$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/a7e86110-b426-3c85-bb93-1722a5d6a7e2.roa File: a7e86110-b426-3c85-bb93-1722a5d6a7e2.roa (raw, json) Hash identifier: cCP6bJwA9ldoSFk5WWW7ixAMyxClnBctuCmejbCMt2o= Subject key identifier: 2C:22:BD:8C:12:0B:7D:07:7A:73:62:B1:D2:0C:C0:CA:06:08:25:B4 Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F43285849B41495D1A5428961211E9980 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/a7e86110-b426-3c85-bb93-1722a5d6a7e2.roa Signing time: Thu 01 May 2025 01:00:46 +0000 ROA not before: Thu 01 May 2025 01:00:46 +0000 ROA not after: Wed 30 Jul 2025 01:00:46 +0000 asID: 1288 IP address blocks: 2620:171:46::/48 maxlen: 48 2620:171:58::/48 maxlen: 48 2620:171:69::/48 maxlen: 48 2620:171:b6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b4:14:95:d1:a5:42:89:61:21:1e:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: May 1 01:00:46 2025 GMT Not After : Jul 30 01:00:46 2025 GMT Subject: CN=a31947ab-3f4f-4a56-b268-b0a63a64d234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1b:26:83:cf:ab:b8:e2:e3:48:19:60:2d:6c: bb:0e:1a:4b:55:f0:2e:1b:2a:cb:6f:8d:4f:10:57: c4:77:a9:59:92:be:d7:63:b5:55:04:1f:3a:eb:0c: 2d:b8:29:e8:86:26:37:3b:02:50:de:f3:32:a8:15: 01:fa:22:f6:84:20:5a:c2:6a:d7:5b:30:e6:b9:cf: c6:a4:a6:23:6a:2d:ed:cf:cc:02:71:c8:29:8f:08: 09:23:2d:bf:fb:5c:15:fe:e2:d6:73:4c:e3:47:72: d9:81:c7:6b:42:d2:5e:81:e1:2b:f7:f5:f9:b6:a3: d7:80:34:81:9c:ae:e0:b4:71:22:e8:76:54:3c:a2: e1:90:c1:a7:a5:86:8a:9c:2e:9d:6e:9b:53:50:34: 89:bd:0b:44:58:e0:51:cd:d5:cc:72:4f:55:da:68: 13:21:91:d0:f8:da:5e:8f:ef:87:1a:51:77:7b:a2: e9:3a:c6:6e:18:3b:ce:a8:ff:37:b9:00:c3:47:cb: 84:66:70:25:63:e6:71:28:02:27:9c:8a:bc:20:fd: 47:0f:fc:2c:56:3f:fe:98:19:5d:05:0a:3b:88:04: 0c:6f:4c:b0:ee:54:e2:96:4a:a9:17:f6:f5:67:32: 76:b4:3b:e1:7e:53:70:de:18:e2:56:04:b1:a7:00: 98:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:22:BD:8C:12:0B:7D:07:7A:73:62:B1:D2:0C:C0:CA:06:08:25:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/a7e86110-b426-3c85-bb93-1722a5d6a7e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv6: 2620:171:46::/48 2620:171:58::/48 2620:171:69::/48 2620:171:b6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:7e:07:5c:c2:e8:77:a9:80:12:dc:89:41:ff:39:1c:d4:5e: 75:58:a6:84:73:60:d1:3a:6f:f8:01:0a:e7:9a:7f:75:0f:1b: 30:eb:b4:1d:82:20:de:fa:e2:42:1f:1a:19:0b:ab:09:2c:28: ff:d5:9d:f9:5d:41:5f:36:cd:ec:17:8e:c7:3c:49:5d:49:94: 24:89:cf:a4:5b:a1:54:aa:7d:9c:fb:1e:69:62:82:31:d1:38: df:99:06:23:60:da:35:68:b7:61:98:5c:c1:65:23:eb:a6:d3: 42:cf:00:22:c1:9a:ee:76:39:ce:3a:03:0a:ea:46:46:73:4b: 6b:78:af:19:30:d3:0c:40:8e:e7:53:10:b4:c9:3a:fe:32:dd: c7:61:f2:a7:48:2b:57:a7:5f:d5:82:8e:d2:b7:c7:d1:01:b0: 81:b3:01:8d:cc:34:d1:04:ea:54:5d:71:c2:3d:7b:19:66:a8: a9:c4:fa:5f:1e:cf:52:0f:3e:c4:44:71:0c:5e:ea:d9:6a:2f: 30:8a:11:34:17:9d:e9:55:53:00:1a:4b:b2:81:57:61:7e:53: fb:2d:24:77:9b:f8:d1:48:36:ed:15:14:3b:e9:47:d6:b4:91: c8:88:ee:fa:8f:11:d5:15:bd:4c:55:76:f1:0f:b1:7a:44:d6: 52:d5:1c:f6 -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEm0FJXRpUKJYSEemYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI1MDUwMTAxMDA0NloXDTI1MDczMDAxMDA0NlowLzEtMCsGA1UEAxMk YTMxOTQ3YWItM2Y0Zi00YTU2LWIyNjgtYjBhNjNhNjRkMjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBsmg8+ruOLjSBlgLWy7DhpLVfAuGyrLb41P EFfEd6lZkr7XY7VVBB866wwtuCnohiY3OwJQ3vMyqBUB+iL2hCBawmrXWzDmuc/G pKYjai3tz8wCccgpjwgJIy2/+1wV/uLWc0zjR3LZgcdrQtJegeEr9/X5tqPXgDSB nK7gtHEi6HZUPKLhkMGnpYaKnC6dbptTUDSJvQtEWOBRzdXMck9V2mgTIZHQ+Npe j++HGlF3e6LpOsZuGDvOqP83uQDDR8uEZnAlY+ZxKAInnIq8IP1HD/wsVj/+mBld BQo7iAQMb0yw7lTilkqpF/b1ZzJ2tDvhflNw3hjiVgSxpwCYSQIDAQABo4IDczCC A28wHQYDVR0OBBYEFCwivYwSC30HenNisdIMwMoGCCW0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvYTdlODYxMTAtYjQyNi0z Yzg1LWJiOTMtMTcyMmE1ZDZhN2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAJiABcQBG AwcAJiABcQBYAwcAJiABcQBpAwcAJiABcQC2MFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEh+B1zC6HepgBLc iUH/ORzUXnVYpoRzYNE6b/gBCueaf3UPGzDrtB2CIN764kIfGhkLqwksKP/Vnfld QV82zewXjsc8SV1JlCSJz6RboVSqfZz7HmligjHRON+ZBiNg2jVot2GYXMFlI+um 00LPACLBmu52Oc46AwrqRkZzS2t4rxkw0wxAjudTELTJOv4y3cdh8qdIK1enX9WC jtK3x9EBsIGzAY3MNNEE6lRdccI9exlmqKnE+l8ez1IPPsREcQxe6tlqLzCKETQX nelVUwAaS7KBV2F+U/stJHeb+NFINu0VFDvpR9a0kciI7vqPEdUVvUxVdvEPsXpE 1lLVHPY= -----END CERTIFICATE-----Generated at Sun May 11 22:11:24 2025 by rpki-client