$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e333b86-0894-335b-843f-ed54413586ff.roa File: 4e333b86-0894-335b-843f-ed54413586ff.roa (raw, json) Hash identifier: 9yWMlYb07uT5g/Ud3Bhi9vT3kMLU2nOY7vW9bwiS6UU= Subject key identifier: 46:D4:2C:F1:0B:87:7F:58:30:E1:DB:2E:D2:3D:06:8A:93:04:CF:A5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858491941989C24C08CFDE9CCF280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e333b86-0894-335b-843f-ed54413586ff.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 396550 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:98:9c:24:c0:8c:fd:e9:cc:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=b6084027-3754-4240-9628-e271f2f09d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8d:6d:34:71:ea:6e:53:69:c8:4c:f4:df:78: 1e:16:7e:16:52:22:f5:5f:a4:92:8f:79:0b:d5:be: e3:ba:55:83:d3:49:c0:74:b5:12:4c:fa:0a:23:b7: ac:b9:fe:0e:2f:6b:a2:97:66:96:d4:38:05:ae:85: 72:f9:d5:6a:64:a5:da:12:05:65:ab:73:e5:24:e6: 51:86:55:04:13:5b:39:65:3f:6f:0a:73:14:92:c3: 24:47:89:fe:29:10:c4:b3:ed:5a:3c:56:50:70:e4: f3:19:45:fa:ac:11:0f:3e:7d:27:3a:b0:b8:9b:8c: 57:c7:57:01:d5:86:bc:20:a8:c3:cc:66:de:b0:53: 01:18:88:11:5c:25:c7:50:49:0e:d8:01:c5:8d:79: 92:9d:af:b8:ac:4d:d7:0b:9e:a7:0b:01:95:d1:6e: 10:44:d7:95:2d:ff:26:96:4d:89:8b:0d:b8:18:37: ea:6a:9a:de:60:3b:ba:5f:f6:a9:dc:a3:ce:5c:28: 9b:7d:ac:8f:03:18:da:0c:1f:7d:57:c8:2e:c1:09: 8f:28:58:9b:6d:24:10:79:e3:03:45:66:15:b9:be: 6d:ba:06:f2:b3:79:25:c7:65:a4:b5:ae:94:6b:4c: 9b:99:ce:f8:61:93:5b:06:0f:25:e4:b4:db:ab:da: 5c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D4:2C:F1:0B:87:7F:58:30:E1:DB:2E:D2:3D:06:8A:93:04:CF:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e333b86-0894-335b-843f-ed54413586ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:73:5e:bc:1d:28:ef:4c:c6:8c:fb:ac:16:5c:5c:d5:33:05: d1:5a:e3:19:22:a9:ba:1a:c6:c8:b5:fa:b9:dd:2a:75:fe:5e: 2e:78:8b:00:07:d0:04:48:f7:b9:da:40:39:35:bf:6c:8c:a7: 4b:43:62:fe:3e:bb:4c:36:dd:9d:d4:2d:3a:c4:eb:98:b9:6d: 17:2c:9e:47:07:8f:95:af:11:ac:9f:85:d4:50:0c:4e:9b:51: 1c:5e:76:2a:f3:df:86:ee:1f:41:6e:37:cf:c2:b2:a6:9a:c7: 11:6c:7d:ec:b5:4c:56:3e:90:5e:7a:01:61:82:70:54:b1:6e: 84:50:af:78:1b:0a:5f:00:44:2b:45:bf:f8:70:54:a5:ff:2b: b9:a2:07:25:43:17:d0:18:c0:54:6a:a4:f6:ab:a2:90:6c:27: 07:9f:68:35:c1:a6:56:d1:12:80:e0:d8:dc:c9:9b:7e:ed:ff: 21:78:90:28:af:cf:b3:55:54:e1:26:2f:1f:5b:a7:b1:14:54: 80:f9:ca:ac:16:7e:49:5a:2e:48:3b:6a:e4:c5:b2:f7:ba:7f: 62:5b:b8:0c:9e:b4:b1:fb:85:e1:44:3a:d0:81:d8:a6:79:ca: c9:c4:90:50:56:ca:38:dd:e1:75:22:87:0a:b6:e5:2a:e8:75: 0b:8d:bc:9c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkZQZicJMCM/enM8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk YjYwODQwMjctMzc1NC00MjQwLTk2MjgtZTI3MWYyZjA5ZDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno1tNHHqblNpyEz033geFn4WUiL1X6SSj3kL 1b7julWD00nAdLUSTPoKI7esuf4OL2uil2aW1DgFroVy+dVqZKXaEgVlq3PlJOZR hlUEE1s5ZT9vCnMUksMkR4n+KRDEs+1aPFZQcOTzGUX6rBEPPn0nOrC4m4xXx1cB 1Ya8IKjDzGbesFMBGIgRXCXHUEkO2AHFjXmSna+4rE3XC56nCwGV0W4QRNeVLf8m lk2Jiw24GDfqapreYDu6X/ap3KPOXCibfayPAxjaDB99V8guwQmPKFibbSQQeeMD RWYVub5tugbys3klx2Wkta6Ua0ybmc74YZNbBg8l5LTbq9pc6QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEbULPELh39YMOHbLtI9BoqTBM+lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGUzMzNiODYtMDg5NC0z MzViLTg0M2YtZWQ1NDQxMzU4NmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAOc168HSjvTMaM+6wWXFzVMwXRWuMZIqm6GsbI tfq53Sp1/l4ueIsAB9AESPe52kA5Nb9sjKdLQ2L+PrtMNt2d1C06xOuYuW0XLJ5H B4+VrxGsn4XUUAxOm1EcXnYq89+G7h9BbjfPwrKmmscRbH3stUxWPpBeegFhgnBU sW6EUK94GwpfAEQrRb/4cFSl/yu5ogclQxfQGMBUaqT2q6KQbCcHn2g1waZW0RKA 4NjcyZt+7f8heJAor8+zVVThJi8fW6exFFSA+cqsFn5JWi5IO2rkxbL3un9iW7gM nrSx+4XhRDrQgdimecrJxJBQVso43eF1IocKtuUq6HULjbyc -----END CERTIFICATE-----Generated at Fri Apr 11 22:30:55 2025 by rpki-client