$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c853e1d5-13ac-351a-9d88-98dde451d814.roa File: c853e1d5-13ac-351a-9d88-98dde451d814.roa (raw, json) Hash identifier: 3Og9MM3RC4A6imJS+j/Vzwy3LUcFwEk/Ukvqez57+YY= Subject key identifier: F4:BA:34:EB:A0:A7:10:27:CC:21:BD:A8:99:7C:2B:34:0C:B4:4D:11 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858490E16CF159FD460EDBFA77200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c853e1d5-13ac-351a-9d88-98dde451d814.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 7342 IP address blocks: 2620:74:47::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:cf:15:9f:d4:60:ed:bf:a7:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=946b88c0-e56c-4755-9d33-af9b625a19b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a7:1f:3b:41:04:68:99:4f:fb:1d:07:66:76: 33:25:d6:12:da:0a:f8:f0:d1:ca:1d:86:54:91:d4: 61:54:c6:9e:dc:71:12:c0:69:ed:b1:b4:46:36:2d: 68:e5:35:21:fb:19:ab:4c:88:91:50:77:e3:0e:68: b9:cc:8f:a6:98:82:23:24:bb:f5:3d:5f:09:50:66: cb:66:17:5b:33:ec:d3:30:04:ee:30:87:4b:e2:5c: ab:c3:4b:09:54:d0:4a:7e:25:19:fa:51:2b:3d:56: 45:68:44:b2:2e:a5:ff:71:e2:8c:68:cf:28:b6:fc: 44:34:a6:2a:86:24:7d:cd:46:61:05:b8:a7:cd:49: 2a:7f:b6:6b:b6:f4:9b:fd:03:54:65:aa:8f:57:fc: cb:9a:48:78:7a:2a:b9:bc:ff:f5:dd:9d:08:66:94: 07:59:2f:fe:56:3e:5d:ef:98:ee:5a:b7:1e:4f:f4: 7f:b0:58:23:f1:c9:54:d2:65:a7:97:52:61:cf:a1: 5d:c9:af:b1:7f:22:5c:9d:3a:0b:1f:ae:ea:a3:25: fb:f9:8f:3b:25:d7:b8:d6:54:28:26:7f:19:2f:c9: 9a:c9:65:5b:a6:bc:68:4b:bf:a0:f5:61:ca:ac:f0: d4:96:27:c0:a9:f8:37:10:c3:eb:fa:3a:10:e3:04: 32:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BA:34:EB:A0:A7:10:27:CC:21:BD:A8:99:7C:2B:34:0C:B4:4D:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c853e1d5-13ac-351a-9d88-98dde451d814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:47::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:ef:27:eb:2e:ee:26:39:ff:a8:e0:6d:92:f9:33:f9:b3:ae: f5:ad:a2:0c:ef:58:b1:f0:43:cc:08:ef:1b:ab:91:23:a4:20: 2f:02:2f:71:c8:62:05:24:b0:fc:6e:14:d5:5e:fa:91:5d:44: bb:66:73:66:d1:17:4e:b3:33:c5:fc:e0:03:21:ec:f0:f1:39: ab:c3:f9:ad:c5:9a:71:e3:dd:70:07:8b:fc:8e:54:bf:3e:96: ba:21:71:89:9e:6c:54:ee:a7:34:59:f7:93:98:4e:e9:a5:44: 8f:01:50:14:93:1a:0f:1d:12:61:0a:52:ed:15:9a:32:f5:86: 21:65:22:90:e1:5b:cc:d7:1c:1b:42:1f:de:a8:5f:bc:d8:f4: 89:88:e3:e2:a7:bd:99:f5:fa:9b:8a:65:ab:9a:94:21:c6:04: 61:7b:1e:97:f7:76:4d:7b:3b:c7:33:2c:16:3e:f7:56:4c:fd: 1b:5f:93:09:4f:8e:6d:e1:c4:43:62:d8:4f:50:d6:04:61:66: 99:90:10:76:d9:38:e8:d4:29:ac:17:f5:bd:8f:15:dd:42:b3: 80:b8:3e:f5:31:73:e7:ce:3b:63:d6:bd:67:f6:1f:48:4c:0e: a9:07:88:f8:9b:af:a0:86:46:95:f5:d3:63:2a:72:48:b7:d8: 10:90:38:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkOFs8Vn9Rg7b+ncgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk OTQ2Yjg4YzAtZTU2Yy00NzU1LTlkMzMtYWY5YjYyNWExOWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqcfO0EEaJlP+x0HZnYzJdYS2gr48NHKHYZU kdRhVMae3HESwGntsbRGNi1o5TUh+xmrTIiRUHfjDmi5zI+mmIIjJLv1PV8JUGbL ZhdbM+zTMATuMIdL4lyrw0sJVNBKfiUZ+lErPVZFaESyLqX/ceKMaM8otvxENKYq hiR9zUZhBbinzUkqf7ZrtvSb/QNUZaqPV/zLmkh4eiq5vP/13Z0IZpQHWS/+Vj5d 75juWrceT/R/sFgj8clU0mWnl1Jhz6Fdya+xfyJcnToLH67qoyX7+Y87Jde41lQo Jn8ZL8mayWVbprxoS7+g9WHKrPDUlifAqfg3EMPr+joQ4wQyDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPS6NOugpxAnzCG9qJl8KzQMtE0RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzg1M2UxZDUtMTNhYy0z NTFhLTlkODgtOThkZGU0NTFkODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFjvJ+su7iY5/6jgbZL5M/mzrvWtogzvWLHwQ8wI7xurkSOkIC8C L3HIYgUksPxuFNVe+pFdRLtmc2bRF06zM8X84AMh7PDxOavD+a3FmnHj3XAHi/yO VL8+lrohcYmebFTupzRZ95OYTumlRI8BUBSTGg8dEmEKUu0VmjL1hiFlIpDhW8zX HBtCH96oX7zY9ImI4+KnvZn1+puKZaualCHGBGF7Hpf3dk17O8czLBY+91ZM/Rtf kwlPjm3hxENi2E9Q1gRhZpmQEHbZOOjUKawX9b2PFd1Cs4C4PvUxc+fOO2PWvWf2 H0hMDqkHiPibr6CGRpX102Mqcki32BCQOJk= -----END CERTIFICATE-----Generated at Wed Apr 9 01:12:22 2025 by rpki-client