$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/454fde4e-a5a1-3b9d-9523-906df8478324.roa File: 454fde4e-a5a1-3b9d-9523-906df8478324.roa (raw, json) Hash identifier: PLfitt5NkBTxqHTgjh03wIjGASriHUD5ioEIhMKYAjg= Subject key identifier: 41:14:72:40:FA:B2:49:24:F0:1C:4E:0F:96:55:1C:45:24:DF:8D:5A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A1193D245ECA63E49607C9760 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/454fde4e-a5a1-3b9d-9523-906df8478324.roa Signing time: Tue 03 Jun 2025 12:47:21 +0000 ROA not before: Tue 03 Jun 2025 12:47:21 +0000 ROA not after: Mon 01 Sep 2025 12:47:21 +0000 asID: 396590 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:93:d2:45:ec:a6:3e:49:60:7c:97:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 3 12:47:21 2025 GMT Not After : Sep 1 12:47:21 2025 GMT Subject: CN=e05dba46-55bc-4e72-8d41-53c9cf72e270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c2:03:00:c0:2b:07:5d:53:ea:91:1a:7f:ba: 87:32:31:25:e5:4c:c9:09:c2:3c:24:fc:72:a1:ea: 5a:a7:63:ad:72:a8:1b:10:e3:4c:da:66:1c:0f:10: 7b:30:58:ce:65:d7:bd:dd:36:3d:99:14:85:0a:6b: e9:24:44:50:ce:d2:97:b3:15:23:6c:85:02:2b:bb: 39:99:f2:b8:81:47:7c:25:68:53:54:1a:01:14:f2: 84:05:47:68:c2:92:da:97:3c:76:36:08:48:c8:1a: fc:ba:d1:fd:0a:b9:74:65:ae:e1:af:bb:38:81:11: b1:47:b1:92:3c:42:43:b3:a2:1b:89:54:9b:d0:47: 83:ce:2f:eb:fa:f3:72:fd:a5:6d:73:83:aa:7e:09: 19:ca:ea:34:92:1a:0e:5c:8a:29:c5:87:9b:72:77: 6e:ab:44:a1:e9:6c:81:af:2c:2d:76:05:93:b2:5c: 43:c9:e4:ac:56:8d:99:38:5d:3b:31:fc:5d:e8:0c: 1e:21:15:35:9f:a7:52:a5:e6:ea:df:02:a8:e3:ed: e6:18:61:85:82:4b:0d:9b:39:60:36:d1:75:d4:19: 59:fb:2c:0a:f9:cd:96:44:ca:6d:ee:9d:71:4d:ef: 32:84:fc:b8:de:2a:98:8a:69:f5:6c:86:5c:26:cb: 40:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:14:72:40:FA:B2:49:24:F0:1C:4E:0F:96:55:1C:45:24:DF:8D:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/454fde4e-a5a1-3b9d-9523-906df8478324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:76:be:b2:fb:cd:e0:be:d4:16:9a:26:b9:51:10:3c:a8:03: dd:d5:79:4f:9f:25:9d:7c:7c:cc:ef:3e:98:7c:ca:df:20:3b: f7:ba:5c:be:79:a6:d5:63:c3:7c:34:c2:9f:c1:ef:aa:13:90: ac:2c:b0:8a:10:12:ac:68:2a:a1:58:54:60:bf:bd:36:31:06: 18:26:1c:19:4c:26:4c:db:10:67:0d:f4:72:f5:b4:bd:e1:26: c5:f2:e4:28:42:04:90:35:73:1b:25:29:0a:e6:d6:4f:f3:b8: 63:b7:a0:29:98:9d:3d:74:07:96:ac:6f:8e:21:d8:7e:54:f8: 35:f2:33:29:4b:d9:7f:74:ac:d4:a8:46:9b:68:58:d1:50:e7: 9b:dc:f1:6d:2c:17:06:8d:3e:9f:26:88:08:91:a3:30:93:4e: ba:6d:43:59:e7:60:76:20:7f:35:b6:1e:d8:80:6a:c4:78:17: d1:96:16:2d:ec:2d:59:66:d8:81:ef:55:92:ad:3d:d1:0f:64: e8:55:73:2b:8b:dd:bb:34:89:f4:25:48:e9:ef:0f:32:2f:74: f1:d3:04:8e:dd:be:61:d0:6f:ed:17:a1:8c:cc:8d:90:9f:2e: 26:2c:e7:31:29:57:70:6a:0b:d7:b7:dd:77:3f:5f:71:49:65: 4d:54:95:cf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoRk9JF7KY+SWB8l2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwMzEyNDcyMVoXDTI1MDkwMTEyNDcyMVowLzEtMCsGA1UEAxMk ZTA1ZGJhNDYtNTViYy00ZTcyLThkNDEtNTNjOWNmNzJlMjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8IDAMArB11T6pEaf7qHMjEl5UzJCcI8JPxy oepap2OtcqgbEONM2mYcDxB7MFjOZde93TY9mRSFCmvpJERQztKXsxUjbIUCK7s5 mfK4gUd8JWhTVBoBFPKEBUdowpLalzx2NghIyBr8utH9Crl0Za7hr7s4gRGxR7GS PEJDs6IbiVSb0EeDzi/r+vNy/aVtc4OqfgkZyuo0khoOXIopxYebcnduq0Sh6WyB rywtdgWTslxDyeSsVo2ZOF07Mfxd6AweIRU1n6dSpebq3wKo4+3mGGGFgksNmzlg NtF11BlZ+ywK+c2WRMpt7p1xTe8yhPy43iqYimn1bIZcJstA7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEEUckD6skkk8BxOD5ZVHEUk341aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDU0ZmRlNGUtYTVhMS0z YjlkLTk1MjMtOTA2ZGY4NDc4MzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF52vrL7zeC+1BaaJrlREDyoA93VeU+fJZ18fMzvPph8yt8gO/e6 XL55ptVjw3w0wp/B76oTkKwssIoQEqxoKqFYVGC/vTYxBhgmHBlMJkzbEGcN9HL1 tL3hJsXy5ChCBJA1cxslKQrm1k/zuGO3oCmYnT10B5asb44h2H5U+DXyMylL2X90 rNSoRptoWNFQ55vc8W0sFwaNPp8miAiRozCTTrptQ1nnYHYgfzW2HtiAasR4F9GW Fi3sLVlm2IHvVZKtPdEPZOhVcyuL3bs0ifQlSOnvDzIvdPHTBI7dvmHQb+0XoYzM jZCfLiYs5zEpV3BqC9e33Xc/X3FJZU1Ulc8= -----END CERTIFICATE-----Generated at Fri Jun 6 19:34:59 2025 by rpki-client