$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce5a6a02-432e-3006-bded-a3dfe359890f.roa File: ce5a6a02-432e-3006-bded-a3dfe359890f.roa (raw, json) Hash identifier: j6+qVjr+DHkD5kYpmEx7fQdZLYqB9QaVmO9A16zGAy0= Subject key identifier: 9D:96:56:A3:FB:D5:F6:C7:A2:93:35:8F:FF:59:10:44:40:82:C9:72 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A2EA1DAB786E7442B8780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce5a6a02-432e-3006-bded-a3dfe359890f.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 32651 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:2e:a1:da:b7:86:e7:44:2b:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=b8d80fc9-74e6-4288-bf33-402ac7dc1235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f0:ae:9a:4f:f7:89:c1:3c:cd:a0:03:86:c4: 38:d2:1c:c5:a7:96:58:f8:5d:2d:4e:2b:20:f0:2a: 63:39:1f:0d:21:69:02:8f:d9:56:bf:b8:7c:ad:d2: c9:07:59:29:d1:c1:39:2e:93:ff:0c:ee:86:03:41: 06:86:75:0b:ea:ef:8c:c6:c0:e9:23:e0:fc:fe:d4: b7:c4:41:ff:ec:c0:21:ae:e0:f1:e8:ba:4d:d5:40: 2d:e4:5e:16:35:db:23:e7:40:2e:33:f4:0b:1b:ef: 3b:32:0e:f2:ef:65:f4:f0:19:3a:fe:c6:52:0b:e7: e5:38:de:18:1b:cb:70:f1:9c:21:84:9f:8c:e4:92: a0:65:83:44:b5:1a:ad:d9:75:93:a7:e9:ef:50:04: de:83:f1:87:6d:84:75:c0:bb:a8:de:71:0a:a1:82: 4d:f2:8c:2d:c5:a6:51:d7:6b:36:9d:aa:0f:c3:37: d4:c8:3f:0d:ed:59:dd:6d:24:d3:d8:f8:01:d1:98: 38:f6:38:48:31:a6:e9:28:d4:d8:d7:e4:be:0f:c1: 6f:b4:08:ed:d5:df:27:d0:ed:04:da:b2:48:db:25: 8d:c2:2c:de:e3:19:7c:df:58:ba:e5:ed:3d:85:d0: 40:b0:b8:95:11:80:2c:19:bf:e0:ac:fc:b0:92:5c: 2e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:96:56:A3:FB:D5:F6:C7:A2:93:35:8F:FF:59:10:44:40:82:C9:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce5a6a02-432e-3006-bded-a3dfe359890f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:15:4f:10:4c:fa:4b:6e:3f:91:60:2b:41:4b:53:c7:d6:d9: 57:ee:04:da:75:a5:a9:f6:c5:a7:24:48:f1:27:d7:8f:60:62: a6:34:18:79:28:38:d9:3e:66:1f:53:b3:c0:dc:0b:df:f9:36: 99:65:86:bf:fa:e1:ef:a9:4c:61:c5:2d:ec:d0:bb:d0:db:22: 15:68:3e:b9:f0:95:92:0a:94:50:e2:e7:ec:be:a2:95:36:98: 1e:41:fd:47:a7:f0:82:c1:c9:8b:ef:17:13:7c:46:9a:b9:e7: e8:d5:6c:37:d3:e5:25:2f:10:7b:49:bf:92:87:aa:4c:7f:33: 28:9b:0c:b1:e8:aa:78:65:1f:b7:b0:63:d8:39:91:0e:bd:59: ee:64:33:7f:10:2f:6a:e4:3d:41:32:8d:32:a6:24:57:e0:46: e1:65:3c:8d:12:f6:cb:11:44:30:de:83:a8:5e:12:92:49:3f: f5:01:c2:54:7b:d2:8f:0a:9e:db:38:5a:a1:b7:be:6c:c9:d6: 0d:b0:81:07:93:3c:15:af:04:aa:e2:7f:0d:a2:39:43:2c:29: 3c:66:1b:6b:83:d1:d0:a5:0c:cb:29:37:c9:3d:b0:0b:75:99: 73:3a:ea:6b:86:7b:37:d5:97:b8:e0:92:b2:a3:0b:a4:6e:fc: 84:56:c5:2b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSi6h2reG50Qrh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YjhkODBmYzktNzRlNi00Mjg4LWJmMzMtNDAyYWM3ZGMxMjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfCumk/3icE8zaADhsQ40hzFp5ZY+F0tTisg 8CpjOR8NIWkCj9lWv7h8rdLJB1kp0cE5LpP/DO6GA0EGhnUL6u+MxsDpI+D8/tS3 xEH/7MAhruDx6LpN1UAt5F4WNdsj50AuM/QLG+87Mg7y72X08Bk6/sZSC+flON4Y G8tw8ZwhhJ+M5JKgZYNEtRqt2XWTp+nvUATeg/GHbYR1wLuo3nEKoYJN8owtxaZR 12s2naoPwzfUyD8N7VndbSTT2PgB0Zg49jhIMabpKNTY1+S+D8FvtAjt1d8n0O0E 2rJI2yWNwize4xl831i65e09hdBAsLiVEYAsGb/grPywklwuHwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJ2WVqP71fbHopM1j/9ZEERAgslyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2U1YTZhMDItNDMyZS0z MDA2LWJkZWQtYTNkZmUzNTk4OTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAgFU8QTPpLbj+RYCtBS1PH1tlX7gTadaWp9sWn JEjxJ9ePYGKmNBh5KDjZPmYfU7PA3Avf+TaZZYa/+uHvqUxhxS3s0LvQ2yIVaD65 8JWSCpRQ4ufsvqKVNpgeQf1Hp/CCwcmL7xcTfEaauefo1Ww30+UlLxB7Sb+Sh6pM fzMomwyx6Kp4ZR+3sGPYOZEOvVnuZDN/EC9q5D1BMo0ypiRX4EbhZTyNEvbLEUQw 3oOoXhKSST/1AcJUe9KPCp7bOFqht75sydYNsIEHkzwVrwSq4n8NojlDLCk8Zhtr g9HQpQzLKTfJPbALdZlzOuprhns31Ze44JKyowukbvyEVsUr -----END CERTIFICATE-----Generated at Sun May 11 06:26:56 2025 by rpki-client