$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9343c900-89c1-369a-b048-3a29aa1898e0.roa File: 9343c900-89c1-369a-b048-3a29aa1898e0.roa (raw, json) Hash identifier: bT70QJxyoe8ykDOSdefhCIfPezGidar6TqWfW3JSmTQ= Subject key identifier: 8B:4D:DB:AC:A8:6C:C1:2E:D4:5C:4E:8C:12:3E:01:70:1A:41:3E:E1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849D85FD0804F6E29C4641F2220 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9343c900-89c1-369a-b048-3a29aa1898e0.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 397197 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:d0:80:4f:6e:29:c4:64:1f:22:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=1781f094-ab78-45d0-9ef9-25f5f658e2e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c8:f5:3a:68:af:bb:2c:f0:e9:95:36:d2:da: 5e:a7:5c:d8:5f:56:54:56:d8:72:e8:a6:c6:39:98: 72:47:4e:cd:71:3f:1c:5e:f5:9d:9b:8c:2b:2c:22: 4e:fd:4a:91:be:59:7f:4a:51:c6:68:3c:05:32:ca: 05:c9:2d:e4:e4:37:04:1f:87:a8:38:a7:4c:ff:86: 01:2b:8e:4f:ca:75:48:8b:4f:a9:6c:ee:c1:88:d3: b3:0c:22:92:d1:74:b4:5c:e7:e3:98:89:be:20:bd: 9f:a7:49:3a:54:bf:17:4f:1d:2b:af:e2:e4:6f:49: ea:f9:2b:8a:83:89:7d:a1:eb:d4:b4:c1:cf:fc:01: fe:91:a2:e6:d1:2e:fb:69:eb:88:5a:5f:01:d5:6a: 38:40:bf:4c:9e:2f:41:e3:43:74:dc:a1:72:b2:f8: 95:d4:c5:27:53:bc:07:82:ea:e8:ba:f2:35:2d:f3: d3:67:32:f9:af:bc:26:38:45:06:a8:8d:fa:77:4b: a3:36:f9:16:16:04:28:6a:f6:90:09:47:21:b2:a8: db:78:7c:17:8e:ff:85:1e:65:0b:94:80:37:a7:a0: a7:9f:93:44:09:44:74:0f:bc:98:10:6f:4d:05:8b: 84:b9:6d:a9:1b:23:47:ce:e8:d2:b5:e0:d7:b2:c9: 19:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:4D:DB:AC:A8:6C:C1:2E:D4:5C:4E:8C:12:3E:01:70:1A:41:3E:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9343c900-89c1-369a-b048-3a29aa1898e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:23:3d:f2:cc:cf:a3:be:e0:0f:47:b2:37:75:71:ae:06:24: a6:73:0e:e5:08:d2:66:c2:1d:8c:2d:ef:38:2d:5b:47:29:d0: 95:88:30:f7:45:ad:2c:27:ed:94:e1:2a:c4:ca:0d:39:70:62: fa:ea:fb:5b:f1:2a:25:9f:3d:9f:52:67:0c:d5:68:18:1a:91: 1c:cf:8a:51:94:f1:f0:87:cb:7f:5b:e4:9c:66:49:63:e9:90: 35:c1:21:d5:ce:2a:7a:66:e9:e0:97:8e:64:3c:a8:69:6e:5a: e1:ed:16:b8:b1:00:63:ec:fb:7e:fe:df:6a:28:20:df:07:07: ef:ea:39:4a:c3:37:b3:f5:b9:23:04:1d:8f:0f:33:d6:fb:de: 98:dd:d4:36:3e:75:dc:82:67:70:f0:c8:bf:5e:8d:93:c4:40: d9:1b:76:4f:79:78:66:39:ec:05:e4:0c:0a:65:07:73:6f:d7: 6f:3f:dc:05:1a:50:cd:1b:51:bc:9e:d7:5d:af:85:64:7f:48: ea:dd:ed:0c:e1:97:0f:92:e8:67:f9:29:0e:2d:50:da:f0:50: a1:46:52:1f:99:01:7a:55:a0:40:83:e5:91:55:2f:23:34:b8: 09:76:39:c0:ee:bc:f6:61:9a:cd:71:ec:53:f1:70:da:e1:ff: ee:a5:38:07 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnYX9CAT24pxGQfIiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MTc4MWYwOTQtYWI3OC00NWQwLTllZjktMjVmNWY2NThlMmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsj1Omivuyzw6ZU20tpep1zYX1ZUVthy6KbG OZhyR07NcT8cXvWdm4wrLCJO/UqRvll/SlHGaDwFMsoFyS3k5DcEH4eoOKdM/4YB K45PynVIi0+pbO7BiNOzDCKS0XS0XOfjmIm+IL2fp0k6VL8XTx0rr+Lkb0nq+SuK g4l9oevUtMHP/AH+kaLm0S77aeuIWl8B1Wo4QL9Mni9B40N03KFysviV1MUnU7wH gurouvI1LfPTZzL5r7wmOEUGqI36d0ujNvkWFgQoavaQCUchsqjbeHwXjv+FHmUL lIA3p6Cnn5NECUR0D7yYEG9NBYuEuW2pGyNHzujSteDXsskZ4wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFItN26yobMEu1FxOjBI+AXAaQT7hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTM0M2M5MDAtODljMS0z NjlhLWIwNDgtM2EyOWFhMTg5OGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBFIz3yzM+jvuAPR7I3dXGuBiSmcw7lCNJmwh2M Le84LVtHKdCViDD3Ra0sJ+2U4SrEyg05cGL66vtb8Solnz2fUmcM1WgYGpEcz4pR lPHwh8t/W+ScZklj6ZA1wSHVzip6Zungl45kPKhpblrh7Ra4sQBj7Pt+/t9qKCDf Bwfv6jlKwzez9bkjBB2PDzPW+96Y3dQ2PnXcgmdw8Mi/Xo2TxEDZG3ZPeXhmOewF 5AwKZQdzb9dvP9wFGlDNG1G8ntddr4Vkf0jq3e0M4ZcPkuhn+SkOLVDa8FChRlIf mQF6VaBAg+WRVS8jNLgJdjnA7rz2YZrNcexT8XDa4f/upTgH -----END CERTIFICATE-----Generated at Fri Jun 6 19:42:55 2025 by rpki-client