$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f57fcd5-3d24-3bde-b64f-0baf60a2fb0e.roa File: 7f57fcd5-3d24-3bde-b64f-0baf60a2fb0e.roa (raw, json) Hash identifier: kDU4HZgcx6jdGvRohc74QaS8e365cpHm51PscaDBd44= Subject key identifier: 83:68:F7:15:08:0A:90:9A:F1:7C:F4:3F:3B:C4:19:B5:6E:5A:77:E6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849D85FD3F50C081A85F5F06F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f57fcd5-3d24-3bde-b64f-0baf60a2fb0e.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 396574 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:d3:f5:0c:08:1a:85:f5:f0:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=9aa843eb-5346-4d1c-bad5-f7f3a5447859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:53:a9:1c:2f:5f:a7:f0:9c:7d:52:ac:ad:0a: 88:09:5e:df:5f:62:67:4e:52:33:43:40:bc:4b:c1: 4c:34:bf:18:46:0f:15:bb:7b:0d:b8:e9:4d:d2:cc: 9c:f1:ba:e9:90:ca:17:5a:e3:88:a7:19:0b:b1:1c: cf:37:f5:e8:7a:bf:f9:e2:5a:cd:3c:d0:bb:53:57: d6:58:ab:be:1e:fe:58:c6:23:62:e6:57:83:b5:4b: 86:fb:e0:53:da:c8:88:dd:12:b0:c7:03:eb:27:e8: 02:53:d1:09:5f:f1:6b:9c:7c:0e:9c:63:1c:d8:b8: 6d:53:ba:da:71:9d:49:6e:d1:8e:8d:d3:08:91:8d: 7a:63:35:c9:53:54:ba:6f:fe:8c:db:8b:3b:be:1f: f2:8d:6c:a8:57:f2:fb:de:d2:63:98:51:a9:d8:00: 02:cb:5f:cb:75:5d:32:be:b8:1d:15:83:3c:7c:3b: 3d:44:63:2d:38:e4:87:93:0d:a0:e2:68:f7:bf:a6: a0:9f:37:25:f8:60:3b:c2:90:7a:73:6a:65:73:35: 2e:42:4e:63:4e:27:cc:af:e7:e1:cd:16:53:44:7d: 7a:34:88:19:2b:af:ab:62:10:c5:ef:a2:99:1d:88: d9:74:e2:46:6c:a4:9c:d7:90:2e:f5:0b:97:d2:fa: cc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:68:F7:15:08:0A:90:9A:F1:7C:F4:3F:3B:C4:19:B5:6E:5A:77:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f57fcd5-3d24-3bde-b64f-0baf60a2fb0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:20:09:0e:a6:63:55:1d:58:92:ba:a5:80:5d:7c:c4:fc:c9: 55:3e:1d:87:59:9f:0e:19:b2:a0:6e:61:1e:54:71:4b:6e:df: 57:c8:c9:25:47:e2:8d:85:02:fa:50:d1:ff:5a:2c:10:81:09: 70:cd:9c:e8:6b:23:12:15:b2:66:8c:81:47:1d:2d:18:d8:50: 59:7d:36:74:7f:7e:0e:36:9d:b5:bc:c9:6f:f2:ba:cc:32:a0: 30:4b:71:2f:d0:dc:4a:52:7d:b3:f1:14:f9:8a:33:b8:a2:3c: 0a:4e:4e:24:ee:49:c2:9c:ec:d0:ce:1f:23:e5:d8:48:ff:90: a2:22:33:5c:e6:5d:39:08:ef:fa:5b:e2:fe:34:5e:67:72:3f: ae:58:c0:0a:40:63:87:0b:37:a7:46:5a:90:ea:06:f1:9d:bf: 8a:67:56:1a:57:25:43:0e:5a:c9:87:2f:17:dd:45:c5:95:0b: d0:ba:69:e5:a1:08:25:e3:95:c1:21:9d:65:d5:54:88:01:1c: e8:48:7a:01:7c:d1:f4:e2:b7:6c:8e:aa:a1:6b:c8:e6:eb:59: b2:04:60:00:4c:ce:a4:74:d3:d2:4b:7b:a4:a5:30:03:b1:48: c2:64:0f:53:f2:46:02:4d:41:ef:66:eb:46:61:7b:c5:69:20: 10:93:e4:0c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnYX9P1DAgahfXwb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk OWFhODQzZWItNTM0Ni00ZDFjLWJhZDUtZjdmM2E1NDQ3ODU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1OpHC9fp/CcfVKsrQqICV7fX2JnTlIzQ0C8 S8FMNL8YRg8Vu3sNuOlN0syc8brpkMoXWuOIpxkLsRzPN/Xoer/54lrNPNC7U1fW WKu+Hv5YxiNi5leDtUuG++BT2siI3RKwxwPrJ+gCU9EJX/FrnHwOnGMc2LhtU7ra cZ1JbtGOjdMIkY16YzXJU1S6b/6M24s7vh/yjWyoV/L73tJjmFGp2AACy1/LdV0y vrgdFYM8fDs9RGMtOOSHkw2g4mj3v6agnzcl+GA7wpB6c2plczUuQk5jTifMr+fh zRZTRH16NIgZK6+rYhDF76KZHYjZdOJGbKSc15Au9QuX0vrMkQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFINo9xUICpCa8Xz0PzvEGbVuWnfmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2Y1N2ZjZDUtM2QyNC0z YmRlLWI2NGYtMGJhZjYwYTJmYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAIIAkOpmNVHViSuqWAXXzE/MlVPh2HWZ8OGbKg bmEeVHFLbt9XyMklR+KNhQL6UNH/WiwQgQlwzZzoayMSFbJmjIFHHS0Y2FBZfTZ0 f34ONp21vMlv8rrMMqAwS3Ev0NxKUn2z8RT5ijO4ojwKTk4k7knCnOzQzh8j5dhI /5CiIjNc5l05CO/6W+L+NF5ncj+uWMAKQGOHCzenRlqQ6gbxnb+KZ1YaVyVDDlrJ hy8X3UXFlQvQumnloQgl45XBIZ1l1VSIARzoSHoBfNH04rdsjqqha8jm61myBGAA TM6kdNPSS3ukpTADsUjCZA9T8kYCTUHvZutGYXvFaSAQk+QM -----END CERTIFICATE-----Generated at Sat Jun 7 04:00:46 2025 by rpki-client