$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aff0072c-5007-3fb6-b54d-15920b97c169.roa File: aff0072c-5007-3fb6-b54d-15920b97c169.roa (raw, json) Hash identifier: 1O+B63+YLOziL15WRg/uDurMSGDOr9XHl0hU5c79fs0= Subject key identifier: DD:54:8E:12:FC:AA:88:16:A0:AB:C9:BB:5C:5A:20:AF:D6:F8:25:FB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A29946FD98B8791D0CB80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aff0072c-5007-3fb6-b54d-15920b97c169.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396584 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:29:94:6f:d9:8b:87:91:d0:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=b43156d7-d19c-4afa-8245-34ad5396e247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:45:fe:76:c6:ed:cc:7a:9e:16:15:1e:3a:b0: b7:e7:7f:26:1d:f1:db:97:46:8c:49:13:14:f6:6b: 66:5c:74:b7:a7:20:0c:1e:d4:24:38:06:c6:eb:bb: b0:8b:76:57:2e:bf:9e:1d:b8:4c:06:56:4b:f9:13: 47:8f:9e:72:eb:05:27:79:be:b1:04:e9:c6:9d:e0: 8d:81:99:dd:2c:9a:33:8a:d0:cd:98:fe:fa:a8:1d: 7f:f2:8b:75:45:ea:d7:cb:2d:0e:27:cf:ba:fd:80: 18:35:a8:2c:38:5f:6f:ca:07:57:ee:e6:86:14:cf: 53:4d:bc:1e:2c:93:1c:5a:57:af:f6:57:cd:07:67: 23:4f:d1:43:5f:a8:a9:ed:7c:5a:76:8f:39:46:ae: 6a:3d:1b:69:ec:ec:7e:1c:8e:c5:fd:65:06:d7:15: 49:57:2f:af:41:71:df:6d:a1:76:96:21:b9:60:89: 5e:05:0b:bb:1f:d3:14:a6:5a:05:a9:36:23:cf:c9: 6c:15:e7:4f:57:53:60:1c:a7:a7:4b:05:0e:50:b1: 39:4e:9e:90:ff:3e:5d:de:08:c8:5f:e7:31:25:b4: 12:94:5a:d3:b0:ff:61:c9:5c:13:87:7f:76:61:52: e6:99:e0:90:e9:cd:7e:9f:74:19:29:6f:81:87:36: 21:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:54:8E:12:FC:AA:88:16:A0:AB:C9:BB:5C:5A:20:AF:D6:F8:25:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aff0072c-5007-3fb6-b54d-15920b97c169.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:b1:15:c7:5d:a9:f8:21:ac:09:a9:01:d6:28:44:6d:40:1f: 70:41:63:14:50:8b:4a:1b:1e:16:ac:dc:59:7e:c2:6e:2c:d5: 47:d7:ce:c8:d9:24:13:a7:5d:b1:d3:f7:bd:bd:3c:28:75:60: e3:07:a7:7b:f3:8b:1c:5f:1b:b7:fd:ac:8a:09:3f:3a:24:eb: 08:fb:9d:a5:64:c3:31:08:14:32:e7:c9:0b:24:1f:22:71:3e: 9e:bc:76:2c:21:52:4d:01:15:f6:a1:01:5c:9a:d1:28:5a:66: 7f:f8:ba:1b:13:86:3c:43:df:c9:05:05:8a:8b:4a:ce:4f:b0: 2a:aa:86:d0:23:ff:8d:ef:2d:ad:d5:24:6f:85:af:e3:44:bb: 7b:91:82:b4:d0:65:f3:f7:79:99:86:fb:8b:ff:01:bf:a1:46: 2e:c5:ce:03:bb:7d:90:cc:87:ca:e3:a3:a4:58:ae:d9:00:bd: 87:b9:9d:5e:bd:ab:44:28:1e:68:bb:bf:1e:2d:04:89:86:c8: a3:2c:4d:14:9d:db:50:fb:8a:fa:19:70:a1:24:0c:a3:9d:02: 6e:43:2a:10:58:9e:a2:9f:c5:a9:f9:38:d3:ab:b0:ae:e0:8a: ff:ce:a5:de:62:d6:f0:9a:f2:47:d1:e2:00:85:fc:15:58:73: fe:17:1d:47 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSimUb9mLh5HQy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YjQzMTU2ZDctZDE5Yy00YWZhLTgyNDUtMzRhZDUzOTZlMjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0X+dsbtzHqeFhUeOrC3538mHfHbl0aMSRMU 9mtmXHS3pyAMHtQkOAbG67uwi3ZXLr+eHbhMBlZL+RNHj55y6wUneb6xBOnGneCN gZndLJozitDNmP76qB1/8ot1RerXyy0OJ8+6/YAYNagsOF9vygdX7uaGFM9TTbwe LJMcWlev9lfNB2cjT9FDX6ip7Xxado85Rq5qPRtp7Ox+HI7F/WUG1xVJVy+vQXHf baF2liG5YIleBQu7H9MUploFqTYjz8lsFedPV1NgHKenSwUOULE5Tp6Q/z5d3gjI X+cxJbQSlFrTsP9hyVwTh392YVLmmeCQ6c1+n3QZKW+BhzYhqQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFN1UjhL8qogWoKvJu1xaIK/W+CX7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWZmMDA3MmMtNTAwNy0z ZmI2LWI1NGQtMTU5MjBiOTdjMTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCOsRXHXan4IawJqQHWKERtQB9wQWMUUItKGx4W rNxZfsJuLNVH187I2SQTp12x0/e9vTwodWDjB6d784scXxu3/ayKCT86JOsI+52l ZMMxCBQy58kLJB8icT6evHYsIVJNARX2oQFcmtEoWmZ/+LobE4Y8Q9/JBQWKi0rO T7AqqobQI/+N7y2t1SRvha/jRLt7kYK00GXz93mZhvuL/wG/oUYuxc4Du32QzIfK 46OkWK7ZAL2HuZ1evatEKB5ou78eLQSJhsijLE0UndtQ+4r6GXChJAyjnQJuQyoQ WJ6in8Wp+TjTq7Cu4Ir/zqXeYtbwmvJH0eIAhfwVWHP+Fx1H -----END CERTIFICATE-----Generated at Sun May 11 08:17:58 2025 by rpki-client