$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc22bfbc-b2d2-3a12-8841-79df2b0807d3.roa File: bc22bfbc-b2d2-3a12-8841-79df2b0807d3.roa (raw, json) Hash identifier: 2nb+VUllm8PmKbyFBm7kYf5DNqUDlauik09ufbbTtu8= Subject key identifier: FE:0A:6C:2B:74:76:BC:96:2D:B2:B0:B1:DB:E2:FB:82:C7:28:9D:06 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A290F0FC0C71187A64C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc22bfbc-b2d2-3a12-8841-79df2b0807d3.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396603 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:29:0f:0f:c0:c7:11:87:a6:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=bf24f503-4ec4-42a7-9a1b-0da4c15faa73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:72:ed:25:af:fc:a1:13:fb:5a:63:5c:8e:79: f4:fc:e9:f0:24:eb:2f:86:fe:d3:c3:ee:83:91:7a: 9c:54:63:5a:7a:23:54:ac:4d:24:25:39:10:d6:f2: 53:87:33:05:59:d3:a7:57:b4:f3:55:fd:18:57:d5: 64:5b:b8:55:68:e2:3f:3f:58:8c:a2:15:0b:1a:3f: 9b:52:e4:c7:1e:b9:23:28:df:95:20:f8:4b:a3:66: fc:92:81:43:6d:fc:43:b3:5a:1b:aa:8e:d1:3c:ac: 5f:f9:81:2b:05:a8:5c:fe:79:e5:bb:32:bd:74:4b: 3b:96:9c:c8:ef:b0:8d:bd:46:2b:8f:94:8f:db:3e: 02:10:81:68:09:e3:72:bd:fd:32:e8:b9:5b:d8:dd: e9:61:a0:d2:4c:36:17:4b:ba:12:f1:cd:b9:ea:11: ec:7f:b6:dd:a3:03:89:41:3a:47:d9:d4:e4:09:d6: 70:9d:22:a4:a3:18:ed:75:86:86:74:5b:98:3b:fd: 31:86:f3:fb:45:3b:8f:dc:73:45:dd:64:bd:cd:8e: 68:f9:86:d8:ea:9d:47:d7:b4:cb:f9:26:bf:53:7d: 07:56:06:ca:2e:30:9c:0a:a7:d5:3c:a0:89:41:a9: bb:e8:90:58:30:9d:a6:a4:a5:40:2c:9f:fb:85:86: 81:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:0A:6C:2B:74:76:BC:96:2D:B2:B0:B1:DB:E2:FB:82:C7:28:9D:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc22bfbc-b2d2-3a12-8841-79df2b0807d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:3a:b9:a2:d8:17:d1:5d:7d:0c:d7:f4:30:b7:38:65:e3:75: ee:c6:f8:ec:44:ef:4b:96:24:b1:12:33:b6:21:b3:83:7b:67: cb:99:fe:60:38:a6:8e:1e:0e:cf:30:e1:b0:a0:4e:ae:7a:7a: bf:d8:3e:fd:f1:82:e0:78:cf:67:0e:da:68:39:24:97:2b:39: 47:63:a9:be:96:6c:65:62:2b:e4:8e:60:dc:53:ee:86:f2:79: 80:91:08:1a:a6:ba:0c:8c:1c:2e:42:1c:12:97:bd:58:ed:4b: e2:95:39:0d:78:34:69:a1:fc:db:f6:bc:90:5f:34:ca:ae:db: ed:8e:1e:ea:1b:6c:67:6c:8f:98:01:9d:60:6c:ad:f1:25:f6: 16:99:0e:be:a7:9d:87:e4:50:9d:ea:b3:d7:96:1c:d3:de:14: 30:8a:b5:fc:80:93:12:bb:ff:38:79:f2:ba:bc:3a:ed:8e:7a: a8:6d:7e:a3:cb:3a:2b:cf:70:56:7b:44:84:85:82:4f:e9:a0: 53:eb:34:8a:fd:5a:da:39:88:7b:31:31:03:37:52:a6:85:3a: eb:79:96:27:52:d1:fd:5b:26:75:0c:d0:34:a7:96:65:6f:1d: a8:f0:91:85:7c:c9:73:cc:be:fe:71:91:4d:ab:ef:ad:50:10: f0:c6:90:32 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSikPD8DHEYemTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YmYyNGY1MDMtNGVjNC00MmE3LTlhMWItMGRhNGMxNWZhYTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXLtJa/8oRP7WmNcjnn0/OnwJOsvhv7Tw+6D kXqcVGNaeiNUrE0kJTkQ1vJThzMFWdOnV7TzVf0YV9VkW7hVaOI/P1iMohULGj+b UuTHHrkjKN+VIPhLo2b8koFDbfxDs1obqo7RPKxf+YErBahc/nnluzK9dEs7lpzI 77CNvUYrj5SP2z4CEIFoCeNyvf0y6Llb2N3pYaDSTDYXS7oS8c256hHsf7bdowOJ QTpH2dTkCdZwnSKkoxjtdYaGdFuYO/0xhvP7RTuP3HNF3WS9zY5o+YbY6p1H17TL +Sa/U30HVgbKLjCcCqfVPKCJQam76JBYMJ2mpKVALJ/7hYaBEwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFP4KbCt0dryWLbKwsdvi+4LHKJ0GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmMyMmJmYmMtYjJkMi0z YTEyLTg4NDEtNzlkZjJiMDgwN2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA7Ormi2BfRXX0M1/Qwtzhl43XuxvjsRO9LliSx EjO2IbODe2fLmf5gOKaOHg7PMOGwoE6uenq/2D798YLgeM9nDtpoOSSXKzlHY6m+ lmxlYivkjmDcU+6G8nmAkQgaproMjBwuQhwSl71Y7UvilTkNeDRpofzb9ryQXzTK rtvtjh7qG2xnbI+YAZ1gbK3xJfYWmQ6+p52H5FCd6rPXlhzT3hQwirX8gJMSu/84 efK6vDrtjnqobX6jyzorz3BWe0SEhYJP6aBT6zSK/VraOYh7MTEDN1KmhTrreZYn UtH9WyZ1DNA0p5Zlbx2o8JGFfMlzzL7+cZFNq++tUBDwxpAy -----END CERTIFICATE-----Generated at Sun May 11 08:30:48 2025 by rpki-client