$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8650c507-244c-3974-837f-6866802037e8.roa File: 8650c507-244c-3974-837f-6866802037e8.roa (raw, json) Hash identifier: IHHiBtfCnXKSH8oBgKjfWUQ4g4YPAM6tCnRn4uthttk= Subject key identifier: 55:C7:53:FB:B7:7B:30:18:3B:E4:4D:5F:86:92:D2:58:BC:55:E0:75 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4D93EF8CCA87D38934780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8650c507-244c-3974-837f-6866802037e8.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 36621 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:d9:3e:f8:cc:a8:7d:38:93:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=8cb836b4-afdb-4b07-87c6-d9e6704e44b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e5:9c:02:6a:ba:7f:d4:4d:60:a1:74:5e:c7: 1e:9e:2b:20:0c:c6:30:5a:94:a6:29:76:f6:ae:c0: 9b:89:27:66:71:46:78:8c:80:09:fb:2f:eb:25:e6: 94:20:3a:01:a3:55:96:cf:18:24:e9:0d:2e:45:79: 56:be:d0:2a:d1:f6:71:93:74:4f:73:00:06:70:99: 37:d5:c7:43:6d:4b:67:11:6d:b5:22:81:94:8a:96: 31:50:a9:74:88:08:4b:c2:9a:e5:3c:44:df:b6:08: fb:e5:ca:43:37:a4:96:13:b7:60:97:39:d7:00:2d: 31:c9:15:13:16:ef:86:32:81:12:8f:82:a4:fa:43: 85:1a:4f:4a:ce:fa:b9:9a:ec:cb:b2:98:0b:f9:50: 14:97:75:76:e0:49:5d:b4:b3:51:f3:1a:66:c4:13: 07:ae:b6:01:d9:9e:12:88:ba:c4:7c:8e:23:25:9a: d2:0c:e2:4a:3e:93:42:70:55:8c:b4:e5:72:36:60: 83:60:45:54:23:22:78:ff:6f:bf:2e:ae:d3:ab:fd: 2d:39:63:c8:82:94:3f:b4:fc:0c:3e:27:41:12:ef: 98:6c:7f:d7:e8:55:7e:45:33:e9:17:cd:53:3a:7e: e8:e3:07:f5:c7:40:4c:13:dd:be:d7:53:9a:be:15: 6d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C7:53:FB:B7:7B:30:18:3B:E4:4D:5F:86:92:D2:58:BC:55:E0:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8650c507-244c-3974-837f-6866802037e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:cb:bf:da:b1:f0:fb:2d:7b:de:09:03:c6:76:49:f2:4d:16: 06:55:30:b0:7a:36:c4:71:8c:1a:36:eb:0b:a1:55:cf:d0:00: 64:9a:8c:9b:2d:14:ca:94:d2:3d:08:df:79:2d:8b:df:8d:2c: b0:ed:84:40:ba:d0:c0:56:2a:46:71:78:4d:3d:9c:6a:97:e8: 91:17:15:f6:eb:44:65:38:bb:59:40:09:45:b9:91:54:89:bb: 38:65:ab:d4:11:91:f1:7e:b7:1f:13:df:f9:fa:ab:3e:1f:c7: fe:02:15:92:3f:cb:66:57:d9:c4:3c:a5:33:70:5e:83:d4:85: 43:cf:8b:e8:03:15:f6:63:33:7c:08:ac:82:df:46:b4:84:e1: 21:5d:17:2c:79:22:a7:8b:2a:11:c5:6b:fa:40:3a:bd:fe:c9: 51:6c:88:7e:55:ac:7d:bb:f3:df:a1:b2:27:57:78:09:80:b5: c3:48:51:dd:10:5d:bd:99:e0:1b:7d:fc:54:1c:d9:8c:aa:40: 34:80:70:9e:62:3d:2b:00:4e:f9:90:43:19:b5:4f:f1:a1:85: 57:29:3d:52:e8:0f:69:6e:98:9a:dd:53:26:31:ef:87:f9:05: 52:82:6e:e7:f8:df:82:21:bc:96:97:2d:f8:df:e9:44:3a:c9: 65:03:ac:51 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1Nk++MyofTiTR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk OGNiODM2YjQtYWZkYi00YjA3LTg3YzYtZDllNjcwNGU0NGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+WcAmq6f9RNYKF0XscenisgDMYwWpSmKXb2 rsCbiSdmcUZ4jIAJ+y/rJeaUIDoBo1WWzxgk6Q0uRXlWvtAq0fZxk3RPcwAGcJk3 1cdDbUtnEW21IoGUipYxUKl0iAhLwprlPETftgj75cpDN6SWE7dglznXAC0xyRUT Fu+GMoESj4Kk+kOFGk9Kzvq5muzLspgL+VAUl3V24EldtLNR8xpmxBMHrrYB2Z4S iLrEfI4jJZrSDOJKPpNCcFWMtOVyNmCDYEVUIyJ4/2+/Lq7Tq/0tOWPIgpQ/tPwM PidBEu+YbH/X6FV+RTPpF81TOn7o4wf1x0BME92+11OavhVt8wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFXHU/u3ezAYO+RNX4aS0li8VeB1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODY1MGM1MDctMjQ0Yy0z OTc0LTgzN2YtNjg2NjgwMjAzN2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBJy7/asfD7LXveCQPGdknyTRYGVTCwejbEcYwa NusLoVXP0ABkmoybLRTKlNI9CN95LYvfjSyw7YRAutDAVipGcXhNPZxql+iRFxX2 60RlOLtZQAlFuZFUibs4ZavUEZHxfrcfE9/5+qs+H8f+AhWSP8tmV9nEPKUzcF6D 1IVDz4voAxX2YzN8CKyC30a0hOEhXRcseSKniyoRxWv6QDq9/slRbIh+Vax9u/Pf obInV3gJgLXDSFHdEF29meAbffxUHNmMqkA0gHCeYj0rAE75kEMZtU/xoYVXKT1S 6A9pbpia3VMmMe+H+QVSgm7n+N+CIbyWly343+lEOsllA6xR -----END CERTIFICATE-----Generated at Sun May 11 06:18:25 2025 by rpki-client