$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a2d2282-6c10-3916-9f45-a51905e3cf0c.roa File: 2a2d2282-6c10-3916-9f45-a51905e3cf0c.roa (raw, json) Hash identifier: ErFoIoABMbfbNVFywjJmNYh8e71WFJhZtbldtdYpK8M= Subject key identifier: A0:BA:C5:2B:B4:8B:32:0E:F3:4D:8B:F5:9C:43:DA:40:97:C9:C9:50 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A315ED0E8F783D246CF80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a2d2282-6c10-3916-9f45-a51905e3cf0c.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396568 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:31:5e:d0:e8:f7:83:d2:46:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=fcd4c8a4-5280-45d2-a8fd-6faa757855f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:17:50:29:1b:20:5f:85:14:8a:3a:ff:cc:85: ef:d0:cb:3a:b2:87:a4:e1:92:b5:35:26:88:42:6d: 4f:0f:36:ad:e3:7f:ed:74:28:62:c2:5b:ce:99:bb: 3f:8f:18:31:cd:8c:1f:88:d1:43:41:94:e1:f3:c7: 90:2e:7b:a1:60:ff:52:57:5f:16:ea:5e:fb:fd:9a: 6c:71:e7:07:d2:b4:9b:0d:bf:8f:a8:94:9c:e3:1b: 35:5a:6e:5b:d3:49:ad:86:46:71:cc:bb:e9:4f:d6: 5d:4a:57:6d:a2:25:1f:4b:2a:78:03:d3:47:16:2b: f5:82:fb:96:aa:30:41:66:5b:23:b2:9a:82:a0:fa: 43:87:1e:7e:91:91:d7:ef:3b:ab:bb:8f:12:8f:d3: 82:3a:2b:41:c1:28:32:ae:ed:4e:8e:ca:6a:c4:79: 26:d5:74:e5:8f:a8:a6:c2:98:5a:2b:c3:17:cc:6e: 8a:36:3e:6d:12:0f:0f:78:3d:2a:8c:89:64:a6:11: 2a:fd:15:bf:26:7c:c6:85:81:ab:77:f2:7a:d5:7f: 03:17:78:34:83:d2:8f:26:85:6f:48:39:82:8d:bd: 93:d9:d2:50:04:2d:b0:ff:94:ba:aa:27:3e:52:9f: ee:86:27:70:92:ef:67:87:cb:6c:21:65:be:12:6f: 76:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BA:C5:2B:B4:8B:32:0E:F3:4D:8B:F5:9C:43:DA:40:97:C9:C9:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a2d2282-6c10-3916-9f45-a51905e3cf0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:e7:d9:28:dc:d8:e6:4c:24:5b:da:49:50:a6:ee:7f:87:4d: aa:c1:5e:2c:04:54:ed:e3:54:18:17:fd:35:3f:0b:dc:40:fc: 3a:15:57:00:91:74:a0:a9:af:b1:4b:24:f3:2d:4f:74:42:35: 5d:b6:42:1c:12:49:c3:83:8b:27:9d:fc:de:c6:24:e0:c5:64: 53:d9:ea:78:ba:78:67:e9:55:52:18:b5:1f:c2:90:2e:3a:48: 02:76:3e:f5:93:e8:e0:19:57:fc:18:16:3b:22:51:bd:98:a4: 53:21:83:be:0b:1a:54:7b:d0:36:74:e7:ac:82:75:dd:a2:00: c1:f9:b6:25:9f:bc:54:75:e7:9e:b6:34:65:cb:5c:16:47:be: bc:47:7c:ae:85:aa:c2:7f:33:79:4e:60:8b:93:5b:fc:95:ef: 6e:c3:f4:5a:19:a1:d9:9f:e8:84:be:91:e3:b3:aa:a5:65:f9: 67:69:11:19:35:9f:40:67:57:d6:d1:d0:b4:dc:9d:af:4e:08: 24:72:30:4c:f2:fc:e0:d9:5f:39:a5:e5:a2:a7:ce:6d:d8:b9: b8:c2:be:46:74:bc:79:65:9e:f5:cc:d8:3f:30:33:59:ca:2d: a2:ba:b2:9b:0a:40:d2:46:28:f3:58:17:40:7b:7a:91:e2:c2: a0:ff:9d:c4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSjFe0Oj3g9JGz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZmNkNGM4YTQtNTI4MC00NWQyLWE4ZmQtNmZhYTc1Nzg1NWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRdQKRsgX4UUijr/zIXv0Ms6soek4ZK1NSaI Qm1PDzat43/tdChiwlvOmbs/jxgxzYwfiNFDQZTh88eQLnuhYP9SV18W6l77/Zps cecH0rSbDb+PqJSc4xs1Wm5b00mthkZxzLvpT9ZdSldtoiUfSyp4A9NHFiv1gvuW qjBBZlsjspqCoPpDhx5+kZHX7zuru48Sj9OCOitBwSgyru1OjspqxHkm1XTlj6im wphaK8MXzG6KNj5tEg8PeD0qjIlkphEq/RW/JnzGhYGrd/J61X8DF3g0g9KPJoVv SDmCjb2T2dJQBC2w/5S6qic+Up/uhidwku9nh8tsIWW+Em92KQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKC6xSu0izIO802L9ZxD2kCXyclQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmEyZDIyODItNmMxMC0z OTE2LTlmNDUtYTUxOTA1ZTNjZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBR59ko3NjmTCRb2klQpu5/h02qwV4sBFTt41QY F/01PwvcQPw6FVcAkXSgqa+xSyTzLU90QjVdtkIcEknDg4snnfzexiTgxWRT2ep4 unhn6VVSGLUfwpAuOkgCdj71k+jgGVf8GBY7IlG9mKRTIYO+CxpUe9A2dOesgnXd ogDB+bYln7xUdeeetjRly1wWR768R3yuharCfzN5TmCLk1v8le9uw/RaGaHZn+iE vpHjs6qlZflnaREZNZ9AZ1fW0dC03J2vTggkcjBM8vzg2V85peWip85t2Lm4wr5G dLx5ZZ71zNg/MDNZyi2iurKbCkDSRijzWBdAe3qR4sKg/53E -----END CERTIFICATE-----Generated at Sun May 11 05:30:44 2025 by rpki-client