$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3138f02d-1569-35c7-8b50-35f307364831.roa File: 3138f02d-1569-35c7-8b50-35f307364831.roa (raw, json) Hash identifier: 6k0tZKA+8+jZSHVvFOfhTlINaoFl2RspyBuRjy0xszI= Subject key identifier: 59:C3:60:FC:07:84:B9:96:97:A0:D6:6E:05:D5:89:30:94:59:AF:B9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A328980ABCB66171AE740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3138f02d-1569-35c7-8b50-35f307364831.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396562 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:32:89:80:ab:cb:66:17:1a:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=405e183b-85c5-411f-a2fb-b706f9b0a199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:59:de:94:70:46:c3:df:39:fe:33:02:85:9d: 5e:11:c4:cb:6b:cb:a1:91:90:86:ee:09:b4:b5:96: d5:a6:51:02:bb:16:ae:57:fd:02:8f:17:38:ca:a9: 1a:63:ba:77:26:27:4d:dd:00:30:84:7c:fd:e9:95: ba:7e:d1:8a:51:a2:ac:5b:e9:7a:ef:b0:20:55:71: b6:bf:39:61:4d:83:b1:af:1e:f7:df:27:3c:ff:7d: 10:66:c2:93:a3:a2:46:83:6e:e7:20:17:35:85:a6: d3:9a:fe:96:6a:06:cd:0c:9c:a5:06:db:ea:3c:d2: 53:c6:af:8d:c7:af:2d:73:93:65:94:af:2b:33:5d: 40:1b:6a:d0:57:38:00:79:da:c1:31:c4:91:29:23: 4f:14:b2:1f:ac:66:cb:13:24:21:9a:5a:12:74:c2: c0:cf:0a:72:32:6f:c5:47:e2:f7:50:4a:02:44:44: 47:56:56:50:74:7a:eb:2e:15:15:fd:3a:42:94:a2: 71:2b:8c:9b:7d:ce:f3:f9:bb:05:2c:a5:30:d4:0e: 95:ce:c9:3b:38:cd:13:e9:c9:7f:5e:0b:5f:ab:5d: cb:e1:cf:cb:4a:59:d2:01:37:cd:3f:37:12:af:0e: f5:b5:64:ad:6b:03:b8:65:3f:8d:f0:82:bd:86:1c: d3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C3:60:FC:07:84:B9:96:97:A0:D6:6E:05:D5:89:30:94:59:AF:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3138f02d-1569-35c7-8b50-35f307364831.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:24:d4:ba:ff:57:96:75:92:15:d7:fa:a4:bc:29:b9:c5:d8: 4d:3f:93:9f:0e:aa:4e:c6:41:0e:29:55:d8:14:4e:c3:29:ef: 24:a9:b7:19:c0:6a:cf:07:76:82:4f:1d:71:2d:64:52:76:59: 80:84:6d:02:1c:24:db:75:6f:86:19:1d:b9:87:ce:54:1f:91: 22:9b:4e:f4:12:99:c8:56:6d:1a:0e:6c:3e:f2:3c:c5:5d:7e: a6:96:eb:e3:1a:3c:70:8a:91:86:0a:03:ae:45:46:b0:73:a7: 57:43:f1:b5:bf:49:a4:9d:9a:c8:2c:7b:57:f7:e2:40:b6:23: 5c:af:f0:54:70:2d:ed:5c:9d:bb:d5:16:3c:63:e2:60:22:c0: 9e:79:7d:59:f6:46:90:29:48:c6:d6:bc:e1:5f:5e:a5:39:82: 4a:ca:44:a7:42:a7:14:f7:80:32:ce:8c:b4:b4:d6:1f:b8:9a: f4:2b:db:0c:c2:98:8c:a5:fc:05:b5:6d:d4:f3:64:f8:bc:c7: 28:e4:4e:c8:4d:6c:d3:05:f4:9f:96:9d:2f:02:60:fc:9a:bc: bb:7a:d4:f9:89:4b:68:b0:bd:63:37:05:73:c8:ab:4c:60:1a: 58:88:a9:6b:d3:b5:8b:43:90:52:50:29:29:1c:c1:8a:e6:ca: 0e:e5:c1:87 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSjKJgKvLZhca50AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NDA1ZTE4M2ItODVjNS00MTFmLWEyZmItYjcwNmY5YjBhMTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1nelHBGw985/jMChZ1eEcTLa8uhkZCG7gm0 tZbVplECuxauV/0Cjxc4yqkaY7p3JidN3QAwhHz96ZW6ftGKUaKsW+l677AgVXG2 vzlhTYOxrx733yc8/30QZsKTo6JGg27nIBc1habTmv6WagbNDJylBtvqPNJTxq+N x68tc5NllK8rM11AG2rQVzgAedrBMcSRKSNPFLIfrGbLEyQhmloSdMLAzwpyMm/F R+L3UEoCRERHVlZQdHrrLhUV/TpClKJxK4ybfc7z+bsFLKUw1A6Vzsk7OM0T6cl/ Xgtfq13L4c/LSlnSATfNPzcSrw71tWStawO4ZT+N8IK9hhzTZQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFnDYPwHhLmWl6DWbgXViTCUWa+5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzEzOGYwMmQtMTU2OS0z NWM3LThiNTAtMzVmMzA3MzY0ODMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBXJNS6/1eWdZIV1/qkvCm5xdhNP5OfDqpOxkEO KVXYFE7DKe8kqbcZwGrPB3aCTx1xLWRSdlmAhG0CHCTbdW+GGR25h85UH5Eim070 EpnIVm0aDmw+8jzFXX6mluvjGjxwipGGCgOuRUawc6dXQ/G1v0mknZrILHtX9+JA tiNcr/BUcC3tXJ271RY8Y+JgIsCeeX1Z9kaQKUjG1rzhX16lOYJKykSnQqcU94Ay zoy0tNYfuJr0K9sMwpiMpfwFtW3U82T4vMco5E7ITWzTBfSflp0vAmD8mry7etT5 iUtosL1jNwVzyKtMYBpYiKlr07WLQ5BSUCkpHMGK5soO5cGH -----END CERTIFICATE-----Generated at Sun May 11 08:16:56 2025 by rpki-client