$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/529cc20c-99e5-3f08-a75e-9c982f67b2a9.roa File: 529cc20c-99e5-3f08-a75e-9c982f67b2a9.roa (raw, json) Hash identifier: Wxga6wOwp5fHLk6pnU3ax/hwXN+lj8kxPTvJ32gDiDs= Subject key identifier: 5F:19:1B:1F:7D:B8:77:A0:C9:66:77:62:D4:FC:EF:45:5B:2E:3F:26 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858494CC94B349DDA7FFE6BBB0380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/529cc20c-99e5-3f08-a75e-9c982f67b2a9.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 0 IP address blocks: 2620:74:18::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:4b:34:9d:da:7f:fe:6b:bb:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=50eaf3aa-a380-4c45-9a5a-409bb542550b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8e:f5:61:8e:79:ce:de:de:c6:06:3f:16:db: 37:4b:3f:7b:05:0e:52:25:97:3b:66:05:a5:68:5a: 97:0a:80:b2:7b:95:0e:2a:8a:f0:35:76:12:46:61: 25:6f:9c:89:7d:58:e4:36:d2:66:03:cc:13:cf:11: 26:df:58:0a:21:0e:a7:dc:8e:74:93:6d:0b:fe:88: 10:d4:06:9e:27:c7:68:a1:b4:d4:8a:6e:bd:3f:96: a4:3d:50:67:b3:16:54:0a:63:a9:45:d2:4f:6c:5c: d8:75:b4:74:ab:af:c3:bb:7b:06:73:ec:6b:83:c6: fe:37:47:35:a9:2a:0b:4e:65:6d:35:0e:da:4c:b7: 43:ef:6d:2d:de:85:82:a8:0e:4d:6d:c8:e4:28:ef: 36:fc:07:16:f2:c1:12:7b:32:a3:23:25:79:c9:b2: c9:7c:87:41:67:4f:f5:b5:48:f8:f8:d2:f6:58:62: 6f:64:02:22:f8:49:51:02:28:7e:0c:a6:13:ac:91: 4d:95:da:eb:62:f1:83:70:32:e4:6f:a9:cf:dc:57: 25:1b:59:b7:c2:36:96:08:2a:59:99:2e:42:51:3d: c2:75:c8:9f:fc:c6:16:b4:18:b5:3b:92:1e:fb:ab: af:4f:15:04:d8:24:85:bf:06:38:d7:76:d9:d6:04: 11:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:19:1B:1F:7D:B8:77:A0:C9:66:77:62:D4:FC:EF:45:5B:2E:3F:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/529cc20c-99e5-3f08-a75e-9c982f67b2a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:18::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:62:ce:09:e1:c3:fb:0d:3c:0d:84:a1:00:5b:d5:ad:89:11: 3b:65:92:89:64:1d:af:2d:51:a4:e6:4a:ea:af:e6:c6:8a:40: e9:50:25:ea:93:9c:a4:5a:57:50:63:a6:b6:a1:ef:2d:1f:24: f8:a1:7d:2d:57:e8:9f:dc:f3:4c:b3:ad:6a:80:21:67:ad:77: 13:16:e4:43:ac:6c:93:6b:eb:aa:fb:a1:ce:bd:05:46:b7:d6: 41:c2:15:11:86:22:3a:d1:ea:69:e5:e4:70:ae:e8:b0:ab:1f: d4:e2:72:00:6b:c8:3d:24:19:bd:09:23:79:b3:25:f3:7b:fd: d6:03:75:04:4b:fc:28:1c:a5:36:55:d7:1a:9a:95:3d:68:31: d1:98:4c:8c:06:d6:a5:e0:4b:c5:8d:59:85:55:94:cb:3c:e9: 33:70:18:05:bb:ee:a4:cb:95:e9:00:f8:89:b2:94:86:8d:14: 5f:50:59:16:a3:8e:68:7c:6e:66:a8:e2:f3:a7:dc:ae:0e:7a: 8e:e2:2a:63:e0:34:47:ee:ec:e1:ef:c6:1b:aa:1c:20:81:30: fd:3a:75:00:56:8e:31:ff:80:04:8f:c3:2d:f1:6e:ff:10:1e: 70:9d:c9:b6:7a:87:59:35:5f:a6:01:33:e1:22:04:49:9e:3c: f6:51:85:86 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElMyUs0ndp//mu7A4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk NTBlYWYzYWEtYTM4MC00YzQ1LTlhNWEtNDA5YmI1NDI1NTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo471YY55zt7exgY/Fts3Sz97BQ5SJZc7ZgWl aFqXCoCye5UOKorwNXYSRmElb5yJfVjkNtJmA8wTzxEm31gKIQ6n3I50k20L/ogQ 1AaeJ8doobTUim69P5akPVBnsxZUCmOpRdJPbFzYdbR0q6/Du3sGc+xrg8b+N0c1 qSoLTmVtNQ7aTLdD720t3oWCqA5NbcjkKO82/AcW8sESezKjIyV5ybLJfIdBZ0/1 tUj4+NL2WGJvZAIi+ElRAih+DKYTrJFNldrrYvGDcDLkb6nP3FclG1m3wjaWCCpZ mS5CUT3Cdcif/MYWtBi1O5Ie+6uvTxUE2CSFvwY413bZ1gQRnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF8ZGx99uHegyWZ3YtT870VbLj8mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTI5Y2MyMGMtOTllNS0z ZjA4LWE3NWUtOWM5ODJmNjdiMmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAdAAY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG1izgnhw/sNPA2EoQBb1a2JETtlkolkHa8tUaTmSuqv5saKQOlQ JeqTnKRaV1Bjprah7y0fJPihfS1X6J/c80yzrWqAIWetdxMW5EOsbJNr66r7oc69 BUa31kHCFRGGIjrR6mnl5HCu6LCrH9TicgBryD0kGb0JI3mzJfN7/dYDdQRL/Cgc pTZV1xqalT1oMdGYTIwG1qXgS8WNWYVVlMs86TNwGAW77qTLlekA+ImylIaNFF9Q WRajjmh8bmao4vOn3K4Oeo7iKmPgNEfu7OHvxhuqHCCBMP06dQBWjjH/gASPwy3x bv8QHnCdybZ6h1k1X6YBM+EiBEmePPZRhYY= -----END CERTIFICATE-----Generated at Mon May 12 02:02:16 2025 by rpki-client