$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40e9ed5c-e53f-3624-b04c-23db14cb5e3a.roa File: 40e9ed5c-e53f-3624-b04c-23db14cb5e3a.roa (raw, json) Hash identifier: PgjiPnQKUxt1gMiYKOxin7cs1rYkLtKZIgQ5zc5XrwI= Subject key identifier: 8F:1D:9A:40:13:0E:5F:82:B5:81:BA:D3:72:EB:57:3E:81:CF:FC:E3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C220BCDA02B9D4D401A800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40e9ed5c-e53f-3624-b04c-23db14cb5e3a.roa Signing time: Tue 15 Apr 2025 12:34:54 +0000 ROA not before: Tue 15 Apr 2025 12:34:54 +0000 ROA not after: Mon 14 Jul 2025 12:34:54 +0000 asID: 396606 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:20:bc:da:02:b9:d4:d4:01:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:54 2025 GMT Not After : Jul 14 12:34:54 2025 GMT Subject: CN=666dd397-7d2b-4df3-93b4-148590a5107d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c6:87:66:45:da:b5:97:eb:74:fd:8f:e6:ff: a8:b0:8b:82:95:24:c5:a0:e9:2f:6d:5b:63:0b:5d: 36:59:eb:c7:c8:07:7d:38:d9:68:8a:f8:02:48:e5: 8d:04:b6:6c:e8:ad:21:61:2f:c2:00:22:b9:b5:78: 49:d9:81:cc:97:e6:a5:93:33:33:ff:f0:9e:ee:d0: f9:8d:58:af:10:79:3d:73:4c:b7:59:f4:86:44:a0: ec:17:2b:07:7b:bd:a0:14:e0:b5:8a:82:7a:8d:22: b8:77:81:f8:92:77:c6:a7:82:36:75:41:11:56:b9: 86:38:ca:b8:05:ef:26:90:bc:0a:9b:60:a0:f4:d1: 8c:81:8a:0f:30:85:d3:9d:cf:63:c9:a0:94:04:3c: 13:9e:18:51:1d:51:27:da:fd:73:4a:99:46:be:b4: 87:01:a8:c7:9d:ad:13:62:0c:c9:ad:d9:15:31:53: 5b:91:84:ee:1f:cd:3b:09:16:8e:dd:ad:7b:88:a1: 58:f8:b2:58:57:08:36:cd:16:e2:ba:5c:05:78:8d: 94:5a:c1:2f:c0:45:45:8a:00:f2:8b:35:e2:ad:e7: f8:84:b2:d3:a2:cd:f0:2e:15:32:54:2f:07:08:9e: 53:bc:e5:ad:66:1d:f4:b9:ea:ec:a6:a5:6d:52:56: cc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1D:9A:40:13:0E:5F:82:B5:81:BA:D3:72:EB:57:3E:81:CF:FC:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40e9ed5c-e53f-3624-b04c-23db14cb5e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:5f:b1:82:c1:56:ba:6c:8d:bd:58:39:72:84:e7:3d:b3:88: 9e:13:8f:40:df:7c:44:15:07:da:f7:73:e5:20:90:5a:bb:e4: 52:c8:ee:37:c5:da:97:29:e5:c9:b7:6b:85:da:a2:a9:1c:06: f3:93:81:cd:9a:7f:c8:be:bc:ea:9f:7a:c0:fa:a2:76:e8:4a: e8:e3:b6:6e:a8:14:fc:57:57:c3:fe:24:c1:89:87:3b:ef:3d: 5a:f9:94:d0:45:cf:d4:5a:0b:5d:3e:ad:68:c5:8f:9d:e9:83: 12:f9:6a:54:9d:c9:99:f0:d2:8d:25:b1:82:86:d6:d8:46:b7: 91:b0:81:2e:80:6d:05:7f:71:ae:91:be:0d:63:9d:a0:31:54: ee:0f:6d:3c:2c:2f:d4:66:f6:65:39:d7:f5:f8:b1:8b:5f:b2: 15:4a:d4:c6:d5:23:3f:10:d0:9a:d9:4f:13:6f:ad:4f:db:cd: a8:cc:5a:54:f6:53:fa:0c:8e:ad:ef:54:9b:91:73:c8:18:27: 79:86:69:c4:2c:9e:1d:98:fa:7f:5a:a9:9e:5f:22:2f:56:79: be:92:cd:05:fb:65:ef:ba:45:0c:15:4d:ad:90:30:5f:46:9e: be:3a:6b:cb:c1:1f:30:75:91:de:f0:66:12:da:94:9d:7d:25: 19:88:1d:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwiC82gK51NQBqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NFoXDTI1MDcxNDEyMzQ1NFowLzEtMCsGA1UEAxMk NjY2ZGQzOTctN2QyYi00ZGYzLTkzYjQtMTQ4NTkwYTUxMDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcaHZkXatZfrdP2P5v+osIuClSTFoOkvbVtj C102WevHyAd9ONloivgCSOWNBLZs6K0hYS/CACK5tXhJ2YHMl+alkzMz//Ce7tD5 jVivEHk9c0y3WfSGRKDsFysHe72gFOC1ioJ6jSK4d4H4knfGp4I2dUERVrmGOMq4 Be8mkLwKm2Cg9NGMgYoPMIXTnc9jyaCUBDwTnhhRHVEn2v1zSplGvrSHAajHna0T YgzJrdkVMVNbkYTuH807CRaO3a17iKFY+LJYVwg2zRbiulwFeI2UWsEvwEVFigDy izXiref4hLLTos3wLhUyVC8HCJ5TvOWtZh30uerspqVtUlbMqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI8dmkATDl+CtYG603LrVz6Bz/zjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDBlOWVkNWMtZTUzZi0z NjI0LWIwNGMtMjNkYjE0Y2I1ZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGpfsYLBVrpsjb1YOXKE5z2ziJ4Tj0DffEQVB9r3c+UgkFq75FLI 7jfF2pcp5cm3a4XaoqkcBvOTgc2af8i+vOqfesD6onboSujjtm6oFPxXV8P+JMGJ hzvvPVr5lNBFz9RaC10+rWjFj53pgxL5alSdyZnw0o0lsYKG1thGt5GwgS6AbQV/ ca6Rvg1jnaAxVO4PbTwsL9Rm9mU51/X4sYtfshVK1MbVIz8Q0JrZTxNvrU/bzajM WlT2U/oMjq3vVJuRc8gYJ3mGacQsnh2Y+n9aqZ5fIi9Web6SzQX7Ze+6RQwVTa2Q MF9Gnr46a8vBHzB1kd7wZhLalJ19JRmIHdc= -----END CERTIFICATE-----Generated at Sun May 11 05:23:42 2025 by rpki-client