$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4ab9c91-5278-3fcd-9b6f-6b2c9b5db42a.roa File: c4ab9c91-5278-3fcd-9b6f-6b2c9b5db42a.roa (raw, json) Hash identifier: G9v6k4fXlWIFdYYrUNFfzM397o3EGtV9chtAlzRw2f0= Subject key identifier: E1:2E:97:41:66:A8:78:4B:AA:A4:25:91:27:E1:9C:06:B2:92:52:11 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4DE9854CDBBCCC4AE3980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4ab9c91-5278-3fcd-9b6f-6b2c9b5db42a.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 396602 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:de:98:54:cd:bb:cc:c4:ae:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=12959d3c-28fd-4889-97e2-026df3bb014b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d0:b6:a8:8a:c1:b3:b9:09:24:c0:f1:91:4d: 8a:3c:77:4a:95:e9:ea:d9:c2:a1:77:3b:03:27:9e: 6e:36:b0:bd:2a:39:5a:6c:96:7e:fa:90:26:94:53: 20:b4:ea:ad:14:c1:96:71:61:9b:a8:86:7b:19:f0: 98:a6:0e:96:b7:3f:a8:23:44:29:86:c8:24:31:5a: 6c:39:f3:d9:05:4d:39:76:b6:76:0d:45:af:5c:c9: 90:da:38:fb:5e:97:66:f0:d7:e8:23:0a:36:4c:8d: 37:7e:dd:1d:b9:5b:53:0c:54:bc:07:5a:88:85:28: 5b:80:52:03:3a:8e:fe:7f:1d:0d:d6:07:a8:c4:ea: 36:49:ad:ac:bc:55:d2:a8:16:4c:33:ea:1f:eb:a2: 91:b4:ad:84:ab:a6:18:59:21:93:e9:c6:db:74:d9: 53:e2:2a:1d:bf:55:c4:52:1b:1e:0a:c0:90:dd:17: a5:38:4c:ae:5d:d1:c3:6b:e6:c1:29:56:62:50:9f: 34:f7:cc:b3:86:01:72:a8:4f:cf:18:04:01:73:f9: cd:8a:4c:81:68:d6:dd:f2:9a:e8:68:3d:13:66:63: e0:e7:c4:39:bf:63:b9:b5:b8:58:2d:16:8a:7f:89: d9:09:38:44:89:36:a7:99:b7:5b:c3:df:80:6e:42: 17:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:2E:97:41:66:A8:78:4B:AA:A4:25:91:27:E1:9C:06:B2:92:52:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4ab9c91-5278-3fcd-9b6f-6b2c9b5db42a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:71:b8:b5:16:9c:cf:21:d3:ce:9d:40:6e:a4:6e:7e:3d:23: 62:70:ba:72:3e:65:61:60:cc:28:d8:27:89:d7:59:c1:4d:fd: ef:44:db:87:d2:60:6f:e5:9e:50:96:6e:c9:94:db:08:9d:6e: 6e:00:39:38:23:34:98:3e:5e:0d:d4:6b:59:80:d6:8c:f4:e7: bf:fc:06:63:02:9a:b9:f0:46:ed:2d:4a:4b:f0:d0:d1:25:88: 91:b1:7b:cd:9f:c9:cf:ff:a5:67:aa:84:2b:4a:17:9d:28:ba: 2d:6a:61:e9:0f:d5:f7:07:00:c5:4b:3f:3b:ae:83:7d:6a:f1: 84:40:bf:53:0f:77:6f:48:b3:70:0d:81:62:d5:b7:0b:6b:e8: 00:56:a9:8a:33:c4:5d:20:1c:fc:2a:1c:a3:56:7e:e5:c2:33: 76:9a:d6:b1:7b:ab:af:9c:f3:c4:a6:49:b6:65:ef:33:fe:53: 3f:13:e8:4d:22:b0:ca:51:c6:e4:1a:87:de:16:e0:86:c8:a7: da:2a:3d:6d:c2:f4:f7:7c:e7:02:3e:da:88:45:57:ce:9d:6d: ec:cf:29:72:5c:47:1b:2d:e1:ea:0a:44:f7:6e:a7:ad:78:e6: 35:60:2d:9a:2f:54:d1:ac:38:a0:4a:f3:e2:4c:92:83:b6:f0: 1d:04:6a:65 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1N6YVM27zMSuOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk MTI5NTlkM2MtMjhmZC00ODg5LTk3ZTItMDI2ZGYzYmIwMTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dC2qIrBs7kJJMDxkU2KPHdKlenq2cKhdzsD J55uNrC9KjlabJZ++pAmlFMgtOqtFMGWcWGbqIZ7GfCYpg6Wtz+oI0QphsgkMVps OfPZBU05drZ2DUWvXMmQ2jj7Xpdm8NfoIwo2TI03ft0duVtTDFS8B1qIhShbgFID Oo7+fx0N1geoxOo2Sa2svFXSqBZMM+of66KRtK2Eq6YYWSGT6cbbdNlT4iodv1XE UhseCsCQ3RelOEyuXdHDa+bBKVZiUJ8098yzhgFyqE/PGAQBc/nNikyBaNbd8pro aD0TZmPg58Q5v2O5tbhYLRaKf4nZCThEiTanmbdbw9+AbkIX7wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOEul0FmqHhLqqQlkSfhnAayklIRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzRhYjljOTEtNTI3OC0z ZmNkLTliNmYtNmIyYzliNWRiNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAccbi1FpzPIdPOnUBupG5+PSNicLpyPmVhYMwo 2CeJ11nBTf3vRNuH0mBv5Z5Qlm7JlNsInW5uADk4IzSYPl4N1GtZgNaM9Oe//AZj Apq58EbtLUpL8NDRJYiRsXvNn8nP/6VnqoQrShedKLotamHpD9X3BwDFSz87roN9 avGEQL9TD3dvSLNwDYFi1bcLa+gAVqmKM8RdIBz8KhyjVn7lwjN2mtaxe6uvnPPE pkm2Ze8z/lM/E+hNIrDKUcbkGofeFuCGyKfaKj1twvT3fOcCPtqIRVfOnW3szyly XEcbLeHqCkT3bqeteOY1YC2aL1TRrDigSvPiTJKDtvAdBGpl -----END CERTIFICATE-----Generated at Sun May 11 05:32:14 2025 by rpki-client