$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7f33c5a-aaa5-31b1-aef5-9851ee291c0b.roa File: c7f33c5a-aaa5-31b1-aef5-9851ee291c0b.roa (raw, json) Hash identifier: tGgAwG5K0JpJRc3a+mGDE+Ccp8JiegA6dQHhx9ScRZQ= Subject key identifier: 55:05:61:DF:38:77:0C:A0:53:87:C3:31:40:DD:FE:B2:B5:70:A8:91 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4DC4148C0D61DFA02A4C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7f33c5a-aaa5-31b1-aef5-9851ee291c0b.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 396566 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:dc:41:48:c0:d6:1d:fa:02:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=2e2c5e13-3112-400e-aca4-d9292f6b3973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:28:50:c5:e7:4b:cb:63:17:de:28:6c:05:b6: 42:03:fd:91:2c:1c:ce:d7:56:e9:89:dc:84:de:b1: 08:6a:98:60:4e:27:90:c0:59:c4:35:4a:bd:29:4d: d9:0b:7f:84:5d:51:f2:a7:d1:49:b2:29:ba:12:e1: d2:10:80:01:23:ae:d0:85:f8:30:22:b6:28:e7:ea: c5:f6:85:b7:54:f5:ad:0b:49:a0:76:87:c1:c2:db: 06:dc:2d:06:f1:e9:7c:35:f4:91:40:49:f3:34:f2: ba:a8:1e:5b:76:c0:15:51:56:1a:d6:70:2f:6f:6c: a0:91:57:74:af:b6:ec:3f:a4:e9:5c:0d:9d:75:94: 4a:ac:5b:50:81:ec:2a:48:d3:ee:35:bd:65:86:01: 08:6a:3e:4c:43:26:47:cd:eb:f4:49:ed:48:07:d2: 39:04:f0:cc:7d:47:d4:96:6c:47:4f:5c:d5:81:0a: d9:ad:42:e0:02:f1:a9:96:d9:1b:2d:43:b2:f8:72: 06:d3:81:96:eb:a9:4c:0c:94:ba:d2:15:69:f6:1d: e5:68:98:0e:84:1a:ee:cc:4b:0b:a2:16:ed:e8:5b: 37:f7:53:b2:5a:5a:02:36:4a:b5:45:50:18:b3:6c: 79:fd:fc:ed:57:de:8d:9c:88:07:ca:37:fd:a4:95: 30:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:05:61:DF:38:77:0C:A0:53:87:C3:31:40:DD:FE:B2:B5:70:A8:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7f33c5a-aaa5-31b1-aef5-9851ee291c0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:67:7c:01:fd:72:b6:44:cd:2c:9b:34:42:d3:f6:eb:3d:1b: 07:04:e3:35:9f:1d:0d:f6:5c:89:f1:9f:73:3f:64:30:27:ea: a0:d3:98:8f:50:cb:cb:f9:3e:be:35:44:c3:56:65:d7:fb:d6: 8f:c0:5e:ca:0f:a7:46:55:c9:0b:5b:20:0f:9d:2a:20:b4:66: 48:7f:4b:06:4d:e1:e0:74:62:e9:e1:df:66:bf:58:f7:fc:a0: b8:39:36:e1:1b:ff:90:03:d6:6c:0b:6d:a1:c8:c9:d5:37:ae: 7c:5d:97:15:0e:41:bf:54:77:14:ec:a3:c6:9d:02:59:78:1b: fe:6a:09:95:5b:33:2c:64:d3:3c:86:82:e8:4b:bb:48:2d:d3: 30:ec:be:0d:77:70:f5:15:aa:e8:4a:8c:30:12:82:7d:d9:47: 56:d5:7a:1c:a9:9c:85:46:13:15:d6:54:66:82:0f:91:4d:e5: 90:be:2b:5e:fd:bc:a9:87:ec:7f:cc:1e:cb:bc:47:45:7e:5f: 92:10:c7:e8:2d:f2:35:6e:d0:28:53:86:ae:fb:db:75:42:ac: 23:d7:09:e2:6d:3e:61:e0:cb:11:96:fc:94:1e:48:ea:b2:87: 2b:62:6a:e0:ab:94:9b:6e:d6:10:4f:66:02:89:ed:e5:35:a8: f5:ca:aa:c6 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1NxBSMDWHfoCpMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk MmUyYzVlMTMtMzExMi00MDBlLWFjYTQtZDkyOTJmNmIzOTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yhQxedLy2MX3ihsBbZCA/2RLBzO11bpidyE 3rEIaphgTieQwFnENUq9KU3ZC3+EXVHyp9FJsim6EuHSEIABI67QhfgwIrYo5+rF 9oW3VPWtC0mgdofBwtsG3C0G8el8NfSRQEnzNPK6qB5bdsAVUVYa1nAvb2ygkVd0 r7bsP6TpXA2ddZRKrFtQgewqSNPuNb1lhgEIaj5MQyZHzev0Se1IB9I5BPDMfUfU lmxHT1zVgQrZrULgAvGpltkbLUOy+HIG04GW66lMDJS60hVp9h3laJgOhBruzEsL ohbt6Fs391OyWloCNkq1RVAYs2x5/fztV96NnIgHyjf9pJUwTwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFUFYd84dwygU4fDMUDd/rK1cKiRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzdmMzNjNWEtYWFhNS0z MWIxLWFlZjUtOTg1MWVlMjkxYzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA9Z3wB/XK2RM0smzRC0/brPRsHBOM1nx0N9lyJ 8Z9zP2QwJ+qg05iPUMvL+T6+NUTDVmXX+9aPwF7KD6dGVckLWyAPnSogtGZIf0sG TeHgdGLp4d9mv1j3/KC4OTbhG/+QA9ZsC22hyMnVN658XZcVDkG/VHcU7KPGnQJZ eBv+agmVWzMsZNM8hoLoS7tILdMw7L4Nd3D1FaroSowwEoJ92UdW1XocqZyFRhMV 1lRmgg+RTeWQvite/byph+x/zB7LvEdFfl+SEMfoLfI1btAoU4au+9t1Qqwj1wni bT5h4MsRlvyUHkjqsocrYmrgq5SbbtYQT2YCie3lNaj1yqrG -----END CERTIFICATE-----Generated at Sun May 11 05:29:32 2025 by rpki-client