$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ec5c20f-0035-3bb0-8576-0ccea95bc991.roa File: 1ec5c20f-0035-3bb0-8576-0ccea95bc991.roa (raw, json) Hash identifier: uQ25fdU48hu8md6BVfTqVSTdFd9SEOm+XPQhZXfqTJw= Subject key identifier: 9B:56:BA:DE:81:25:1B:7E:C1:71:D8:98:13:8D:8E:EC:18:AB:FB:D1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C222E6DFAE0033A0E7E200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ec5c20f-0035-3bb0-8576-0ccea95bc991.roa Signing time: Tue 15 Apr 2025 12:34:55 +0000 ROA not before: Tue 15 Apr 2025 12:34:55 +0000 ROA not after: Mon 14 Jul 2025 12:34:55 +0000 asID: 397207 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:22:e6:df:ae:00:33:a0:e7:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:55 2025 GMT Not After : Jul 14 12:34:55 2025 GMT Subject: CN=0cf91550-f7d6-43f8-b869-e24d4d706e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3e:23:cc:68:26:35:76:73:fc:95:3f:34:ce: 03:ae:93:22:d4:80:bd:cb:26:b1:99:98:b6:46:61: 5a:cd:de:b1:7c:cc:75:b6:9a:3a:0f:ef:dc:aa:c3: f9:10:c2:e6:31:cd:16:6c:25:2e:67:94:96:9d:ad: 71:5c:74:5d:42:91:e6:b8:07:24:30:4e:a4:95:d8: eb:03:dd:59:ce:f4:66:10:35:1a:93:ac:3a:80:4b: 6d:bf:8f:df:3e:30:07:4b:15:55:8d:63:9b:17:06: 1f:98:39:fe:d0:58:ad:32:0e:78:52:f3:b9:8e:79: cc:1c:ee:5a:a1:2e:69:2d:94:af:d4:f9:33:94:b6: 31:18:59:2f:fc:3a:f4:0b:66:94:ea:0d:5c:6b:e1: d7:53:2d:fe:22:69:7a:97:51:24:28:18:c6:5d:79: 4d:5b:1a:4f:56:e2:aa:a1:e9:e9:50:15:cc:86:8b: a4:38:89:a0:50:af:42:30:45:a6:d7:88:84:46:e8: b3:b1:0e:21:b4:e4:f2:6d:16:a3:48:68:bf:66:a1: 00:a0:66:2d:d9:0d:80:cb:ad:c5:b5:d4:f9:0c:de: ec:4d:c9:71:88:88:63:4a:5e:b8:68:96:00:8f:dc: 98:e9:ff:a3:74:d2:52:f7:a2:fd:65:30:fe:97:95: 4e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:56:BA:DE:81:25:1B:7E:C1:71:D8:98:13:8D:8E:EC:18:AB:FB:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ec5c20f-0035-3bb0-8576-0ccea95bc991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:4b:d5:7b:5e:ef:a5:ca:4e:89:20:38:d3:3c:f1:56:4a:41: 12:63:0e:80:7d:c3:ea:c3:2a:aa:0d:9d:44:7a:74:6b:f8:eb: 05:e2:a3:04:4f:4b:ce:0d:04:d0:4c:49:9b:ac:c8:66:27:54: 37:97:df:a6:bb:95:91:74:72:d4:26:6e:ca:06:85:2b:ac:79: 67:1d:7c:a6:25:8e:e9:6f:35:b9:7b:a0:6b:f3:81:1a:7f:a2: 2e:3e:b1:e2:1b:8c:22:fa:f4:77:7e:82:11:8c:28:25:40:c1: 10:66:72:cc:fb:55:dd:ec:89:3b:40:0b:cd:2c:eb:0b:4c:14: fb:b5:41:41:45:76:3c:d7:fb:d3:49:74:2e:a8:79:23:32:2d: 6e:f0:4d:3d:8e:f5:84:58:10:b4:89:a8:e0:a2:ff:4e:aa:ef: 23:16:e1:da:76:bd:9f:c1:74:c1:b8:27:27:54:b8:e4:e2:30: 4f:11:eb:ed:75:6f:74:38:de:7c:05:bb:53:e6:d2:53:ac:af: 62:8b:4c:bf:ee:f9:79:89:5b:6b:91:d2:78:67:d1:be:16:dd: 8a:70:3b:83:1f:d6:71:14:52:33:f2:45:e5:0f:91:63:fa:4f: 10:34:36:8c:0b:a2:25:01:25:38:19:8a:1b:d3:f5:76:5d:e8: 89:55:bc:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwiLm364AM6Dn4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NVoXDTI1MDcxNDEyMzQ1NVowLzEtMCsGA1UEAxMk MGNmOTE1NTAtZjdkNi00M2Y4LWI4NjktZTI0ZDRkNzA2ZTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD4jzGgmNXZz/JU/NM4DrpMi1IC9yyaxmZi2 RmFazd6xfMx1tpo6D+/cqsP5EMLmMc0WbCUuZ5SWna1xXHRdQpHmuAckME6kldjr A91ZzvRmEDUak6w6gEttv4/fPjAHSxVVjWObFwYfmDn+0FitMg54UvO5jnnMHO5a oS5pLZSv1PkzlLYxGFkv/Dr0C2aU6g1ca+HXUy3+Iml6l1EkKBjGXXlNWxpPVuKq oenpUBXMhoukOImgUK9CMEWm14iERuizsQ4htOTybRajSGi/ZqEAoGYt2Q2Ay63F tdT5DN7sTclxiIhjSl64aJYAj9yY6f+jdNJS96L9ZTD+l5VOVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJtWut6BJRt+wXHYmBONjuwYq/vRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWVjNWMyMGYtMDAzNS0z YmIwLTg1NzYtMGNjZWE5NWJjOTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA1L1Xte76XKTokgONM88VZKQRJjDoB9w+rDKqoNnUR6dGv46wXi owRPS84NBNBMSZusyGYnVDeX36a7lZF0ctQmbsoGhSuseWcdfKYljulvNbl7oGvz gRp/oi4+seIbjCL69Hd+ghGMKCVAwRBmcsz7Vd3siTtAC80s6wtMFPu1QUFFdjzX +9NJdC6oeSMyLW7wTT2O9YRYELSJqOCi/06q7yMW4dp2vZ/BdMG4JydUuOTiME8R 6+11b3Q43nwFu1Pm0lOsr2KLTL/u+XmJW2uR0nhn0b4W3YpwO4Mf1nEUUjPyReUP kWP6TxA0NowLoiUBJTgZihvT9XZd6IlVvLg= -----END CERTIFICATE-----Generated at Sun May 11 05:33:32 2025 by rpki-client