$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a26e0bf-dfe4-34df-907f-1b45a6b1cbda.roa File: 5a26e0bf-dfe4-34df-907f-1b45a6b1cbda.roa (raw, json) Hash identifier: DxEXWbekZQ1oSa4IQEW+FfoIIntvI3RKwpIOTMxe9pg= Subject key identifier: 0E:65:2D:F8:E2:9D:85:CF:A0:03:49:98:96:14:EC:DD:41:80:83:EA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4DBD821BCD36FA10C5A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a26e0bf-dfe4-34df-907f-1b45a6b1cbda.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 396608 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:db:d8:21:bc:d3:6f:a1:0c:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=d546930a-ca3b-428c-9513-c1bd690ca2d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b0:55:ef:af:33:41:8d:41:52:fa:ae:23:b9: 28:80:94:ec:8c:52:44:19:0c:43:27:86:92:ad:c8: 70:d1:d9:87:1f:b6:1b:1f:44:3c:96:67:ff:e1:37: a1:13:5c:67:71:4e:ba:43:6e:f0:a6:61:d1:78:f2: 10:e0:78:7a:a6:6e:64:f8:10:a0:1b:f5:fa:81:59: ba:2a:53:a0:e8:2b:d8:77:fb:b5:bc:98:9f:52:fa: cb:fc:91:6d:27:da:b8:ab:69:23:bf:87:cb:fc:cb: b9:48:dc:57:26:2e:1b:52:e9:d5:7c:07:cb:b8:45: 71:4d:49:52:aa:01:d0:3c:1e:f7:73:0a:30:62:a6: 4e:bd:da:87:a5:4b:25:c7:76:58:96:d9:58:49:de: 3f:20:98:af:fc:af:b7:7f:d8:8f:49:cd:d2:b0:b3: f7:7a:d2:0a:83:2b:9c:e4:5d:53:67:10:28:94:6a: 1f:97:c6:96:96:62:87:99:a0:ab:d0:14:14:32:ca: 51:f5:eb:b4:d9:21:2f:e9:2a:26:fe:80:d1:8c:93: 95:a0:76:92:37:45:2d:69:2d:bb:84:b3:7d:95:c7: 5f:50:57:dd:d0:8a:1d:f2:3b:cf:ef:3d:ca:f0:f6: 8b:fb:ba:f4:b4:e4:95:6b:de:01:55:f0:7f:c0:e5: 4e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:65:2D:F8:E2:9D:85:CF:A0:03:49:98:96:14:EC:DD:41:80:83:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a26e0bf-dfe4-34df-907f-1b45a6b1cbda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:62:e7:e5:5b:09:95:51:0f:1d:76:28:62:82:ee:4c:c7:83: 26:4e:d2:3c:b5:5c:7c:5b:61:69:16:06:4f:c7:7f:55:ca:aa: 31:9a:01:e8:49:c1:70:d0:74:47:4c:f0:dd:9c:75:36:04:ec: 4c:0e:6c:af:a1:ac:8d:71:bc:30:6a:1e:9b:cd:c9:81:11:12: 62:33:b3:95:f2:0c:8e:79:24:85:0d:c2:63:d1:5c:1d:26:2f: 98:da:fe:b2:b5:33:20:f0:d5:f3:90:23:90:ff:88:e1:b3:4c: 21:6b:f6:de:cd:21:31:e3:48:6c:71:99:f7:98:32:4d:92:4c: ca:c1:e4:db:23:3c:3f:ef:fd:40:1c:d1:7e:6d:8b:02:e7:c4: d3:72:ef:c1:4e:f6:e6:dc:c5:4e:d5:0c:ae:3e:0d:9c:91:db: 2e:3d:e5:88:be:6d:25:eb:87:76:99:ff:45:67:a0:9e:bb:ee: 0e:1e:0e:83:21:9b:a3:f1:23:40:a1:f7:cb:fe:62:33:6a:05: 3d:e4:b4:84:8b:c2:aa:88:05:f2:29:3d:5a:4b:f7:3b:18:80: 82:9d:10:99:d4:97:27:46:3f:bc:16:fb:b2:8e:a7:a4:36:77: f8:df:9a:16:96:c0:f7:f4:9f:29:8c:09:28:a2:3a:c7:e8:ca: f3:9f:5d:55 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1NvYIbzTb6EMWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk ZDU0NjkzMGEtY2EzYi00MjhjLTk1MTMtYzFiZDY5MGNhMmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLBV768zQY1BUvquI7kogJTsjFJEGQxDJ4aS rchw0dmHH7YbH0Q8lmf/4TehE1xncU66Q27wpmHRePIQ4Hh6pm5k+BCgG/X6gVm6 KlOg6CvYd/u1vJifUvrL/JFtJ9q4q2kjv4fL/Mu5SNxXJi4bUunVfAfLuEVxTUlS qgHQPB73cwowYqZOvdqHpUslx3ZYltlYSd4/IJiv/K+3f9iPSc3SsLP3etIKgyuc 5F1TZxAolGofl8aWlmKHmaCr0BQUMspR9eu02SEv6Som/oDRjJOVoHaSN0UtaS27 hLN9lcdfUFfd0Iod8jvP7z3K8PaL+7r0tOSVa94BVfB/wOVONQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFA5lLfjinYXPoANJmJYU7N1BgIPqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWEyNmUwYmYtZGZlNC0z NGRmLTkwN2YtMWI0NWE2YjFjYmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBDYuflWwmVUQ8ddihigu5Mx4MmTtI8tVx8W2Fp FgZPx39VyqoxmgHoScFw0HRHTPDdnHU2BOxMDmyvoayNcbwwah6bzcmBERJiM7OV 8gyOeSSFDcJj0VwdJi+Y2v6ytTMg8NXzkCOQ/4jhs0wha/bezSEx40hscZn3mDJN kkzKweTbIzw/7/1AHNF+bYsC58TTcu/BTvbm3MVO1QyuPg2ckdsuPeWIvm0l64d2 mf9FZ6Ceu+4OHg6DIZuj8SNAoffL/mIzagU95LSEi8KqiAXyKT1aS/c7GICCnRCZ 1JcnRj+8FvuyjqekNnf435oWlsD39J8pjAkoojrH6Mrzn11V -----END CERTIFICATE-----Generated at Sun May 11 05:35:10 2025 by rpki-client