$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8a3571a-2ada-3d1b-9943-2355e2f82e3d.roa File: c8a3571a-2ada-3d1b-9943-2355e2f82e3d.roa (raw, json) Hash identifier: 3jwtnWJLL/7MPhHa6cPp2PNgem4Eq7U1Pc1dtsuOD7o= Subject key identifier: CC:3B:91:D7:5A:4B:3F:77:9B:D5:77:0A:86:EE:9F:E1:56:3F:DE:FA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849194197B04D47E3A6451FE2AC Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8a3571a-2ada-3d1b-9943-2355e2f82e3d.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 396566 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:97:b0:4d:47:e3:a6:45:1f:e2:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=69895a06-6e0a-4b2d-8a24-fb29e29d0152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ed:6b:3c:4e:d3:14:cc:99:2e:41:cf:2e:a3: 8a:0c:0c:be:f2:a7:98:c8:10:32:93:b3:2a:a7:75: 2f:a6:71:dc:d7:26:14:fa:6c:b5:d1:2c:a9:da:8b: 71:b7:77:99:2a:f6:93:42:f5:ac:a7:2e:2e:3c:8f: 73:90:70:33:0b:3d:93:3f:ab:d1:e0:81:3c:da:6f: b7:f4:18:5f:34:47:12:98:6e:cf:fc:94:e2:09:8e: 9e:84:15:62:e4:5f:6d:83:0b:64:63:44:9c:b0:b2: 94:2f:da:ab:72:40:66:dc:a8:a1:d4:3c:dd:7c:f0: 8d:6c:25:4f:07:47:5e:77:05:8c:25:0e:8f:bf:b6: f2:57:21:fe:c5:b4:52:1d:a2:04:93:c3:62:3e:8d: b4:91:a4:6d:e4:b1:cc:15:71:8b:14:8f:aa:69:82: fd:1a:83:78:5f:6d:9d:28:9d:43:94:27:35:eb:4f: e6:0a:07:68:69:74:5f:80:49:66:a4:fb:ef:8e:f3: bf:ba:e8:ba:95:82:30:6f:17:0a:7a:3f:2f:5b:5b: 21:88:27:5f:bb:57:54:92:97:11:64:e9:e5:5c:30: e1:62:b0:18:f0:2c:4f:e3:ee:d3:c0:43:fd:5d:d8: 88:dc:71:24:18:68:e8:ee:ad:ec:3a:d9:d2:a1:02: e1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:3B:91:D7:5A:4B:3F:77:9B:D5:77:0A:86:EE:9F:E1:56:3F:DE:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c8a3571a-2ada-3d1b-9943-2355e2f82e3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:95:b9:26:e4:fb:55:b9:ca:14:4e:cb:66:3f:a6:a3:d4:85: 63:74:3d:95:a5:0b:8d:88:2f:c6:42:58:1e:ef:07:32:d9:d3: 41:39:ae:3e:9b:93:73:4c:a2:ef:0c:f0:2b:c3:c4:8b:21:32: 97:c8:02:36:db:db:1b:52:ec:df:70:72:fc:6f:c1:c0:41:c9: 2c:4a:10:f6:dc:28:2f:c5:b6:64:53:7d:0e:99:62:40:dc:0c: 67:87:46:c2:6e:a0:97:ce:a5:a8:0f:e5:47:ea:9b:5d:73:7f: 55:76:84:9c:07:e2:99:72:a0:e1:b7:41:eb:95:47:e1:d9:98: 4f:a7:de:0d:5e:3a:53:29:2a:a7:0b:2a:c0:0c:6f:55:6b:93: af:0b:73:3c:45:9a:f3:5e:6a:b5:bb:5c:e5:97:eb:75:ae:24: 82:e5:f8:f2:15:2a:fb:0d:6e:09:35:bd:47:25:0a:f3:ba:4e: 2b:66:c3:66:45:4f:9c:2a:b6:45:88:72:fb:96:1b:39:0b:03: bc:0c:b7:f6:ee:06:04:f7:c5:ea:94:12:50:4a:6b:8c:1a:7f: 6f:d0:b5:a4:91:22:ad:5e:de:12:26:94:7a:9b:e1:2c:75:34: c7:40:e0:5e:61:86:0b:06:20:14:19:73:00:4b:cc:0d:16:e0: 86:90:99:87 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkZQZewTUfjpkUf4qwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk Njk4OTVhMDYtNmUwYS00YjJkLThhMjQtZmIyOWUyOWQwMTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu1rPE7TFMyZLkHPLqOKDAy+8qeYyBAyk7Mq p3UvpnHc1yYU+my10Syp2otxt3eZKvaTQvWspy4uPI9zkHAzCz2TP6vR4IE82m+3 9BhfNEcSmG7P/JTiCY6ehBVi5F9tgwtkY0ScsLKUL9qrckBm3Kih1DzdfPCNbCVP B0dedwWMJQ6Pv7byVyH+xbRSHaIEk8NiPo20kaRt5LHMFXGLFI+qaYL9GoN4X22d KJ1DlCc160/mCgdoaXRfgElmpPvvjvO/uui6lYIwbxcKej8vW1shiCdfu1dUkpcR ZOnlXDDhYrAY8CxP4+7TwEP9XdiI3HEkGGjo7q3sOtnSoQLhEwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMw7kddaSz93m9V3Cobun+FWP976MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzhhMzU3MWEtMmFkYS0z ZDFiLTk5NDMtMjM1NWUyZjgyZTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA1lbkm5PtVucoUTstmP6aj1IVjdD2VpQuNiC/G Qlge7wcy2dNBOa4+m5NzTKLvDPArw8SLITKXyAI229sbUuzfcHL8b8HAQcksShD2 3CgvxbZkU30OmWJA3Axnh0bCbqCXzqWoD+VH6ptdc39VdoScB+KZcqDht0HrlUfh 2ZhPp94NXjpTKSqnCyrADG9Va5OvC3M8RZrzXmq1u1zll+t1riSC5fjyFSr7DW4J Nb1HJQrzuk4rZsNmRU+cKrZFiHL7lhs5CwO8DLf27gYE98XqlBJQSmuMGn9v0LWk kSKtXt4SJpR6m+EsdTTHQOBeYYYLBiAUGXMAS8wNFuCGkJmH -----END CERTIFICATE-----Generated at Sun May 11 08:17:06 2025 by rpki-client