$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/81de3853-d3ac-3ad4-a376-ac18677d11aa.roa File: 81de3853-d3ac-3ad4-a376-ac18677d11aa.roa (raw, json) Hash identifier: UZiZ34SXOBlL5zv79f1he8hRpEdVDMPe3MWXgFmpLrI= Subject key identifier: C2:41:53:D8:66:A4:81:46:90:2E:41:73:C1:AA:25:91:33:F6:37:46 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B6DF5E4A9263FB0F2CB33828 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/81de3853-d3ac-3ad4-a376-ac18677d11aa.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 7342 IP address blocks: 2620:74:71::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:5e:4a:92:63:fb:0f:2c:b3:38:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=d86c258d-ec34-453c-9f0c-5006d7da9b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:cb:d0:f1:2c:84:97:3e:3f:27:1e:e9:8e:73: 60:78:a3:ee:37:e2:04:8a:7c:1a:6a:07:73:d3:54: 1b:5d:59:c7:49:5d:e3:26:41:ab:eb:59:92:fa:5c: 9c:06:3d:b6:5d:cd:35:e9:d2:2f:f6:f4:dc:88:ae: ae:96:13:14:ff:39:d2:8b:c4:c9:42:e8:75:84:be: 9f:ff:a3:75:34:21:f8:11:51:70:a9:38:54:8c:a0: 8a:09:fb:fd:dd:51:c2:ed:bd:2a:30:58:49:7c:53: d1:da:a7:b3:45:4d:ce:7a:3b:a6:76:8d:ad:57:a8: 89:2c:27:b4:ae:7e:e4:c6:81:71:4d:7f:ef:63:34: b3:81:d8:d1:53:db:8c:ec:d4:e5:ec:ae:99:01:53: 1d:88:d9:58:17:14:e1:ae:dd:00:29:16:1e:74:d3: 48:e2:cd:fc:ba:b7:e1:f1:f6:1a:06:89:45:6e:4f: 43:94:87:76:24:3e:f8:8a:ef:d0:42:42:58:28:61: 23:b6:19:36:38:65:31:54:c5:d9:36:1b:04:c8:f5: 7f:59:77:d3:ae:99:5a:b1:73:58:8f:48:df:d2:05: 0c:0c:6b:30:81:84:17:3e:d5:f6:eb:f2:d8:6b:50: bd:97:f5:61:d3:c9:f0:2d:fa:18:03:48:73:96:23: d6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:41:53:D8:66:A4:81:46:90:2E:41:73:C1:AA:25:91:33:F6:37:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/81de3853-d3ac-3ad4-a376-ac18677d11aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:71::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:45:19:ce:99:b5:4f:0d:35:35:b2:7e:5c:31:3d:cf:55:9c: 2b:df:55:a7:0c:00:6b:0c:1c:c5:00:53:c7:11:42:48:34:9d: f9:53:d8:d1:a6:02:85:d1:ee:71:45:b5:80:d2:49:4a:ad:bf: f3:51:65:a8:c8:8b:0e:ed:0a:9d:d5:16:5b:69:a7:c9:09:18: 29:0c:2f:6c:bc:07:db:91:4e:3b:a9:40:04:ea:91:21:af:16: 95:93:28:9f:1e:84:4e:98:1b:49:fd:d8:c6:ee:5f:12:3b:d8: df:ba:55:62:e2:26:36:2c:4f:97:bd:26:30:7e:f2:17:b8:22: 00:50:34:ab:b3:b5:ab:3d:07:2f:e4:04:d4:19:83:e8:95:da: ac:12:b4:4e:3e:07:0e:df:03:48:b6:a7:7b:05:e6:8c:91:fd: 90:88:52:0f:51:14:f9:83:31:15:f3:30:ed:97:fb:3a:28:61: e8:c4:20:c4:8b:d5:8d:2f:9e:3c:68:67:e9:c8:7c:f8:e5:31: 49:b5:2f:09:7e:63:73:da:f4:b3:ff:83:a8:02:6d:c8:bf:6a: d5:02:87:f3:fc:81:ff:d5:42:ce:7b:ce:aa:f3:99:6a:2c:99: 02:ff:83:da:58:c9:0f:45:ea:26:91:f5:77:9b:42:f4:e1:88: 8b:17:af:bc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm2315KkmP7DyyzOCgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk ZDg2YzI1OGQtZWMzNC00NTNjLTlmMGMtNTAwNmQ3ZGE5YjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMvQ8SyElz4/Jx7pjnNgeKPuN+IEinwaagdz 01QbXVnHSV3jJkGr61mS+lycBj22Xc016dIv9vTciK6ulhMU/znSi8TJQuh1hL6f /6N1NCH4EVFwqThUjKCKCfv93VHC7b0qMFhJfFPR2qezRU3Oejumdo2tV6iJLCe0 rn7kxoFxTX/vYzSzgdjRU9uM7NTl7K6ZAVMdiNlYFxThrt0AKRYedNNI4s38urfh 8fYaBolFbk9DlId2JD74iu/QQkJYKGEjthk2OGUxVMXZNhsEyPV/WXfTrplasXNY j0jf0gUMDGswgYQXPtX26/LYa1C9l/Vh08nwLfoYA0hzliPWCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMJBU9hmpIFGkC5Bc8GqJZEz9jdGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODFkZTM4NTMtZDNhYy0z YWQ0LWEzNzYtYWMxODY3N2QxMWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAENFGc6ZtU8NNTWyflwxPc9VnCvfVacMAGsMHMUAU8cRQkg0nflT 2NGmAoXR7nFFtYDSSUqtv/NRZajIiw7tCp3VFltpp8kJGCkML2y8B9uRTjupQATq kSGvFpWTKJ8ehE6YG0n92MbuXxI72N+6VWLiJjYsT5e9JjB+8he4IgBQNKuztas9 By/kBNQZg+iV2qwStE4+Bw7fA0i2p3sF5oyR/ZCIUg9RFPmDMRXzMO2X+zooYejE IMSL1Y0vnjxoZ+nIfPjlMUm1Lwl+Y3Pa9LP/g6gCbci/atUCh/P8gf/VQs57zqrz mWosmQL/g9pYyQ9F6iaR9XebQvThiIsXr7w= -----END CERTIFICATE-----Generated at Sun May 11 06:08:32 2025 by rpki-client