$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3c92a7b0-ad5b-3b52-8948-8ba65d537279.roa File: 3c92a7b0-ad5b-3b52-8948-8ba65d537279.roa (raw, json) Hash identifier: wSbLjLIJOkkNZp0Nc1y6qWD1lGbDViI2PHLPNMAXog0= Subject key identifier: AE:EF:A1:9E:92:6E:C4:74:EB:10:06:B1:60:49:B1:53:B1:E0:A0:30 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A2C6A4CDAF7C39CB32500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3c92a7b0-ad5b-3b52-8948-8ba65d537279.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396546 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:2c:6a:4c:da:f7:c3:9c:b3:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=51a97649-4289-4537-b01a-af8dbd16ac05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a5:35:88:d0:0f:5f:91:7a:51:57:5e:20:3b: f7:6a:21:0f:52:3f:b5:bc:1f:80:18:ae:cb:a5:23: a7:2d:95:34:db:52:c2:30:b3:61:f5:45:f8:27:fc: d0:b4:7c:10:f9:f1:20:6e:e3:2c:ad:44:6c:64:ec: fc:d4:93:5d:bb:de:a8:09:2b:eb:03:e5:89:f7:73: b2:a5:ed:88:ee:6e:28:bb:b5:27:19:95:03:b5:7a: df:ed:a7:6d:60:2c:f5:a2:74:2d:c4:68:09:76:7d: 09:0e:e7:a5:be:5d:7d:dd:50:34:20:85:ec:b3:30: 98:e9:9f:61:94:55:b5:91:16:61:42:80:a5:3c:cf: c0:05:d2:2f:ad:9a:38:98:d2:09:83:da:87:1c:a2: 87:ec:e0:18:97:34:68:01:17:66:c0:a8:52:98:79: 08:6a:cf:00:b2:07:a6:81:1a:ac:dc:23:26:d9:de: 38:a0:2d:10:9c:34:99:6b:03:d2:83:12:e3:50:29: ca:47:47:25:8a:6d:e3:0e:a2:43:13:9a:db:df:e0: 8e:94:0b:07:b9:b5:b5:e3:b8:79:3a:e0:76:40:05: 84:85:9d:ef:b2:45:3e:d2:42:89:a1:ab:7c:26:d5: fc:ed:73:b3:d1:cf:f0:7c:24:f0:31:b2:de:c5:eb: d5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:EF:A1:9E:92:6E:C4:74:EB:10:06:B1:60:49:B1:53:B1:E0:A0:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3c92a7b0-ad5b-3b52-8948-8ba65d537279.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:8f:cc:31:41:3f:3a:f9:bf:52:21:56:8d:e8:67:17:59:d9: d8:7e:af:ac:0f:f5:08:7c:dd:4c:a7:e7:5b:78:7b:7a:d0:9f: f5:03:6d:d0:b3:b8:34:14:81:3d:4b:9f:88:41:04:39:f4:6d: 97:de:94:d4:a6:f0:0e:16:88:f3:43:1c:35:48:61:ee:49:e9: ab:f8:13:9d:6f:5b:99:a7:9d:22:0e:35:bb:a1:bc:9a:8e:6a: 4d:30:fa:a4:ab:dc:29:8e:ff:9f:05:a7:26:5e:26:ef:ac:9d: 02:ea:84:40:e8:7c:84:e3:9d:3b:d9:f0:d4:0e:8d:1b:1c:78: d6:31:b9:2f:9d:15:f0:4d:9a:d1:ad:58:b8:97:77:49:21:8b: 98:e6:8f:8d:69:90:70:a6:65:b1:05:0a:6a:23:b3:09:e9:77: e3:5d:dd:92:aa:66:71:42:44:c4:c6:6b:b0:64:b4:d7:6b:a7: 97:05:8f:be:ed:c2:1d:3b:4c:e9:71:6c:bc:5c:d5:dc:52:76: 53:6b:7b:e8:1d:62:27:2b:43:b6:e2:44:53:d3:33:ea:00:ae: f5:05:01:3f:46:52:16:8b:4d:1c:b8:31:7f:24:8c:3e:ca:da: 69:bc:af:df:60:72:85:fc:a8:0b:c0:4c:b4:ba:81:94:87:74: 64:fe:e0:97 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSixqTNr3w5yzJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NTFhOTc2NDktNDI4OS00NTM3LWIwMWEtYWY4ZGJkMTZhYzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaU1iNAPX5F6UVdeIDv3aiEPUj+1vB+AGK7L pSOnLZU021LCMLNh9UX4J/zQtHwQ+fEgbuMsrURsZOz81JNdu96oCSvrA+WJ93Oy pe2I7m4ou7UnGZUDtXrf7adtYCz1onQtxGgJdn0JDuelvl193VA0IIXsszCY6Z9h lFW1kRZhQoClPM/ABdIvrZo4mNIJg9qHHKKH7OAYlzRoARdmwKhSmHkIas8Asgem gRqs3CMm2d44oC0QnDSZawPSgxLjUCnKR0clim3jDqJDE5rb3+COlAsHubW147h5 OuB2QAWEhZ3vskU+0kKJoat8JtX87XOz0c/wfCTwMbLexevV+wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFK7voZ6SbsR06xAGsWBJsVOx4KAwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2M5MmE3YjAtYWQ1Yi0z YjUyLTg5NDgtOGJhNjVkNTM3Mjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQByj8wxQT86+b9SIVaN6GcXWdnYfq+sD/UIfN1M p+dbeHt60J/1A23Qs7g0FIE9S5+IQQQ59G2X3pTUpvAOFojzQxw1SGHuSemr+BOd b1uZp50iDjW7obyajmpNMPqkq9wpjv+fBacmXibvrJ0C6oRA6HyE45072fDUDo0b HHjWMbkvnRXwTZrRrVi4l3dJIYuY5o+NaZBwpmWxBQpqI7MJ6XfjXd2SqmZxQkTE xmuwZLTXa6eXBY++7cIdO0zpcWy8XNXcUnZTa3voHWInK0O24kRT0zPqAK71BQE/ RlIWi00cuDF/JIw+ytppvK/fYHKF/KgLwEy0uoGUh3Rk/uCX -----END CERTIFICATE-----Generated at Sun May 11 08:28:40 2025 by rpki-client