$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/05dc3732-3ad0-3d3f-8b69-5a73b7e6b13f.roa File: 05dc3732-3ad0-3d3f-8b69-5a73b7e6b13f.roa (raw, json) Hash identifier: tACknXt16OdTCPFRjOYPuU0JvGYJrPnMF9ejzee73Vg= Subject key identifier: 53:F0:03:29:1E:45:F7:64:98:50:B7:BF:16:94:93:86:44:FA:9A:06 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848F9268BDC36E10FF7AACDD640 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/05dc3732-3ad0-3d3f-8b69-5a73b7e6b13f.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 396612 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:8b:dc:36:e1:0f:f7:aa:cd:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=4db38a63-0f0b-4dd3-9075-d9b3437275d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a3:c6:02:2a:a5:8f:00:58:b0:63:b5:1e:d1: e1:74:72:09:2d:70:b6:ec:55:25:d4:42:53:d6:83: 65:86:67:06:46:b2:f7:b1:67:16:90:64:ca:88:30: e7:1e:f7:4d:62:e4:18:45:4f:f7:e2:fa:a3:66:fd: 40:22:5c:19:55:7b:8d:6e:34:9f:8e:05:bb:a7:1c: 51:fe:15:c6:c9:ac:9c:0d:6e:73:59:0d:06:08:7c: 56:69:57:33:e0:52:43:d4:3e:4b:64:db:61:2d:cd: 9a:f6:f4:38:1c:5b:a6:40:44:1a:f9:19:e9:f8:c1: ad:e5:ea:c6:37:2e:ea:4b:49:0a:cd:bd:f2:40:fb: 2f:7e:29:6f:b9:f3:62:17:8b:8b:33:68:58:09:cd: 98:32:2a:92:fc:fb:22:56:38:10:b4:37:4f:1b:0d: 75:43:91:f6:45:48:e7:32:1f:6c:81:69:2c:a8:84: cc:5d:c6:fc:24:51:07:c5:4f:15:19:c5:c2:d7:c9: de:3d:69:e0:6c:a6:aa:29:3c:f3:3a:71:b9:d6:17: d1:d0:bf:bb:f4:16:ae:cc:09:2f:12:99:64:c7:ee: 26:82:54:32:56:1b:69:51:97:22:00:d9:05:63:e4: df:09:2c:89:28:6f:c9:e9:21:37:6d:9b:2c:9b:5b: f8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F0:03:29:1E:45:F7:64:98:50:B7:BF:16:94:93:86:44:FA:9A:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/05dc3732-3ad0-3d3f-8b69-5a73b7e6b13f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:f6:36:22:2c:3a:23:50:35:21:f3:51:b0:a1:26:ca:15:c6: b6:6f:69:f1:a4:8d:82:0b:e0:42:09:1c:56:e0:0a:6b:b6:d7: c2:69:b1:93:7b:11:6f:72:24:78:f0:86:22:ad:21:85:00:8d: d2:ae:53:d0:2a:6e:38:56:6f:b2:3a:13:e4:fb:6d:91:3f:f7: 66:f5:aa:0e:63:51:15:bc:7d:0d:de:49:92:cd:6c:77:63:7f: 2a:5d:64:5f:96:81:25:9c:a1:ba:e3:77:1b:09:af:fa:2d:41: 72:cb:86:dd:45:98:4a:73:46:45:f3:cd:05:1a:c2:64:b6:43: ce:cd:e9:22:ca:03:56:74:7b:b9:ba:78:48:27:db:fa:e4:7c: 4d:2a:03:24:01:5d:4c:cb:f5:ac:aa:6b:32:07:62:3f:01:9a: 17:2d:b8:da:5a:29:a3:f4:06:5e:7f:5d:19:45:d9:f5:d9:6b: 26:6c:42:74:b0:be:37:5e:df:ec:53:fc:3f:c5:de:4b:fc:b0: 94:61:8b:66:1b:69:e1:ad:36:92:4e:d8:7f:af:d9:e5:16:aa: 8d:66:a4:c2:0c:aa:5e:52:5a:bf:7a:ed:34:97:d8:2a:f8:9b: d7:cf:c1:d4:b5:27:e9:17:ce:ef:fb:71:d4:3e:e5:0f:88:7c: 8b:fc:ac:13 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEj5JovcNuEP96rN1kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NGRiMzhhNjMtMGYwYi00ZGQzLTkwNzUtZDliMzQzNzI3NWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06PGAiqljwBYsGO1HtHhdHIJLXC27FUl1EJT 1oNlhmcGRrL3sWcWkGTKiDDnHvdNYuQYRU/34vqjZv1AIlwZVXuNbjSfjgW7pxxR /hXGyaycDW5zWQ0GCHxWaVcz4FJD1D5LZNthLc2a9vQ4HFumQEQa+Rnp+MGt5erG Ny7qS0kKzb3yQPsvfilvufNiF4uLM2hYCc2YMiqS/PsiVjgQtDdPGw11Q5H2RUjn Mh9sgWksqITMXcb8JFEHxU8VGcXC18nePWngbKaqKTzzOnG51hfR0L+79BauzAkv Eplkx+4mglQyVhtpUZciANkFY+TfCSyJKG/J6SE3bZssm1v4ywIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFPwAykeRfdkmFC3vxaUk4ZE+poGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDVkYzM3MzItM2FkMC0z ZDNmLThiNjktNWE3M2I3ZTZiMTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCJ9jYiLDojUDUh81GwoSbKFca2b2nxpI2CC+BC CRxW4AprttfCabGTexFvciR48IYirSGFAI3SrlPQKm44Vm+yOhPk+22RP/dm9aoO Y1EVvH0N3kmSzWx3Y38qXWRfloElnKG643cbCa/6LUFyy4bdRZhKc0ZF880FGsJk tkPOzekiygNWdHu5unhIJ9v65HxNKgMkAV1My/WsqmsyB2I/AZoXLbjaWimj9AZe f10ZRdn12WsmbEJ0sL43Xt/sU/w/xd5L/LCUYYtmG2nhrTaSTth/r9nlFqqNZqTC DKpeUlq/eu00l9gq+JvXz8HUtSfpF87v+3HUPuUPiHyL/KwT -----END CERTIFICATE-----Generated at Sat Apr 12 01:41:14 2025 by rpki-client