$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/26f27e62-9311-3cb6-b89c-32811c105c4d.roa File: 26f27e62-9311-3cb6-b89c-32811c105c4d.roa (raw, json) Hash identifier: mY/c1K7I+GE7ixzAhfNekWZD5KnkbZgwiDHi9dQ2qbY= Subject key identifier: DF:EE:4E:E2:C2:DE:8D:A5:57:B5:52:02:AB:B7:FB:50:98:F1:C8:C8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858494CC94BF7BC3045C2AF72A340 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/26f27e62-9311-3cb6-b89c-32811c105c4d.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 0 IP address blocks: 2620:74:8c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:4b:f7:bc:30:45:c2:af:72:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=3c598493-f6df-47d7-a644-47a5b505ad54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2e:c1:d6:42:3d:93:3d:ee:a7:84:12:44:72: ed:86:26:3c:c1:b2:aa:1d:c9:b8:73:7a:8f:c1:25: 0e:ca:35:9e:ad:ff:64:cc:b6:cb:7e:65:94:a0:7a: 5e:6b:8e:a7:28:2a:a5:05:ca:90:6f:ab:46:48:d8: 1f:bb:11:57:55:bd:71:e4:ff:07:89:38:32:cc:51: 6f:9e:43:99:95:02:3d:d3:ee:4a:b8:79:fa:f2:3f: 4f:dc:42:b2:62:86:58:58:70:89:42:fa:cc:8a:c3: f7:0d:a8:c6:5d:c0:5c:31:56:2b:98:21:88:5f:65: c1:25:ec:ba:1c:76:d0:50:d7:7e:28:0b:09:9b:a3: b2:7a:75:49:9e:54:bc:95:38:a6:16:93:a6:c6:4b: 8e:bd:c1:37:cb:9d:90:6e:e4:e7:db:8d:23:6b:9e: 99:f6:75:37:1c:49:f2:17:03:75:95:dc:0b:7d:ee: 20:16:9d:a0:1c:2c:f2:48:53:1b:0f:a3:17:19:aa: 92:77:15:db:7f:9f:f7:30:f2:d1:96:c0:9c:47:76: 43:53:39:f6:0c:6d:39:ab:73:3b:78:7a:93:4d:5e: f2:b5:50:36:ab:40:cf:b2:1b:52:da:de:d9:33:f3: aa:91:ce:4b:fe:86:f4:56:86:fb:f3:1b:49:51:0a: 35:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EE:4E:E2:C2:DE:8D:A5:57:B5:52:02:AB:B7:FB:50:98:F1:C8:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/26f27e62-9311-3cb6-b89c-32811c105c4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:8c::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:a2:e2:d9:da:63:7a:7e:63:f0:c2:fb:60:9c:88:34:18:31: e4:54:a3:91:f6:f6:da:18:37:a2:59:77:f8:94:a8:57:56:f1: 2d:f3:18:cd:42:6f:d0:32:93:f4:15:2c:47:9e:e6:ea:e5:bb: 81:ef:35:00:dc:6e:81:8f:7d:98:74:58:f3:74:30:66:8f:95: ea:74:60:ce:82:a6:4a:71:4f:dd:27:47:3b:4a:25:e5:66:b1: 5a:78:62:ef:31:a8:04:f1:69:b0:ce:5d:0a:f1:07:86:6a:a0: d5:98:f1:62:c5:ef:9a:d2:28:4b:04:4b:1b:43:9b:58:15:81: 62:fe:87:48:28:0c:6f:e0:a2:d6:0c:c1:77:42:d1:92:48:ab: c7:4e:e8:eb:c3:85:c3:8d:b9:5e:1e:89:9b:1e:12:04:73:5b: 0a:eb:cf:03:57:18:cb:c3:46:ae:6c:0f:4c:03:44:88:50:c2: c2:62:72:d6:ea:ba:01:29:90:2c:b3:63:8d:f2:08:71:67:3c: 72:7f:0a:1e:fa:4c:0e:ae:4d:0f:5d:87:9e:56:1e:69:3d:f0: 65:72:50:e3:97:b1:1a:c3:e6:98:c2:0f:7d:ba:54:20:aa:2a: 55:f3:69:07:04:51:32:a9:8d:c3:bc:bb:6d:75:d5:67:4f:9d: 4d:c1:0b:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElMyUv3vDBFwq9yo0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk M2M1OTg0OTMtZjZkZi00N2Q3LWE2NDQtNDdhNWI1MDVhZDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly7B1kI9kz3up4QSRHLthiY8wbKqHcm4c3qP wSUOyjWerf9kzLbLfmWUoHpea46nKCqlBcqQb6tGSNgfuxFXVb1x5P8HiTgyzFFv nkOZlQI90+5KuHn68j9P3EKyYoZYWHCJQvrMisP3DajGXcBcMVYrmCGIX2XBJey6 HHbQUNd+KAsJm6OyenVJnlS8lTimFpOmxkuOvcE3y52QbuTn240ja56Z9nU3HEny FwN1ldwLfe4gFp2gHCzySFMbD6MXGaqSdxXbf5/3MPLRlsCcR3ZDUzn2DG05q3M7 eHqTTV7ytVA2q0DPshtS2t7ZM/Oqkc5L/ob0Vob78xtJUQo1CwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN/uTuLC3o2lV7VSAqu3+1CY8cjIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjZmMjdlNjItOTMxMS0z Y2I2LWI4OWMtMzI4MTFjMTA1YzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJiAAdACM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADCi4tnaY3p+Y/DC+2CciDQYMeRUo5H29toYN6JZd/iUqFdW8S3z GM1Cb9Ayk/QVLEee5urlu4HvNQDcboGPfZh0WPN0MGaPlep0YM6CpkpxT90nRztK JeVmsVp4Yu8xqATxabDOXQrxB4ZqoNWY8WLF75rSKEsESxtDm1gVgWL+h0goDG/g otYMwXdC0ZJIq8dO6OvDhcONuV4eiZseEgRzWwrrzwNXGMvDRq5sD0wDRIhQwsJi ctbqugEpkCyzY43yCHFnPHJ/Ch76TA6uTQ9dh55WHmk98GVyUOOXsRrD5pjCD326 VCCqKlXzaQcEUTKpjcO8u2111WdPnU3BC/g= -----END CERTIFICATE-----Generated at Fri Apr 11 23:52:54 2025 by rpki-client