$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4745b34b-1004-395f-acf0-0d846f1bc534.roa File: 4745b34b-1004-395f-acf0-0d846f1bc534.roa (raw, json) Hash identifier: Ca21ScetEEYEF8s+F42hPCPc/orMd8B1HNV6k8QeWYk= Subject key identifier: A4:D4:9C:8D:04:04:8C:2C:6C:3D:6E:0F:AC:CA:5C:F6:B9:04:CF:F6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848F92687BB20CAF0D74386B200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4745b34b-1004-395f-acf0-0d846f1bc534.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 396603 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:87:bb:20:ca:f0:d7:43:86:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=95f659ae-20ae-41f6-969f-868c6965e131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:41:ad:f1:b4:5a:08:02:0d:85:e4:5b:79:7b: d6:99:4e:33:d5:a5:78:a4:58:97:a0:5d:90:a1:08: a8:62:b7:4e:ff:53:89:76:23:be:62:91:eb:06:35: 66:d9:28:1c:49:cb:33:0e:ac:24:7e:77:e3:3b:23: ff:8c:4a:cd:7f:9a:5f:6f:97:94:df:ff:b4:10:a4: 70:72:c6:e3:34:5f:57:f6:55:78:a7:99:17:d3:21: 43:2e:90:6d:58:0a:1d:93:54:1e:78:18:05:29:8a: 12:79:cf:0b:3e:1d:10:94:f9:f2:9b:5f:e8:80:db: c1:d7:ca:e6:e6:d1:bc:ec:b3:ae:dc:d8:37:1a:b6: 66:e3:ae:a5:80:9a:4d:cf:9e:0e:b2:15:40:d5:45: d0:ab:c5:3d:43:c9:b6:2a:6f:5a:59:09:70:06:ea: f4:a0:2b:0b:b6:c5:9a:cb:fb:d4:7d:1e:bb:22:b5: d6:fb:10:29:1c:fe:5f:3c:54:87:b6:29:f4:65:55: d0:32:9f:12:36:62:45:a0:dd:40:3c:af:12:0f:a5: 26:be:90:b4:b8:6d:8a:24:7c:b5:d0:7d:24:1b:c1: 95:c5:cc:32:b4:2f:58:ea:c7:d2:9b:0c:bb:28:ec: 9a:79:b5:3b:24:59:8d:8d:b8:0d:48:8f:e4:e8:d7: 93:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D4:9C:8D:04:04:8C:2C:6C:3D:6E:0F:AC:CA:5C:F6:B9:04:CF:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4745b34b-1004-395f-acf0-0d846f1bc534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:84:91:2e:83:74:99:c9:29:cd:d9:27:23:29:29:45:26:aa: 3d:8f:e2:28:af:b1:45:50:f9:dc:7f:07:84:d1:93:90:1c:e1: 57:3c:2b:94:32:56:96:ab:09:9c:bf:49:13:4d:91:d2:22:f9: 69:bf:7d:b4:b3:e7:28:87:1a:d4:de:95:d6:0a:aa:4a:33:bb: 0b:0c:98:b1:73:47:7f:64:b8:f7:ee:b9:8f:01:97:30:b2:48: 4b:7e:0a:19:08:eb:a7:4f:24:94:06:c0:79:0a:a6:00:b0:cb: ea:fe:1e:34:57:81:a6:1a:3c:e1:8a:1b:92:cd:d4:25:47:8e: fe:b7:10:f2:1b:01:dd:6a:e6:d0:1a:14:92:72:96:7e:7d:8b: b3:e3:a5:44:f5:60:93:83:78:56:de:2c:43:93:f9:79:5e:e8: 2d:ed:a9:bc:1d:0e:35:c6:89:58:cf:2a:fc:b7:19:06:d8:cf: 1f:49:c7:c2:75:62:3c:77:9a:62:11:4e:4a:de:56:a4:20:13: ff:3b:ca:90:10:0c:40:db:61:83:c0:fd:ca:e4:82:62:86:0f: 21:5c:ea:d2:db:ab:0d:f4:f2:d0:fa:21:ad:9b:0f:98:8f:1c: d3:d7:c3:58:2e:92:1c:4e:90:9f:2c:aa:e4:e6:00:b1:cf:d4: 86:67:5e:2a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEj5Joe7IMrw10OGsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk OTVmNjU5YWUtMjBhZS00MWY2LTk2OWYtODY4YzY5NjVlMTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0Gt8bRaCAINheRbeXvWmU4z1aV4pFiXoF2Q oQioYrdO/1OJdiO+YpHrBjVm2SgcScszDqwkfnfjOyP/jErNf5pfb5eU3/+0EKRw csbjNF9X9lV4p5kX0yFDLpBtWAodk1QeeBgFKYoSec8LPh0QlPnym1/ogNvB18rm 5tG87LOu3Ng3GrZm466lgJpNz54OshVA1UXQq8U9Q8m2Km9aWQlwBur0oCsLtsWa y/vUfR67IrXW+xApHP5fPFSHtin0ZVXQMp8SNmJFoN1APK8SD6UmvpC0uG2KJHy1 0H0kG8GVxcwytC9Y6sfSmwy7KOyaebU7JFmNjbgNSI/k6NeT+QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKTUnI0EBIwsbD1uD6zKXPa5BM/2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDc0NWIzNGItMTAwNC0z OTVmLWFjZjAtMGQ4NDZmMWJjNTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBGhJEug3SZySnN2ScjKSlFJqo9j+Ior7FFUPnc fweE0ZOQHOFXPCuUMlaWqwmcv0kTTZHSIvlpv320s+cohxrU3pXWCqpKM7sLDJix c0d/ZLj37rmPAZcwskhLfgoZCOunTySUBsB5CqYAsMvq/h40V4GmGjzhihuSzdQl R47+txDyGwHdaubQGhSScpZ+fYuz46VE9WCTg3hW3ixDk/l5Xugt7am8HQ41xolY zyr8txkG2M8fScfCdWI8d5piEU5K3lakIBP/O8qQEAxA22GDwP3K5IJihg8hXOrS 26sN9PLQ+iGtmw+YjxzT18NYLpIcTpCfLKrk5gCxz9SGZ14q -----END CERTIFICATE-----Generated at Sat Apr 12 00:07:47 2025 by rpki-client