$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89f4cce8-d8f9-3721-b998-af7c5c751630.roa File: 89f4cce8-d8f9-3721-b998-af7c5c751630.roa (raw, json) Hash identifier: OxEee9Mk+pX2OpE5psAwOmGSwZitXXCNFCQ9ymZazAU= Subject key identifier: 56:F9:D0:2B:7B:1E:2C:30:3F:51:E3:02:D2:71:53:90:18:16:A8:DC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584961B9A7C2065EB3E323C76A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89f4cce8-d8f9-3721-b998-af7c5c751630.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 396569 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:a7:c2:06:5e:b3:e3:23:c7:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=2ba2ea4b-c1fc-4ff6-9967-c3acc6c6068e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b8:c2:56:ae:4b:25:fa:96:2a:b7:17:69:68: e7:a7:a2:00:65:54:8a:ef:35:19:db:15:df:0f:dd: 4b:7d:13:63:64:e2:ed:41:f6:7b:80:9a:ac:ac:97: df:44:61:9e:90:0d:3d:3e:15:e3:5b:e8:6c:dd:c1: 7e:92:0b:58:78:ac:fe:de:d7:74:c0:da:04:46:59: c6:df:a3:1a:1c:f4:91:d7:d9:bb:05:1b:65:3e:8a: 24:9c:3c:6e:e2:aa:7b:3c:1a:99:9e:84:b3:b4:1c: 8d:57:3e:8e:2b:9e:8e:10:18:00:d8:47:5b:5d:48: 81:1e:2c:46:dc:02:0c:db:ff:81:6a:61:fa:ea:79: ba:16:64:8b:e9:1a:63:6d:7c:56:6b:ff:bc:91:39: 3e:9c:93:ad:9a:c2:c7:36:77:12:17:ca:cc:f6:09: 62:6f:47:39:52:75:e5:0b:f9:be:7b:38:f1:72:72: 60:a7:59:20:aa:57:d9:39:0e:ac:03:e0:a5:3a:6d: 2b:66:91:1d:13:77:d3:ef:06:0d:2b:ac:a7:86:71: 66:77:8a:01:74:2b:0e:66:83:e7:cd:ce:8b:bb:45: 91:2c:e7:da:08:fe:ae:fb:07:65:83:dd:09:ac:08: 0e:ba:57:43:61:3e:09:51:1b:15:fb:1e:7c:99:38: b4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F9:D0:2B:7B:1E:2C:30:3F:51:E3:02:D2:71:53:90:18:16:A8:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89f4cce8-d8f9-3721-b998-af7c5c751630.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:e4:29:31:72:52:93:7a:09:dd:ae:f0:ea:d2:de:8c:36:95: ce:f4:13:18:60:9e:e2:a7:9d:84:21:05:d4:6b:38:85:35:16: e4:c3:1d:3f:b8:52:7a:41:48:70:66:2e:89:05:5a:ae:4f:c6: 03:60:d4:40:ec:2e:ad:52:13:53:42:6b:84:4d:40:9c:7a:d5: ba:43:44:4b:dd:36:17:0e:18:90:b3:07:88:46:8c:18:ca:20: 9a:99:ee:4c:94:4b:46:e3:2d:53:51:45:1b:43:cd:3f:b0:17: 39:77:79:0b:db:9e:29:0a:66:b6:bd:73:6a:10:bc:36:df:b8: 90:98:72:33:e7:3a:23:86:fb:ce:0f:1e:30:82:8e:17:39:b3: 51:45:33:07:a3:5a:dd:d3:d4:19:69:72:fd:f8:c0:cc:58:9f: 90:96:32:48:9b:01:2e:82:3a:84:2a:fd:7a:76:80:7b:d1:13: c9:af:82:d7:15:a1:03:e4:e5:49:fa:2d:4d:86:b3:40:04:83: 3e:c7:ed:ec:6d:7d:5f:bc:68:b0:bd:05:ed:13:ed:e4:2d:ec: 3d:2e:92:ef:8e:98:40:3a:42:5e:72:a5:44:70:b8:b4:4c:7b: 81:e4:12:ca:3b:41:d2:d7:22:9f:13:e4:5d:11:ba:7c:d4:a3: a4:3b:10:d5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWElhuafCBl6z4yPHagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk MmJhMmVhNGItYzFmYy00ZmY2LTk5NjctYzNhY2M2YzYwNjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLjCVq5LJfqWKrcXaWjnp6IAZVSK7zUZ2xXf D91LfRNjZOLtQfZ7gJqsrJffRGGekA09PhXjW+hs3cF+kgtYeKz+3td0wNoERlnG 36MaHPSR19m7BRtlPooknDxu4qp7PBqZnoSztByNVz6OK56OEBgA2EdbXUiBHixG 3AIM2/+BamH66nm6FmSL6RpjbXxWa/+8kTk+nJOtmsLHNncSF8rM9glib0c5UnXl C/m+ezjxcnJgp1kgqlfZOQ6sA+ClOm0rZpEdE3fT7wYNK6ynhnFmd4oBdCsOZoPn zc6Lu0WRLOfaCP6u+wdlg90JrAgOuldDYT4JURsV+x58mTi0+QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFb50Ct7HiwwP1HjAtJxU5AYFqjcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODlmNGNjZTgtZDhmOS0z NzIxLWI5OTgtYWY3YzVjNzUxNjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAz5CkxclKTegndrvDq0t6MNpXO9BMYYJ7ip52E IQXUaziFNRbkwx0/uFJ6QUhwZi6JBVquT8YDYNRA7C6tUhNTQmuETUCcetW6Q0RL 3TYXDhiQsweIRowYyiCame5MlEtG4y1TUUUbQ80/sBc5d3kL254pCma2vXNqELw2 37iQmHIz5zojhvvODx4wgo4XObNRRTMHo1rd09QZaXL9+MDMWJ+QljJImwEugjqE Kv16doB70RPJr4LXFaED5OVJ+i1NhrNABIM+x+3sbX1fvGiwvQXtE+3kLew9LpLv jphAOkJecqVEcLi0THuB5BLKO0HS1yKfE+RdEbp81KOkOxDV -----END CERTIFICATE-----Generated at Fri Apr 11 23:39:47 2025 by rpki-client