$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6f39d40-f2d1-34d7-9ec3-6a057db00813.roa File: a6f39d40-f2d1-34d7-9ec3-6a057db00813.roa (raw, json) Hash identifier: wgb0rpUs+JrmzuiZh9AMxt5tVCqK8+yzIwge+IR3qs4= Subject key identifier: 11:BC:23:20:56:30:0E:A9:B3:2B:22:02:FC:78:67:94:95:C1:68:CC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848F9268B57F761C7EE43445200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6f39d40-f2d1-34d7-9ec3-6a057db00813.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 396587 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:8b:57:f7:61:c7:ee:43:44:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=d2e910da-be3b-459c-8383-d2fa4b3b3802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:14:02:3b:3d:b8:9a:f6:c6:c6:5d:c5:94:a9: 7c:0c:3f:c4:48:50:f7:c9:0a:9b:72:10:fc:db:94: 9f:91:3f:94:db:9e:d4:20:69:c4:7b:0e:71:25:b4: ec:81:ba:6f:11:f8:e8:e0:6f:cf:ee:36:80:1c:c4: 8f:af:54:9a:3e:46:1d:3d:29:46:16:ae:38:df:ba: f5:f4:91:79:24:59:e4:f7:d3:07:a7:90:a8:d5:ba: 45:5d:d4:fd:4e:25:bb:41:9c:58:b7:1f:f0:1c:04: eb:e9:81:84:6c:7c:18:49:a7:4f:97:c1:99:03:cb: b3:6e:02:de:f6:37:3a:71:a6:74:4a:5f:e6:d1:a4: 31:b0:25:d1:4e:85:4e:31:45:37:1d:91:e6:f5:f8: 34:3a:09:ee:e2:f0:8e:6a:38:bc:d3:72:c4:72:41: a0:31:4e:f8:aa:db:ba:79:af:34:65:3c:40:1d:a3: 81:81:75:38:46:17:bb:a4:9a:cd:44:0a:20:be:37: a9:13:d4:ab:7d:e9:e1:3f:9d:b8:16:4e:d0:df:b6: d4:b9:1a:36:cc:fe:db:69:3e:b6:2f:f1:c6:bc:ad: 7f:8f:28:de:82:43:1f:bf:7d:d2:a7:fc:a8:78:70: 66:62:e9:f6:3b:a0:48:77:99:68:3f:a3:a1:88:f0: bc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BC:23:20:56:30:0E:A9:B3:2B:22:02:FC:78:67:94:95:C1:68:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6f39d40-f2d1-34d7-9ec3-6a057db00813.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e2:ad:0f:47:14:75:3a:de:26:7a:5f:af:45:fa:b5:a4:56: f7:8a:d3:89:15:1d:01:93:7b:c5:9f:a6:00:d1:84:15:26:07: 1e:03:39:1d:40:cc:80:07:e0:a0:c5:3d:8e:73:6c:56:3e:34: e3:ec:73:ca:a5:8f:10:1d:f0:34:f7:b4:2a:27:d1:a0:ff:2b: 8b:5e:5e:73:68:d1:c8:4f:e9:f2:64:3f:ab:65:e1:5f:b1:35: 43:f9:ff:bf:e2:9c:85:b0:97:02:36:70:22:f9:d2:23:1f:22: 68:01:5a:17:45:ea:f0:cd:24:5e:58:ab:b2:13:0c:08:4b:1d: 6d:2a:9d:3b:8b:7b:a9:d2:7a:80:a3:d5:d8:15:6e:dd:e3:3e: 2d:c2:16:3b:e4:aa:0e:0e:35:5d:23:f2:ec:2d:07:7b:26:fa: 28:dc:8e:34:d9:b2:1c:67:10:02:5a:49:40:a6:88:a5:a6:2a: a1:d8:cb:fb:14:95:75:fb:48:c5:af:8c:2c:fd:5b:7c:3d:70: b2:95:44:8c:34:7e:cb:07:85:46:95:0e:8d:94:c7:8b:4d:0e: 3b:52:e8:1d:d3:1e:14:11:17:1f:e0:c1:10:01:54:45:2a:b7: 60:3d:6d:95:28:f3:47:09:bd:3d:b4:58:f5:e4:53:6a:6a:d5: 4c:bb:52:c4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEj5JotX92HH7kNEUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ZDJlOTEwZGEtYmUzYi00NTljLTgzODMtZDJmYTRiM2IzODAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRQCOz24mvbGxl3FlKl8DD/ESFD3yQqbchD8 25SfkT+U257UIGnEew5xJbTsgbpvEfjo4G/P7jaAHMSPr1SaPkYdPSlGFq4437r1 9JF5JFnk99MHp5Co1bpFXdT9TiW7QZxYtx/wHATr6YGEbHwYSadPl8GZA8uzbgLe 9jc6caZ0Sl/m0aQxsCXRToVOMUU3HZHm9fg0Ognu4vCOaji803LEckGgMU74qtu6 ea80ZTxAHaOBgXU4Rhe7pJrNRAogvjepE9SrfenhP524Fk7Q37bUuRo2zP7baT62 L/HGvK1/jyjegkMfv33Sp/yoeHBmYun2O6BId5loP6OhiPC8sQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBG8IyBWMA6psysiAvx4Z5SVwWjMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTZmMzlkNDAtZjJkMS0z NGQ3LTllYzMtNmEwNTdkYjAwODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA24q0PRxR1Ot4mel+vRfq1pFb3itOJFR0Bk3vF n6YA0YQVJgceAzkdQMyAB+CgxT2Oc2xWPjTj7HPKpY8QHfA097QqJ9Gg/yuLXl5z aNHIT+nyZD+rZeFfsTVD+f+/4pyFsJcCNnAi+dIjHyJoAVoXRerwzSReWKuyEwwI Sx1tKp07i3up0nqAo9XYFW7d4z4twhY75KoODjVdI/LsLQd7Jvoo3I402bIcZxAC WklApoilpiqh2Mv7FJV1+0jFr4ws/Vt8PXCylUSMNH7LB4VGlQ6NlMeLTQ47Uugd 0x4UERcf4MEQAVRFKrdgPW2VKPNHCb09tFj15FNqatVMu1LE -----END CERTIFICATE-----Generated at Sun May 11 05:36:35 2025 by rpki-client