$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/192eaff7-97f0-3a92-8759-3880ed2af9b3.roa File: 192eaff7-97f0-3a92-8759-3880ed2af9b3.roa (raw, json) Hash identifier: HpVRCpdoxhqwLEyh14EbtcEWtzg8HfcurDH6ryBOu28= Subject key identifier: 32:28:15:49:57:19:68:2D:CD:A2:63:F6:9B:BF:7E:A2:5E:8D:76:FA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848EF615093D4F6713881B14CC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/192eaff7-97f0-3a92-8759-3880ed2af9b3.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 7342 IP address blocks: 2620:74:5b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:50:93:d4:f6:71:38:81:b1:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=34cb2009-c50f-402d-980b-0ad5c0a4fb2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:00:c9:1b:b0:31:58:4f:94:15:9a:57:18:34: 71:d7:bf:ae:24:ed:4c:25:7f:b0:c4:46:21:71:7c: bc:ad:e4:0d:22:93:ce:cf:3b:7c:d9:cc:16:c4:21: d8:8e:31:d6:b9:9a:61:21:c7:dd:0e:06:0b:41:71: d9:0b:24:87:66:d1:62:59:c5:46:3f:43:e9:ba:0c: a6:24:f2:28:81:f7:64:0e:f9:4d:d4:60:c6:60:48: ba:36:a1:a4:57:94:d7:29:ff:a2:9c:c6:47:a7:19: 64:38:6a:6f:c8:57:c0:e4:e1:da:4d:e7:69:74:37: 15:0c:74:e9:30:fd:3a:75:1c:4d:39:00:ca:13:97: 54:73:a1:72:28:89:92:93:2e:54:cc:e9:8b:20:d4: 12:85:49:bd:fa:ea:b3:b7:03:42:75:38:a7:1e:5d: 43:28:d8:ab:f3:4d:2d:3b:ef:a0:2f:8d:51:be:59: 0a:25:01:e4:70:b6:79:2e:33:24:60:f2:6e:e0:39: 5a:6a:a5:9b:46:b6:ab:4c:1d:9a:1b:80:a7:f5:91: c1:0c:8d:5b:89:ab:31:d7:27:8d:c1:9f:f7:da:4a: d0:49:b2:bf:3b:db:41:fe:af:6e:f1:77:2a:08:d0: db:18:6d:6d:7c:bd:9e:da:e0:aa:2d:01:c2:77:6f: 90:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:28:15:49:57:19:68:2D:CD:A2:63:F6:9B:BF:7E:A2:5E:8D:76:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/192eaff7-97f0-3a92-8759-3880ed2af9b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:5b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f9:1e:1c:8f:36:7d:c3:04:4e:1a:09:98:28:3f:20:44:e7: 63:27:ec:2c:6c:d4:26:4f:67:98:2c:9a:00:d3:73:e3:fa:be: 8f:52:e3:b5:e3:2c:c6:18:41:a9:91:56:89:ca:c5:5f:b8:e9: af:23:ab:87:56:d6:6a:d8:21:ca:24:c6:14:37:d3:3a:85:59: eb:19:7f:b4:88:53:44:1d:d3:43:f5:10:73:9a:88:90:44:a0: 55:a1:42:8b:15:3d:11:d4:1b:d1:f8:a6:05:28:6c:3a:ca:17: c3:d4:1d:e7:81:0e:7c:58:c8:5e:93:6a:48:52:85:11:b7:f5: 20:4b:ea:30:40:1c:e9:02:da:2d:5b:51:7d:e3:33:a7:e2:f5: bb:8b:f2:35:7b:36:f3:42:f8:b5:db:f5:46:bb:99:eb:a2:01: 02:67:94:8e:37:a3:d5:4c:48:1d:b1:3d:c2:ea:ba:f1:46:25: be:73:7d:51:1d:b6:cb:b3:bf:74:f9:d7:a0:0a:75:9c:51:8e: 99:0b:d4:8f:fd:5c:61:14:79:c1:bf:71:27:e8:22:83:e7:a0: b3:0d:35:64:b2:72:74:2f:79:19:7d:be:e7:00:95:c5:e1:0c: 3d:e8:30:6f:87:3f:61:ec:56:6c:d1:e6:39:ff:25:cd:da:b8: 38:93:4e:08 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjvYVCT1PZxOIGxTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk MzRjYjIwMDktYzUwZi00MDJkLTk4MGItMGFkNWMwYTRmYjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQDJG7AxWE+UFZpXGDRx17+uJO1MJX+wxEYh cXy8reQNIpPOzzt82cwWxCHYjjHWuZphIcfdDgYLQXHZCySHZtFiWcVGP0Ppugym JPIogfdkDvlN1GDGYEi6NqGkV5TXKf+inMZHpxlkOGpvyFfA5OHaTedpdDcVDHTp MP06dRxNOQDKE5dUc6FyKImSky5UzOmLINQShUm9+uqztwNCdTinHl1DKNir800t O++gL41RvlkKJQHkcLZ5LjMkYPJu4DlaaqWbRrarTB2aG4Cn9ZHBDI1biasx1yeN wZ/32krQSbK/O9tB/q9u8XcqCNDbGG1tfL2e2uCqLQHCd2+QRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDIoFUlXGWgtzaJj9pu/fqJejXb6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTkyZWFmZjctOTdmMC0z YTkyLTg3NTktMzg4MGVkMmFmOWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAr5HhyPNn3DBE4aCZgoPyBE52Mn7Cxs1CZPZ5gsmgDTc+P6vo9S 47XjLMYYQamRVonKxV+46a8jq4dW1mrYIcokxhQ30zqFWesZf7SIU0Qd00P1EHOa iJBEoFWhQosVPRHUG9H4pgUobDrKF8PUHeeBDnxYyF6TakhShRG39SBL6jBAHOkC 2i1bUX3jM6fi9buL8jV7NvNC+LXb9Ua7meuiAQJnlI43o9VMSB2xPcLquvFGJb5z fVEdtsuzv3T516AKdZxRjpkL1I/9XGEUecG/cSfoIoPnoLMNNWSycnQveRl9vucA lcXhDD3oMG+HP2HsVmzR5jn/Jc3auDiTTgg= -----END CERTIFICATE-----Generated at Wed Apr 9 01:13:41 2025 by rpki-client