$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae008a3d-846f-39b8-b8eb-0e1b5cd569a3.roa File: ae008a3d-846f-39b8-b8eb-0e1b5cd569a3.roa (raw, json) Hash identifier: 7FN2JAEddNHL8FGhzo1Lbrj1mFOpDqXjEjUuaUsORY8= Subject key identifier: 7A:EC:32:84:E9:2F:9F:36:BD:1E:53:3F:A5:FF:8E:38:8A:AE:D0:3D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A2ED18F9F7BF22EACF4C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae008a3d-846f-39b8-b8eb-0e1b5cd569a3.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396554 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:2e:d1:8f:9f:7b:f2:2e:ac:f4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=f2bff8a5-26f8-429f-8339-ef85efdbcd50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f5:79:b7:22:fd:54:44:c0:aa:8a:89:74:fd: 0a:5f:a1:7d:ff:f5:7e:57:cc:8b:c7:72:a2:50:95: a1:6e:83:ce:90:0c:1e:20:ef:74:27:72:66:d6:1f: 8b:85:a9:0e:bb:4b:85:1f:10:88:88:48:db:34:ae: 91:08:3e:05:38:69:ce:10:75:99:d0:8e:66:ee:9c: 73:6f:b0:dd:fd:16:cd:17:ea:4f:bb:bd:47:2a:86: 53:76:06:69:5a:fd:45:a2:0e:59:75:91:95:0e:0d: 08:02:b3:9f:f9:2c:1a:21:05:c0:8c:48:05:fe:65: 4e:bc:3b:dd:4a:74:6d:32:7f:6f:ce:d9:7d:5c:ac: d7:0d:b6:16:93:4b:8a:2e:2f:96:87:99:6d:83:28: d5:f2:27:76:ea:f7:63:0a:5a:6f:31:9d:e1:f5:39: aa:ca:6e:34:e1:29:2c:e6:3a:d1:c4:9f:10:65:17: 40:00:af:cb:ab:8d:1b:5d:00:dd:5b:f3:99:fc:79: 79:d0:22:5f:6d:f9:df:4f:7d:f4:dc:86:48:af:c7: b5:5f:e8:15:96:ce:0d:26:21:ee:d9:86:4a:d4:74: 3b:8c:50:f7:c5:42:70:98:2f:ac:00:20:79:8a:8c: 07:8b:ea:ed:7e:90:90:e4:cd:90:fd:60:53:07:98: 7d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:EC:32:84:E9:2F:9F:36:BD:1E:53:3F:A5:FF:8E:38:8A:AE:D0:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae008a3d-846f-39b8-b8eb-0e1b5cd569a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:d8:12:e0:3d:2f:10:ff:cb:c7:d4:7c:4c:5c:41:8c:29:8d: 1f:ec:a4:c6:de:55:be:f7:b7:df:2a:b7:52:4d:41:c0:75:e2: 6a:70:74:df:34:12:50:25:cf:b8:ab:73:ab:6b:73:70:ab:7d: 24:13:e9:84:64:ab:04:32:e7:3c:97:d5:94:94:60:96:30:25: ca:72:7c:03:f0:90:8d:c0:dd:8a:02:75:c4:95:19:b8:6c:0d: 83:aa:f1:eb:f4:51:3e:79:d3:20:39:37:f1:e2:db:f1:87:23: 4c:cb:5b:c2:14:5d:3f:6e:c9:5c:ff:3b:b1:50:f6:59:2e:8e: 05:a0:4f:48:39:34:4c:32:4d:3b:61:cc:5f:5d:06:8a:af:b9: f2:05:7c:c6:9f:1e:e0:78:43:c4:44:33:43:d9:3f:43:37:c3: eb:12:1e:94:ae:8a:09:ef:92:dc:11:a4:48:01:12:ee:a1:86: f1:d1:29:3f:d9:7e:eb:21:07:d2:f8:37:64:e1:61:0f:6e:f8: fd:3b:7d:41:09:24:3d:de:c2:ca:fa:28:34:4a:97:ad:55:01: ce:71:38:e1:7b:b1:b6:28:61:8f:e1:db:fd:56:07:49:cc:25: e3:28:d3:7f:3b:ea:a9:49:ea:37:f0:c3:de:95:25:e5:70:f7: ae:c2:ba:8d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSi7Rj5978i6s9MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZjJiZmY4YTUtMjZmOC00MjlmLTgzMzktZWY4NWVmZGJjZDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/V5tyL9VETAqoqJdP0KX6F9//V+V8yLx3Ki UJWhboPOkAweIO90J3Jm1h+LhakOu0uFHxCIiEjbNK6RCD4FOGnOEHWZ0I5m7pxz b7Dd/RbNF+pPu71HKoZTdgZpWv1Fog5ZdZGVDg0IArOf+SwaIQXAjEgF/mVOvDvd SnRtMn9vztl9XKzXDbYWk0uKLi+Wh5ltgyjV8id26vdjClpvMZ3h9Tmqym404Sks 5jrRxJ8QZRdAAK/Lq40bXQDdW/OZ/Hl50CJfbfnfT3303IZIr8e1X+gVls4NJiHu 2YZK1HQ7jFD3xUJwmC+sACB5iowHi+rtfpCQ5M2Q/WBTB5h9hwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHrsMoTpL582vR5TP6X/jjiKrtA9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWUwMDhhM2QtODQ2Zi0z OWI4LWI4ZWItMGUxYjVjZDU2OWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBS2BLgPS8Q/8vH1HxMXEGMKY0f7KTG3lW+97ff KrdSTUHAdeJqcHTfNBJQJc+4q3Ora3Nwq30kE+mEZKsEMuc8l9WUlGCWMCXKcnwD 8JCNwN2KAnXElRm4bA2DqvHr9FE+edMgOTfx4tvxhyNMy1vCFF0/bslc/zuxUPZZ Lo4FoE9IOTRMMk07YcxfXQaKr7nyBXzGnx7geEPERDND2T9DN8PrEh6UrooJ75Lc EaRIARLuoYbx0Sk/2X7rIQfS+Ddk4WEPbvj9O31BCSQ93sLK+ig0SpetVQHOcTjh e7G2KGGP4dv9VgdJzCXjKNN/O+qpSeo38MPelSXlcPeuwrqN -----END CERTIFICATE-----Generated at Sun May 11 05:26:48 2025 by rpki-client