$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8a0b38ff-92f3-38b6-ab7f-9c6a27597762.roa File: 8a0b38ff-92f3-38b6-ab7f-9c6a27597762.roa (raw, json) Hash identifier: 9zL1bE88/jF3P51S/+jhK/y2kTazeTsV40We5LbLaCs= Subject key identifier: 8B:F1:55:B3:CB:BE:C0:A6:A9:3B:C0:CA:0F:4D:3C:97:55:68:0B:22 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584961B9A5554F6992D3A084DEA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8a0b38ff-92f3-38b6-ab7f-9c6a27597762.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 36620 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:a5:55:4f:69:92:d3:a0:84:de:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=097834dc-84c2-4644-b787-113aa492380c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f9:fc:33:90:32:3b:42:89:82:b4:c4:91:4d: 28:3c:27:95:b5:cc:a1:62:ee:9b:c9:5c:04:c0:e4: 71:f9:00:a5:21:f6:ba:c7:71:8c:10:89:e4:b5:d1: a6:d3:9a:c5:76:6e:52:6e:b5:88:9c:77:0d:e2:8e: e9:a0:6b:47:e1:ac:f1:47:67:a9:c8:50:19:74:e1: d4:f0:61:80:cc:1e:c8:f7:e6:a8:1d:96:ad:eb:79: c8:35:45:53:9a:07:fb:85:77:31:ff:63:7b:13:aa: 97:55:77:46:ec:60:f4:a3:72:87:2b:7c:50:67:ce: 76:f7:f3:10:dc:f2:21:8a:58:64:22:69:67:1f:06: ae:ae:39:4c:75:7c:bc:97:3d:fe:e5:ce:1f:80:75: 1b:03:af:69:76:b9:53:a2:be:67:6d:ed:30:be:5e: 7a:cb:c5:4b:86:fe:74:26:6b:fa:87:c5:2f:19:16: fa:4c:84:bc:d8:ee:bc:11:82:32:c8:4b:e8:8a:1b: fd:8b:81:41:4b:1e:0e:41:e3:df:41:a6:74:16:41: b8:f7:1c:84:5c:68:42:1d:4e:55:7f:96:5e:78:2a: d6:ca:b7:58:d1:75:70:cc:75:d5:cd:e6:5d:6e:51: 80:7c:69:bf:a2:07:1e:d4:de:f1:89:63:0d:94:f8: fb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F1:55:B3:CB:BE:C0:A6:A9:3B:C0:CA:0F:4D:3C:97:55:68:0B:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8a0b38ff-92f3-38b6-ab7f-9c6a27597762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:89:06:e1:f6:8d:81:01:35:bf:2e:c8:7f:45:19:1b:49:54: 08:f2:c1:e3:6e:c5:b2:a2:5c:df:9e:94:55:b6:36:1a:51:57: 8c:b9:6e:26:10:db:fb:3b:ca:22:d3:3a:25:ff:98:87:4d:cb: 0a:0d:0c:cf:f7:e1:de:cb:cb:52:c0:68:bb:b8:27:52:f9:3a: cd:72:29:03:69:51:82:59:f3:f1:ba:1a:f3:57:02:cb:ab:ed: cb:1e:60:bd:69:90:fb:ab:20:9c:40:ce:f7:89:ac:de:68:e5: cd:07:13:0c:12:f1:13:a1:75:14:b2:c2:2e:0f:c3:d0:7b:21: 33:02:3d:eb:18:7a:e5:13:0d:14:66:05:63:16:98:d5:2c:e9: ec:66:7e:0f:58:dc:07:07:0f:29:82:8e:ea:c6:bf:59:f6:a6: a7:77:db:63:8e:96:c3:e3:99:32:c8:45:c0:ff:e4:86:6e:e8: c4:bc:af:8f:87:16:2e:c3:83:05:e6:7c:b2:e8:da:15:0b:24: 05:2b:c9:45:d3:fb:00:0a:3a:62:df:8a:b0:81:16:5b:43:d5: b4:3a:e0:96:4e:22:8a:e5:97:ff:b2:9f:c4:ac:4d:58:6d:d2: fe:40:31:74:64:a8:bc:17:0d:d6:8f:50:ae:33:4d:28:2e:ad: df:da:0b:d7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWElhuaVVT2mS06CE3qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk MDk3ODM0ZGMtODRjMi00NjQ0LWI3ODctMTEzYWE0OTIzODBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/n8M5AyO0KJgrTEkU0oPCeVtcyhYu6byVwE wORx+QClIfa6x3GMEInktdGm05rFdm5SbrWInHcN4o7poGtH4azxR2epyFAZdOHU 8GGAzB7I9+aoHZat63nINUVTmgf7hXcx/2N7E6qXVXdG7GD0o3KHK3xQZ8529/MQ 3PIhilhkImlnHwaurjlMdXy8lz3+5c4fgHUbA69pdrlTor5nbe0wvl56y8VLhv50 Jmv6h8UvGRb6TIS82O68EYIyyEvoihv9i4FBSx4OQePfQaZ0FkG49xyEXGhCHU5V f5ZeeCrWyrdY0XVwzHXVzeZdblGAfGm/ogce1N7xiWMNlPj7IwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIvxVbPLvsCmqTvAyg9NPJdVaAsiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGEwYjM4ZmYtOTJmMy0z OGI2LWFiN2YtOWM2YTI3NTk3NzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAsiQbh9o2BATW/Lsh/RRkbSVQI8sHjbsWyolzf npRVtjYaUVeMuW4mENv7O8oi0zol/5iHTcsKDQzP9+Hey8tSwGi7uCdS+TrNcikD aVGCWfPxuhrzVwLLq+3LHmC9aZD7qyCcQM73iazeaOXNBxMMEvEToXUUssIuD8PQ eyEzAj3rGHrlEw0UZgVjFpjVLOnsZn4PWNwHBw8pgo7qxr9Z9qand9tjjpbD45ky yEXA/+SGbujEvK+PhxYuw4MF5nyy6NoVCyQFK8lF0/sACjpi34qwgRZbQ9W0OuCW TiKK5Zf/sp/ErE1YbdL+QDF0ZKi8Fw3Wj1CuM00oLq3f2gvX -----END CERTIFICATE-----Generated at Fri Apr 11 23:54:15 2025 by rpki-client