$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3f2f053-4b54-3958-a759-499713d84940.roa File: d3f2f053-4b54-3958-a759-499713d84940.roa (raw, json) Hash identifier: 2SvWVeIf8ejf0wL19ip1f6OZ4S+T088H8iHcrFkdMFk= Subject key identifier: 83:84:89:C7:4D:FC:BB:4F:5F:EA:90:23:0F:36:EA:C2:4C:9E:FA:83 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C21F47E4C84A6335D3C580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3f2f053-4b54-3958-a759-499713d84940.roa Signing time: Tue 15 Apr 2025 12:34:54 +0000 ROA not before: Tue 15 Apr 2025 12:34:54 +0000 ROA not after: Mon 14 Jul 2025 12:34:54 +0000 asID: 396593 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:1f:47:e4:c8:4a:63:35:d3:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:54 2025 GMT Not After : Jul 14 12:34:54 2025 GMT Subject: CN=724e9f3c-a7aa-4f06-9cc2-41d5f5b359aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1d:4a:fd:de:0d:65:c8:ad:c1:f8:a9:d4:17: 66:51:ca:0e:2d:e3:b8:7a:97:ea:68:23:ba:d3:c9: dc:f8:ed:a2:ca:eb:00:14:fa:e3:9f:b8:76:18:74: c4:48:b8:a9:81:d3:9c:41:d9:bb:84:2d:79:b0:d2: a0:8d:f4:ab:4e:49:af:8e:8d:62:b7:c2:a9:55:5c: 0b:d6:77:17:ab:aa:66:45:6d:96:3b:89:ea:f5:97: dd:b1:93:db:53:2c:88:aa:a9:52:a4:a7:e5:89:d4: a4:5e:5a:68:41:49:15:a5:d0:d5:7e:3d:01:63:7c: a9:82:e2:34:e2:a8:21:b7:b8:90:2a:21:5c:b1:f3: 94:58:f8:8c:a1:88:fa:48:c1:19:23:1b:06:79:35: a8:d8:38:94:0c:7f:8c:6e:66:63:d3:46:60:95:b2: 67:38:92:71:6b:9e:5c:bf:fe:97:54:f6:de:14:79: 52:13:ab:1b:86:a7:6a:42:e7:61:50:76:38:16:90: ae:71:d2:04:9f:f5:56:ab:a1:6e:81:c9:ed:cd:3b: 19:ca:f9:2b:bb:c0:22:31:db:c8:b4:15:79:21:61: 79:da:86:0a:6a:b7:45:11:83:65:b0:16:63:38:e3: 37:84:2a:0e:36:ef:19:0e:4a:f2:f1:fe:a9:f7:16: 17:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:84:89:C7:4D:FC:BB:4F:5F:EA:90:23:0F:36:EA:C2:4C:9E:FA:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3f2f053-4b54-3958-a759-499713d84940.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:35:fa:9f:91:9d:7e:57:45:4c:02:de:87:d8:3d:24:4a:51: d5:b0:48:29:8d:b5:22:a4:47:05:51:be:55:cd:ba:11:45:c7: 15:c2:60:f9:85:de:40:31:fb:6a:97:19:8c:f9:b8:82:5e:b1: 60:8a:e6:c6:5c:ce:85:de:e3:51:07:54:0e:00:11:b1:9a:fa: 73:ba:98:b2:42:a1:5b:04:a0:de:f8:00:fc:a4:3c:7b:52:2d: 61:88:0e:db:fb:2a:e5:df:c9:70:0d:68:e4:2f:ff:16:f2:f0: 9f:8f:13:19:ed:04:f5:8b:db:62:40:99:f0:71:3c:da:56:33: e8:ab:bd:95:a2:7b:d0:11:7e:77:92:f4:c9:30:0b:f8:73:11: 2e:94:2e:96:87:57:0c:9e:d9:30:01:f7:73:ea:b1:9a:db:d3: ca:f3:9c:89:c9:a0:44:03:53:03:56:2f:6d:46:71:dc:df:93: 4a:ea:f0:7f:4d:48:5e:28:f0:cf:74:17:63:7e:b5:64:90:10: 53:91:8d:35:1f:44:23:79:d8:40:24:2f:38:95:47:61:06:68: b3:74:6b:27:d4:05:99:f5:80:44:2d:df:b1:3a:7d:ae:dd:cd: 21:d8:6e:85:78:01:65:e2:17:3d:7f:9b:79:3f:b8:80:8a:b5: 7e:8f:51:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwh9H5MhKYzXTxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NFoXDTI1MDcxNDEyMzQ1NFowLzEtMCsGA1UEAxMk NzI0ZTlmM2MtYTdhYS00ZjA2LTljYzItNDFkNWY1YjM1OWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB1K/d4NZcitwfip1BdmUcoOLeO4epfqaCO6 08nc+O2iyusAFPrjn7h2GHTESLipgdOcQdm7hC15sNKgjfSrTkmvjo1it8KpVVwL 1ncXq6pmRW2WO4nq9ZfdsZPbUyyIqqlSpKflidSkXlpoQUkVpdDVfj0BY3ypguI0 4qght7iQKiFcsfOUWPiMoYj6SMEZIxsGeTWo2DiUDH+MbmZj00ZglbJnOJJxa55c v/6XVPbeFHlSE6sbhqdqQudhUHY4FpCucdIEn/VWq6FugcntzTsZyvkru8AiMdvI tBV5IWF52oYKardFEYNlsBZjOOM3hCoONu8ZDkry8f6p9xYXpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIOEicdN/LtPX+qQIw826sJMnvqDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDNmMmYwNTMtNGI1NC0z OTU4LWE3NTktNDk5NzEzZDg0OTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHg1+p+RnX5XRUwC3ofYPSRKUdWwSCmNtSKkRwVRvlXNuhFFxxXC YPmF3kAx+2qXGYz5uIJesWCK5sZczoXe41EHVA4AEbGa+nO6mLJCoVsEoN74APyk PHtSLWGIDtv7KuXfyXANaOQv/xby8J+PExntBPWL22JAmfBxPNpWM+irvZWie9AR fneS9MkwC/hzES6ULpaHVwye2TAB93PqsZrb08rznInJoEQDUwNWL21Gcdzfk0rq 8H9NSF4o8M90F2N+tWSQEFORjTUfRCN52EAkLziVR2EGaLN0ayfUBZn1gEQt37E6 fa7dzSHYboV4AWXiFz1/m3k/uICKtX6PUf8= -----END CERTIFICATE-----Generated at Tue Apr 29 08:58:25 2025 by rpki-client