$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b77e3540-a5c2-31a8-a73a-f8c83e199e69.roa File: b77e3540-a5c2-31a8-a73a-f8c83e199e69.roa (raw, json) Hash identifier: 1VG5IN8aehXSTijv1wBE4NT/kwV61KH27YwOj/f+uJ8= Subject key identifier: 78:00:26:F7:2A:8B:3E:91:E5:DF:6A:E0:DD:D7:8F:07:A4:D8:9A:75 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4D09395E24781A43923A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b77e3540-a5c2-31a8-a73a-f8c83e199e69.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 396605 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:d0:93:95:e2:47:81:a4:39:23:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=d14d9106-64d0-4ed2-bf68-1ef38a23a546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:39:f5:04:ed:6f:4c:95:11:ed:af:90:53:40: 83:42:8e:06:d2:23:c5:c3:b9:f6:41:00:4c:d6:e1: 4c:e8:f7:4c:4d:38:89:d8:bb:21:88:59:bd:64:47: 3b:0b:07:60:56:13:66:1c:12:36:63:8a:60:55:b4: a5:e4:6d:c4:b6:34:38:3b:94:43:c1:ea:bb:71:20: a3:5a:73:b2:9a:f2:37:96:77:1c:01:58:53:3d:e8: 09:11:9b:57:f5:a6:ef:2f:00:b8:47:9f:e2:13:72: a9:1b:3f:64:79:c8:3c:22:e3:8c:e4:72:ed:18:ca: 49:20:ee:d2:4a:38:e6:20:12:fb:a5:c3:78:87:46: 44:d1:b6:43:50:e5:7f:01:82:1a:67:c9:53:31:a9: 20:66:c6:a5:81:9c:fe:81:49:cf:41:88:73:ca:db: 49:fd:70:b5:b0:54:a7:fa:37:ed:03:45:1d:7a:6e: 27:62:fd:0c:50:4f:8f:f9:32:32:79:dc:ad:82:d8: 3b:ef:74:54:84:81:e2:9d:68:3c:70:9e:bd:ab:9d: 60:ce:00:5b:84:ed:87:1f:16:3c:e1:42:30:2f:3e: 43:45:46:7f:c8:80:d5:81:3a:8f:d7:cb:b2:8c:6d: f7:ba:28:02:42:d0:a5:2c:bc:16:c7:fc:c9:3b:f1: 4d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:00:26:F7:2A:8B:3E:91:E5:DF:6A:E0:DD:D7:8F:07:A4:D8:9A:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b77e3540-a5c2-31a8-a73a-f8c83e199e69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:94:6b:d4:04:15:1b:c0:3d:f9:3e:d3:91:47:59:e6:72:cf: de:2e:70:eb:d6:4c:61:18:5d:4b:df:ed:b2:9d:61:da:ab:ad: 29:cf:9b:d3:aa:f6:83:66:8a:f9:95:64:67:e9:82:92:f6:29: 2b:38:35:80:c3:37:7a:32:46:03:8d:e1:d4:9c:f7:66:66:05: 80:c4:30:41:af:03:f4:12:db:52:38:74:22:c9:c5:a5:0a:a7: d2:86:d2:f8:82:2d:73:77:d9:a6:25:a7:68:35:20:f6:61:7c: d0:58:87:61:07:ef:19:38:50:28:24:49:88:a2:4e:16:2c:70: eb:b2:9f:8f:3d:9a:57:58:30:9f:15:7a:b2:42:94:9d:4a:e8: cb:35:be:95:ce:ba:3e:d5:a0:12:30:07:63:d9:bd:2e:22:e5: b1:dc:f1:b4:bc:e9:be:a5:ef:d8:df:b0:48:f5:2e:eb:3a:8c: a6:4e:55:95:54:ac:85:c5:74:55:f9:22:47:3f:72:bf:8d:05: 01:2f:65:44:14:e3:17:58:1f:cc:35:80:b2:44:4a:3b:89:ce: 9e:a0:d1:74:f6:c9:40:82:23:a9:82:0d:ce:d1:56:4b:4e:e6: d9:2f:b7:00:8b:11:79:9d:6d:82:6b:65:d9:73:4e:df:34:e3: 55:fc:7a:51 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1NCTleJHgaQ5I6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk ZDE0ZDkxMDYtNjRkMC00ZWQyLWJmNjgtMWVmMzhhMjNhNTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTn1BO1vTJUR7a+QU0CDQo4G0iPFw7n2QQBM 1uFM6PdMTTiJ2LshiFm9ZEc7CwdgVhNmHBI2Y4pgVbSl5G3EtjQ4O5RDweq7cSCj WnOymvI3lnccAVhTPegJEZtX9abvLwC4R5/iE3KpGz9kecg8IuOM5HLtGMpJIO7S SjjmIBL7pcN4h0ZE0bZDUOV/AYIaZ8lTMakgZsalgZz+gUnPQYhzyttJ/XC1sFSn +jftA0Udem4nYv0MUE+P+TIyedytgtg773RUhIHinWg8cJ69q51gzgBbhO2HHxY8 4UIwLz5DRUZ/yIDVgTqP18uyjG33uigCQtClLLwWx/zJO/FNMQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHgAJvcqiz6R5d9q4N3Xjwek2Jp1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjc3ZTM1NDAtYTVjMi0z MWE4LWE3M2EtZjhjODNlMTk5ZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBLlGvUBBUbwD35PtORR1nmcs/eLnDr1kxhGF1L 3+2ynWHaq60pz5vTqvaDZor5lWRn6YKS9ikrODWAwzd6MkYDjeHUnPdmZgWAxDBB rwP0EttSOHQiycWlCqfShtL4gi1zd9mmJadoNSD2YXzQWIdhB+8ZOFAoJEmIok4W LHDrsp+PPZpXWDCfFXqyQpSdSujLNb6Vzro+1aASMAdj2b0uIuWx3PG0vOm+pe/Y 37BI9S7rOoymTlWVVKyFxXRV+SJHP3K/jQUBL2VEFOMXWB/MNYCyREo7ic6eoNF0 9slAgiOpgg3O0VZLTubZL7cAixF5nW2Ca2XZc07fNONV/HpR -----END CERTIFICATE-----Generated at Sun May 11 05:34:58 2025 by rpki-client