$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba6c45d4-d761-3ace-a3f3-976815895243.roa File: ba6c45d4-d761-3ace-a3f3-976815895243.roa (raw, json) Hash identifier: lDdK3JkXq7rjLV6fktiCgM3ky/MUaAwhk11fKOH85NY= Subject key identifier: E2:0D:4B:CB:56:0A:88:5E:81:AB:EF:4E:2D:28:55:69:4D:2B:78:83 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4DC4D373DF3D50601B680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba6c45d4-d761-3ace-a3f3-976815895243.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 397201 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:dc:4d:37:3d:f3:d5:06:01:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=3d5bd805-b46c-48be-a405-10eecd145aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:02:36:f9:f9:40:f7:6a:9b:58:08:42:1e:be: 0d:09:bb:ad:47:ec:90:c1:ed:1e:2d:13:a2:3f:2e: e2:93:b6:83:ef:44:db:05:11:bc:c9:99:0a:7a:e0: 72:ee:d3:e9:11:c5:70:a9:38:c5:dc:fa:70:be:15: 24:e4:be:80:d9:e4:2f:b0:af:b0:c3:eb:95:c8:a6: 7b:13:17:2a:68:a2:44:6b:48:20:2e:ca:e2:39:f7: 05:d2:69:6d:76:70:44:d1:c7:ab:d6:ba:c0:cf:96: b7:89:ac:9c:69:fe:32:7e:68:ed:27:3e:0b:88:f4: 42:2e:2a:ef:92:18:9e:99:33:41:80:6b:6e:12:90: bf:13:d8:e5:55:21:41:88:64:e5:99:39:fa:82:b6: 4a:dc:0c:a6:ca:11:7a:2d:ed:e4:89:ef:d1:a7:b2: af:32:c2:71:d7:92:e3:35:bf:d9:37:92:36:7c:8c: ea:da:30:44:e9:43:54:98:41:ec:b5:22:79:ba:d9: d9:35:d7:e3:2d:31:b2:2b:7d:9d:49:34:e6:12:7c: c7:02:71:cf:e3:f0:12:2e:4b:c1:72:fc:d6:3a:a3: 40:eb:d8:0f:7f:45:3e:38:b3:90:88:a7:6b:49:58: 7f:48:a5:fb:c5:25:67:70:24:3c:a9:d3:f1:40:d1: 1f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0D:4B:CB:56:0A:88:5E:81:AB:EF:4E:2D:28:55:69:4D:2B:78:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba6c45d4-d761-3ace-a3f3-976815895243.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:e9:dc:1c:da:bf:87:56:c5:34:cb:6f:fb:99:a0:18:12:89: a7:8e:1c:f3:4a:1e:5a:5c:65:3d:1c:df:c8:4f:e9:ab:1c:01: c4:8a:33:49:f1:4c:66:2e:a3:b3:be:9b:24:b5:8f:5a:4f:b8: 1e:2b:90:c9:61:fc:8d:e9:7d:64:20:34:04:bb:0a:31:7e:c3: 91:29:10:35:72:32:20:fb:bf:c2:5d:c8:3c:48:8a:23:ce:21: 91:e4:33:4d:e1:f2:6b:bc:47:b8:cd:94:8f:79:8c:1f:3f:f3: 4a:03:4e:5a:a3:ca:85:e3:97:d4:d3:24:87:b9:88:bb:af:05: a6:02:36:87:b8:2c:8f:10:13:2d:11:6b:41:8a:d8:2d:51:57: ca:3b:24:8f:69:09:a1:48:1d:f0:33:d9:3a:ee:7a:4f:9a:1c: 77:fc:d9:25:bc:8e:a6:b6:ef:75:e5:fb:0c:c8:cd:d5:6a:fa: cb:13:93:73:76:91:c3:6a:b3:af:87:b3:91:c9:56:91:ca:f9: 33:fb:55:d4:d9:2f:12:02:c1:16:c6:2e:8e:f3:20:64:3c:b9: 9d:20:e3:af:cd:38:60:97:f0:be:74:1c:7d:47:5c:57:30:50: 43:a0:b2:27:c8:23:d1:38:68:16:a0:8c:8a:cf:82:95:7c:ea: b2:e9:ad:12 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1NxNNz3z1QYBtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk M2Q1YmQ4MDUtYjQ2Yy00OGJlLWE0MDUtMTBlZWNkMTQ1YWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQI2+flA92qbWAhCHr4NCbutR+yQwe0eLROi Py7ik7aD70TbBRG8yZkKeuBy7tPpEcVwqTjF3PpwvhUk5L6A2eQvsK+ww+uVyKZ7 ExcqaKJEa0ggLsriOfcF0mltdnBE0cer1rrAz5a3iaycaf4yfmjtJz4LiPRCLirv khiemTNBgGtuEpC/E9jlVSFBiGTlmTn6grZK3AymyhF6Le3kie/Rp7KvMsJx15Lj Nb/ZN5I2fIzq2jBE6UNUmEHstSJ5utnZNdfjLTGyK32dSTTmEnzHAnHP4/ASLkvB cvzWOqNA69gPf0U+OLOQiKdrSVh/SKX7xSVncCQ8qdPxQNEfmwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOINS8tWCohegavvTi0oVWlNK3iDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmE2YzQ1ZDQtZDc2MS0z YWNlLWEzZjMtOTc2ODE1ODk1MjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA86dwc2r+HVsU0y2/7maAYEomnjhzzSh5aXGU9 HN/IT+mrHAHEijNJ8UxmLqOzvpsktY9aT7geK5DJYfyN6X1kIDQEuwoxfsORKRA1 cjIg+7/CXcg8SIojziGR5DNN4fJrvEe4zZSPeYwfP/NKA05ao8qF45fU0ySHuYi7 rwWmAjaHuCyPEBMtEWtBitgtUVfKOySPaQmhSB3wM9k67npPmhx3/NklvI6mtu91 5fsMyM3VavrLE5NzdpHDarOvh7ORyVaRyvkz+1XU2S8SAsEWxi6O8yBkPLmdIOOv zThgl/C+dBx9R1xXMFBDoLInyCPROGgWoIyKz4KVfOqy6a0S -----END CERTIFICATE-----Generated at Sun May 11 08:26:12 2025 by rpki-client