$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42fb9c1e-2c88-3fcb-9ad8-5a68aa192c55.roa File: 42fb9c1e-2c88-3fcb-9ad8-5a68aa192c55.roa (raw, json) Hash identifier: cswlCJvejSotXvW41sS5QDd/Bvbu4pryjhSNajxIgtY= Subject key identifier: 18:E3:7E:C5:2C:71:4C:C5:23:E2:20:BE:5D:AE:22:49:55:B1:C7:1C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C223DAD4450DB5983F3E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42fb9c1e-2c88-3fcb-9ad8-5a68aa192c55.roa Signing time: Tue 15 Apr 2025 12:34:56 +0000 ROA not before: Tue 15 Apr 2025 12:34:56 +0000 ROA not after: Mon 14 Jul 2025 12:34:56 +0000 asID: 397193 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:23:da:d4:45:0d:b5:98:3f:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:56 2025 GMT Not After : Jul 14 12:34:56 2025 GMT Subject: CN=586e1e8b-0e86-4b71-8302-8367e2bbc011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:04:b9:cf:fb:9d:25:b1:c2:7a:5c:59:84:11: 17:c9:97:7b:1b:6b:b9:a4:06:7d:1e:49:fe:53:4c: cb:f0:95:6b:20:6f:b8:b5:aa:4d:0c:c3:82:02:43: 8e:bf:dc:91:84:2b:49:1f:89:5c:a5:14:f3:49:e1: e8:a9:73:84:4c:12:d3:a4:45:eb:19:3e:d7:50:c1: 86:40:27:97:b9:5b:68:0d:7f:ef:14:b5:bf:38:aa: a7:b8:31:81:34:92:39:b8:1a:d1:ee:cc:5a:dd:63: 1d:ee:56:f4:c0:32:de:2e:d8:f5:1c:c3:f9:47:6d: 30:0b:08:e6:7f:83:52:f0:68:1f:46:55:c6:08:c0: cf:bc:74:53:a2:db:a8:f3:c1:4d:36:50:3c:30:dd: 93:ea:52:01:d0:77:75:82:60:3e:f8:2c:bf:c7:ce: 1a:d4:b3:0f:48:1a:27:ab:4a:d6:d9:27:a9:8e:4a: 57:52:16:c4:78:81:b5:ba:25:30:b7:6f:58:c6:66: ee:99:5d:a0:f8:71:a1:87:3c:b6:93:0f:11:cd:79: 40:7c:20:7e:7a:76:0f:fd:5c:b2:7f:5e:db:2e:73: 49:7b:49:26:12:64:91:e0:a1:b3:0a:32:05:4c:70: a5:5d:8f:12:f5:1c:f0:81:f6:54:9c:35:78:cb:0a: ac:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E3:7E:C5:2C:71:4C:C5:23:E2:20:BE:5D:AE:22:49:55:B1:C7:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/42fb9c1e-2c88-3fcb-9ad8-5a68aa192c55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:1a:ee:b5:47:de:d0:3e:1b:be:e4:ae:49:57:bd:99:96:30: 38:4c:db:f1:55:35:34:b8:8d:78:99:fd:37:c5:6e:22:5f:38: f3:d3:8f:73:b3:7b:71:ec:0a:50:0f:9c:8f:35:b2:e7:09:5e: f6:89:ca:61:db:4a:23:36:4b:c4:16:ae:f5:f9:51:b0:be:59: b7:8b:20:a7:a6:33:ce:b0:47:18:58:18:b1:8f:c4:ee:a8:ef: fc:46:8c:fa:f8:2b:3b:de:de:13:56:1f:36:79:6d:b8:38:67: c9:8d:98:6f:a1:02:c5:ce:06:d0:7b:1b:2e:b4:38:e6:2b:0f: 21:e7:6f:79:5c:37:6b:7f:03:5b:2f:83:65:44:73:eb:b3:1f: 3a:3a:d2:11:f8:d2:1b:20:ca:e9:bc:02:ad:59:fb:b4:5e:a5: a7:ab:f0:61:cc:28:76:dd:4d:de:4b:9b:ba:c7:fb:d1:a0:d2: ea:03:9e:a8:84:14:67:b5:df:b8:2f:b7:08:be:c4:93:c2:be: b5:c1:02:1b:f5:b9:8a:65:7a:1a:21:bc:74:6d:05:4c:8a:9f: 0b:14:70:2d:57:73:3a:31:b3:94:ab:c5:47:11:74:c2:8e:cb: 12:49:11:e5:3e:a4:ef:d3:a1:7c:90:d2:3a:04:0d:49:18:43: 06:f4:49:34 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwiPa1EUNtZg/PoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NloXDTI1MDcxNDEyMzQ1NlowLzEtMCsGA1UEAxMk NTg2ZTFlOGItMGU4Ni00YjcxLTgzMDItODM2N2UyYmJjMDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgS5z/udJbHCelxZhBEXyZd7G2u5pAZ9Hkn+ U0zL8JVrIG+4tapNDMOCAkOOv9yRhCtJH4lcpRTzSeHoqXOETBLTpEXrGT7XUMGG QCeXuVtoDX/vFLW/OKqnuDGBNJI5uBrR7sxa3WMd7lb0wDLeLtj1HMP5R20wCwjm f4NS8GgfRlXGCMDPvHRTotuo88FNNlA8MN2T6lIB0Hd1gmA++Cy/x84a1LMPSBon q0rW2SepjkpXUhbEeIG1uiUwt29YxmbumV2g+HGhhzy2kw8RzXlAfCB+enYP/Vyy f17bLnNJe0kmEmSR4KGzCjIFTHClXY8S9RzwgfZUnDV4ywqs4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBjjfsUscUzFI+Igvl2uIklVscccMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDJmYjljMWUtMmM4OC0z ZmNiLTlhZDgtNWE2OGFhMTkyYzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHUa7rVH3tA+G77krklXvZmWMDhM2/FVNTS4jXiZ/TfFbiJfOPPT j3Oze3HsClAPnI81sucJXvaJymHbSiM2S8QWrvX5UbC+WbeLIKemM86wRxhYGLGP xO6o7/xGjPr4Kzve3hNWHzZ5bbg4Z8mNmG+hAsXOBtB7Gy60OOYrDyHnb3lcN2t/ A1svg2VEc+uzHzo60hH40hsgyum8Aq1Z+7Repaer8GHMKHbdTd5Lm7rH+9Gg0uoD nqiEFGe137gvtwi+xJPCvrXBAhv1uYplehohvHRtBUyKnwsUcC1Xczoxs5SrxUcR dMKOyxJJEeU+pO/ToXyQ0joEDUkYQwb0STQ= -----END CERTIFICATE-----Generated at Sun May 11 05:52:39 2025 by rpki-client