$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87f82de6-75c2-3d91-8c25-46d46339f6f4.roa File: 87f82de6-75c2-3d91-8c25-46d46339f6f4.roa (raw, json) Hash identifier: 5f6NkQsgPmao8bi0svgVKQCB2YbVnO8cMhoRjmGAsK0= Subject key identifier: 14:92:1B:66:56:05:DA:06:CF:62:71:11:AD:69:A8:BE:2A:A3:77:C3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4DDCEA7671732C5B8DE00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87f82de6-75c2-3d91-8c25-46d46339f6f4.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 396579 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:dd:ce:a7:67:17:32:c5:b8:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=4d240c33-909b-4121-a127-75d9af5eb4d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:34:f9:99:83:f8:4d:ce:2d:3e:d9:0e:1a:a8: 65:65:44:60:d7:3b:0f:cb:22:5c:5f:14:b6:04:1b: 83:96:6b:47:ce:7e:79:85:e1:8a:d9:fd:68:1d:20: 3e:50:81:8a:36:24:6e:14:11:bd:27:82:d8:27:55: bf:0e:e1:31:49:f8:07:c0:ac:d4:ce:c9:59:d5:49: c8:23:57:a3:57:ec:e7:b7:ef:c7:c8:14:ef:08:bc: 5a:00:54:14:e5:73:97:be:4e:34:96:d2:88:af:cc: 7a:15:e5:4f:94:91:8d:94:2f:d9:d9:70:34:af:53: 24:e4:79:15:59:8a:87:59:0d:06:58:a1:c1:6d:26: 56:90:c5:b1:7d:17:75:ee:5a:a5:e6:c3:67:62:ab: be:36:4d:db:0b:2d:92:af:a7:88:3b:2d:ef:65:fa: 0d:e2:47:b0:cd:da:f3:1b:3c:6e:fb:88:3b:09:98: 97:13:26:bf:6c:a7:91:56:9d:ff:36:9f:1d:20:19: 2b:9c:15:81:2b:ca:53:9a:dd:4a:ae:56:f1:0a:55: 79:cc:8f:5d:85:cb:76:c7:5f:a1:d2:d5:c2:36:94: d1:11:d8:1d:6b:96:67:c4:42:a6:d3:2c:d3:59:e8: 66:cc:04:50:31:ee:b6:54:56:7f:ae:17:c6:62:8c: 15:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:92:1B:66:56:05:DA:06:CF:62:71:11:AD:69:A8:BE:2A:A3:77:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87f82de6-75c2-3d91-8c25-46d46339f6f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:61:4c:bf:11:05:c9:e8:6c:85:8b:b9:91:1b:81:a1:64:48: 8c:68:2c:9a:21:e7:a7:a9:2f:8c:12:d6:fe:19:98:43:3d:0e: 63:d1:95:0b:05:34:91:ee:7e:b2:2e:4f:7d:06:b5:46:ae:db: d0:9f:2e:7b:d3:a4:94:fd:68:0e:82:77:b8:41:0f:86:8c:74: dd:8a:49:00:52:c1:82:94:c5:6a:6e:88:b8:e7:1f:ef:fc:ed: 6b:21:4c:8a:63:87:ac:78:21:89:e8:0c:fc:82:da:15:1a:f1: ef:d0:b1:cc:2a:28:a0:57:53:8e:f9:06:be:e0:80:d5:71:eb: a6:fb:ff:ef:57:e3:96:45:e5:96:1a:5d:c8:48:a5:dc:db:e7: 5d:b4:52:b1:de:83:f0:c6:3e:a8:18:de:88:bb:61:5c:5f:be: 77:d5:ea:74:a8:9e:68:11:a8:99:21:98:d2:6e:9f:3e:5a:66: bf:12:ce:7a:b8:b7:df:98:ed:cd:75:a3:1c:8b:b6:70:72:51: 91:69:19:65:a6:5d:82:a1:d4:5f:f4:b9:11:24:43:0a:02:96: e2:49:cf:ab:74:30:c9:81:e5:4f:bd:f3:b1:bc:23:a8:54:aa: f8:e7:64:5a:6e:e1:bf:e6:7c:7c:9d:84:49:97:ac:c6:ef:35: 9d:e2:88:d1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1N3Op2cXMsW43gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk NGQyNDBjMzMtOTA5Yi00MTIxLWExMjctNzVkOWFmNWViNGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDT5mYP4Tc4tPtkOGqhlZURg1zsPyyJcXxS2 BBuDlmtHzn55heGK2f1oHSA+UIGKNiRuFBG9J4LYJ1W/DuExSfgHwKzUzslZ1UnI I1ejV+znt+/HyBTvCLxaAFQU5XOXvk40ltKIr8x6FeVPlJGNlC/Z2XA0r1Mk5HkV WYqHWQ0GWKHBbSZWkMWxfRd17lql5sNnYqu+Nk3bCy2Sr6eIOy3vZfoN4kewzdrz Gzxu+4g7CZiXEya/bKeRVp3/Np8dIBkrnBWBK8pTmt1KrlbxClV5zI9dhct2x1+h 0tXCNpTREdgda5ZnxEKm0yzTWehmzARQMe62VFZ/rhfGYowVGQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBSSG2ZWBdoGz2JxEa1pqL4qo3fDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODdmODJkZTYtNzVjMi0z ZDkxLThjMjUtNDZkNDYzMzlmNmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBjYUy/EQXJ6GyFi7mRG4GhZEiMaCyaIeenqS+M Etb+GZhDPQ5j0ZULBTSR7n6yLk99BrVGrtvQny5706SU/WgOgne4QQ+GjHTdikkA UsGClMVqboi45x/v/O1rIUyKY4eseCGJ6Az8gtoVGvHv0LHMKiigV1OO+Qa+4IDV ceum+//vV+OWReWWGl3ISKXc2+ddtFKx3oPwxj6oGN6Iu2FcX7531ep0qJ5oEaiZ IZjSbp8+Wma/Es56uLffmO3NdaMci7ZwclGRaRllpl2CodRf9LkRJEMKApbiSc+r dDDJgeVPvfOxvCOoVKr452RabuG/5nx8nYRJl6zG7zWd4ojR -----END CERTIFICATE-----Generated at Sun May 11 06:53:17 2025 by rpki-client