$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2507be43-2a7b-3cce-91ef-63d17c612842.roa File: 2507be43-2a7b-3cce-91ef-63d17c612842.roa (raw, json) Hash identifier: 8ETSfVqSU7c2oACPOVxjmsOXa7ZhhUK+0dW1jd9wBiw= Subject key identifier: 98:B3:D2:5A:06:DE:B3:F1:CD:33:68:63:10:76:A9:CA:C7:DA:D8:99 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4D832A72D3B62DC056480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2507be43-2a7b-3cce-91ef-63d17c612842.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 396595 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:d8:32:a7:2d:3b:62:dc:05:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=816a4218-3a04-4d34-aee8-52725f67a025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:55:70:29:41:18:d3:26:dc:d6:d3:74:d8:66: 91:9e:3d:37:40:ef:a3:70:19:b9:98:a1:be:9a:6b: a8:f3:dc:25:7c:68:4c:f3:cc:2f:41:69:ea:90:ee: 20:db:48:36:20:1e:14:f3:df:fd:cf:b1:09:84:43: 40:ef:5d:83:5f:a9:a8:c8:67:0f:fd:1d:41:ff:24: 18:2a:71:2c:c6:d6:e9:c5:47:3f:65:79:ef:14:89: 61:86:f7:ea:9b:b9:4a:87:48:6b:e5:8e:6e:3d:3b: 58:76:ec:10:74:2a:39:89:b9:f9:00:23:11:e0:85: 20:d8:d5:83:86:68:33:87:b2:13:d8:8e:b0:ad:df: 56:bf:d6:3b:54:f5:96:85:36:aa:09:6b:dc:eb:03: 91:52:cf:28:9a:af:7c:d4:96:51:43:0d:1d:e9:94: 19:66:47:b3:e3:76:15:2b:1e:08:c0:93:5b:43:41: 6f:51:d9:b8:59:19:cd:74:70:be:85:eb:55:5d:fa: 57:db:cf:06:62:45:bc:6e:87:84:13:20:70:3f:b1: 59:c8:e9:72:57:90:c0:9e:e7:7d:00:50:45:b2:fa: 4c:54:41:6e:fe:66:c7:dd:96:b9:e6:6c:e0:62:99: c3:ee:8c:e0:2c:da:2e:83:15:aa:70:e5:88:5f:ab: b4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B3:D2:5A:06:DE:B3:F1:CD:33:68:63:10:76:A9:CA:C7:DA:D8:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2507be43-2a7b-3cce-91ef-63d17c612842.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:48:4a:a5:9e:28:ec:7b:d1:67:11:bb:ed:95:2d:90:b0:4b: 66:13:f8:c9:57:af:a3:1d:e1:b0:9c:49:51:a1:44:e6:9a:c1: 0e:09:33:f2:55:d4:1a:79:2a:4c:8b:78:17:11:fa:cd:fd:07: 02:30:28:0b:bf:3b:29:d8:a7:3e:c4:2f:13:f3:58:12:b8:c0: c5:d7:76:fe:77:11:82:6f:a6:22:37:1c:ff:0a:4f:e2:ee:71: e8:72:15:dc:23:81:e9:2c:cb:90:02:e2:3b:6d:20:2a:f2:5d: 47:af:40:c8:d9:a6:29:38:2d:7a:43:f2:9d:ff:9b:f4:1e:50: b4:b2:1b:54:f6:0e:8f:9e:03:ec:35:f2:29:a4:7e:27:90:78: ef:d0:dc:42:8b:bf:1b:bd:2c:c1:08:e8:da:9b:ab:00:cb:42: f3:5e:4b:a1:71:13:6f:8a:4f:de:eb:42:f8:bf:22:26:6d:9d: 3c:9a:4f:61:8c:bb:4e:e6:51:c7:d2:87:a8:18:9e:e4:42:9e: 05:40:83:5f:4c:38:f0:26:6a:53:e9:e0:a7:0f:63:0f:dc:bd: 9b:ea:06:73:d1:7e:fa:f4:b1:0e:b1:ce:15:0b:4c:5f:45:bf: 14:c3:a1:30:f0:49:11:96:39:b7:28:73:62:28:09:9a:7b:71: 7f:8b:4f:f1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1Ngypy07YtwFZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk ODE2YTQyMTgtM2EwNC00ZDM0LWFlZTgtNTI3MjVmNjdhMDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilVwKUEY0ybc1tN02GaRnj03QO+jcBm5mKG+ mmuo89wlfGhM88wvQWnqkO4g20g2IB4U89/9z7EJhENA712DX6moyGcP/R1B/yQY KnEsxtbpxUc/ZXnvFIlhhvfqm7lKh0hr5Y5uPTtYduwQdCo5ibn5ACMR4IUg2NWD hmgzh7IT2I6wrd9Wv9Y7VPWWhTaqCWvc6wORUs8omq981JZRQw0d6ZQZZkez43YV Kx4IwJNbQ0FvUdm4WRnNdHC+hetVXfpX288GYkW8boeEEyBwP7FZyOlyV5DAnud9 AFBFsvpMVEFu/mbH3Za55mzgYpnD7ozgLNougxWqcOWIX6u0iwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJiz0loG3rPxzTNoYxB2qcrH2tiZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjUwN2JlNDMtMmE3Yi0z Y2NlLTkxZWYtNjNkMTdjNjEyODQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQADSEqlnijse9FnEbvtlS2QsEtmE/jJV6+jHeGw nElRoUTmmsEOCTPyVdQaeSpMi3gXEfrN/QcCMCgLvzsp2Kc+xC8T81gSuMDF13b+ dxGCb6YiNxz/Ck/i7nHochXcI4HpLMuQAuI7bSAq8l1Hr0DI2aYpOC16Q/Kd/5v0 HlC0shtU9g6PngPsNfIppH4nkHjv0NxCi78bvSzBCOjam6sAy0LzXkuhcRNvik/e 60L4vyImbZ08mk9hjLtO5lHH0oeoGJ7kQp4FQINfTDjwJmpT6eCnD2MP3L2b6gZz 0X769LEOsc4VC0xfRb8Uw6Ew8EkRljm3KHNiKAmae3F/i0/x -----END CERTIFICATE-----Generated at Sun May 11 06:37:21 2025 by rpki-client