$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/292db6cb-6749-31cf-88f5-9610161fccb6.roa File: 292db6cb-6749-31cf-88f5-9610161fccb6.roa (raw, json) Hash identifier: ZupZravafFQSH9Eao6+5kxDBNwydlHCzDfeyLZklKs4= Subject key identifier: A9:E9:C4:B6:43:77:65:D4:57:97:D4:66:59:C5:82:F9:6B:7E:4F:29 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849A1E3841263FCA244FD1F6880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/292db6cb-6749-31cf-88f5-9610161fccb6.roa Signing time: Thu 24 Apr 2025 12:37:23 +0000 ROA not before: Thu 24 Apr 2025 12:37:23 +0000 ROA not after: Wed 23 Jul 2025 12:37:23 +0000 asID: 397202 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:e3:84:12:63:fc:a2:44:fd:1f:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 24 12:37:23 2025 GMT Not After : Jul 23 12:37:23 2025 GMT Subject: CN=1b6be26f-5a2b-4edc-9aa5-65366b011ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:de:4b:e5:61:8d:5e:33:ce:cd:fc:f5:74:7b: 5b:04:8c:56:5a:0d:f2:51:58:3a:ab:a5:fa:f0:bf: ae:a8:1d:47:58:97:b0:7f:b3:c4:ac:42:fc:1e:79: fa:b6:ee:ce:77:81:a4:15:4f:83:17:3b:1c:43:2e: 1f:47:a7:a5:8e:ed:71:bc:c9:2e:60:9a:0e:2a:5f: 51:ca:a7:14:6f:b5:ae:83:68:c8:2f:df:b2:d7:eb: cc:2d:9f:4f:25:36:cd:9c:d9:3e:f2:d6:5a:e7:cf: fc:dc:89:79:9f:3e:56:f6:49:9f:66:e2:bf:6b:08: 55:d8:9e:52:aa:3e:64:b2:d9:55:dd:1b:17:d4:c4: e9:ea:fa:6d:cf:3d:34:34:14:73:2e:ec:30:ab:02: 27:13:83:53:98:29:de:26:92:4a:85:a9:4c:85:d3: 1d:09:87:81:93:e4:c4:f9:56:67:eb:77:9c:ea:c3: 4d:34:96:d0:45:00:93:68:4b:43:fc:42:14:36:c8: b2:96:f0:4a:8d:00:26:6f:ae:bd:e2:74:6c:33:84: 86:09:10:45:8f:88:e9:e4:2b:ed:12:b5:67:05:f3: 74:b4:46:be:4c:cd:6f:54:40:ba:df:a8:fd:0c:41: aa:bc:87:2c:bc:a4:e9:c6:2c:ba:42:b5:8f:44:4d: ca:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E9:C4:B6:43:77:65:D4:57:97:D4:66:59:C5:82:F9:6B:7E:4F:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/292db6cb-6749-31cf-88f5-9610161fccb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:61:7f:35:84:28:95:27:05:d6:35:cf:36:f7:cc:7c:3b:2c: 37:e5:46:ca:eb:80:a2:c4:ad:1f:56:d9:df:42:52:0a:8f:fc: ab:a4:cb:88:4c:75:dc:9f:e2:3a:15:dd:76:4e:2f:6f:a8:46: e1:fb:f5:e2:7a:de:17:60:2f:e3:f6:94:46:16:e9:9f:6f:e9: c7:6a:4b:da:3a:f5:b0:e9:aa:16:e2:df:bb:e5:65:f3:c1:93: 59:1f:3d:bf:f3:96:20:00:00:fe:5e:d9:4a:5e:72:8a:08:bb: 92:8f:6d:3a:44:fc:dc:72:3a:f5:f0:9d:75:9e:f1:05:8e:21: e3:3d:8a:ab:62:9c:8a:0f:b1:d3:80:cf:b8:d0:1d:cf:4c:c6: e2:1a:70:a4:7d:74:1d:3d:0f:8f:90:06:a3:0f:14:7f:b6:f4: 37:b1:b9:21:b1:bc:13:e7:9d:b1:6b:a1:e5:29:9d:95:fb:16: 6f:77:91:06:0f:1b:55:22:24:7a:fd:a3:22:23:55:ba:2c:03: 32:ef:ac:67:e8:36:1e:d3:48:96:2a:0b:da:8e:f1:1a:2c:78: bb:e9:c9:3e:51:ca:10:86:87:85:3c:ae:d1:1d:27:5f:5b:be: dd:28:5a:2d:7d:11:92:a0:fe:88:ae:60:a4:57:31:a0:71:78: 02:1a:28:1a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmh44QSY/yiRP0faIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQyNDEyMzcyM1oXDTI1MDcyMzEyMzcyM1owLzEtMCsGA1UEAxMk MWI2YmUyNmYtNWEyYi00ZWRjLTlhYTUtNjUzNjZiMDExYWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt5L5WGNXjPOzfz1dHtbBIxWWg3yUVg6q6X6 8L+uqB1HWJewf7PErEL8Hnn6tu7Od4GkFU+DFzscQy4fR6elju1xvMkuYJoOKl9R yqcUb7Wug2jIL9+y1+vMLZ9PJTbNnNk+8tZa58/83Il5nz5W9kmfZuK/awhV2J5S qj5kstlV3RsX1MTp6vptzz00NBRzLuwwqwInE4NTmCneJpJKhalMhdMdCYeBk+TE +VZn63ec6sNNNJbQRQCTaEtD/EIUNsiylvBKjQAmb6694nRsM4SGCRBFj4jp5Cvt ErVnBfN0tEa+TM1vVEC636j9DEGqvIcsvKTpxiy6QrWPRE3K1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKnpxLZDd2XUV5fUZlnFgvlrfk8pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjkyZGI2Y2ItNjc0OS0z MWNmLTg4ZjUtOTYxMDE2MWZjY2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGphfzWEKJUnBdY1zzb3zHw7LDflRsrrgKLErR9W2d9CUgqP/Kuk y4hMddyf4joV3XZOL2+oRuH79eJ63hdgL+P2lEYW6Z9v6cdqS9o69bDpqhbi37vl ZfPBk1kfPb/zliAAAP5e2UpecooIu5KPbTpE/NxyOvXwnXWe8QWOIeM9iqtinIoP sdOAz7jQHc9MxuIacKR9dB09D4+QBqMPFH+29DexuSGxvBPnnbFroeUpnZX7Fm93 kQYPG1UiJHr9oyIjVbosAzLvrGfoNh7TSJYqC9qO8RoseLvpyT5RyhCGh4U8rtEd J19bvt0oWi19EZKg/oiuYKRXMaBxeAIaKBo= -----END CERTIFICATE-----Generated at Sun May 11 06:42:11 2025 by rpki-client