$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8b33777f-7214-304c-bfa7-6094a66eb134.roa File: 8b33777f-7214-304c-bfa7-6094a66eb134.roa (raw, json) Hash identifier: b++a99/2OQzFw8M61vU+czcgQ2zYRIXt5TcSdOpRi4A= Subject key identifier: 29:AD:4A:24:D3:67:BA:2F:F1:EB:99:05:4E:47:F4:38:E7:A7:DA:E2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C21E0F9A1BA7C9F8252960 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8b33777f-7214-304c-bfa7-6094a66eb134.roa Signing time: Tue 15 Apr 2025 12:34:53 +0000 ROA not before: Tue 15 Apr 2025 12:34:53 +0000 ROA not after: Mon 14 Jul 2025 12:34:53 +0000 asID: 397195 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:1e:0f:9a:1b:a7:c9:f8:25:29:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:53 2025 GMT Not After : Jul 14 12:34:53 2025 GMT Subject: CN=82701053-401a-47e5-a6d2-ba57226a2263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f8:5e:d8:de:95:ec:c9:0e:fd:79:ec:0a:bb: d8:3e:d5:c8:88:cf:85:7a:21:4a:6a:54:ff:23:8d: ae:08:d4:18:d7:ea:e0:1f:fd:f9:ad:08:53:14:70: 80:3f:b9:67:9d:50:f8:5b:85:a2:3c:74:8e:e9:ab: 53:ba:88:01:4a:7f:60:6f:0b:58:26:6c:bd:0d:59: 31:70:21:ab:fa:3b:18:3d:bd:4c:77:1c:78:b8:bf: f2:3f:10:9b:37:ed:bd:4c:3c:e1:f1:9a:24:07:b9: 32:4f:73:b7:ce:9c:09:ce:97:e8:52:dd:e4:cd:46: 7d:42:65:a8:20:d2:3c:94:ac:1b:04:83:e1:c8:84: c8:fc:4b:10:0f:07:55:06:24:2e:5f:ff:5e:e3:96: 80:2f:28:b6:e4:9f:8f:53:c2:04:d2:69:2c:a0:c7: 5d:5d:35:77:56:ab:fd:2d:44:58:13:15:ab:f2:b6: b5:db:b8:3f:c2:39:92:32:ed:86:4e:f4:9d:90:f9: 44:16:45:1f:2a:8a:0c:f1:ab:ae:80:1c:b1:e4:1b: d7:f9:a2:86:8c:55:5c:6e:3c:89:4f:17:8b:dd:39: b7:4e:8c:2a:30:58:71:cf:0d:b1:be:4d:5b:ec:ca: 53:5a:c9:00:59:23:2b:c6:6b:cc:c1:e8:03:de:8c: 4e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AD:4A:24:D3:67:BA:2F:F1:EB:99:05:4E:47:F4:38:E7:A7:DA:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8b33777f-7214-304c-bfa7-6094a66eb134.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:82:fd:1b:e7:d4:82:b5:21:75:6e:32:6d:97:5d:aa:6a:f3: de:07:d8:06:fe:a4:7b:37:27:20:b4:71:7a:68:f1:97:4c:c8: 24:13:0d:4f:d9:db:44:c2:d4:35:a5:43:84:48:9f:86:79:59: 55:c6:f6:a0:e8:10:a3:03:fb:36:a1:26:b0:1f:4d:01:6d:2a: 1b:9e:60:b4:60:3c:65:47:1b:ed:a4:c2:65:15:fb:ad:68:75: e1:72:95:af:07:37:ad:62:4d:4b:37:c0:8e:d3:cf:38:6c:9a: 5e:a1:95:73:ae:fb:6b:26:dc:2b:9a:ce:b4:fc:3e:66:ff:63: c4:2b:49:2d:25:bf:7e:18:e0:ab:ac:3a:76:0e:d1:85:72:41: 8d:27:41:8b:39:13:15:b6:15:0e:3e:d2:9a:ca:08:58:c5:43: e2:2e:d9:11:9a:58:ee:78:ca:15:57:01:c7:a2:91:c9:30:47: 4d:d3:2f:21:f3:18:48:fe:42:df:bf:2e:6f:fc:3b:7a:d6:2a: 45:98:a4:43:e1:6b:3e:a5:7f:d1:03:49:1e:cf:48:d7:f7:06: 65:6e:0c:a7:89:41:21:e1:a4:39:d3:70:6c:19:67:33:26:e5: 3e:7a:1b:7f:d1:f4:8d:50:66:9d:43:df:ca:38:b1:67:f1:4b: b2:0a:0b:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwh4PmhunyfglKWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1M1oXDTI1MDcxNDEyMzQ1M1owLzEtMCsGA1UEAxMk ODI3MDEwNTMtNDAxYS00N2U1LWE2ZDItYmE1NzIyNmEyMjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfhe2N6V7MkO/XnsCrvYPtXIiM+FeiFKalT/ I42uCNQY1+rgH/35rQhTFHCAP7lnnVD4W4WiPHSO6atTuogBSn9gbwtYJmy9DVkx cCGr+jsYPb1Mdxx4uL/yPxCbN+29TDzh8ZokB7kyT3O3zpwJzpfoUt3kzUZ9QmWo INI8lKwbBIPhyITI/EsQDwdVBiQuX/9e45aALyi25J+PU8IE0mksoMddXTV3Vqv9 LURYExWr8ra127g/wjmSMu2GTvSdkPlEFkUfKooM8auugByx5BvX+aKGjFVcbjyJ TxeL3Tm3TowqMFhxzw2xvk1b7MpTWskAWSMrxmvMwegD3oxOxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCmtSiTTZ7ov8euZBU5H9Djnp9riMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGIzMzc3N2YtNzIxNC0z MDRjLWJmYTctNjA5NGE2NmViMTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHGC/Rvn1IK1IXVuMm2XXapq894H2Ab+pHs3JyC0cXpo8ZdMyCQT DU/Z20TC1DWlQ4RIn4Z5WVXG9qDoEKMD+zahJrAfTQFtKhueYLRgPGVHG+2kwmUV +61odeFyla8HN61iTUs3wI7Tzzhsml6hlXOu+2sm3CuazrT8Pmb/Y8QrSS0lv34Y 4KusOnYO0YVyQY0nQYs5ExW2FQ4+0prKCFjFQ+Iu2RGaWO54yhVXAceikckwR03T LyHzGEj+Qt+/Lm/8O3rWKkWYpEPhaz6lf9EDSR7PSNf3BmVuDKeJQSHhpDnTcGwZ ZzMm5T56G3/R9I1QZp1D38o4sWfxS7IKC5c= -----END CERTIFICATE-----Generated at Sun May 11 06:24:39 2025 by rpki-client