$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cdb679e8-8c03-350b-8270-06d1a9a9216c.roa File: cdb679e8-8c03-350b-8270-06d1a9a9216c.roa (raw, json) Hash identifier: mENrmINUephZHxW9FAuuwSPJdjB7KgKvPv2Na/9Zf44= Subject key identifier: C2:82:83:88:ED:10:9B:3D:0A:0D:58:FB:B8:0C:28:5B:30:B0:95:DB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849350EBC4905EED5D85CE1E700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cdb679e8-8c03-350b-8270-06d1a9a9216c.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 7342 IP address blocks: 2620:74:64::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:bc:49:05:ee:d5:d8:5c:e1:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=5014b0ec-deb0-4faa-b5e3-1a99fcde6ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ff:60:c5:22:2f:83:c6:b2:83:e1:bb:30:3b: f5:bd:84:39:4c:34:9e:20:94:be:55:79:f8:f4:4f: 3b:6a:31:30:c8:b8:a4:5e:13:12:31:3b:1d:33:23: 75:9c:4a:62:5e:48:29:68:17:c7:75:ee:f4:30:1b: 83:53:cf:6d:b1:73:65:b6:47:07:06:88:dc:7b:d8: 8e:46:25:e4:fb:4b:84:41:0a:54:0f:67:c4:be:97: 0c:11:f2:0b:0f:0c:e0:95:9d:1e:fa:69:09:a5:15: d3:e4:9c:93:60:78:1e:8c:74:b9:ba:7c:78:37:86: 99:87:21:e0:a0:06:34:15:f2:30:c8:43:dd:85:4c: 1b:bb:d5:dc:f8:0b:e9:65:e8:40:be:42:fc:80:23: c8:4e:bf:a6:48:a1:83:28:93:62:fd:78:97:33:9f: bf:25:92:28:30:89:f8:c1:6b:63:65:8d:00:d3:73: b3:ac:69:b0:69:bb:1b:19:83:6f:67:8a:9b:e6:f0: 14:b7:ef:6d:a4:50:4b:db:8a:2d:57:f2:b8:7b:45: 6d:8c:c9:ed:9e:39:13:f9:0c:d2:9c:c7:50:3c:42: 75:42:de:70:a3:9c:c0:47:ec:c3:81:56:75:25:5f: fa:26:4d:b7:fd:4e:05:99:13:f8:93:03:b3:3e:f7: 4c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:82:83:88:ED:10:9B:3D:0A:0D:58:FB:B8:0C:28:5B:30:B0:95:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cdb679e8-8c03-350b-8270-06d1a9a9216c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:64::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:f0:76:c2:bb:1f:2e:e1:74:3b:a2:a6:1e:8d:1e:fe:02:b0: 8e:62:e2:a6:dd:ec:1e:f4:7b:50:2b:92:25:43:e3:6b:94:75: e9:11:fc:66:f8:02:23:8b:4e:f2:21:0d:0a:f3:8d:b0:28:47: a9:9b:ec:b7:df:dd:d0:0b:c6:03:27:fa:a2:d2:19:46:1d:e6: 29:48:45:15:b4:0d:9b:5f:c5:fb:97:3b:f0:d2:2b:f6:8b:51: 33:d0:7b:a1:19:e9:db:59:a2:60:67:cb:d3:5f:64:4f:d3:c1: 83:08:b2:10:e6:74:8f:c8:b9:8b:38:47:40:8d:5f:41:2f:94: b7:61:09:60:ed:28:2a:37:a2:7c:7b:7f:fd:9a:01:ca:64:b4: 4e:c4:da:fb:53:64:5d:96:4d:59:0f:1c:43:31:1e:dd:31:ae: 02:12:48:b4:9b:8f:e2:31:e0:ab:f7:d4:da:25:40:3f:9f:0f: 92:62:79:ce:44:da:83:fe:b3:77:40:66:9f:06:62:60:5f:73: 0e:14:70:ee:f7:75:cb:ed:49:75:94:41:35:f0:4f:9c:e8:a5: 00:a5:98:42:c7:b5:e2:64:6f:97:c2:00:be:9c:e9:27:41:f5: e6:00:91:68:2a:9c:5c:90:85:cf:76:d4:61:88:27:56:a4:fe: f7:96:db:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk1DrxJBe7V2Fzh5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk NTAxNGIwZWMtZGViMC00ZmFhLWI1ZTMtMWE5OWZjZGU2YWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv9gxSIvg8ayg+G7MDv1vYQ5TDSeIJS+VXn4 9E87ajEwyLikXhMSMTsdMyN1nEpiXkgpaBfHde70MBuDU89tsXNltkcHBojce9iO RiXk+0uEQQpUD2fEvpcMEfILDwzglZ0e+mkJpRXT5JyTYHgejHS5unx4N4aZhyHg oAY0FfIwyEPdhUwbu9Xc+AvpZehAvkL8gCPITr+mSKGDKJNi/XiXM5+/JZIoMIn4 wWtjZY0A03OzrGmwabsbGYNvZ4qb5vAUt+9tpFBL24otV/K4e0VtjMntnjkT+QzS nMdQPEJ1Qt5wo5zAR+zDgVZ1JV/6Jk23/U4FmRP4kwOzPvdMBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMKCg4jtEJs9Cg1Y+7gMKFswsJXbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2RiNjc5ZTgtOGMwMy0z NTBiLTgyNzAtMDZkMWE5YTkyMTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHfwdsK7Hy7hdDuiph6NHv4CsI5i4qbd7B70e1ArkiVD42uUdekR /Gb4AiOLTvIhDQrzjbAoR6mb7Lff3dALxgMn+qLSGUYd5ilIRRW0DZtfxfuXO/DS K/aLUTPQe6EZ6dtZomBny9NfZE/TwYMIshDmdI/IuYs4R0CNX0EvlLdhCWDtKCo3 onx7f/2aAcpktE7E2vtTZF2WTVkPHEMxHt0xrgISSLSbj+Ix4Kv31NolQD+fD5Ji ec5E2oP+s3dAZp8GYmBfcw4UcO73dcvtSXWUQTXwT5zopQClmELHteJkb5fCAL6c 6SdB9eYAkWgqnFyQhc921GGIJ1ak/veW2+8= -----END CERTIFICATE-----Generated at Wed Apr 9 01:10:33 2025 by rpki-client