$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3bed7749-8944-3289-992d-aa045aa49c81.roa File: 3bed7749-8944-3289-992d-aa045aa49c81.roa (raw, json) Hash identifier: sOJE1xmvXMunL++rbwl/8ETOuzKkdcg67pv1ORuQYT0= Subject key identifier: 67:A7:3B:51:A2:FD:5D:05:16:5B:B5:C2:22:F3:D1:C4:E2:D0:84:03 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584961B9A6C3408F96295F058880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3bed7749-8944-3289-992d-aa045aa49c81.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 396595 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:a6:c3:40:8f:96:29:5f:05:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=6218965e-16c4-49b7-bb2c-1f7f5812de4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3a:7b:68:eb:c1:d3:26:e6:02:56:6a:cc:e5: a5:ce:94:0c:c6:d5:27:b2:18:34:e7:13:d4:fb:fa: a7:19:1e:54:b0:fd:5f:c0:77:bc:9e:99:48:9a:4e: e7:49:84:a7:71:30:9f:d3:86:1a:3f:69:b3:86:66: 82:7f:2b:60:65:5b:43:c6:8a:8c:fb:7f:60:06:bc: 14:c3:8e:c9:cd:af:da:ff:6f:f5:39:96:c3:ea:1d: 2c:f8:cb:3c:62:59:b0:b3:c9:a6:70:6f:17:b1:c6: 2d:13:aa:e4:82:fd:0b:bd:5c:8c:91:cd:9e:06:04: 72:72:04:4c:13:83:50:72:72:39:67:dd:ef:46:cd: ce:0e:3b:0c:fa:71:b8:54:48:1f:8a:4a:d3:85:57: 0d:d4:6c:48:18:c5:86:25:4a:78:e5:cb:02:fb:9c: 92:73:83:c1:44:e2:43:db:58:c4:b7:4f:67:34:46: be:87:03:e0:91:3e:34:fa:1b:45:96:01:ce:7d:b6: 12:62:64:5a:c8:83:8c:cd:f4:f9:25:92:0b:08:72: cd:4c:59:0b:55:aa:19:6d:d1:99:f4:94:dc:fb:31: 57:c1:ef:fb:35:36:da:cc:ab:48:c4:ef:26:3e:a0: 26:19:89:87:49:86:3a:bf:c3:35:52:2f:41:a6:6e: 31:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A7:3B:51:A2:FD:5D:05:16:5B:B5:C2:22:F3:D1:C4:E2:D0:84:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3bed7749-8944-3289-992d-aa045aa49c81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:c0:ec:12:7b:e0:8c:45:19:38:2c:43:89:5d:f1:4e:26:5f: ae:ea:d5:f4:4e:6a:0d:00:0a:39:ea:c3:54:12:52:a4:9d:e1: f5:43:03:0a:89:0f:46:60:2f:aa:12:43:0f:5b:51:38:26:10: f2:bf:60:12:64:5c:4a:f8:02:37:f8:15:17:c4:8e:98:9c:f3: a8:25:0d:14:da:67:9f:56:9b:94:44:c3:1f:22:fb:85:b9:7e: 33:6e:ae:18:81:db:d2:f9:58:c6:4d:0b:30:3f:03:d8:e5:ab: 11:ef:70:14:c1:aa:c5:93:e2:7e:e1:48:c6:5e:02:41:44:4e: c0:a5:b8:75:3a:b1:3d:e8:ac:f1:e6:24:76:b3:26:e7:b0:9b: a9:6e:a4:77:ac:98:35:f6:c4:8d:54:4b:2d:ac:33:3b:f6:2c: 3d:65:4e:e0:11:0b:93:1d:24:fa:d6:b2:52:33:de:fa:03:99: 9d:3f:24:a0:4d:90:4d:1b:7c:a8:88:41:16:d4:d2:57:e7:b8: 36:b4:54:95:43:90:1c:2e:65:ee:b0:31:95:23:c9:67:4c:6e: a4:46:d6:09:5f:5b:32:e2:e4:70:25:cb:17:8e:e3:4a:71:1c: 5a:0d:47:e0:1a:9d:06:03:71:d1:71:ea:ce:79:c6:25:27:e5: 0c:a2:87:01 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWElhuabDQI+WKV8FiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk NjIxODk2NWUtMTZjNC00OWI3LWJiMmMtMWY3ZjU4MTJkZTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTp7aOvB0ybmAlZqzOWlzpQMxtUnshg05xPU +/qnGR5UsP1fwHe8nplImk7nSYSncTCf04YaP2mzhmaCfytgZVtDxoqM+39gBrwU w47Jza/a/2/1OZbD6h0s+Ms8Ylmws8mmcG8XscYtE6rkgv0LvVyMkc2eBgRycgRM E4NQcnI5Z93vRs3ODjsM+nG4VEgfikrThVcN1GxIGMWGJUp45csC+5ySc4PBROJD 21jEt09nNEa+hwPgkT40+htFlgHOfbYSYmRayIOMzfT5JZILCHLNTFkLVaoZbdGZ 9JTc+zFXwe/7NTbazKtIxO8mPqAmGYmHSYY6v8M1Ui9Bpm4xAwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGenO1Gi/V0FFlu1wiLz0cTi0IQDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2JlZDc3NDktODk0NC0z Mjg5LTk5MmQtYWEwNDVhYTQ5YzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBdwOwSe+CMRRk4LEOJXfFOJl+u6tX0TmoNAAo5 6sNUElKkneH1QwMKiQ9GYC+qEkMPW1E4JhDyv2ASZFxK+AI3+BUXxI6YnPOoJQ0U 2mefVpuURMMfIvuFuX4zbq4YgdvS+VjGTQswPwPY5asR73AUwarFk+J+4UjGXgJB RE7Apbh1OrE96Kzx5iR2sybnsJupbqR3rJg19sSNVEstrDM79iw9ZU7gEQuTHST6 1rJSM976A5mdPySgTZBNG3yoiEEW1NJX57g2tFSVQ5AcLmXusDGVI8lnTG6kRtYJ X1sy4uRwJcsXjuNKcRxaDUfgGp0GA3HRcerOecYlJ+UMoocB -----END CERTIFICATE-----Generated at Fri Apr 11 22:15:47 2025 by rpki-client