$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b2ab63a-b496-3a3b-bd0d-f775308498aa.roa File: 0b2ab63a-b496-3a3b-bd0d-f775308498aa.roa (raw, json) Hash identifier: rNCOwrKgIue7aYsFyqSiEs35VP3y7/7P9xi2wvB6eIM= Subject key identifier: 17:27:24:7A:34:75:7C:02:1A:69:89:96:03:01:E0:85:48:DA:29:59 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849194193A3CEFE1A70898A8780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b2ab63a-b496-3a3b-bd0d-f775308498aa.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 397210 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:93:a3:ce:fe:1a:70:89:8a:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=64f1e98d-73cc-4d56-be35-a2f228683b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e0:40:2b:78:26:e1:a4:38:19:29:c3:eb:a9: 50:8b:e3:69:06:89:c2:bd:86:bc:bf:55:b7:42:0f: e9:d3:2e:82:5e:4f:e2:34:ed:78:5d:76:7d:ca:28: a0:f3:d3:4d:b4:77:2a:da:7d:f1:a6:45:ab:d0:9b: 09:83:f0:28:ec:1e:66:83:98:ee:6f:3b:2d:6e:5b: 82:62:4e:fc:eb:96:ab:48:85:56:e7:f0:64:7c:b6: 36:23:51:1f:e1:59:a0:36:42:fd:2a:60:8a:5c:81: c7:b1:ca:ed:db:65:cd:8b:fa:e3:c0:f2:75:d7:25: 8d:7a:4d:46:74:db:56:89:0d:86:69:d7:f0:bf:d9: 80:82:df:65:1d:95:26:be:b8:e7:ba:c2:7f:2b:a8: 41:4c:78:5e:63:d4:cf:27:6a:c3:fd:43:72:52:e9: 70:6a:ec:b5:b4:54:62:4e:57:12:63:cf:23:3d:36: 5c:e0:6b:0c:86:2b:2f:f0:52:e7:7d:00:9a:99:95: 46:4d:1c:c8:1f:e2:fc:9e:fd:e4:e3:d6:08:a9:bf: 0e:fe:57:e3:07:dd:02:53:ab:17:8c:6c:d0:46:5d: ff:7b:22:9a:54:54:b3:d2:ad:ba:ef:83:be:f5:5e: 56:1b:50:51:1f:8b:30:9e:c9:51:56:d2:89:f5:54: 84:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:27:24:7A:34:75:7C:02:1A:69:89:96:03:01:E0:85:48:DA:29:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b2ab63a-b496-3a3b-bd0d-f775308498aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:c8:c6:97:d2:a0:6a:0c:f8:d6:86:4f:fc:4a:55:fb:82:47: 25:77:11:33:4e:92:0a:31:d0:67:5a:f1:cf:0b:a9:64:ca:18: 2e:9e:2f:b6:3b:2b:b4:4e:27:b0:ee:05:43:c9:85:96:f8:34: 3a:a4:24:46:dd:d9:71:57:aa:47:ad:bf:bd:a2:aa:0d:64:e3: 8d:97:43:37:aa:7a:8c:a6:ec:7c:d9:e8:7d:46:7f:61:f7:da: c7:d4:b3:c5:17:3a:44:93:49:f4:13:d9:da:23:18:ba:1a:da: a7:43:49:0c:4d:79:0d:18:98:99:cb:c1:d8:c9:1a:b3:61:d7: cb:50:82:28:1a:6e:7e:7d:29:36:26:de:49:7c:c6:9b:62:13: 07:e5:b8:8b:f3:e9:6a:b4:7f:56:d8:0f:bc:01:d0:ed:98:67: 26:ad:74:51:51:b1:5a:57:6a:03:63:c9:d7:ba:c1:60:46:63: 59:3c:8e:b1:e2:b6:a5:5a:fc:c8:bc:a8:c5:ce:10:98:a4:c7: c2:16:ed:a3:0a:73:ca:cd:30:13:ae:80:63:c4:ef:43:ec:fc: 04:36:ac:ff:af:82:35:2b:c4:da:dd:07:47:06:62:df:98:db: ad:1c:de:8f:89:92:e1:bf:7c:4a:8b:cc:67:14:3d:0a:21:7f: d1:81:b9:f2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkZQZOjzv4acImKh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk NjRmMWU5OGQtNzNjYy00ZDU2LWJlMzUtYTJmMjI4NjgzYjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeBAK3gm4aQ4GSnD66lQi+NpBonCvYa8v1W3 Qg/p0y6CXk/iNO14XXZ9yiig89NNtHcq2n3xpkWr0JsJg/Ao7B5mg5jubzstbluC Yk7865arSIVW5/BkfLY2I1Ef4VmgNkL9KmCKXIHHscrt22XNi/rjwPJ11yWNek1G dNtWiQ2Gadfwv9mAgt9lHZUmvrjnusJ/K6hBTHheY9TPJ2rD/UNyUulwauy1tFRi TlcSY88jPTZc4GsMhisv8FLnfQCamZVGTRzIH+L8nv3k49YIqb8O/lfjB90CU6sX jGzQRl3/eyKaVFSz0q2674O+9V5WG1BRH4swnslRVtKJ9VSEnwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBcnJHo0dXwCGmmJlgMB4IVI2ilZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGIyYWI2M2EtYjQ5Ni0z YTNiLWJkMGQtZjc3NTMwODQ5OGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBDyMaX0qBqDPjWhk/8SlX7gkcldxEzTpIKMdBn WvHPC6lkyhguni+2Oyu0Tiew7gVDyYWW+DQ6pCRG3dlxV6pHrb+9oqoNZOONl0M3 qnqMpux82eh9Rn9h99rH1LPFFzpEk0n0E9naIxi6GtqnQ0kMTXkNGJiZy8HYyRqz YdfLUIIoGm5+fSk2Jt5JfMabYhMH5biL8+lqtH9W2A+8AdDtmGcmrXRRUbFaV2oD Y8nXusFgRmNZPI6x4ralWvzIvKjFzhCYpMfCFu2jCnPKzTATroBjxO9D7PwENqz/ r4I1K8Ta3QdHBmLfmNutHN6PiZLhv3xKi8xnFD0KIX/Rgbny -----END CERTIFICATE-----Generated at Fri Apr 11 22:27:50 2025 by rpki-client