$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4474069f-572d-3dbb-9526-72a3a13e5e18.roa File: 4474069f-572d-3dbb-9526-72a3a13e5e18.roa (raw, json) Hash identifier: 8B5tNmTy39e8TmOLwZavwsfZ5o13Ju1NjnCzT6638rU= Subject key identifier: 44:70:B2:73:63:84:F6:29:C0:49:86:93:95:CF:D7:71:15:37:62:BD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4DC9F12E87E1DBD0D30C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4474069f-572d-3dbb-9526-72a3a13e5e18.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 397210 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:dc:9f:12:e8:7e:1d:bd:0d:30:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=15522867-ab78-43ce-90ac-30b56f471067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:95:94:5a:62:df:e3:d5:c4:c7:e3:82:bf:5c: 94:df:3d:43:47:27:78:8a:2f:a5:27:a3:04:43:f1: cd:c5:32:9c:36:49:74:00:d2:3d:1e:8c:8f:bf:83: fe:f0:48:27:66:3e:4d:1b:10:f0:7c:3c:29:64:5a: 56:a6:25:14:ad:67:0d:c7:9e:84:3b:23:4a:c1:94: c6:84:7c:6a:97:5e:4a:0d:92:23:e3:b6:d3:7d:b8: e4:7a:88:53:7a:cf:db:a7:09:1c:37:cf:3c:60:a6: 97:ee:3e:da:36:b0:02:40:c0:71:9c:a2:ed:0c:ed: 9b:28:6c:4d:34:8c:39:86:20:77:76:60:ec:26:b2: 68:49:b2:35:65:44:69:e5:e8:b1:3e:1b:45:b7:7b: 63:56:83:a1:c6:70:50:f3:32:c7:f9:c3:15:5e:95: a6:ee:b2:b2:ff:42:23:f0:c7:ab:80:bb:50:1e:d0: f3:9d:6a:82:17:3e:5b:c3:45:30:01:fc:6a:8b:3b: 55:d9:f2:0d:20:80:00:9a:99:75:2f:fb:f4:8e:60: e7:5f:cd:06:67:e9:09:0d:63:9a:bb:db:cf:dd:31: e4:c4:5e:95:2d:63:b1:86:fb:40:51:58:21:7b:65: 9c:aa:64:2c:1b:92:2e:55:39:5c:a5:c5:1e:ad:c5: b9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:70:B2:73:63:84:F6:29:C0:49:86:93:95:CF:D7:71:15:37:62:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4474069f-572d-3dbb-9526-72a3a13e5e18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:9b:43:d8:52:83:36:13:2d:8d:82:0a:77:a3:e0:31:80:fb: ad:0d:d9:32:b3:8b:fa:50:6c:96:fb:3f:f3:5b:7b:cf:d8:aa: b2:e0:b9:a3:62:da:24:b9:13:b9:29:cb:7b:39:5f:a9:47:2d: d0:4f:7b:2d:c7:dd:7e:45:ed:84:6d:ce:5a:53:72:82:31:df: f0:41:b7:01:18:10:1a:08:72:d4:38:cf:0f:4e:94:d4:98:2a: 2d:ac:7a:d4:7a:75:7a:4c:24:c7:a3:d2:65:4b:70:48:b9:72: a1:48:c8:da:97:76:83:e9:c4:d7:5c:55:b2:bc:8e:c7:4d:eb: b8:8e:8d:33:89:9b:01:8d:9d:82:e0:63:52:5f:ce:5a:35:d2: 4f:4a:40:b2:17:f0:01:39:c9:aa:d7:27:83:21:53:55:49:8f: d0:b7:5e:b1:4d:d5:8a:bb:ad:d0:68:96:13:47:08:d4:98:70: 5c:c1:19:de:c1:88:6b:dd:96:22:36:80:2c:af:26:37:28:c6: 7d:14:ee:7f:96:aa:6a:36:51:65:6b:da:e8:cc:ff:06:a5:e5: 42:10:33:89:90:ee:fb:8f:04:1d:bd:40:2a:59:05:03:fe:df: 7b:0c:d5:bc:54:63:0b:64:77:74:bd:2b:69:4a:54:b5:5c:9f: 5a:2c:28:a7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1NyfEuh+Hb0NMMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk MTU1MjI4NjctYWI3OC00M2NlLTkwYWMtMzBiNTZmNDcxMDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpWUWmLf49XEx+OCv1yU3z1DRyd4ii+lJ6ME Q/HNxTKcNkl0ANI9HoyPv4P+8EgnZj5NGxDwfDwpZFpWpiUUrWcNx56EOyNKwZTG hHxql15KDZIj47bTfbjkeohTes/bpwkcN888YKaX7j7aNrACQMBxnKLtDO2bKGxN NIw5hiB3dmDsJrJoSbI1ZURp5eixPhtFt3tjVoOhxnBQ8zLH+cMVXpWm7rKy/0Ij 8MergLtQHtDznWqCFz5bw0UwAfxqiztV2fINIIAAmpl1L/v0jmDnX80GZ+kJDWOa u9vP3THkxF6VLWOxhvtAUVghe2WcqmQsG5IuVTlcpcUercW5jwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFERwsnNjhPYpwEmGk5XP13EVN2K9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDQ3NDA2OWYtNTcyZC0z ZGJiLTk1MjYtNzJhM2ExM2U1ZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBNm0PYUoM2Ey2Nggp3o+AxgPutDdkys4v6UGyW +z/zW3vP2Kqy4LmjYtokuRO5Kct7OV+pRy3QT3stx91+Re2Ebc5aU3KCMd/wQbcB GBAaCHLUOM8PTpTUmCotrHrUenV6TCTHo9JlS3BIuXKhSMjal3aD6cTXXFWyvI7H Teu4jo0ziZsBjZ2C4GNSX85aNdJPSkCyF/ABOcmq1yeDIVNVSY/Qt16xTdWKu63Q aJYTRwjUmHBcwRnewYhr3ZYiNoAsryY3KMZ9FO5/lqpqNlFla9rozP8GpeVCEDOJ kO77jwQdvUAqWQUD/t97DNW8VGMLZHd0vStpSlS1XJ9aLCin -----END CERTIFICATE-----Generated at Sun May 11 08:16:55 2025 by rpki-client