$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaa623aa-85d2-3ac3-a2b7-d15bddf9e8ea.roa File: aaa623aa-85d2-3ac3-a2b7-d15bddf9e8ea.roa (raw, json) Hash identifier: hY00M0licFqeFE8C/RebzS80VUM/dQ/NK4Guin3/NtE= Subject key identifier: 34:14:7E:77:BA:E3:B4:8D:21:96:24:7E:58:EF:1B:EA:C1:A4:0D:64 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A344EAE2E2C581988EB00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaa623aa-85d2-3ac3-a2b7-d15bddf9e8ea.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396572 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:34:4e:ae:2e:2c:58:19:88:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=10f925b4-c6c7-4c1d-8645-e543774b09d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d9:cb:cc:1e:19:07:39:ab:fe:b9:b6:ef:d4: dc:27:0f:8b:8c:f7:02:ef:c2:66:35:75:12:3b:30: b7:b5:e3:f9:e3:95:30:c4:46:cf:35:26:a1:32:b2: ca:a2:35:43:73:c2:9b:02:e4:85:d5:3d:e5:97:41: a8:68:d5:b2:8d:77:97:86:85:97:7e:3d:ac:5e:50: c7:a9:93:ac:8c:86:30:39:06:cc:02:2b:a3:e2:a7: 75:ec:db:fa:a7:a8:06:ca:a2:72:2f:42:33:03:f7: 42:b4:e1:a9:c7:57:a9:b4:fc:75:a1:1f:4b:74:0a: ee:e2:9f:43:d3:1f:3a:f5:d6:b5:e5:c7:27:28:e2: a0:8d:64:d1:4b:95:bb:cc:6d:c6:f4:cd:84:26:36: 7a:14:03:b6:6f:02:3b:d8:c2:2b:66:53:b9:f2:c0: 0c:2d:93:0a:8a:27:de:0c:d6:18:21:ff:1c:c2:6d: 73:f8:88:19:0e:1c:40:37:ba:67:ab:51:47:52:bf: 12:e4:32:c7:28:37:cf:3c:4f:46:b4:7a:20:7f:a3: 48:ce:95:01:2e:a4:58:d7:f4:13:95:83:ec:fb:e8: 6c:4d:69:0a:6e:9f:46:ac:e9:96:fb:9a:36:45:be: bc:be:f6:4f:3a:51:4a:77:65:8d:af:2c:fc:13:15: cc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:14:7E:77:BA:E3:B4:8D:21:96:24:7E:58:EF:1B:EA:C1:A4:0D:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaa623aa-85d2-3ac3-a2b7-d15bddf9e8ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:74:ea:86:a9:07:df:2e:27:d3:61:50:d6:9d:50:b7:1a:dc: 6c:30:23:0e:48:85:d9:4b:bd:f4:ba:4c:44:bd:d2:8e:87:80: 7e:f7:75:cc:e2:6a:93:19:f0:94:6d:96:1c:c2:2a:e5:1b:a9: 19:89:59:b0:e9:91:49:ff:09:9b:17:e7:68:1d:6e:ab:1a:c7: 4b:ea:ee:55:c2:11:8b:ee:5b:43:e1:4e:7d:ff:01:90:ee:85: 4b:5d:87:5c:c5:25:fa:87:20:a1:4c:1a:c1:18:ad:24:c7:5b: 92:7c:16:30:6a:57:57:42:43:65:0c:d7:3e:5e:83:57:09:c6: af:4a:cc:32:96:ae:71:bb:d2:ff:f7:0f:07:92:6c:8b:8c:2d: 14:0a:36:1b:d4:bd:af:35:71:ce:1d:2c:ab:8b:4a:a8:16:28: a5:c2:6c:cb:dd:a3:cc:8d:10:27:57:4a:06:34:54:18:4b:f3: 78:e8:77:14:2a:59:59:71:a6:1a:90:fb:1e:46:29:7f:38:c8: 06:21:33:52:98:3c:55:f5:15:ab:8e:36:c7:72:8f:ef:9b:76: 78:ee:a8:43:ee:20:3f:da:fc:5d:71:4c:de:1c:86:31:74:45: 01:1e:96:47:f2:24:db:1b:58:42:47:35:52:e5:08:13:f3:86: 30:1b:82:13 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSjROri4sWBmI6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MTBmOTI1YjQtYzZjNy00YzFkLTg2NDUtZTU0Mzc3NGIwOWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9nLzB4ZBzmr/rm279TcJw+LjPcC78JmNXUS OzC3teP545UwxEbPNSahMrLKojVDc8KbAuSF1T3ll0GoaNWyjXeXhoWXfj2sXlDH qZOsjIYwOQbMAiuj4qd17Nv6p6gGyqJyL0IzA/dCtOGpx1eptPx1oR9LdAru4p9D 0x869da15ccnKOKgjWTRS5W7zG3G9M2EJjZ6FAO2bwI72MIrZlO58sAMLZMKiife DNYYIf8cwm1z+IgZDhxAN7pnq1FHUr8S5DLHKDfPPE9GtHogf6NIzpUBLqRY1/QT lYPs++hsTWkKbp9GrOmW+5o2Rb68vvZPOlFKd2WNryz8ExXM0QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDQUfne647SNIZYkfljvG+rBpA1kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWFhNjIzYWEtODVkMi0z YWMzLWEyYjctZDE1YmRkZjllOGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAJdOqGqQffLifTYVDWnVC3GtxsMCMOSIXZS730 ukxEvdKOh4B+93XM4mqTGfCUbZYcwirlG6kZiVmw6ZFJ/wmbF+doHW6rGsdL6u5V whGL7ltD4U59/wGQ7oVLXYdcxSX6hyChTBrBGK0kx1uSfBYwaldXQkNlDNc+XoNX CcavSswylq5xu9L/9w8HkmyLjC0UCjYb1L2vNXHOHSyri0qoFiilwmzL3aPMjRAn V0oGNFQYS/N46HcUKllZcaYakPseRil/OMgGITNSmDxV9RWrjjbHco/vm3Z47qhD 7iA/2vxdcUzeHIYxdEUBHpZH8iTbG1hCRzVS5QgT84YwG4IT -----END CERTIFICATE-----Generated at Sun May 11 05:25:56 2025 by rpki-client