8d:c6:46:ed:37:f5:f9:7e: 95:c8:5b:a0:21:76:cf:c2:3a:07:83:ae:a3:f0:80: 67:ca:b6:59:59:6e:38:7a:dc:3f:be:36:a6:9c:d1: 6c:fb:ea:48:bb:8d:80:53:53:29:c3:73:f6:3c:c6: eb:db:0d:19:d8:5d:15:ba:a2:06:22:67:04:d7:7a: 9c:bb:4c:03:54:01:68:9b:07:76:86:73:d5:43:18: 47:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BE:D2:A4:B6:24:CC:BB:16:2B:EA:92:38:1C:47:D5:14:3B:D1:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cea259b2-44a0-3914-b4f2-67745aa1ec38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:a9:b6:49:b3:22:41:fc:be:de:a5:b0:cd:17:56:0b:90:0b: b8:33:d7:c7:7f:36:94:e3:eb:d6:4b:f8:14:bc:7d:30:6b:ab: aa:9d:e1:fc:74:d6:98:b8:62:a0:eb:da:ba:2b:5a:5a:96:82: 16:92:e8:bd:9e:8d:70:fc:48:65:9b:b6:55:4e:f9:77:d4:b8: 40:78:b8:af:79:48:b8:05:cb:15:3e:05:37:55:45:8f:46:3a: 53:45:22:79:8e:35:70:29:83:f7:c9:b8:db:24:ca:c6:6b:95: 23:83:04:53:ec:21:6a:7f:cd:ac:25:0c:22:ee:1d:ed:9e:fb: 91:d8:07:20:1e:5b:24:c8:71:96:03:e4:fd:0b:0d:bb:6b:62: 7f:55:3d:36:97:fa:a7:61:24:e0:8b:3e:7f:13:ef:6c:21:cc: ae:44:05:f0:15:b2:16:83:1c:a0:9e:0c:0c:02:a4:07:39:e2: df:0f:ea:67:1d:d2:66:f0:10:c0:1b:be:7e:0f:ef:22:8a:b7: 87:82:da:76:26:02:6e:bb:73:e2:1d:11:2e:23:e9:24:13:ea: 6b:f4:ef:68:3c:91:54:84:a4:1c:86:a5:cc:ef:bf:04:9e:0f: b1:c7:e5:ba:e3:1e:17:fa:32:5c:75:32:59:3c:e8:be:67:1d: b8:54:ee:76 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwiM64grZw+1NxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NVoXDTI1MDcxNDEyMzQ1NVowLzEtMCsGA1UEAxMk OGE2ODkyNTMtZjM2MS00ZmE5LTg3YTgtOWJlZTA0NGM4ZWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkP08NfhBYeoVgmGt6o0BDZz2Qv472XnYUZo srvN5AjhZEMPCKqj+YKQUeDR+Sp2bDRbuc8TT6EeG3C81yZCkBjdiLPl7Q3UPETn fWRRY8nqWJw0QOy6+CCtOz1wB0oSlT2cAZ5rP9vHDnS+oPQecHrA0o7MMMzuQpKH pUQz+F5+o+J3FnT1b5nyTPxoy0I4FzGqVLkH1uEox6vb/KGcP7wPvPPwkjzdPD5+ jcZG7Tf1+X6VyFugIXbPwjoHg66j8IBnyrZZWW44etw/vjamnNFs++pIu42AU1Mp w3P2PMbr2w0Z2F0VuqIGImcE13qcu0wDVAFomwd2hnPVQxhHTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDe+0qS2JMy7FivqkjgcR9UUO9EGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2VhMjU5YjItNDRhMC0z OTE0LWI0ZjItNjc3NDVhYTFlYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAqptkmzIkH8vt6lsM0XVguQC7gz18d/NpTj69ZL+BS8fTBrq6qd 4fx01pi4YqDr2rorWlqWghaS6L2ejXD8SGWbtlVO+XfUuEB4uK95SLgFyxU+BTdV RY9GOlNFInmONXApg/fJuNskysZrlSODBFPsIWp/zawlDCLuHe2e+5HYByAeWyTI cZYD5P0LDbtrYn9VPTaX+qdhJOCLPn8T72whzK5EBfAVshaDHKCeDAwCpAc54t8P 6mcd0mbwEMAbvn4P7yKKt4eC2nYmAm67c+IdES4j6SQT6mv072g8kVSEpByGpczv vwSeD7HH5brjHhf6Mlx1Mlk86L5nHbhU7nY= -----END CERTIFICATE-----Generated at Mon Apr 28 01:10:45 2025 by rpki-client