$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8a5e44fb-e0a3-3f67-929b-49c2d660df55.roa File: 8a5e44fb-e0a3-3f67-929b-49c2d660df55.roa (raw, json) Hash identifier: mUG2b4dI1xkTHOm7xymv/v8OmlUCYbC4k4oHlPVRhbE= Subject key identifier: 88:54:41:73:35:BA:5A:59:F4:56:38:7B:F6:82:71:08:26:FB:FB:18 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858494CC94BC925B266A665D1B680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8a5e44fb-e0a3-3f67-929b-49c2d660df55.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 0 IP address blocks: 2620:74:94::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:4b:c9:25:b2:66:a6:65:d1:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=d7e8e019-97b9-4686-8338-c174e1ef9414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:dd:8d:5f:68:54:2f:d6:8c:b5:cc:72:c7:c7: f5:d3:a7:1b:6e:55:ac:97:ed:1f:f6:a6:71:37:0a: b0:42:c5:61:ec:14:c6:d2:8d:b9:1d:1d:13:83:51: 42:1f:8d:37:99:44:a0:f0:c7:49:37:21:70:4c:84: 20:5e:a6:38:1f:1c:a9:2f:5a:76:5f:b0:35:24:5b: bf:2d:a2:06:fd:e2:f9:48:0f:53:e5:cc:b2:05:80: 98:6f:b6:2b:46:2d:be:f4:bf:3d:d3:72:87:a7:fd: c0:ca:69:3c:85:16:f7:87:82:f6:24:8c:51:b0:58: 30:08:34:c2:a5:d5:18:e0:98:ac:2b:f1:45:32:97: a7:bb:85:f1:81:f0:71:66:06:88:88:66:67:78:86: f6:b7:68:62:df:0d:c6:a9:05:75:7e:f0:c0:97:88: 2e:da:49:bc:e0:2e:76:59:45:b9:d5:34:5e:35:83: 04:dc:4a:39:67:16:0c:08:a6:8f:8a:7b:79:c3:f7: 65:49:b1:46:32:41:79:4f:1e:f7:c1:af:8a:6e:32: 82:47:b1:b8:85:17:ba:cf:69:1b:1f:69:14:39:d1: e8:50:1a:b6:dd:9c:dc:90:c0:ee:5e:ea:f2:eb:57: c6:a5:6b:93:9b:d2:b5:45:91:a1:b7:8c:fe:bd:dd: b6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:54:41:73:35:BA:5A:59:F4:56:38:7B:F6:82:71:08:26:FB:FB:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8a5e44fb-e0a3-3f67-929b-49c2d660df55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:94::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:a9:eb:66:57:b7:9a:35:59:21:20:6f:a4:6e:8a:8a:f1:88: 15:9c:30:68:7c:64:62:a1:6e:23:31:19:68:0a:37:07:ba:2a: ba:cf:b9:07:c9:fb:21:34:e7:89:52:d3:d2:e6:76:e8:b4:f3: bf:8d:87:fb:2f:3b:2f:1e:a1:9c:b9:c2:09:91:9e:c0:c3:f7: d5:c3:21:6d:ae:38:88:d0:72:bd:d4:6f:fd:20:29:1b:c9:3b: 41:69:69:61:f7:94:f1:a4:09:a6:f7:a8:73:ca:e8:66:5a:5f: 4b:12:ea:58:58:c5:22:38:77:0d:5a:45:2d:56:39:b3:b4:32: 46:a7:e1:96:c1:8b:b3:81:48:61:66:ec:ae:dc:73:6b:87:f6: a2:50:22:22:4d:4c:ff:2a:39:74:10:75:e5:59:6c:b1:70:3d: 7a:16:0a:e6:4d:04:54:a2:1b:de:10:08:e2:5c:ef:ef:ae:34: 30:c2:1c:4f:0e:83:3f:3d:63:bc:93:5e:22:a1:58:bc:3e:24: f5:7c:9a:08:f4:1c:59:1b:0c:97:78:7a:2f:90:01:98:4a:82: be:0e:9b:91:fa:cf:62:7a:44:71:ec:c9:4e:1d:af:8a:98:89: f0:53:9d:6f:b9:c7:7e:57:3d:ef:1e:e5:88:28:6b:02:61:41: a5:30:29:15 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElMyUvJJbJmpmXRtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk ZDdlOGUwMTktOTdiOS00Njg2LTgzMzgtYzE3NGUxZWY5NDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN2NX2hUL9aMtcxyx8f106cbblWsl+0f9qZx NwqwQsVh7BTG0o25HR0Tg1FCH403mUSg8MdJNyFwTIQgXqY4HxypL1p2X7A1JFu/ LaIG/eL5SA9T5cyyBYCYb7YrRi2+9L8903KHp/3Aymk8hRb3h4L2JIxRsFgwCDTC pdUY4JisK/FFMpenu4XxgfBxZgaIiGZneIb2t2hi3w3GqQV1fvDAl4gu2km84C52 WUW51TReNYME3Eo5ZxYMCKaPint5w/dlSbFGMkF5Tx73wa+KbjKCR7G4hRe6z2kb H2kUOdHoUBq23ZzckMDuXury61fGpWuTm9K1RZGht4z+vd22/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIhUQXM1ulpZ9FY4e/aCcQgm+/sYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGE1ZTQ0ZmItZTBhMy0z ZjY3LTkyOWItNDljMmQ2NjBkZjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJiAAdACU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAqp62ZXt5o1WSEgb6RuiorxiBWcMGh8ZGKhbiMxGWgKNwe6KrrP uQfJ+yE054lS09Lmdui087+Nh/svOy8eoZy5wgmRnsDD99XDIW2uOIjQcr3Ub/0g KRvJO0FpaWH3lPGkCab3qHPK6GZaX0sS6lhYxSI4dw1aRS1WObO0Mkan4ZbBi7OB SGFm7K7cc2uH9qJQIiJNTP8qOXQQdeVZbLFwPXoWCuZNBFSiG94QCOJc7++uNDDC HE8Ogz89Y7yTXiKhWLw+JPV8mgj0HFkbDJd4ei+QAZhKgr4Om5H6z2J6RHHsyU4d r4qYifBTnW+5x35XPe8e5YgoawJhQaUwKRU= -----END CERTIFICATE-----Generated at Fri Apr 11 23:38:54 2025 by rpki-client