$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f9e66857-aeaa-3d46-9f02-3d7a93f1b817.roa File: f9e66857-aeaa-3d46-9f02-3d7a93f1b817.roa (raw, json) Hash identifier: 9/1eJjZZQer/ZCtbkgGwcJZL/2qrmpKeGvUj3oDDZNo= Subject key identifier: 08:BF:DE:67:D6:C5:D3:4C:99:7D:73:0F:68:01:78:76:E7:4F:FD:DC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849C4D4D8EEBE7499B357C3F180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f9e66857-aeaa-3d46-9f02-3d7a93f1b817.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 396577 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:d8:ee:be:74:99:b3:57:c3:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=bb8009fa-59c5-45e3-ac79-615c138d3ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e9:87:a4:44:d4:3a:d9:3f:9b:90:c3:1b:86: d4:75:ed:73:f9:bc:a8:23:f4:1e:82:91:d6:b1:be: 66:27:37:af:96:bc:e3:36:ec:48:2c:2f:90:01:cf: 69:25:2e:63:d9:13:c5:68:f0:ba:ad:6e:f6:7f:de: e7:71:58:31:4d:df:2f:88:e8:d9:56:83:cf:4b:42: aa:99:19:ba:b5:5d:96:15:78:f4:c1:45:88:7c:93: 83:c0:a6:5a:f4:42:64:36:75:6b:79:25:87:37:f4: b4:b0:b3:26:7f:f6:65:20:7f:90:e3:5b:f1:c6:3d: 1b:94:b5:85:4a:74:de:8d:d8:08:67:0f:20:8b:8b: 96:e6:07:15:f6:bd:67:ad:c2:1c:d7:5c:56:9c:9c: 2e:5c:6d:70:0f:29:ea:23:9f:3c:23:91:20:05:c2: 11:51:ec:c6:be:e3:a2:5e:69:9f:2d:25:f4:7f:fd: 83:99:12:b7:85:c1:c6:65:4e:46:96:e5:c7:0a:b0: ee:73:a5:ee:ac:8c:a4:a8:8f:8f:f1:f2:21:2b:91: 6c:02:73:79:fb:e3:18:20:44:ec:1b:85:69:0f:14: 58:f4:4e:33:e2:bb:f8:c1:38:3f:ee:5d:3c:a9:e4: 20:d7:1f:65:15:49:95:c4:48:42:ef:67:79:c9:d4: 69:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BF:DE:67:D6:C5:D3:4C:99:7D:73:0F:68:01:78:76:E7:4F:FD:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f9e66857-aeaa-3d46-9f02-3d7a93f1b817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:85:23:65:c0:b5:83:5f:17:ff:93:98:10:bf:d3:17:ee:2c: 34:5f:f0:80:5b:5d:79:0b:20:7c:11:19:ad:dc:f5:43:86:1f: 68:ab:17:b7:ec:fe:e9:98:3d:fc:b7:88:96:cc:8d:89:cd:f4: 99:85:48:a7:e3:89:1c:ec:45:09:27:8b:cd:c8:e7:36:b3:50: 82:aa:34:4d:67:53:22:c1:ef:88:ba:00:2a:de:bc:75:f1:9e: c2:95:81:db:71:9e:4a:3a:8c:ac:01:88:4f:df:dd:4a:8d:72: a9:22:6f:6d:78:6e:de:7f:af:e7:37:be:a9:17:45:4d:98:1e: 43:bd:61:a7:b0:3c:07:80:e9:f2:ea:d6:19:b1:d9:27:f7:09: 69:01:32:c4:f6:2f:e7:43:ec:c1:12:16:2d:99:2a:6f:39:b6: ee:d9:ff:4d:ee:20:05:54:11:3d:46:7a:90:37:fb:d9:f2:ea: a3:39:48:4f:f6:dd:8a:a1:b7:69:5d:3b:0c:64:87:78:60:7d: 0f:fc:99:d4:30:77:12:ae:0c:00:05:72:32:6c:51:26:2e:86: ea:89:ab:dc:f6:8d:43:20:d9:f1:09:b4:fb:25:c0:e8:cf:13: 27:4c:0c:61:76:d6:04:f9:84:b3:02:36:10:82:eb:49:39:b8: 66:2c:88:7f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnE1NjuvnSZs1fD8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk YmI4MDA5ZmEtNTljNS00NWUzLWFjNzktNjE1YzEzOGQzZWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwemHpETUOtk/m5DDG4bUde1z+byoI/QegpHW sb5mJzevlrzjNuxILC+QAc9pJS5j2RPFaPC6rW72f97ncVgxTd8viOjZVoPPS0Kq mRm6tV2WFXj0wUWIfJODwKZa9EJkNnVreSWHN/S0sLMmf/ZlIH+Q41vxxj0blLWF SnTejdgIZw8gi4uW5gcV9r1nrcIc11xWnJwuXG1wDynqI588I5EgBcIRUezGvuOi XmmfLSX0f/2DmRK3hcHGZU5GluXHCrDuc6XurIykqI+P8fIhK5FsAnN5++MYIETs G4VpDxRY9E4z4rv4wTg/7l08qeQg1x9lFUmVxEhC72d5ydRpEwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAi/3mfWxdNMmX1zD2gBeHbnT/3cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjllNjY4NTctYWVhYS0z ZDQ2LTlmMDItM2Q3YTkzZjFiODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBrhSNlwLWDXxf/k5gQv9MX7iw0X/CAW115CyB8 ERmt3PVDhh9oqxe37P7pmD38t4iWzI2JzfSZhUin44kc7EUJJ4vNyOc2s1CCqjRN Z1Miwe+IugAq3rx18Z7ClYHbcZ5KOoysAYhP391KjXKpIm9teG7ef6/nN76pF0VN mB5DvWGnsDwHgOny6tYZsdkn9wlpATLE9i/nQ+zBEhYtmSpvObbu2f9N7iAFVBE9 RnqQN/vZ8uqjOUhP9t2KobdpXTsMZId4YH0P/JnUMHcSrgwABXIybFEmLobqiavc 9o1DINnxCbT7JcDozxMnTAxhdtYE+YSzAjYQgutJObhmLIh/ -----END CERTIFICATE-----Generated at Sun May 11 08:19:10 2025 by rpki-client