$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e333b86-0894-335b-843f-ed54413586ff.roa File: 4e333b86-0894-335b-843f-ed54413586ff.roa (raw, json) Hash identifier: pS3GwzttInqyHvCYy/vgSwG9Ds0fFXlLpvfmoNcGAMg= Subject key identifier: B0:C9:D3:B9:86:E5:8C:56:75:37:80:1F:05:DD:00:02:F5:DA:C8:03 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849F87A9C5599116972A4C28480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e333b86-0894-335b-843f-ed54413586ff.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 396550 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:9c:55:99:11:69:72:a4:c2:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=08c0ebdf-fd29-4b02-92f3-3bb7a2239c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c4:bf:65:44:bf:ef:e0:c0:40:97:f9:99:39: 82:a3:da:94:27:b1:be:ca:e8:e5:05:93:65:06:06: 99:76:fa:27:9f:58:32:eb:df:69:21:97:f1:d6:0d: 62:b2:cf:c3:df:09:68:a5:a4:b8:80:6c:80:c3:b0: 0d:4d:91:27:95:7f:88:af:d3:18:71:44:69:82:b9: aa:a6:46:83:42:7e:d0:9b:77:d4:4b:f5:3c:89:19: 16:c4:c9:78:9a:90:6a:f6:99:19:8e:64:e2:11:ac: c1:42:e0:ed:2a:17:94:69:28:34:1a:28:47:7c:12: a3:aa:d4:cd:ef:e1:f3:bb:3f:d1:9a:41:31:ab:1a: 65:b0:4c:4d:0f:25:7d:ab:9f:d7:5e:23:21:fe:be: 15:31:4f:a4:f8:0e:27:49:cf:0c:a7:f6:25:70:69: 6c:dc:e4:57:3a:84:75:a1:14:d6:40:ed:1e:52:f0: 8a:1b:55:ae:34:1f:31:ec:bd:88:6a:14:dc:82:dd: 3c:f1:15:0f:21:70:c9:ed:82:d4:bd:50:f4:f4:68: 0b:04:56:a0:ab:d3:f9:cb:c8:e4:5f:a9:e5:9e:e7: 0f:80:7c:f7:98:e2:ec:f9:df:a9:4e:5a:2d:dd:fc: 0b:5a:91:71:5b:8f:b6:6e:b7:a9:57:64:e1:64:e9: ac:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C9:D3:B9:86:E5:8C:56:75:37:80:1F:05:DD:00:02:F5:DA:C8:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e333b86-0894-335b-843f-ed54413586ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:46:4e:34:0a:e4:4a:c0:5e:14:fd:e7:13:b2:f5:02:04:61: 8c:63:35:13:5a:bd:24:ee:02:1b:ff:d6:f0:37:4d:2d:3c:4e: 86:76:86:38:30:0f:be:41:82:fb:4c:cd:90:fa:44:06:ff:02: b1:15:44:75:ef:5c:b0:66:8e:b7:91:70:eb:48:1c:11:01:37: b0:36:ef:f4:5e:7a:0f:fb:f8:b6:11:08:d4:b8:8b:d0:d9:a5: d1:c1:00:29:48:8b:93:b2:eb:78:42:ac:9e:40:1d:5b:a8:1e: 20:12:66:11:1d:e0:74:c1:d5:6e:34:68:a5:44:9f:ec:e1:12: 67:b2:08:3a:2f:a3:8a:1c:32:01:f1:ab:cf:b3:c9:02:ac:38: 4e:c9:ef:a8:f3:47:f7:e6:06:99:bd:0e:cb:a9:a7:71:2f:d8: 77:de:65:67:06:ad:e9:a4:0b:48:04:2c:e1:58:c5:36:bd:0e: 6c:f5:21:8d:59:2c:97:ad:15:ad:da:0d:ee:53:00:1a:29:86: 62:8e:ad:81:85:87:62:29:6d:23:2f:f5:e2:b3:b9:12:45:b9: c6:6c:2d:48:e0:c9:ae:eb:67:59:42:47:55:dc:fa:8e:80:40: 25:ae:56:c8:9b:3e:38:70:bf:b1:66:2b:fb:31:d5:48:bb:62: 8e:a2:02:a4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn4epxVmRFpcqTChIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk MDhjMGViZGYtZmQyOS00YjAyLTkyZjMtM2JiN2EyMjM5YzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcS/ZUS/7+DAQJf5mTmCo9qUJ7G+yujlBZNl BgaZdvonn1gy699pIZfx1g1iss/D3wlopaS4gGyAw7ANTZEnlX+Ir9MYcURpgrmq pkaDQn7Qm3fUS/U8iRkWxMl4mpBq9pkZjmTiEazBQuDtKheUaSg0GihHfBKjqtTN 7+Hzuz/RmkExqxplsExNDyV9q5/XXiMh/r4VMU+k+A4nSc8Mp/YlcGls3ORXOoR1 oRTWQO0eUvCKG1WuNB8x7L2IahTcgt088RUPIXDJ7YLUvVD09GgLBFagq9P5y8jk X6nlnucPgHz3mOLs+d+pTlot3fwLWpFxW4+2brepV2ThZOmsvQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLDJ07mG5YxWdTeAHwXdAAL12sgDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGUzMzNiODYtMDg5NC0z MzViLTg0M2YtZWQ1NDQxMzU4NmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBeRk40CuRKwF4U/ecTsvUCBGGMYzUTWr0k7gIb /9bwN00tPE6GdoY4MA++QYL7TM2Q+kQG/wKxFUR171ywZo63kXDrSBwRATewNu/0 XnoP+/i2EQjUuIvQ2aXRwQApSIuTsut4QqyeQB1bqB4gEmYRHeB0wdVuNGilRJ/s 4RJnsgg6L6OKHDIB8avPs8kCrDhOye+o80f35gaZvQ7LqadxL9h33mVnBq3ppAtI BCzhWMU2vQ5s9SGNWSyXrRWt2g3uUwAaKYZijq2BhYdiKW0jL/Xis7kSRbnGbC1I 4Mmu62dZQkdV3PqOgEAlrlbImz44cL+xZiv7MdVIu2KOogKk -----END CERTIFICATE-----Generated at Fri Jun 6 19:38:17 2025 by rpki-client