$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef9f8254-08ae-3bc5-ab1e-532fcf0268d0.roa File: ef9f8254-08ae-3bc5-ab1e-532fcf0268d0.roa (raw, json) Hash identifier: 51IZ8SPUAdgmDrYqbz51M6ErUuqaaPFs/y9sgvLx5SQ= Subject key identifier: 38:6B:07:7E:A2:FC:B5:1B:E0:4D:C1:2C:10:C5:AB:90:3C:AB:49:C1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4D392ABD2EDECB41A5B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef9f8254-08ae-3bc5-ab1e-532fcf0268d0.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 397203 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:d3:92:ab:d2:ed:ec:b4:1a:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=1361ce8d-bb6f-459e-804f-dc73f89d0931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2e:ec:1a:b7:9d:a1:be:dd:a1:61:42:4d:bb: c4:8e:b0:7f:4d:2d:c7:29:ba:5e:29:ae:cc:f6:b2: 96:ec:93:ed:e1:95:cb:a1:c8:97:59:16:68:eb:57: da:5e:33:65:14:9a:c2:8b:06:a2:f0:5c:10:27:d8: 2c:da:86:e7:3b:d3:f4:46:1b:c5:39:02:5d:eb:54: 8d:94:5a:94:20:90:88:4b:e7:7e:ec:e0:86:51:a8: 3f:80:ad:03:19:92:99:02:b5:03:75:85:6b:ed:11: e4:db:4a:bf:23:b4:13:44:83:fe:06:a6:1b:f3:7c: a7:90:b6:1e:63:22:1d:f5:64:25:ba:38:96:b3:6f: f9:37:2f:1c:80:ad:b6:88:bf:f6:35:42:78:52:86: f9:6e:f3:e8:e9:ce:d8:0a:65:65:dd:86:c3:b0:5b: 94:48:e3:f6:5e:9f:47:cb:a8:3d:fc:77:7f:de:a5: 63:0d:b3:70:5e:97:b3:17:8a:83:6e:b1:27:ff:03: 94:01:4e:07:f5:6a:f0:5c:7a:c6:82:83:66:da:11: 73:6e:09:e3:20:2a:4d:ad:da:2b:52:b1:05:61:47: 96:1f:e4:4b:e9:e4:00:45:ef:d9:d1:7d:d5:98:87: 06:9c:11:c2:c9:15:f0:fc:7d:4a:34:e3:a3:af:36: 4f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6B:07:7E:A2:FC:B5:1B:E0:4D:C1:2C:10:C5:AB:90:3C:AB:49:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef9f8254-08ae-3bc5-ab1e-532fcf0268d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:2d:9c:6e:0d:14:af:4f:76:14:4b:f4:ad:f0:3a:b4:8d:c5: 85:c5:d4:92:9e:fa:4d:f9:7e:0b:c5:34:e7:f8:73:42:76:f0: a8:d0:8a:a9:d9:70:20:9f:73:d2:4d:a0:e9:52:1c:bf:44:f9: f8:0c:02:91:9a:d5:42:9c:b8:b6:76:b7:ab:f2:b1:80:1b:b7: 8b:47:c8:ae:e0:9a:bc:cc:92:f1:8b:99:12:18:85:45:13:e5: 5d:7e:f1:5c:8d:27:14:0f:9b:3c:a5:39:dd:20:75:65:c1:2d: 98:9f:3b:7e:9b:ed:60:1b:23:d0:74:55:a7:ad:66:83:8d:08: dd:84:89:1b:ae:ec:16:dc:48:43:89:c4:56:a2:e5:63:76:e2: 4e:1d:d5:3a:17:fd:8a:42:2c:29:43:14:49:98:ea:a2:bd:92: aa:18:77:d7:96:9a:c7:80:82:d4:38:55:ea:7e:44:a2:d3:79: 81:ff:ca:8e:a1:33:37:1f:34:38:e2:a9:72:67:92:62:b6:49: ba:60:79:88:85:a9:4f:18:34:27:c4:75:2b:10:14:c2:35:ba: 17:8d:37:23:b1:eb:b1:52:da:49:6c:52:b9:92:6b:d3:a6:74: af:eb:80:3a:4e:82:96:6b:9e:0f:ed:c5:62:e5:dc:7b:0f:15: 5b:e7:37:1d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1NOSq9Lt7LQaWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk MTM2MWNlOGQtYmI2Zi00NTllLTgwNGYtZGM3M2Y4OWQwOTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly7sGredob7doWFCTbvEjrB/TS3HKbpeKa7M 9rKW7JPt4ZXLociXWRZo61faXjNlFJrCiwai8FwQJ9gs2obnO9P0RhvFOQJd61SN lFqUIJCIS+d+7OCGUag/gK0DGZKZArUDdYVr7RHk20q/I7QTRIP+BqYb83ynkLYe YyId9WQlujiWs2/5Ny8cgK22iL/2NUJ4Uob5bvPo6c7YCmVl3YbDsFuUSOP2Xp9H y6g9/Hd/3qVjDbNwXpezF4qDbrEn/wOUAU4H9WrwXHrGgoNm2hFzbgnjICpNrdor UrEFYUeWH+RL6eQARe/Z0X3VmIcGnBHCyRXw/H1KNOOjrzZPlQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDhrB36i/LUb4E3BLBDFq5A8q0nBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWY5ZjgyNTQtMDhhZS0z YmM1LWFiMWUtNTMyZmNmMDI2OGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQADLZxuDRSvT3YUS/St8Dq0jcWFxdSSnvpN+X4L xTTn+HNCdvCo0Iqp2XAgn3PSTaDpUhy/RPn4DAKRmtVCnLi2drer8rGAG7eLR8iu 4Jq8zJLxi5kSGIVFE+VdfvFcjScUD5s8pTndIHVlwS2Ynzt+m+1gGyPQdFWnrWaD jQjdhIkbruwW3EhDicRWouVjduJOHdU6F/2KQiwpQxRJmOqivZKqGHfXlprHgILU OFXqfkSi03mB/8qOoTM3HzQ44qlyZ5Jitkm6YHmIhalPGDQnxHUrEBTCNboXjTcj seuxUtpJbFK5kmvTpnSv64A6ToKWa54P7cVi5dx7DxVb5zcd -----END CERTIFICATE-----Generated at Sun May 11 05:31:56 2025 by rpki-client