$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d04f2a7-8e66-368d-afce-163da4eb9ae4.roa File: 5d04f2a7-8e66-368d-afce-163da4eb9ae4.roa (raw, json) Hash identifier: VBefpmrgSyP2H+7qokYdH4DW04yNsOLbMXpvctZAWzc= Subject key identifier: 82:6F:65:59:13:5A:16:5A:C3:4B:A7:8E:6F:68:5E:75:13:94:82:97 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A28EABA7E51EAC40DBCC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d04f2a7-8e66-368d-afce-163da4eb9ae4.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396608 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:28:ea:ba:7e:51:ea:c4:0d:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=b876843b-05a6-4109-9e99-a996eaf867e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:13:c5:55:49:a3:93:9d:73:43:9e:14:46:fc: 17:d3:aa:98:8b:ad:d0:3e:66:de:2b:b1:6a:f9:06: 69:af:ab:6b:0e:11:38:99:77:a8:59:c2:4a:f4:53: bd:85:6e:a7:37:b8:2e:e4:51:32:0b:f0:d0:88:b8: 9e:92:72:b8:bd:fe:76:2b:7e:a3:d1:e6:d1:f8:f9: d9:58:80:67:d4:9f:f6:c8:bf:87:7c:a5:25:54:82: 97:7a:18:65:27:53:47:cd:69:15:1e:71:c7:d1:44: d5:49:f1:db:58:27:ef:e1:35:0c:ef:20:ec:f8:2a: 17:e8:68:ab:0e:93:7e:c7:a5:7b:9f:02:9a:6a:23: bc:4a:43:4c:31:a2:3d:8a:66:9a:92:12:f0:3a:b6: eb:7c:6e:0c:78:27:6d:19:e7:52:0b:72:eb:44:7a: 86:13:cb:cd:55:a3:f4:e8:5a:97:4c:32:ec:8f:b8: cc:55:6e:68:6d:44:f8:a7:15:90:82:64:28:ae:27: 3d:f0:d3:30:79:a8:67:17:f8:bf:f1:79:e8:fd:7b: 70:fc:57:73:e3:42:11:8a:d4:79:2e:22:ef:65:c1: 95:48:47:0d:f5:d3:79:02:7a:fc:9d:5f:8b:2e:49: 00:a0:6e:23:ce:f2:95:05:2f:fe:bf:f3:50:c9:7e: 94:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:6F:65:59:13:5A:16:5A:C3:4B:A7:8E:6F:68:5E:75:13:94:82:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d04f2a7-8e66-368d-afce-163da4eb9ae4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:bf:44:eb:84:50:d3:82:07:df:3c:80:80:79:80:8a:9b:c2: ab:7b:ae:4f:76:f7:6a:25:be:49:8c:10:ed:80:1f:f8:3d:21: 62:fb:3f:08:e1:c1:0b:e4:71:16:b7:13:2f:9a:9a:dd:99:92: 32:0b:65:64:be:45:e3:18:e1:55:5a:d1:3f:6d:35:ed:0b:f6: 4b:21:2f:ca:06:f5:db:6b:83:35:10:8b:45:fa:f6:7f:01:19: 2a:b6:db:a9:18:fa:9b:0c:e3:37:a6:d2:a2:ca:a6:a3:f1:e3: 36:71:7c:13:e1:52:bc:36:63:cd:cf:75:d9:22:f9:bb:cc:8d: e1:24:0b:fe:d0:77:ed:c0:4f:72:b0:2e:c1:a5:0c:b4:4f:cb: 11:01:fa:7f:82:01:79:df:e3:c1:cb:ff:ec:d9:50:19:e5:08: 8a:5e:03:83:86:73:01:d6:05:32:99:be:86:ec:23:92:b1:d1: 29:8a:cc:66:91:d5:20:b1:69:f0:2e:f4:2d:91:f6:c7:2a:94: 58:fc:96:7c:ee:99:20:95:0f:b6:3c:34:61:38:01:3a:2b:e1: 71:ac:4a:0c:64:0b:41:2a:6d:f9:72:04:16:78:fc:56:dd:4e: 9d:76:9c:27:1a:b5:63:2e:7e:58:14:62:29:f9:6c:76:4b:6b: aa:d6:ec:e0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSijqun5R6sQNvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk Yjg3Njg0M2ItMDVhNi00MTA5LTllOTktYTk5NmVhZjg2N2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRPFVUmjk51zQ54URvwX06qYi63QPmbeK7Fq +QZpr6trDhE4mXeoWcJK9FO9hW6nN7gu5FEyC/DQiLieknK4vf52K36j0ebR+PnZ WIBn1J/2yL+HfKUlVIKXehhlJ1NHzWkVHnHH0UTVSfHbWCfv4TUM7yDs+CoX6Gir DpN+x6V7nwKaaiO8SkNMMaI9imaakhLwOrbrfG4MeCdtGedSC3LrRHqGE8vNVaP0 6FqXTDLsj7jMVW5obUT4pxWQgmQoric98NMweahnF/i/8Xno/Xtw/Fdz40IRitR5 LiLvZcGVSEcN9dN5Anr8nV+LLkkAoG4jzvKVBS/+v/NQyX6UhwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIJvZVkTWhZaw0unjm9oXnUTlIKXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWQwNGYyYTctOGU2Ni0z NjhkLWFmY2UtMTYzZGE0ZWI5YWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCLv0TrhFDTggffPICAeYCKm8Kre65PdvdqJb5J jBDtgB/4PSFi+z8I4cEL5HEWtxMvmprdmZIyC2VkvkXjGOFVWtE/bTXtC/ZLIS/K BvXba4M1EItF+vZ/ARkqttupGPqbDOM3ptKiyqaj8eM2cXwT4VK8NmPNz3XZIvm7 zI3hJAv+0HftwE9ysC7BpQy0T8sRAfp/ggF53+PBy//s2VAZ5QiKXgODhnMB1gUy mb6G7COSsdEpisxmkdUgsWnwLvQtkfbHKpRY/JZ87pkglQ+2PDRhOAE6K+FxrEoM ZAtBKm35cgQWePxW3U6ddpwnGrVjLn5YFGIp+Wx2S2uq1uzg -----END CERTIFICATE-----Generated at Sun May 11 05:32:15 2025 by rpki-client