$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd2672cb-ea7b-3db3-8538-a969394a19b4.roa File: fd2672cb-ea7b-3db3-8538-a969394a19b4.roa (raw, json) Hash identifier: 2KWXlFkuXN2Uy6OQ3djmLAqfLaRlXeLs3yfSC+RYeTQ= Subject key identifier: 16:97:AA:16:4A:D3:DF:2B:C4:F4:9F:DA:A2:AB:81:DF:80:91:87:BB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A30BA8AF57DBD49E55CC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd2672cb-ea7b-3db3-8538-a969394a19b4.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 211369 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:30:ba:8a:f5:7d:bd:49:e5:5c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=b6ca7bff-d9cb-4963-aba9-8d5c19292ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:35:37:07:c2:fc:2e:bf:e4:8a:96:de:8f:1a: 75:c0:79:86:ca:20:2c:0d:ac:aa:5e:a9:d3:44:e3: a2:f9:5b:ba:73:5c:e1:b7:22:7c:5a:8a:76:9e:9e: 3c:2a:4a:56:5e:a8:e4:36:8d:cd:a3:4e:5e:10:0a: cb:d7:97:a1:6e:ec:8e:fc:91:5c:09:f2:13:e1:4c: f4:dc:ff:a0:46:a2:de:a9:3f:be:9a:af:db:55:6b: 46:d5:22:d0:90:29:72:6f:08:4d:c5:13:37:b2:1b: 5a:e5:4e:df:0e:e7:8c:86:50:50:0f:c7:85:82:a6: 26:b5:e2:61:c8:e2:3e:36:b3:92:99:40:59:e7:33: 76:9c:54:7d:64:92:ef:0a:fb:ae:74:e5:ed:4d:2d: ba:e5:0c:27:93:00:5e:e5:0b:5a:9c:8b:b3:6e:d6: e8:9c:37:16:9e:d7:11:47:3d:9f:8f:de:c9:40:a7: 4c:d2:7f:bc:93:f5:ad:af:df:58:25:48:1b:a0:0d: 4d:d5:88:41:96:6e:42:66:bc:a2:b4:eb:0a:3d:54: 8a:4a:2a:92:88:ab:58:ac:36:b5:bf:e5:56:de:7b: aa:1a:b2:37:10:ab:4d:b5:5e:23:b7:b2:3f:96:d2: 17:d5:e8:15:c8:f6:93:dd:f4:0c:a3:c6:1d:52:0b: a9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:97:AA:16:4A:D3:DF:2B:C4:F4:9F:DA:A2:AB:81:DF:80:91:87:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd2672cb-ea7b-3db3-8538-a969394a19b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:c7:c9:18:33:54:fa:e7:35:bd:27:72:90:3e:b0:d5:c7:39: e7:e9:7b:2c:32:6c:e9:42:9e:0a:7c:bd:76:78:14:f2:4e:ff: f5:76:39:a0:4c:76:1f:82:aa:66:15:b4:34:11:f4:dc:f3:c1: 46:5e:87:09:7b:a7:f6:9c:30:03:49:85:61:57:ea:27:5a:09: 2b:8e:86:0a:5c:92:06:3b:80:14:18:32:06:2b:11:e0:70:36: 21:7d:30:69:51:cb:bc:09:30:28:96:71:24:c3:d8:cb:fc:8c: 08:63:1d:41:95:33:7e:3d:da:19:26:1b:42:1b:93:af:7a:b2: bc:24:3c:68:95:d6:f5:7d:a0:98:c0:87:d2:70:c1:d1:43:f6: 10:f7:6c:2d:10:69:1d:29:58:09:ea:e2:a5:1f:76:31:69:5e: 1e:a3:22:41:74:47:4f:6c:6e:02:53:cc:59:98:be:ba:92:03: 57:c0:7d:5d:17:3f:30:f7:78:f3:1b:ef:e2:67:80:c2:31:d4: 67:bf:0b:9b:87:ef:53:88:a3:b5:cd:e9:02:4a:0a:5a:62:b9: 5c:5b:5f:39:de:5f:46:5b:77:a2:b1:5f:b9:42:fc:6d:55:29: 87:10:e7:ec:7d:44:d3:a8:46:7a:82:a0:32:b4:97:8b:58:9e: 54:b8:ee:0d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSjC6ivV9vUnlXMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YjZjYTdiZmYtZDljYi00OTYzLWFiYTktOGQ1YzE5MjkyYWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszU3B8L8Lr/kipbejxp1wHmGyiAsDayqXqnT ROOi+Vu6c1zhtyJ8Wop2np48KkpWXqjkNo3No05eEArL15ehbuyO/JFcCfIT4Uz0 3P+gRqLeqT++mq/bVWtG1SLQkClybwhNxRM3shta5U7fDueMhlBQD8eFgqYmteJh yOI+NrOSmUBZ5zN2nFR9ZJLvCvuudOXtTS265QwnkwBe5QtanIuzbtbonDcWntcR Rz2fj97JQKdM0n+8k/Wtr99YJUgboA1N1YhBlm5CZryitOsKPVSKSiqSiKtYrDa1 v+VW3nuqGrI3EKtNtV4jt7I/ltIX1egVyPaT3fQMo8YdUgupfwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBaXqhZK098rxPSf2qKrgd+AkYe7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmQyNjcyY2ItZWE3Yi0z ZGIzLTg1MzgtYTk2OTM5NGExOWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQApx8kYM1T65zW9J3KQPrDVxznn6XssMmzpQp4K fL12eBTyTv/1djmgTHYfgqpmFbQ0EfTc88FGXocJe6f2nDADSYVhV+onWgkrjoYK XJIGO4AUGDIGKxHgcDYhfTBpUcu8CTAolnEkw9jL/IwIYx1BlTN+PdoZJhtCG5Ov erK8JDxoldb1faCYwIfScMHRQ/YQ92wtEGkdKVgJ6uKlH3YxaV4eoyJBdEdPbG4C U8xZmL66kgNXwH1dFz8w93jzG+/iZ4DCMdRnvwubh+9TiKO1zekCSgpaYrlcW185 3l9GW3eisV+5QvxtVSmHEOfsfUTTqEZ6gqAytJeLWJ5UuO4N -----END CERTIFICATE-----Generated at Sun May 11 05:26:49 2025 by rpki-client