$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/76af494d-901b-314f-9aef-7c6615d3042b.roa File: 76af494d-901b-314f-9aef-7c6615d3042b.roa (raw, json) Hash identifier: HR5uvHA6SLHUst0tzWX6tOx36FlfDo1bW9jUjAFcTwc= Subject key identifier: 76:40:06:05:D1:82:F0:10:91:B3:16:BA:2A:96:DB:81:91:F4:40:F3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584913AC3F49958BA34D2F2E5C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/76af494d-901b-314f-9aef-7c6615d3042b.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 7342 IP address blocks: 2620:74:33::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:3f:49:95:8b:a3:4d:2f:2e:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=0e016c59-a158-43d1-95a5-ab1e01d8fe86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:80:90:23:36:60:3a:c8:0b:37:bc:01:a8:a1: 05:08:a9:62:88:cf:fa:8c:98:1f:09:1e:68:83:32: 92:39:76:1b:5b:5c:53:f4:13:61:57:28:8c:8a:f6: c0:54:ed:d8:79:1b:c1:4e:a8:d6:ee:46:54:9e:c8: 87:de:c1:f1:27:ea:3e:e1:5e:45:66:2a:5c:56:b3: e0:8f:c8:cc:d3:d8:73:f0:16:20:a4:09:b0:16:6e: 2d:c7:ec:0a:22:02:c9:cd:de:a8:8d:21:2e:7c:d0: 14:d8:ed:d6:28:9d:ef:57:de:8d:ec:59:fe:53:fa: 8d:83:e5:1c:5d:a0:0f:c8:ee:d7:41:69:c6:97:12: d8:a4:99:7e:b6:6d:71:35:f0:93:08:7b:51:5c:9c: 6a:68:b6:7f:70:a7:fa:c5:33:1b:db:65:28:2b:09: 49:92:c7:34:54:7e:d9:8d:df:c8:bf:0c:40:31:86: f0:fa:a5:ef:74:bb:b4:d6:cc:de:38:09:e1:13:d1: b3:b5:03:40:f1:f5:61:3e:bb:b5:bf:32:6e:87:70: 66:1e:ec:15:3a:85:c2:7e:4b:bd:81:7f:0f:23:80: cd:2a:21:70:9d:ed:5f:f9:af:70:cd:d8:e0:e1:1b: 0d:0b:a5:0f:31:79:26:44:54:83:df:48:12:24:5e: 1b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:40:06:05:D1:82:F0:10:91:B3:16:BA:2A:96:DB:81:91:F4:40:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/76af494d-901b-314f-9aef-7c6615d3042b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:33::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:d4:44:aa:90:20:5d:35:01:29:06:49:5d:69:b4:52:54:fc: bd:c6:f3:4a:7f:eb:17:07:29:eb:e6:a8:a6:2d:4c:cb:5d:cc: 62:da:91:82:ec:0c:1b:ce:c9:e3:e2:c3:69:8a:86:e0:90:4b: 54:42:b8:2e:3c:ed:2b:8d:e4:3c:1b:dc:21:57:0e:79:03:4e: f4:16:d0:be:8d:15:f1:54:18:f7:2b:35:2c:59:95:0a:33:23: 86:89:d9:fc:bf:1d:f8:ff:a4:ab:a8:26:02:f5:3d:04:26:e4: 22:01:82:5b:42:4d:0e:7d:25:95:dd:6d:36:d2:ce:1c:bf:ad: 4c:92:3e:3b:fa:3d:03:08:f3:e1:82:6b:56:b4:59:42:b9:5d: be:81:a5:8e:be:af:c3:97:26:ef:df:71:3b:84:73:80:4c:01: 42:cc:72:d7:d7:5a:36:59:d3:09:38:e6:41:a8:69:f1:21:0c: ac:61:b9:31:95:50:bc:f6:c2:28:24:5b:8b:74:79:aa:2e:b2: f9:cc:56:c8:5d:fa:29:b0:81:29:23:84:5d:de:19:81:bf:ef: ba:22:0a:d3:45:d8:c5:e7:e7:0d:e2:a8:2a:af:9c:1e:a7:50: 2f:b8:32:7f:2d:c1:f0:59:11:a6:fb:86:10:b0:bf:2a:fc:49: e0:46:5d:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkTrD9JlYujTS8uXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk MGUwMTZjNTktYTE1OC00M2QxLTk1YTUtYWIxZTAxZDhmZTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4CQIzZgOsgLN7wBqKEFCKliiM/6jJgfCR5o gzKSOXYbW1xT9BNhVyiMivbAVO3YeRvBTqjW7kZUnsiH3sHxJ+o+4V5FZipcVrPg j8jM09hz8BYgpAmwFm4tx+wKIgLJzd6ojSEufNAU2O3WKJ3vV96N7Fn+U/qNg+Uc XaAPyO7XQWnGlxLYpJl+tm1xNfCTCHtRXJxqaLZ/cKf6xTMb22UoKwlJksc0VH7Z jd/IvwxAMYbw+qXvdLu01szeOAnhE9GztQNA8fVhPru1vzJuh3BmHuwVOoXCfku9 gX8PI4DNKiFwne1f+a9wzdjg4RsNC6UPMXkmRFSD30gSJF4bpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHZABgXRgvAQkbMWuiqW24GR9EDzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzZhZjQ5NGQtOTAxYi0z MTRmLTlhZWYtN2M2NjE1ZDMwNDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE7URKqQIF01ASkGSV1ptFJU/L3G80p/6xcHKevmqKYtTMtdzGLa kYLsDBvOyePiw2mKhuCQS1RCuC487SuN5Dwb3CFXDnkDTvQW0L6NFfFUGPcrNSxZ lQozI4aJ2fy/Hfj/pKuoJgL1PQQm5CIBgltCTQ59JZXdbTbSzhy/rUySPjv6PQMI 8+GCa1a0WUK5Xb6BpY6+r8OXJu/fcTuEc4BMAULMctfXWjZZ0wk45kGoafEhDKxh uTGVULz2wigkW4t0eaousvnMVshd+imwgSkjhF3eGYG/77oiCtNF2MXn5w3iqCqv nB6nUC+4Mn8twfBZEab7hhCwvyr8SeBGXQo= -----END CERTIFICATE-----Generated at Wed Apr 9 00:50:23 2025 by rpki-client