$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd792ac4-72c5-3479-867d-e3c0dceee16a.roa File: cd792ac4-72c5-3479-867d-e3c0dceee16a.roa (raw, json) Hash identifier: omj+jyOiTIx+SRFL4/7L/maqZgByVR8Yk3FvvE/dcEA= Subject key identifier: 0B:B8:B9:C4:A3:F8:81:B0:2A:1E:D9:71:DD:48:83:FC:4D:E3:CF:4E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A34072094E4D219623620 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd792ac4-72c5-3479-867d-e3c0dceee16a.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 40647 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:34:07:20:94:e4:d2:19:62:36:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=7fa41b67-cefc-49bd-ba58-770be701b33a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:08:f8:94:54:ef:56:1a:d1:eb:98:a6:43:cb: d0:f2:37:c9:08:fc:df:da:c9:fc:df:14:f3:82:00: 3c:6e:5d:3b:0e:dd:ef:c5:5a:db:f4:9e:5a:76:3b: 11:29:06:6b:a7:87:ce:f5:8c:8d:6d:fe:47:9c:80: 3c:dc:df:76:c7:21:27:3f:04:a6:c8:63:44:81:fa: 2d:c4:7d:c1:06:a4:26:3c:4c:89:a1:64:4b:39:fe: e7:57:df:7d:7f:78:5f:fd:91:aa:b7:73:84:9c:f8: 04:d9:5d:ba:98:74:f9:1b:45:8a:6a:0f:6b:30:30: 9a:92:3a:1e:38:1b:1f:da:70:7a:1c:da:13:b4:a3: 7a:e1:90:69:c2:93:d4:48:ac:0b:0d:57:00:9c:ff: cd:d9:74:e6:68:5f:af:06:1d:a2:9a:8c:2a:96:06: 10:dc:1e:08:50:c0:b1:6c:99:19:e1:1e:57:42:5d: 73:67:f5:6c:18:99:f0:7e:f9:b7:8b:a6:2c:08:c3: 8c:30:03:bd:14:f3:67:34:75:cc:48:3a:b7:1d:2f: 6b:24:9e:1b:b9:eb:8a:2d:1a:6e:37:93:da:88:04: fe:84:df:26:31:c6:22:f4:6b:3d:16:56:3e:76:4a: 95:d8:2c:db:b1:22:a5:fd:ee:85:39:d4:da:ba:05: 68:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B8:B9:C4:A3:F8:81:B0:2A:1E:D9:71:DD:48:83:FC:4D:E3:CF:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd792ac4-72c5-3479-867d-e3c0dceee16a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:f9:62:bd:69:ab:fd:0f:72:e2:25:eb:f6:12:36:af:52:d5: 5c:c9:2e:24:70:85:37:17:09:4f:ae:0d:34:96:83:7a:22:83: 0d:0f:07:06:71:e0:36:40:a2:0e:6e:74:94:68:82:63:70:98: d7:af:6b:fb:2c:e2:10:d2:71:00:e1:b5:e5:0f:b9:7d:bc:c2: c8:1f:63:63:e8:47:57:c2:19:2c:4c:7e:99:a4:44:0a:13:26: 73:9e:5b:de:87:fa:1a:4a:64:9a:9c:54:48:ac:3f:e6:0e:c5: 40:a4:a6:69:5b:8f:b5:c1:cb:c7:7e:c2:58:c9:25:08:f0:a6: 16:e3:2b:b8:34:c0:3f:71:6d:29:61:fa:b7:d4:69:fb:8f:76: 20:16:6b:3e:10:6a:4b:6c:9e:b1:fb:c2:de:99:a9:ed:31:5a: 44:ea:40:fa:47:17:dd:91:c3:97:97:8f:b5:6e:43:92:68:be: 4d:ce:51:98:ca:45:9a:c9:06:de:b4:5e:e3:00:9d:94:34:e4: e3:52:76:3a:9e:32:05:92:5e:dd:bb:69:67:73:fd:0c:c4:3d: f2:0b:47:5c:a9:c9:8c:4b:21:71:a0:cc:34:30:d4:46:f7:7d: 44:7e:1a:5a:1f:84:ca:4f:46:69:5b:6c:77:d3:c4:88:2a:ef: b1:12:1a:78 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSjQHIJTk0hliNiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk N2ZhNDFiNjctY2VmYy00OWJkLWJhNTgtNzcwYmU3MDFiMzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gj4lFTvVhrR65imQ8vQ8jfJCPzf2sn83xTz ggA8bl07Dt3vxVrb9J5adjsRKQZrp4fO9YyNbf5HnIA83N92xyEnPwSmyGNEgfot xH3BBqQmPEyJoWRLOf7nV999f3hf/ZGqt3OEnPgE2V26mHT5G0WKag9rMDCakjoe OBsf2nB6HNoTtKN64ZBpwpPUSKwLDVcAnP/N2XTmaF+vBh2imowqlgYQ3B4IUMCx bJkZ4R5XQl1zZ/VsGJnwfvm3i6YsCMOMMAO9FPNnNHXMSDq3HS9rJJ4bueuKLRpu N5PaiAT+hN8mMcYi9Gs9FlY+dkqV2CzbsSKl/e6FOdTaugVoRwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAu4ucSj+IGwKh7Zcd1Ig/xN489OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2Q3OTJhYzQtNzJjNS0z NDc5LTg2N2QtZTNjMGRjZWVlMTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBm+WK9aav9D3LiJev2EjavUtVcyS4kcIU3FwlP rg00loN6IoMNDwcGceA2QKIObnSUaIJjcJjXr2v7LOIQ0nEA4bXlD7l9vMLIH2Nj 6EdXwhksTH6ZpEQKEyZznlveh/oaSmSanFRIrD/mDsVApKZpW4+1wcvHfsJYySUI 8KYW4yu4NMA/cW0pYfq31Gn7j3YgFms+EGpLbJ6x+8LemantMVpE6kD6RxfdkcOX l4+1bkOSaL5NzlGYykWayQbetF7jAJ2UNOTjUnY6njIFkl7du2lnc/0MxD3yC0dc qcmMSyFxoMw0MNRG931EfhpaH4TKT0ZpW2x308SIKu+xEhp4 -----END CERTIFICATE-----Generated at Sun May 11 05:36:21 2025 by rpki-client