$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/42fefd6b-230b-385a-b836-7d67f6a1d38d.roa File: 42fefd6b-230b-385a-b836-7d67f6a1d38d.roa (raw, json) Hash identifier: VlsJRXCHqiZEHbWbsp+kTifH4JmR5pKQEL4ZTnOR2xU= Subject key identifier: 23:73:AE:77:C1:91:4D:7C:1F:8C:01:1D:4D:52:B0:04:21:39:2A:01 Certificate issuer: /CN=c4182a0d-d744-441b-a850-e3f85aa3aafb Certificate serial: 010D0C9F432858497279B3EFF62A8D8732F3B180 Authority key identifier: 2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/42fefd6b-230b-385a-b836-7d67f6a1d38d.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 14618 IP address blocks: 2620:135:7020::/56 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:b3:ef:f6:2a:8d:87:32:f3:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4182a0d-d744-441b-a850-e3f85aa3aafb Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=de44b65d-39e6-4a6f-8db6-d8babf0da5a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3e:e1:a1:fd:33:f4:18:58:54:94:fa:c4:a0: e7:d2:96:54:7d:aa:60:26:5e:4b:e9:31:fe:03:5c: 7a:ae:37:7c:ac:77:4e:2f:01:fc:fb:ca:7f:3d:08: 4b:4b:31:a1:8a:63:fb:c5:7e:37:b2:09:c9:40:85: ec:54:a6:e8:b7:66:90:60:02:64:29:7d:82:1f:7a: 55:7f:84:ad:9d:04:14:97:f2:ec:7a:8d:be:b6:d0: 9d:e2:80:48:f4:ff:42:a6:7d:1f:ab:69:b1:5a:9a: 54:06:d4:26:7b:5f:41:69:85:8a:93:e4:ed:a5:3a: 9c:b5:4f:b5:f8:e8:81:da:93:b0:8d:3d:39:46:bd: 80:a5:1a:32:6f:0b:08:e7:3d:21:e2:a1:ea:55:a9: 11:c0:54:e4:58:c5:d7:a4:73:77:67:6c:c2:ec:94: 03:f0:0d:e7:4f:6e:03:18:42:b5:31:b3:ee:09:55: c9:78:e9:60:23:97:f9:4e:a1:81:25:92:14:46:8e: 30:10:5d:f0:03:b6:75:5d:2e:b3:06:9a:fa:09:f3: 28:b3:3d:20:5c:f0:82:51:ab:f0:40:b7:4b:d1:0f: ac:98:4a:83:14:17:b9:a5:f0:bf:da:b3:86:45:55: 32:59:45:86:bc:54:12:b6:ec:5f:9d:0f:d2:4d:72: 7d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:73:AE:77:C1:91:4D:7C:1F:8C:01:1D:4D:52:B0:04:21:39:2A:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/42fefd6b-230b-385a-b836-7d67f6a1d38d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb/c4182a0d-d744-441b-a850-e3f85aa3aafb.crl X509v3 Authority Key Identifier: keyid:2B:B1:91:D5:B4:CC:C3:BC:8A:7D:2F:CB:18:C8:09:FC:E6:99:C0:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4182a0d-d744-441b-a850-e3f85aa3aafb.cer sbgp-ipAddrBlock: critical IPv6: 2620:135:7020::/56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:53:eb:d3:21:fb:ac:cf:1f:fc:d8:e4:9d:bf:c5:44:86:8e: b8:ee:0f:64:6c:2f:82:78:d9:e8:b6:09:d6:3f:2e:de:70:68: 72:fc:c9:54:66:f9:8e:a6:09:b3:64:c1:59:bb:8d:15:84:63: a1:ae:7c:d0:45:b9:59:09:39:8c:a9:bf:5f:f9:0e:af:98:58: b3:06:47:3b:84:45:6c:db:65:3c:c8:2a:81:e7:7b:4c:50:4b: d2:1b:90:de:38:70:5d:54:2a:4a:8e:4d:33:0b:66:c0:d8:0a: ac:c3:2d:be:4d:67:6e:14:ea:36:68:63:29:56:6d:c6:44:dc: 2e:c8:95:c9:bd:8c:60:a3:32:60:4f:f9:39:82:4c:61:a3:08: 09:1f:63:5b:9f:35:f9:b6:ce:70:d5:9e:a8:83:86:02:4b:98: 36:89:19:42:b0:e2:b3:d3:8e:94:29:5b:3e:b5:6d:6d:51:c3: bf:86:fc:9c:1d:f0:78:29:68:68:18:46:f5:ee:8c:a5:a7:9e: d2:d2:34:82:4c:88:90:63:7e:a8:64:ec:39:0d:7f:32:6c:08: 71:ab:3c:1d:87:b9:89:af:59:90:a9:3e:a8:aa:67:e7:ad:13: 64:fe:55:c6:ea:52:ba:cd:fe:8c:fb:14:7e:bd:45:63:9c:ff: 22:5b:15:67 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWElyebPv9iqNhzLzsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQxODJhMGQtZDc0NC00NDFiLWE4NTAtZTNmODVhYTNh YWZiMB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk ZGU0NGI2NWQtMzllNi00YTZmLThkYjYtZDhiYWJmMGRhNWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD7hof0z9BhYVJT6xKDn0pZUfapgJl5L6TH+ A1x6rjd8rHdOLwH8+8p/PQhLSzGhimP7xX43sgnJQIXsVKbot2aQYAJkKX2CH3pV f4StnQQUl/Lseo2+ttCd4oBI9P9Cpn0fq2mxWppUBtQme19BaYWKk+TtpTqctU+1 +OiB2pOwjT05Rr2ApRoybwsI5z0h4qHqVakRwFTkWMXXpHN3Z2zC7JQD8A3nT24D GEK1MbPuCVXJeOlgI5f5TqGBJZIURo4wEF3wA7Z1XS6zBpr6CfMosz0gXPCCUavw QLdL0Q+smEqDFBe5pfC/2rOGRVUyWUWGvFQStuxfnQ/STXJ9RwIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFCNzrnfBkU18H4wBHU1SsAQhOSoBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jNDE4 MmEwZC1kNzQ0LTQ0MWItYTg1MC1lM2Y4NWFhM2FhZmIvNDJmZWZkNmItMjMwYi0z ODVhLWI4MzYtN2Q2N2Y2YTFkMzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzQxODJhMGQtZDc0NC00NDFiLWE4 NTAtZTNmODVhYTNhYWZiL2M0MTgyYTBkLWQ3NDQtNDQxYi1hODUwLWUzZjg1YWEz YWFmYi5jcmwwHwYDVR0jBBgwFoAUK7GR1bTMw7yKfS/LGMgJ/OaZwCIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jNDE4MmEwZC1kNzQ0LTQ0MWItYTg1MC1lM2Y4 NWFhM2FhZmIuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgAJiABNXAg ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQAVU+vTIfuszx/82OSdv8VEho647g9kbC+CeNnotgnWPy7ecGhy /MlUZvmOpgmzZMFZu40VhGOhrnzQRblZCTmMqb9f+Q6vmFizBkc7hEVs22U8yCqB 53tMUEvSG5DeOHBdVCpKjk0zC2bA2Aqswy2+TWduFOo2aGMpVm3GRNwuyJXJvYxg ozJgT/k5gkxhowgJH2NbnzX5ts5w1Z6og4YCS5g2iRlCsOKz046UKVs+tW1tUcO/ hvycHfB4KWhoGEb17oylp57S0jSCTIiQY36oZOw5DX8ybAhxqzwdh7mJr1mQqT6o qmfnrRNk/lXG6lK6zf6M+xR+vUVjnP8iWxVn -----END CERTIFICATE-----Generated at Sat Apr 26 13:20:40 2025 by rpki-client