$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e8e1ac9-c89d-31b0-b675-916171460635.roa File: 4e8e1ac9-c89d-31b0-b675-916171460635.roa (raw, json) Hash identifier: JYfKudVWoxyBt5v6FUWc9FDd6YqlxSzbHwAnNQclah0= Subject key identifier: 26:0A:CB:EF:60:AB:D6:84:69:49:A4:83:64:F3:04:08:61:21:3C:71 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849D85FD24E37B0DBA150A84480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e8e1ac9-c89d-31b0-b675-916171460635.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 36621 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:d2:4e:37:b0:db:a1:50:a8:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=db7a685d-9f80-48ec-a83a-49636e55c1bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ae:ea:c0:6e:9b:5d:c5:0e:fe:08:7e:85:a4: 8e:d1:36:fa:5f:da:b4:b5:67:a4:be:33:7e:cc:91: 7f:57:be:53:59:be:c8:c7:bb:6d:45:a9:31:b4:a3: e0:29:94:cc:24:95:b7:bf:da:cb:7e:35:2a:50:7e: c6:68:09:79:48:88:3f:d3:69:45:64:e4:3d:44:5e: 64:55:21:e7:6f:bf:b3:2e:5f:87:7b:8b:9a:eb:b6: e1:bc:00:95:76:39:99:bd:49:7b:34:c1:3d:d9:d4: 4f:08:49:bb:05:a2:b4:14:62:4a:f6:01:61:05:29: f7:37:b4:f6:e0:db:97:81:da:58:40:9e:9e:e0:ea: 41:ad:dc:b2:05:54:9b:1f:90:e8:f4:a7:73:83:de: 72:b5:11:ff:78:ee:97:7f:da:98:56:25:4c:b5:ab: 31:68:53:d9:b3:23:4c:c1:d4:b7:4b:40:d0:a5:bc: 73:b5:60:2f:97:fc:62:50:bf:89:14:07:a2:59:eb: 71:8f:4e:16:6b:d3:a4:8d:22:65:bd:e1:b0:cb:a1: dd:b5:ed:db:5b:74:03:78:e4:8d:e4:96:43:d3:bc: 88:ed:fa:49:dd:e4:db:5e:64:32:0e:88:69:b7:b8: 8d:d2:5d:8e:b6:e6:b0:8b:30:57:b4:2a:18:f6:14: f5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:0A:CB:EF:60:AB:D6:84:69:49:A4:83:64:F3:04:08:61:21:3C:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e8e1ac9-c89d-31b0-b675-916171460635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:e1:68:74:8b:d4:02:9a:cb:23:de:4b:4a:fc:0f:cb:6a:12: 28:7d:71:b9:0c:de:4a:cf:ad:97:b8:76:87:58:1a:bd:75:58: b7:b8:90:23:88:8b:25:5e:61:74:f4:90:8d:09:cc:2b:b0:02: d9:82:1c:ee:28:33:8f:ae:07:c9:ea:aa:f8:ad:52:f9:7d:d0: ca:33:07:af:98:f4:63:2d:c7:11:6b:84:94:34:f7:1c:37:d1: ca:d1:e7:93:63:9c:a5:b5:76:de:33:2d:4d:a0:8a:90:d7:ec: c5:6c:4f:ca:93:1f:42:3d:03:7e:3b:05:af:ee:32:45:a3:02: 82:d5:76:20:68:70:22:30:96:83:f7:77:38:31:16:50:7e:ae: 47:c8:11:30:13:7a:da:c6:a3:06:f9:b5:2f:ef:b7:41:64:b9: 82:10:93:4d:19:b2:49:f7:19:fe:bb:26:d5:bc:cf:82:a2:1d: 18:d1:b2:8d:8f:ee:8e:1d:52:50:b3:96:c6:3b:fe:0d:ef:56: 58:8d:c5:ba:7f:c6:60:1e:6a:b9:fa:34:71:5c:ef:3b:0c:89: a2:79:81:04:8a:1c:42:1d:5f:37:d4:47:8b:9e:97:b2:e1:10: a9:c5:22:02:ca:c2:f6:ad:cf:46:c9:99:e3:1b:d0:98:05:7f: 39:77:e3:eb -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnYX9JON7DboVCoRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZGI3YTY4NWQtOWY4MC00OGVjLWE4M2EtNDk2MzZlNTVjMWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgq7qwG6bXcUO/gh+haSO0Tb6X9q0tWekvjN+ zJF/V75TWb7Ix7ttRakxtKPgKZTMJJW3v9rLfjUqUH7GaAl5SIg/02lFZOQ9RF5k VSHnb7+zLl+He4ua67bhvACVdjmZvUl7NME92dRPCEm7BaK0FGJK9gFhBSn3N7T2 4NuXgdpYQJ6e4OpBrdyyBVSbH5Do9Kdzg95ytRH/eO6Xf9qYViVMtasxaFPZsyNM wdS3S0DQpbxztWAvl/xiUL+JFAeiWetxj04Wa9OkjSJlveGwy6Hdte3bW3QDeOSN 5JZD07yI7fpJ3eTbXmQyDohpt7iN0l2OtuawizBXtCoY9hT1qwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCYKy+9gq9aEaUmkg2TzBAhhITxxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGU4ZTFhYzktYzg5ZC0z MWIwLWI2NzUtOTE2MTcxNDYwNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAX4Wh0i9QCmssj3ktK/A/LahIofXG5DN5Kz62X uHaHWBq9dVi3uJAjiIslXmF09JCNCcwrsALZghzuKDOPrgfJ6qr4rVL5fdDKMwev mPRjLccRa4SUNPccN9HK0eeTY5yltXbeMy1NoIqQ1+zFbE/Kkx9CPQN+OwWv7jJF owKC1XYgaHAiMJaD93c4MRZQfq5HyBEwE3raxqMG+bUv77dBZLmCEJNNGbJJ9xn+ uybVvM+Coh0Y0bKNj+6OHVJQs5bGO/4N71ZYjcW6f8ZgHmq5+jRxXO87DImieYEE ihxCHV831EeLnpey4RCpxSICysL2rc9GyZnjG9CYBX85d+Pr -----END CERTIFICATE-----Generated at Fri Jun 6 19:40:18 2025 by rpki-client