$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0c9a3cba-f180-3c6b-b091-9faa90c0cb2c.roa File: 0c9a3cba-f180-3c6b-b091-9faa90c0cb2c.roa (raw, json) Hash identifier: tbYLockqR6ytSotiYTr7RnJd6ddjezAKDfiiV/kRXDQ= Subject key identifier: 2E:C5:37:7F:DE:47:77:2C:CA:91:18:9C:EB:D8:D1:07:A4:B3:59:35 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4D5B1E1A032E5E5D9FC80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0c9a3cba-f180-3c6b-b091-9faa90c0cb2c.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 396603 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:d5:b1:e1:a0:32:e5:e5:d9:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=647f99c4-eb47-4a64-ab0d-7f9de25487ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fb:49:c3:67:29:9c:63:81:f1:6e:8f:34:93: 12:6a:b8:e0:8a:99:28:d3:5c:53:1b:b1:70:f8:f3: 00:52:c3:83:30:88:fd:13:93:ed:71:d9:1f:0b:49: bc:f4:42:61:7f:35:2e:27:f2:6b:27:38:df:5c:13: da:b9:00:da:b6:1c:6b:39:02:cd:92:0e:ef:3d:0b: 3c:a3:74:f3:da:58:63:6e:90:da:62:99:16:b6:ce: 28:79:d0:fe:b7:2c:6c:c8:95:b8:60:2d:f1:f3:b5: b1:f5:c5:fb:cb:46:f7:83:6b:d0:45:e9:55:14:ba: e3:24:a2:2b:2b:cd:40:ab:0d:a4:7b:1e:29:46:1b: 4c:e7:29:a9:21:de:84:35:71:3e:6d:58:e2:30:7d: 85:11:47:c1:83:81:cf:c0:e8:20:38:c3:5a:cf:19: 27:88:25:db:07:bb:a5:58:61:9d:3b:c0:fd:be:a9: 98:7f:03:f4:51:2f:9f:ec:5b:e7:96:22:c9:e0:aa: ba:7c:6c:7a:61:8c:7b:32:24:6b:b3:53:2e:20:62: 56:08:f4:d1:e8:3f:f8:fe:58:0b:a5:b4:a4:26:c8: be:33:d1:23:29:1e:8b:7c:fc:7f:14:90:dd:57:63: 29:cd:03:17:76:0b:b3:47:30:48:21:a6:be:82:53: cd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C5:37:7F:DE:47:77:2C:CA:91:18:9C:EB:D8:D1:07:A4:B3:59:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0c9a3cba-f180-3c6b-b091-9faa90c0cb2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:84:1a:d0:17:db:01:10:2e:31:57:bd:e7:d1:c2:95:a2:6e: 2c:90:ec:a0:4d:99:b0:3b:95:a1:41:0d:23:3b:e9:64:3c:52: ae:7c:74:90:a4:98:90:3f:f9:99:b5:0a:e8:82:79:99:a2:a9: 81:b7:27:e4:0e:a1:3d:7d:d3:d8:b3:f6:03:5d:58:d3:24:ff: 2b:f5:7c:66:f3:00:97:3d:e0:0e:65:ff:06:8c:70:23:97:f6: cf:8d:4a:e9:63:24:d6:a7:eb:ad:95:cf:9b:cf:e6:5c:12:a3: 12:94:b3:4b:df:60:04:0f:bc:8c:92:57:db:25:d1:ca:83:6a: 83:79:47:06:58:5e:a3:ed:13:60:3d:a4:54:6b:96:54:60:6e: 3c:c0:0d:46:c1:7e:9c:02:78:3e:3e:09:62:57:b7:65:1e:46: 99:88:b2:03:a9:e5:b0:18:86:eb:6a:f3:bb:90:ae:41:4b:b3: 3d:b0:69:89:eb:59:d7:dd:f4:c1:fb:ed:49:99:3f:40:48:7e: 6c:a5:a5:0d:25:36:d8:0e:de:c6:d3:9d:d9:94:8e:55:5f:c5: cc:1e:86:f6:78:46:5e:27:2f:4c:a5:99:52:c9:bd:e1:a9:1a: 84:4a:2c:fb:8a:c0:05:d7:a2:de:4a:91:fb:bb:62:d1:44:05: 6a:9f:bb:ad -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1NWx4aAy5eXZ/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk NjQ3Zjk5YzQtZWI0Ny00YTY0LWFiMGQtN2Y5ZGUyNTQ4N2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvtJw2cpnGOB8W6PNJMSarjgipko01xTG7Fw +PMAUsODMIj9E5PtcdkfC0m89EJhfzUuJ/JrJzjfXBPauQDathxrOQLNkg7vPQs8 o3Tz2lhjbpDaYpkWts4oedD+tyxsyJW4YC3x87Wx9cX7y0b3g2vQRelVFLrjJKIr K81Aqw2kex4pRhtM5ympId6ENXE+bVjiMH2FEUfBg4HPwOggOMNazxkniCXbB7ul WGGdO8D9vqmYfwP0US+f7FvnliLJ4Kq6fGx6YYx7MiRrs1MuIGJWCPTR6D/4/lgL pbSkJsi+M9EjKR6LfPx/FJDdV2MpzQMXdguzRzBIIaa+glPNrwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFC7FN3/eR3csypEYnOvY0Qeks1k1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGM5YTNjYmEtZjE4MC0z YzZiLWIwOTEtOWZhYTkwYzBjYjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBDhBrQF9sBEC4xV73n0cKVom4skOygTZmwO5Wh QQ0jO+lkPFKufHSQpJiQP/mZtQrognmZoqmBtyfkDqE9fdPYs/YDXVjTJP8r9Xxm 8wCXPeAOZf8GjHAjl/bPjUrpYyTWp+utlc+bz+ZcEqMSlLNL32AED7yMklfbJdHK g2qDeUcGWF6j7RNgPaRUa5ZUYG48wA1GwX6cAng+PgliV7dlHkaZiLIDqeWwGIbr avO7kK5BS7M9sGmJ61nX3fTB++1JmT9ASH5spaUNJTbYDt7G053ZlI5VX8XMHob2 eEZeJy9MpZlSyb3hqRqESiz7isAF16LeSpH7u2LRRAVqn7ut -----END CERTIFICATE-----Generated at Sun May 11 05:24:41 2025 by rpki-client