$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/984ac3a0-6f83-368a-b0eb-6486b1812810.roa File: 984ac3a0-6f83-368a-b0eb-6486b1812810.roa (raw, json) Hash identifier: 4jOOlQkECC/9dUEe2ezPQFDWbDgZy8g0DXpDiW+3Q08= Subject key identifier: 91:8A:26:8F:B5:73:26:9A:60:44:FE:44:24:EB:DF:4F:3D:9F:BA:06 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858491941947740A7D49A96EDA900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/984ac3a0-6f83-368a-b0eb-6486b1812810.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 396826 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:94:77:40:a7:d4:9a:96:ed:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=576d01e2-8257-43c5-8b7c-101663174580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0d:43:66:29:c2:d6:7a:8c:e2:b0:92:ee:f3: ce:8a:82:03:92:79:31:28:01:f5:03:4a:9e:7d:ca: 5c:a2:82:27:76:e1:b1:bd:9f:90:80:3f:8f:6a:82: db:98:1a:2b:68:87:d8:25:fd:31:37:36:22:71:a5: bf:48:98:20:6a:2b:65:28:6d:cf:25:49:82:08:b3: ae:ad:1e:96:a8:29:64:e9:98:77:43:dd:c7:c7:c9: d4:ae:27:db:99:01:aa:6d:a6:5b:b7:f6:14:27:e0: 1f:62:26:2f:ee:8b:eb:e1:c5:c8:71:a8:0e:6f:4a: 0d:a4:e6:2f:27:4c:21:33:03:3b:fd:70:d5:b7:3d: da:92:da:aa:8e:eb:56:8c:68:8c:1e:49:6c:2d:a3: 18:1f:e2:69:09:10:2a:67:a7:64:69:e4:38:7e:bb: c6:71:00:55:81:72:c2:44:5d:a2:e2:00:2c:93:fe: ce:42:23:81:b3:ae:39:ac:d4:b8:40:7c:a8:da:a8: 5d:86:11:18:f7:6b:98:a8:f2:1c:2b:d3:b4:69:98: b1:01:aa:5d:bf:db:36:ff:36:41:66:d8:64:07:a3: 2d:84:c1:f9:09:fc:e9:4a:90:61:19:00:e7:c4:bb: 62:7e:b8:e1:d7:aa:8e:40:66:49:e4:4c:51:26:84: d4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8A:26:8F:B5:73:26:9A:60:44:FE:44:24:EB:DF:4F:3D:9F:BA:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/984ac3a0-6f83-368a-b0eb-6486b1812810.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:49:2f:25:cf:e0:72:41:81:01:ee:4f:74:19:33:0a:8e:23: 5e:96:c8:61:b6:09:df:d9:2b:37:ed:48:8e:5d:a4:a7:16:42: 16:2c:78:a1:7f:64:8d:ac:6a:99:fb:28:41:02:f4:1e:32:fd: 07:50:3f:a7:5d:e0:33:a5:70:e9:0e:82:ed:25:8e:a3:eb:10: a7:93:ee:ef:7d:62:49:8a:ca:56:5a:df:25:86:d7:a2:9d:9c: 4e:b0:cb:fb:c6:80:6c:28:2c:96:00:fe:1a:27:31:b5:e7:61: bf:c3:1d:1a:94:14:df:30:95:c7:79:40:30:42:80:e3:c1:5c: 19:a4:30:29:17:32:1b:d8:68:b3:18:c9:3f:a7:a9:34:21:62: 6b:03:8d:45:aa:40:1e:ba:5e:cd:b4:23:d0:8a:6f:88:a8:ac: d8:2f:a0:e2:dc:02:28:ac:c3:28:dc:e0:6c:26:b5:ec:0e:be: a5:d3:ee:8b:89:79:30:d6:7a:9b:73:08:9d:84:c1:26:90:f2: ba:ab:1e:8a:73:d5:59:95:18:58:57:cc:c6:68:a9:d6:72:ef: e1:80:b7:ab:d1:61:fc:6b:8d:ab:f4:ba:89:24:7b:96:e1:45: 5f:0b:95:44:79:b1:ba:87:cc:94:08:8f:4d:be:98:dc:fb:dd: 90:02:5e:aa -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkZQZR3QKfUmpbtqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk NTc2ZDAxZTItODI1Ny00M2M1LThiN2MtMTAxNjYzMTc0NTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQ1DZinC1nqM4rCS7vPOioIDknkxKAH1A0qe fcpcooInduGxvZ+QgD+PaoLbmBoraIfYJf0xNzYicaW/SJggaitlKG3PJUmCCLOu rR6WqClk6Zh3Q93Hx8nUrifbmQGqbaZbt/YUJ+AfYiYv7ovr4cXIcagOb0oNpOYv J0whMwM7/XDVtz3aktqqjutWjGiMHklsLaMYH+JpCRAqZ6dkaeQ4frvGcQBVgXLC RF2i4gAsk/7OQiOBs645rNS4QHyo2qhdhhEY92uYqPIcK9O0aZixAapdv9s2/zZB ZthkB6MthMH5CfzpSpBhGQDnxLtifrjh16qOQGZJ5ExRJoTU7wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJGKJo+1cyaaYET+RCTr3089n7oGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTg0YWMzYTAtNmY4My0z NjhhLWIwZWItNjQ4NmIxODEyODEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAASS8lz+ByQYEB7k90GTMKjiNelshhtgnf2Ss3 7UiOXaSnFkIWLHihf2SNrGqZ+yhBAvQeMv0HUD+nXeAzpXDpDoLtJY6j6xCnk+7v fWJJispWWt8lhteinZxOsMv7xoBsKCyWAP4aJzG152G/wx0alBTfMJXHeUAwQoDj wVwZpDApFzIb2GizGMk/p6k0IWJrA41FqkAeul7NtCPQim+IqKzYL6Di3AIorMMo 3OBsJrXsDr6l0+6LiXkw1nqbcwidhMEmkPK6qx6Kc9VZlRhYV8zGaKnWcu/hgLer 0WH8a42r9LqJJHuW4UVfC5VEebG6h8yUCI9Nvpjc+92QAl6q -----END CERTIFICATE-----Generated at Sat Apr 12 01:07:26 2025 by rpki-client