$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea79e484-65e6-3c36-9da5-e46065d56f13.roa File: ea79e484-65e6-3c36-9da5-e46065d56f13.roa (raw, json) Hash identifier: N/Erq/8AWHO5cHi9uhMGd6332RHJf+Qh6kKYKIlGwu8= Subject key identifier: 01:87:27:1F:B8:79:86:71:A2:6A:35:99:BF:2E:3C:FB:58:61:51:7F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C21FFBDB82AB49DA83E100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea79e484-65e6-3c36-9da5-e46065d56f13.roa Signing time: Tue 15 Apr 2025 12:34:54 +0000 ROA not before: Tue 15 Apr 2025 12:34:54 +0000 ROA not after: Mon 14 Jul 2025 12:34:54 +0000 asID: 396572 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:1f:fb:db:82:ab:49:da:83:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:54 2025 GMT Not After : Jul 14 12:34:54 2025 GMT Subject: CN=677c9810-9d82-40a4-95ad-089e29f61b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:43:4f:91:26:e6:6a:a9:c0:59:2e:95:1e:a3: e9:54:aa:11:7a:96:95:fe:33:12:d4:d4:14:13:0e: 9b:e2:eb:bd:e3:11:b9:7b:43:ed:36:5c:d8:79:34: 52:92:a6:26:13:30:a1:60:e9:bd:ad:d9:ca:94:dc: 64:43:9b:6e:4a:60:f1:1a:9b:8e:e5:76:26:6e:8d: 5b:d2:1e:f1:2e:9d:fe:48:9e:59:2d:ed:01:44:5a: 38:86:e6:a8:6f:7d:dc:a3:71:ab:e3:0f:8a:d0:64: 79:5f:79:9c:0b:16:56:94:bf:28:43:82:76:6f:2f: e5:12:0d:b7:bb:af:07:93:79:42:4b:1d:bf:72:81: 8a:3c:be:5b:29:ed:83:de:0c:86:9e:8a:3c:95:29: b5:64:5f:77:b1:6c:32:b9:6e:0e:80:06:cc:e1:67: 89:b3:11:3e:d0:2a:64:e8:42:f7:21:a9:ec:39:a9: 28:ef:41:81:40:34:e6:55:54:ca:d5:75:72:6b:b6: ab:ab:53:5a:ef:0f:d3:85:7c:55:ca:c4:3c:93:54: c8:37:64:73:79:66:da:ff:f4:98:ef:b5:10:8d:30: b0:da:0a:35:7c:70:52:46:5e:26:c2:ac:c8:b1:9b: 01:96:0c:c7:08:b9:09:b6:20:8d:95:37:a7:35:96: c7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:87:27:1F:B8:79:86:71:A2:6A:35:99:BF:2E:3C:FB:58:61:51:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ea79e484-65e6-3c36-9da5-e46065d56f13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:38:56:29:b4:66:f0:18:be:16:45:42:24:50:14:b8:ae:fc: b5:39:ee:12:a6:35:78:39:99:1e:b9:6d:66:3c:87:ad:c8:36: 92:44:1d:34:89:ea:eb:11:0f:a5:d7:20:03:47:9d:f1:3a:d2: 04:91:8a:81:44:9b:f2:b7:88:16:d1:51:11:53:20:e1:ac:b6: 15:1f:f0:c8:6d:ea:b3:3f:0f:c2:f5:00:20:98:80:7a:3d:cd: f3:6e:87:31:ed:af:b1:ac:7b:64:cc:c9:99:01:51:08:83:6e: 19:be:06:52:ce:c6:5d:be:c2:ea:4c:9c:79:93:c8:f5:8b:28: 1a:f5:b1:c8:b5:77:4e:48:5b:9f:ba:07:17:3e:ac:08:d0:fd: 86:27:bd:fa:25:d8:89:54:ca:1b:aa:82:0f:fd:20:98:10:53: ad:da:e2:10:38:0c:a1:e7:f3:57:f3:fe:10:f7:a8:2f:71:23: 13:3a:fe:38:9b:ee:ae:7b:18:00:4d:20:c0:01:9d:b9:f8:85: 32:2c:36:b5:e2:60:18:74:62:a4:a5:3f:32:c9:df:4b:7b:6a: ab:79:fe:78:a1:4e:fe:ff:52:aa:22:22:b3:b0:54:c7:54:ba: 5f:7e:56:77:26:66:7b:10:cf:cb:7e:ff:7c:5f:8b:a6:e4:dc: 7f:fd:30:a8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwh/724KrSdqD4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NFoXDTI1MDcxNDEyMzQ1NFowLzEtMCsGA1UEAxMk Njc3Yzk4MTAtOWQ4Mi00MGE0LTk1YWQtMDg5ZTI5ZjYxYjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUNPkSbmaqnAWS6VHqPpVKoRepaV/jMS1NQU Ew6b4uu94xG5e0PtNlzYeTRSkqYmEzChYOm9rdnKlNxkQ5tuSmDxGpuO5XYmbo1b 0h7xLp3+SJ5ZLe0BRFo4huaob33co3Gr4w+K0GR5X3mcCxZWlL8oQ4J2by/lEg23 u68Hk3lCSx2/coGKPL5bKe2D3gyGnoo8lSm1ZF93sWwyuW4OgAbM4WeJsxE+0Cpk 6EL3IansOako70GBQDTmVVTK1XVya7arq1Na7w/ThXxVysQ8k1TIN2RzeWba//SY 77UQjTCw2go1fHBSRl4mwqzIsZsBlgzHCLkJtiCNlTenNZbHwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAGHJx+4eYZxomo1mb8uPPtYYVF/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWE3OWU0ODQtNjVlNi0z YzM2LTlkYTUtZTQ2MDY1ZDU2ZjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF04Vim0ZvAYvhZFQiRQFLiu/LU57hKmNXg5mR65bWY8h63INpJE HTSJ6usRD6XXIANHnfE60gSRioFEm/K3iBbRURFTIOGsthUf8Mht6rM/D8L1ACCY gHo9zfNuhzHtr7Gse2TMyZkBUQiDbhm+BlLOxl2+wupMnHmTyPWLKBr1sci1d05I W5+6Bxc+rAjQ/YYnvfol2IlUyhuqgg/9IJgQU63a4hA4DKHn81fz/hD3qC9xIxM6 /jib7q57GABNIMABnbn4hTIsNrXiYBh0YqSlPzLJ30t7aqt5/nihTv7/UqoiIrOw VMdUul9+VncmZnsQz8t+/3xfi6bk3H/9MKg= -----END CERTIFICATE-----Generated at Mon Apr 28 06:25:56 2025 by rpki-client