$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45071d1f-3e13-364e-ac74-8f0f1d4362e1.roa File: 45071d1f-3e13-364e-ac74-8f0f1d4362e1.roa (raw, json) Hash identifier: aI4iC7FDvDGqwdEDTvX2XJMH2d8yiTcQecsQAKXPY2A= Subject key identifier: 68:8B:8C:17:3F:3B:FE:CE:5E:EC:1D:64:74:0C:98:98:FE:3F:07:A6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A2F3B4A538F1ED9307C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45071d1f-3e13-364e-ac74-8f0f1d4362e1.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396553 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:2f:3b:4a:53:8f:1e:d9:30:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=84aeef03-89f5-470e-b5d8-9bbeb9cf4f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:60:7f:1e:66:da:fe:0a:f7:bc:56:a8:e1:01: 7e:20:56:11:6c:c8:9e:eb:de:4b:3f:66:37:bf:e5: 6d:01:45:a2:93:6e:ce:17:9f:4d:fa:08:61:6a:07: b3:4c:99:fe:12:0b:c9:fb:5e:eb:5d:e9:3a:64:95: 5a:da:a1:af:d3:e4:44:f8:f3:68:f0:8c:cd:f4:af: 57:76:bd:df:e2:d5:22:24:87:fd:8d:96:19:e4:9c: 6d:ab:7a:6e:c9:ca:d0:ae:64:b2:cb:12:70:9d:a8: ac:78:b4:b2:9e:af:36:59:d6:f0:23:e2:80:96:12: 04:60:25:0e:4d:32:da:93:ff:6e:62:4d:b0:b8:04: 89:6c:fd:7f:3c:35:7a:37:88:e4:53:6f:a1:17:aa: 07:81:ca:80:0d:b9:a6:78:2d:95:7e:cc:ac:a4:db: 29:fd:a0:6a:84:45:61:b5:b3:ea:ac:5b:66:65:bc: 08:7e:c4:13:92:ff:ea:68:36:3e:1b:27:4b:d2:34: 35:2e:a9:2e:4b:ad:b2:d3:b4:89:ae:cf:7e:1d:1f: 82:d3:f4:7c:18:ae:df:d5:c6:92:08:7f:07:88:1b: f3:61:33:e4:f4:4f:c9:c6:9a:45:d2:59:cb:4b:45: c1:97:90:77:4a:e7:11:45:0c:f8:e8:f8:02:6d:74: f0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8B:8C:17:3F:3B:FE:CE:5E:EC:1D:64:74:0C:98:98:FE:3F:07:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/45071d1f-3e13-364e-ac74-8f0f1d4362e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:ab:da:b1:ee:f4:ad:a9:ae:58:82:86:73:34:c3:51:16:c2: 4c:42:bd:0c:14:14:d5:ed:44:18:87:e7:74:24:db:3a:9e:0c: 89:79:e7:f3:f7:74:68:e4:e5:de:c0:8f:ec:d3:16:ce:5f:fc: 01:24:bb:2f:63:ba:de:57:53:23:c0:e9:23:92:a6:f5:12:0b: 2f:f1:fb:d6:27:c6:a7:18:24:b1:4c:9a:5a:20:8c:20:e8:34: 87:d9:bf:5b:84:f3:05:72:7d:56:40:fb:00:b6:c7:16:74:63: 0e:68:b3:75:cd:76:c8:91:ff:4b:a9:82:20:bb:5a:e7:52:28: 96:30:b2:6b:4d:bd:0a:8d:d4:34:e6:b9:67:fb:19:4f:01:a4: 9d:84:2d:11:71:39:17:7b:6b:59:1c:d2:b1:82:7c:e2:77:0d: 14:89:71:6f:e0:da:cc:c8:d0:cf:36:64:e5:ee:60:15:76:4b: 60:c5:04:50:6c:66:d7:92:9e:3c:34:44:7c:bd:78:b0:5f:db: a0:00:89:e0:2d:30:ef:e2:c3:c1:43:1a:5e:d8:83:c0:f1:8c: 25:62:e9:45:09:b9:02:ae:47:b9:8c:99:6b:8f:a8:e5:21:a3: 80:09:b3:f9:3b:fd:af:d8:c8:a0:5f:cf:25:36:41:2c:4a:32: d9:73:62:5f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSi87SlOPHtkwfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ODRhZWVmMDMtODlmNS00NzBlLWI1ZDgtOWJiZWI5Y2Y0ZjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWB/Hmba/gr3vFao4QF+IFYRbMie695LP2Y3 v+VtAUWik27OF59N+ghhagezTJn+EgvJ+17rXek6ZJVa2qGv0+RE+PNo8IzN9K9X dr3f4tUiJIf9jZYZ5Jxtq3puycrQrmSyyxJwnaiseLSynq82WdbwI+KAlhIEYCUO TTLak/9uYk2wuASJbP1/PDV6N4jkU2+hF6oHgcqADbmmeC2VfsyspNsp/aBqhEVh tbPqrFtmZbwIfsQTkv/qaDY+GydL0jQ1LqkuS62y07SJrs9+HR+C0/R8GK7f1caS CH8HiBvzYTPk9E/JxppF0lnLS0XBl5B3SucRRQz46PgCbXTwvwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGiLjBc/O/7OXuwdZHQMmJj+PwemMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDUwNzFkMWYtM2UxMy0z NjRlLWFjNzQtOGYwZjFkNDM2MmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBjq9qx7vStqa5YgoZzNMNRFsJMQr0MFBTV7UQY h+d0JNs6ngyJeefz93Ro5OXewI/s0xbOX/wBJLsvY7reV1MjwOkjkqb1Egsv8fvW J8anGCSxTJpaIIwg6DSH2b9bhPMFcn1WQPsAtscWdGMOaLN1zXbIkf9LqYIgu1rn UiiWMLJrTb0KjdQ05rln+xlPAaSdhC0RcTkXe2tZHNKxgnzidw0UiXFv4NrMyNDP NmTl7mAVdktgxQRQbGbXkp48NER8vXiwX9ugAIngLTDv4sPBQxpe2IPA8YwlYulF CbkCrke5jJlrj6jlIaOACbP5O/2v2MigX88lNkEsSjLZc2Jf -----END CERTIFICATE-----Generated at Sun May 11 08:31:02 2025 by rpki-client