$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db0df2df-08b7-38b8-969e-310019b6a348.roa File: db0df2df-08b7-38b8-969e-310019b6a348.roa (raw, json) Hash identifier: 4Fqe5UpElQJolb4TM3WsEG3hBpEDCjb/2e1HNx/jaXg= Subject key identifier: 97:8D:24:E5:34:93:CB:FA:F7:D0:79:E3:04:81:9E:DB:93:B9:36:54 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A2DF9CAE1C099D8973728 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db0df2df-08b7-38b8-969e-310019b6a348.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396606 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:2d:f9:ca:e1:c0:99:d8:97:37:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=aa23e6a9-24a1-4c58-9809-778ff9e82502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0b:2b:43:3a:0f:a2:1c:e3:8f:3c:14:6b:a4: 65:2f:82:16:ef:5f:71:d5:e0:f5:6f:31:c1:45:55: 2d:a6:5f:48:14:87:99:a9:8c:b6:13:e9:e9:01:8c: eb:8f:f9:45:41:97:fa:0e:3d:52:da:17:80:4b:d9: 24:e7:f7:ed:8d:bb:d0:96:e3:2a:fd:da:37:cb:07: fd:cf:6d:5c:d3:91:22:7a:dc:02:0e:8d:fe:c5:ec: 34:0e:c8:d0:6d:be:dd:b8:f1:a6:c2:56:20:58:aa: 70:a6:c5:eb:75:7a:65:57:d1:d5:d5:02:7b:10:f1: a1:20:d1:1c:4f:de:85:03:2a:86:4d:ae:9d:46:4a: d3:58:cb:e4:bf:1e:d1:5f:ef:8c:ac:f2:d7:ef:a4: f9:72:f7:62:f9:6b:d5:54:f1:63:ad:37:8d:90:3c: 19:3d:e0:25:4c:ff:70:e2:5f:94:8b:4e:7b:f6:ad: 6a:a0:91:17:e4:99:16:76:5c:4e:d5:ae:18:3d:20: 67:d2:7b:33:a3:46:ab:f8:48:d1:32:09:aa:0d:0e: 5e:f2:c5:95:55:b8:74:06:5a:78:a1:c0:2f:f4:c8: 63:0d:5c:ff:9a:c4:cf:31:77:14:05:53:0c:5a:67: 11:ea:6b:8e:45:2f:c7:d2:4f:79:ec:7a:05:21:a9: 6c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8D:24:E5:34:93:CB:FA:F7:D0:79:E3:04:81:9E:DB:93:B9:36:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db0df2df-08b7-38b8-969e-310019b6a348.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:53:6a:bc:8c:df:13:79:29:e3:aa:7b:7d:72:40:a6:ef:1b: 0a:87:8f:df:2a:3c:7c:78:1e:72:02:6d:a9:58:e0:e8:40:16: 3a:cd:9e:b6:80:81:62:bf:e3:62:91:d6:29:55:4e:48:a4:b8: c3:4f:67:a9:a3:bb:1e:cf:dd:91:60:03:2e:0c:eb:74:78:91: d4:56:5d:40:f5:bf:38:bc:d1:c4:a4:b1:04:50:b5:11:08:d8: 44:5c:11:7b:59:d4:e3:b7:40:fb:8f:6c:93:e7:b4:2b:bc:84: db:90:1e:96:b0:09:3d:af:d4:88:53:63:fd:91:0f:9e:14:93: f2:e2:a5:46:e1:bb:ea:0f:90:96:4e:28:27:26:26:a1:0a:d0: 6b:0b:cf:28:f9:17:e0:39:7b:67:0d:ce:d0:e6:73:3c:1d:4b: 98:d6:da:55:8b:7c:c4:79:56:1b:ec:70:e4:f0:ee:e3:d1:70: 7f:00:f1:ca:86:46:fd:a6:98:23:73:c7:2b:37:e8:2c:89:30: e7:87:7e:6b:60:2c:13:f1:19:fd:af:2c:8f:35:91:d3:ad:d5: e8:3b:86:53:19:88:a1:cd:fd:e5:e9:64:21:7e:13:72:2e:ab: f4:03:14:d1:ab:2b:27:f7:65:84:70:3b:c1:bc:f4:9d:fa:a0: fb:59:f2:ca -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSi35yuHAmdiXNygwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YWEyM2U2YTktMjRhMS00YzU4LTk4MDktNzc4ZmY5ZTgyNTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAsrQzoPohzjjzwUa6RlL4IW719x1eD1bzHB RVUtpl9IFIeZqYy2E+npAYzrj/lFQZf6Dj1S2heAS9kk5/ftjbvQluMq/do3ywf9 z21c05EietwCDo3+xew0DsjQbb7duPGmwlYgWKpwpsXrdXplV9HV1QJ7EPGhINEc T96FAyqGTa6dRkrTWMvkvx7RX++MrPLX76T5cvdi+WvVVPFjrTeNkDwZPeAlTP9w 4l+Ui0579q1qoJEX5JkWdlxO1a4YPSBn0nszo0ar+EjRMgmqDQ5e8sWVVbh0Blp4 ocAv9MhjDVz/msTPMXcUBVMMWmcR6muORS/H0k957HoFIals7QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJeNJOU0k8v699B54wSBntuTuTZUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGIwZGYyZGYtMDhiNy0z OGI4LTk2OWUtMzEwMDE5YjZhMzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAdU2q8jN8TeSnjqnt9ckCm7xsKh4/fKjx8eB5y Am2pWODoQBY6zZ62gIFiv+NikdYpVU5IpLjDT2epo7sez92RYAMuDOt0eJHUVl1A 9b84vNHEpLEEULURCNhEXBF7WdTjt0D7j2yT57QrvITbkB6WsAk9r9SIU2P9kQ+e FJPy4qVG4bvqD5CWTignJiahCtBrC88o+RfgOXtnDc7Q5nM8HUuY1tpVi3zEeVYb 7HDk8O7j0XB/APHKhkb9ppgjc8crN+gsiTDnh35rYCwT8Rn9ryyPNZHTrdXoO4ZT GYihzf3l6WQhfhNyLqv0AxTRqysn92WEcDvBvPSd+qD7WfLK -----END CERTIFICATE-----Generated at Sun May 11 05:28:07 2025 by rpki-client