$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e65898c9-4bfe-3271-b66b-5b25d3bd60b2.roa File: e65898c9-4bfe-3271-b66b-5b25d3bd60b2.roa (raw, json) Hash identifier: RnPfoM1zqWMZDBdl6SzYRsS3nrgSOIwr7uEmvv+KoYo= Subject key identifier: B5:16:83:D8:A3:1C:EE:E7:3D:DF:05:AD:52:8B:B7:68:80:4E:B8:10 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849194192D9A37DAAB51DE93D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e65898c9-4bfe-3271-b66b-5b25d3bd60b2.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 396583 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:92:d9:a3:7d:aa:b5:1d:e9:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=a9988b3e-a84d-46aa-88fc-1b654c824543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:78:1e:71:c1:f8:04:c9:6a:7c:3f:3e:a6:a4: 0f:45:cc:16:3c:b6:ae:43:f6:c6:46:50:c6:0f:67: d1:cc:75:29:92:88:e6:ac:5a:51:f6:55:79:06:2d: 51:94:89:2f:1c:cf:26:ac:05:00:1b:c2:4f:3f:25: 11:66:ef:b4:b4:a0:af:80:d7:a8:5d:fe:64:9d:fa: d1:08:0d:d1:5d:1c:4a:c1:bc:8e:d1:99:41:8d:6c: 80:d9:53:05:20:db:1e:e9:18:a2:a9:22:03:0b:70: 65:18:22:78:9f:60:fa:b0:fe:01:51:cd:0b:e7:b7: c4:76:f4:5f:6e:b2:87:7c:7b:34:19:4d:fd:3c:7c: 8b:54:a0:e3:5c:87:59:32:17:9c:31:24:aa:7b:af: 8f:0d:1b:bf:f3:41:4b:fb:67:bb:5d:ef:48:e6:1f: 4a:83:c3:c4:79:b2:11:37:c6:b4:e0:bd:f1:69:c6: 8c:2b:3e:47:cc:83:06:8b:2c:68:98:9e:00:0c:e9: 46:1e:31:73:77:c8:46:0c:5e:79:e9:89:06:99:04: 6a:0c:d2:48:e2:18:bd:80:af:1e:c6:2a:d4:a6:6d: 40:d1:b8:92:0f:37:77:4f:0d:45:55:e4:b1:c8:68: c6:fd:20:d5:f4:63:60:e7:e2:e6:c4:14:81:7c:ba: 5d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:16:83:D8:A3:1C:EE:E7:3D:DF:05:AD:52:8B:B7:68:80:4E:B8:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e65898c9-4bfe-3271-b66b-5b25d3bd60b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:38:a4:d8:84:e5:65:6d:eb:88:71:57:9c:89:88:f4:02:00: de:5b:cf:50:c7:4d:78:d5:4c:e6:94:9e:7d:37:94:c8:eb:0c: f0:3d:62:8c:b4:71:5c:19:67:63:96:2d:ac:bc:59:f8:82:4e: ec:db:df:50:8a:66:8e:81:eb:e7:b2:8e:4a:88:ce:5e:88:4a: 86:f2:68:2d:69:50:ec:ac:40:2a:f2:66:5d:a9:04:4a:5b:f4: 30:2e:97:58:68:0e:9d:a6:f1:f2:37:31:a4:e7:86:9e:cc:6f: e1:32:27:f5:e2:7d:02:6e:46:6c:3f:71:ef:32:ed:35:f6:d7: 44:8f:56:22:f0:96:10:47:c2:9e:08:bc:94:57:79:f1:71:17: 33:64:f1:b7:61:b7:01:fc:25:4e:67:d7:13:cd:62:99:fc:07: 53:96:95:b6:c8:b9:47:3d:c8:47:62:0d:bd:39:37:30:8a:ae: 91:50:5e:34:9c:32:47:90:53:02:df:31:ea:f4:ec:87:60:8c: 4f:64:a2:26:29:e5:f2:4a:54:20:16:eb:0f:c2:c2:13:b3:d7: 6d:44:e3:a4:6d:a3:84:b4:dd:5d:b0:e2:e1:84:9a:7b:ae:2b: e7:a9:e6:f1:98:69:ea:7c:9e:9d:b7:62:21:c4:33:5f:77:b7: 4f:60:1b:68 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkZQZLZo32qtR3pPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk YTk5ODhiM2UtYTg0ZC00NmFhLTg4ZmMtMWI2NTRjODI0NTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHgeccH4BMlqfD8+pqQPRcwWPLauQ/bGRlDG D2fRzHUpkojmrFpR9lV5Bi1RlIkvHM8mrAUAG8JPPyURZu+0tKCvgNeoXf5knfrR CA3RXRxKwbyO0ZlBjWyA2VMFINse6RiiqSIDC3BlGCJ4n2D6sP4BUc0L57fEdvRf brKHfHs0GU39PHyLVKDjXIdZMhecMSSqe6+PDRu/80FL+2e7Xe9I5h9Kg8PEebIR N8a04L3xacaMKz5HzIMGiyxomJ4ADOlGHjFzd8hGDF556YkGmQRqDNJI4hi9gK8e xirUpm1A0biSDzd3Tw1FVeSxyGjG/SDV9GNg5+LmxBSBfLpdwQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLUWg9ijHO7nPd8FrVKLt2iATrgQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTY1ODk4YzktNGJmZS0z MjcxLWI2NmItNWIyNWQzYmQ2MGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBXOKTYhOVlbeuIcVeciYj0AgDeW89Qx0141Uzm lJ59N5TI6wzwPWKMtHFcGWdjli2svFn4gk7s299QimaOgevnso5KiM5eiEqG8mgt aVDsrEAq8mZdqQRKW/QwLpdYaA6dpvHyNzGk54aezG/hMif14n0CbkZsP3HvMu01 9tdEj1Yi8JYQR8KeCLyUV3nxcRczZPG3YbcB/CVOZ9cTzWKZ/AdTlpW2yLlHPchH Yg29OTcwiq6RUF40nDJHkFMC3zHq9OyHYIxPZKImKeXySlQgFusPwsITs9dtROOk baOEtN1dsOLhhJp7rivnqebxmGnqfJ6dt2IhxDNfd7dPYBto -----END CERTIFICATE-----Generated at Sun May 11 05:30:28 2025 by rpki-client