$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a651d8b-ecc8-3d63-90d2-6740419539c0.roa File: 5a651d8b-ecc8-3d63-90d2-6740419539c0.roa (raw, json) Hash identifier: nQmXChfpUmoqfRbesxtoFjseN7cZaIjsjy5quxYDNDM= Subject key identifier: B6:B3:0E:4A:0A:3F:52:29:D5:51:16:75:22:1E:90:FB:B8:CA:0F:D9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A3259CD81370EC6825B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a651d8b-ecc8-3d63-90d2-6740419539c0.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 397198 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:32:59:cd:81:37:0e:c6:82:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=d9d7e4fa-597f-4839-b3a7-3c701ca8d5b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:e9:c8:4c:76:a5:9e:6e:be:ad:4c:30:da:c2: c7:b7:3f:70:7e:57:b3:ef:61:d2:0b:5f:24:db:57: 09:e0:0e:02:9c:dd:13:f3:4d:5d:0b:fc:5e:18:79: ef:57:ac:2d:55:2a:85:12:3e:59:10:ec:b8:68:40: ac:84:c9:2c:4c:db:da:4d:ff:f2:dc:5f:a9:67:51: 82:04:9c:72:c5:59:d0:2b:ac:b6:c1:28:45:d5:d4: 0f:a7:5b:3b:be:8f:bb:8c:00:1e:df:92:c3:97:bb: 0c:5b:9e:7e:9d:b8:8e:85:6d:4f:98:9d:f5:ed:cf: b1:ca:9d:51:d5:43:a4:e7:93:73:29:c9:50:1c:ff: cf:93:e7:b0:dd:6d:0b:0f:8b:a2:35:27:be:3c:9b: fc:da:bd:10:e7:52:fe:2c:ec:8b:a8:42:8c:7a:a6: 1f:5a:d5:23:c2:e6:01:75:e1:51:0a:9e:d1:7f:70: 39:3d:ff:f5:62:a9:c7:6d:cd:3e:5c:91:ac:43:34: b5:aa:f9:a0:3c:07:23:95:88:02:eb:60:cd:34:2e: d4:bd:d3:a8:69:cb:cf:ba:fd:55:75:26:27:7a:53: e1:1b:f8:4a:db:88:49:69:f7:05:ab:68:1b:52:39: 07:76:82:bb:58:99:df:9f:d6:7b:01:60:79:67:70: 86:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B3:0E:4A:0A:3F:52:29:D5:51:16:75:22:1E:90:FB:B8:CA:0F:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a651d8b-ecc8-3d63-90d2-6740419539c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:72:4d:74:0c:5b:26:70:f6:0b:d5:2a:c8:1d:65:bf:ec:a5: ce:72:96:4f:b3:21:6e:3b:ab:02:d7:3b:b8:e6:99:d5:db:7c: 85:71:8a:49:cf:ff:b6:d8:5d:23:fc:d0:cb:69:82:7a:5e:c8: d1:8b:4d:63:da:07:33:c1:d1:c0:d5:8e:87:16:59:90:0f:9b: 31:cd:7c:e5:10:d2:ef:df:bb:79:15:63:9b:74:1d:40:97:b8: 74:32:b4:bf:fd:1f:51:dd:47:04:fb:da:01:87:aa:f8:92:63: de:7c:36:01:ac:a0:10:04:67:ad:72:0a:45:1c:ed:3d:d8:6e: 67:81:68:13:57:93:15:da:29:8f:d7:cb:9b:8d:c3:43:42:4e: c2:8a:73:89:ca:75:63:e7:73:d9:e8:9d:88:15:71:f0:94:9c: fd:f3:86:ae:5a:64:76:d6:6d:1d:c4:fb:f8:48:8e:f1:dc:0a: 9f:27:e1:14:3d:5a:7c:b3:1f:5d:9e:8d:ce:4d:d0:5d:1b:63: 44:07:6d:26:69:a6:67:47:ba:72:ef:dc:69:12:db:7b:c3:42: ca:81:5b:34:68:14:9f:cc:5c:cf:f7:1c:7e:b1:0c:e6:a0:89: 5d:5e:be:34:01:2c:61:45:72:5f:4c:01:f6:3b:09:a3:47:6d: 09:2e:da:bd -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSjJZzYE3DsaCW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZDlkN2U0ZmEtNTk3Zi00ODM5LWIzYTctM2M3MDFjYThkNWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8unITHalnm6+rUww2sLHtz9wflez72HSC18k 21cJ4A4CnN0T801dC/xeGHnvV6wtVSqFEj5ZEOy4aECshMksTNvaTf/y3F+pZ1GC BJxyxVnQK6y2wShF1dQPp1s7vo+7jAAe35LDl7sMW55+nbiOhW1PmJ317c+xyp1R 1UOk55NzKclQHP/Pk+ew3W0LD4uiNSe+PJv82r0Q51L+LOyLqEKMeqYfWtUjwuYB deFRCp7Rf3A5Pf/1YqnHbc0+XJGsQzS1qvmgPAcjlYgC62DNNC7UvdOoacvPuv1V dSYnelPhG/hK24hJafcFq2gbUjkHdoK7WJnfn9Z7AWB5Z3CGpQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLazDkoKP1Ip1VEWdSIekPu4yg/ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWE2NTFkOGItZWNjOC0z ZDYzLTkwZDItNjc0MDQxOTUzOWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBCck10DFsmcPYL1SrIHWW/7KXOcpZPsyFuO6sC 1zu45pnV23yFcYpJz/+22F0j/NDLaYJ6XsjRi01j2gczwdHA1Y6HFlmQD5sxzXzl ENLv37t5FWObdB1Al7h0MrS//R9R3UcE+9oBh6r4kmPefDYBrKAQBGetcgpFHO09 2G5ngWgTV5MV2imP18ubjcNDQk7CinOJynVj53PZ6J2IFXHwlJz984auWmR21m0d xPv4SI7x3AqfJ+EUPVp8sx9dno3OTdBdG2NEB20maaZnR7py79xpEtt7w0LKgVs0 aBSfzFzP9xx+sQzmoIldXr40ASxhRXJfTAH2OwmjR20JLtq9 -----END CERTIFICATE-----Generated at Sun May 11 08:28:42 2025 by rpki-client