$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ff101ae5-f103-3f63-b004-90d2c700d744.roa File: ff101ae5-f103-3f63-b004-90d2c700d744.roa (raw, json) Hash identifier: SDQ5xe1LQ+kLed7zoyyaEjJC3nhDfvzv9efyvJQLenE= Subject key identifier: D2:69:1A:A2:D1:E7:B0:B0:7D:DF:21:99:6B:74:F7:DF:F9:52:96:4B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C224051357DFD158B2CC20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ff101ae5-f103-3f63-b004-90d2c700d744.roa Signing time: Tue 15 Apr 2025 12:34:56 +0000 ROA not before: Tue 15 Apr 2025 12:34:56 +0000 ROA not after: Mon 14 Jul 2025 12:34:56 +0000 asID: 40717 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:24:05:13:57:df:d1:58:b2:cc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:56 2025 GMT Not After : Jul 14 12:34:56 2025 GMT Subject: CN=c3c478b3-a5a3-4093-a0fa-1dd75fcec5c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b2:46:a5:e9:c0:23:d1:ac:83:76:bb:72:fd: 97:d6:09:1a:5d:b8:14:80:0b:fc:d5:61:c8:93:84: 74:f1:9c:5c:c5:44:ca:3a:e9:67:54:67:57:13:74: bc:62:1d:73:27:9f:23:06:2d:6a:b5:5c:2d:b8:a3: 56:2b:1c:ce:d7:60:c9:bb:cb:4f:8a:6d:d9:f8:0f: be:9a:94:d1:81:88:09:78:a4:40:c7:be:65:6a:20: 58:4e:33:04:a2:71:a1:da:d2:18:3b:dc:30:22:40: 33:4c:22:b0:f5:87:0d:35:1c:1c:78:0c:61:62:27: 19:95:95:0c:06:75:2a:29:1e:3a:e0:f3:b0:36:ad: 76:f2:65:47:4a:12:01:8b:a4:3e:9d:50:20:86:8f: 09:f8:46:35:d2:47:99:48:8a:c0:c7:77:61:73:d3: 22:59:c1:2e:5b:94:fd:d2:30:af:6a:6e:86:eb:c7: 91:82:1e:1a:5e:72:5a:99:11:62:57:93:fb:7a:43: 87:24:ae:fa:25:11:b5:da:8f:67:eb:ce:46:67:e2: f5:b5:7e:78:b3:f4:1f:1a:d5:0e:c2:9e:db:0f:ce: c8:70:2e:e4:b3:32:b5:98:f7:5b:5c:62:b6:0e:3e: 0b:23:ae:f0:46:ff:c1:a3:6b:0e:bc:b7:ca:9f:02: 38:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:69:1A:A2:D1:E7:B0:B0:7D:DF:21:99:6B:74:F7:DF:F9:52:96:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ff101ae5-f103-3f63-b004-90d2c700d744.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f4:c6:76:d1:88:e1:e1:af:31:c6:e0:de:61:94:48:47:8e: 4d:16:a8:08:ba:9e:65:a1:40:9e:e0:75:83:8d:96:a9:db:46: c1:93:e2:74:53:c0:62:a1:c2:6c:57:a1:0c:46:68:bc:c5:d8: eb:df:3a:d6:9d:f8:a5:d3:93:68:9f:eb:a8:d4:46:69:14:65: 0f:f6:3b:ef:2e:a2:c2:5c:c5:95:f8:ee:bf:21:98:f0:87:93: 8d:33:48:a0:3b:6b:11:e8:2a:92:74:89:dd:3d:2d:f2:50:b5: 4f:a6:48:71:24:e4:82:95:bf:1b:8b:2a:cf:9f:cc:fc:9a:d9: 27:7e:42:29:38:27:03:d0:dc:69:c1:cf:ae:9d:7b:de:37:25: 99:59:3f:5c:c3:6c:79:fc:4d:90:08:c7:89:f2:41:8c:f6:41: f3:a2:3c:4a:ee:4a:67:79:d0:dd:e8:86:d0:a3:3b:94:4e:f2: a9:5f:5e:49:a4:13:b0:1e:4e:a8:cf:4c:f9:2a:29:7e:fe:5b: fd:e2:91:b0:fb:12:91:3c:f8:0a:61:3d:49:8c:47:bf:ba:74: a7:ec:18:3f:c7:f7:1e:a3:6a:e5:21:9e:1a:80:95:03:9e:c8: 20:94:b3:6e:0f:e1:08:d1:f1:2a:08:0e:84:45:97:57:63:21: bc:65:a8:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwiQFE1ff0ViyzCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NloXDTI1MDcxNDEyMzQ1NlowLzEtMCsGA1UEAxMk YzNjNDc4YjMtYTVhMy00MDkzLWEwZmEtMWRkNzVmY2VjNWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7JGpenAI9Gsg3a7cv2X1gkaXbgUgAv81WHI k4R08ZxcxUTKOulnVGdXE3S8Yh1zJ58jBi1qtVwtuKNWKxzO12DJu8tPim3Z+A++ mpTRgYgJeKRAx75laiBYTjMEonGh2tIYO9wwIkAzTCKw9YcNNRwceAxhYicZlZUM BnUqKR464POwNq128mVHShIBi6Q+nVAgho8J+EY10keZSIrAx3dhc9MiWcEuW5T9 0jCvam6G68eRgh4aXnJamRFiV5P7ekOHJK76JRG12o9n685GZ+L1tX54s/QfGtUO wp7bD87IcC7kszK1mPdbXGK2Dj4LI67wRv/Bo2sOvLfKnwI4YQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNJpGqLR57Cwfd8hmWt099/5UpZLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmYxMDFhZTUtZjEwMy0z ZjYzLWIwMDQtOTBkMmM3MDBkNzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGX0xnbRiOHhrzHG4N5hlEhHjk0WqAi6nmWhQJ7gdYONlqnbRsGT 4nRTwGKhwmxXoQxGaLzF2OvfOtad+KXTk2if66jURmkUZQ/2O+8uosJcxZX47r8h mPCHk40zSKA7axHoKpJ0id09LfJQtU+mSHEk5IKVvxuLKs+fzPya2Sd+Qik4JwPQ 3GnBz66de943JZlZP1zDbHn8TZAIx4nyQYz2QfOiPEruSmd50N3ohtCjO5RO8qlf XkmkE7AeTqjPTPkqKX7+W/3ikbD7EpE8+AphPUmMR7+6dKfsGD/H9x6jauUhnhqA lQOeyCCUs24P4QjR8SoIDoRFl1djIbxlqEM= -----END CERTIFICATE-----Generated at Mon Apr 28 00:55:07 2025 by rpki-client