$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3723a8d-50f5-36d6-ad9d-b8ad73878e1c.roa File: d3723a8d-50f5-36d6-ad9d-b8ad73878e1c.roa (raw, json) Hash identifier: R5AVNNWBWh+8Aq5KGc4VXxY6J2jv9hmfSV0KkshbR5c= Subject key identifier: 69:D9:AA:23:DE:6A:D3:8F:3E:47:5A:14:17:C4:1E:5A:98:D5:12:BD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A2C13938BB3EC9D526F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3723a8d-50f5-36d6-ad9d-b8ad73878e1c.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396602 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:2c:13:93:8b:b3:ec:9d:52:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=cc830051-4db5-40eb-958b-961699457b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fd:7e:34:92:63:ab:fb:8f:45:79:35:cc:6c: 08:1e:49:49:7a:7d:f8:d6:4d:55:57:7d:12:e1:9e: bf:8e:a0:ff:92:3c:11:2c:72:da:71:a0:5e:3f:a4: 30:a5:9e:26:fe:ba:18:11:6f:e7:a1:08:45:93:ce: 3c:47:9e:5d:ec:49:e8:96:ce:b8:02:67:54:d6:90: 13:5d:81:52:45:cb:e9:40:fb:00:36:33:3d:a6:97: 44:29:7c:5e:e7:80:2c:3a:cb:6f:15:3d:68:b9:c4: 08:7a:3c:3b:36:b0:dc:5b:23:6b:88:f0:46:77:36: 4d:b5:57:3b:39:e6:ea:c6:30:2b:85:f7:4c:47:0b: 8e:2d:bd:25:39:3e:0e:a4:c6:d0:26:83:79:ac:d1: c8:3a:df:e9:3a:15:5d:d1:9c:0a:1a:75:29:6d:e7: 8a:a8:d2:7a:a9:f7:fa:55:a5:a3:f3:0b:4c:80:1f: ad:36:8d:c7:85:70:3c:d6:ab:11:9d:55:2a:49:6c: 9a:24:da:80:0f:25:68:4d:87:44:2b:94:27:06:71: 22:17:e3:3d:70:40:44:e8:d2:86:f4:a5:c7:b5:e5: f3:75:c0:1e:cc:80:91:35:36:5f:f5:95:ca:e4:cc: 9c:2c:66:6b:73:50:9c:fd:1f:83:c8:1b:ec:ec:ce: 08:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D9:AA:23:DE:6A:D3:8F:3E:47:5A:14:17:C4:1E:5A:98:D5:12:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d3723a8d-50f5-36d6-ad9d-b8ad73878e1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:46:11:74:a7:76:e5:04:eb:f6:56:b9:6c:c1:fc:99:f3:93: 65:aa:5e:ef:c8:ee:48:ce:90:7d:35:fa:5f:d2:0a:b7:48:ae: f2:52:83:9b:1c:b9:72:0f:4d:7c:6a:bb:66:6c:f3:1d:97:88: f5:01:da:be:d1:1e:ca:a8:ec:7c:16:91:d3:09:db:70:1e:41: 82:e5:7a:b3:c3:4c:f5:75:6f:1b:fb:ee:1c:f7:db:d4:a5:88: b1:13:62:74:b5:0e:88:67:19:85:de:67:ae:58:81:fb:83:f3: b9:8a:1e:4a:c7:12:b0:f0:14:f1:0e:e0:0c:fd:d2:32:d3:78: 4b:de:ff:1e:86:43:58:8b:92:f0:86:12:fe:d4:4c:55:f7:f4: 9c:a7:30:fb:56:09:0f:61:c6:bd:bb:1a:87:42:cc:91:3c:20: 7e:16:6c:4a:75:b1:77:38:d2:34:1d:e1:fd:74:23:25:3e:94: 47:68:7b:f8:da:59:09:c5:96:2d:c7:85:64:c6:b2:4b:31:8b: 03:7f:2a:95:e0:60:90:53:06:b3:d5:b6:59:59:3b:6d:fe:73: 3b:cf:3f:04:86:d3:f1:2d:08:bf:25:51:fd:8a:7a:38:84:cc: 8e:9a:13:40:cf:63:da:d7:dc:85:31:ef:ca:92:fb:47:5d:e6: 77:9e:1c:0e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSiwTk4uz7J1Sb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk Y2M4MzAwNTEtNGRiNS00MGViLTk1OGItOTYxNjk5NDU3YjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv1+NJJjq/uPRXk1zGwIHklJen341k1VV30S 4Z6/jqD/kjwRLHLacaBeP6QwpZ4m/roYEW/noQhFk848R55d7Enols64AmdU1pAT XYFSRcvpQPsANjM9ppdEKXxe54AsOstvFT1oucQIejw7NrDcWyNriPBGdzZNtVc7 OebqxjArhfdMRwuOLb0lOT4OpMbQJoN5rNHIOt/pOhVd0ZwKGnUpbeeKqNJ6qff6 VaWj8wtMgB+tNo3HhXA81qsRnVUqSWyaJNqADyVoTYdEK5QnBnEiF+M9cEBE6NKG 9KXHteXzdcAezICRNTZf9ZXK5MycLGZrc1Cc/R+DyBvs7M4IhQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGnZqiPeatOPPkdaFBfEHlqY1RK9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDM3MjNhOGQtNTBmNS0z NmQ2LWFkOWQtYjhhZDczODc4ZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBpRhF0p3blBOv2VrlswfyZ85Nlql7vyO5IzpB9 Nfpf0gq3SK7yUoObHLlyD018artmbPMdl4j1Adq+0R7KqOx8FpHTCdtwHkGC5Xqz w0z1dW8b++4c99vUpYixE2J0tQ6IZxmF3meuWIH7g/O5ih5KxxKw8BTxDuAM/dIy 03hL3v8ehkNYi5LwhhL+1ExV9/ScpzD7VgkPYca9uxqHQsyRPCB+FmxKdbF3ONI0 HeH9dCMlPpRHaHv42lkJxZYtx4VkxrJLMYsDfyqV4GCQUwaz1bZZWTtt/nM7zz8E htPxLQi/JVH9ino4hMyOmhNAz2Pa19yFMe/KkvtHXeZ3nhwO -----END CERTIFICATE-----Generated at Sun May 11 05:25:42 2025 by rpki-client