$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/994b5274-465b-3e10-be1a-3b92a6baa5e1.roa File: 994b5274-465b-3e10-be1a-3b92a6baa5e1.roa (raw, json) Hash identifier: O3f47jzVOxN39eopx0a8/tHIIzUc2RPVpyTBI92U8CM= Subject key identifier: 4D:23:B9:6B:0E:B4:59:3D:96:AA:9F:3B:E8:79:23:F4:53:8A:F3:18 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584975446BC8E7FF0CFC324E2000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/994b5274-465b-3e10-be1a-3b92a6baa5e1.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 396596 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:6b:c8:e7:ff:0c:fc:32:4e:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=cf1ee0c5-f983-41bb-a031-16a6d0e3d2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:52:eb:b2:6f:2f:3e:19:af:45:a6:9a:78:17: 42:41:c6:cc:55:7f:55:a6:0d:3a:12:65:d1:a5:76: 11:70:93:f4:ed:fc:ea:24:43:d5:fd:2a:3b:7e:48: 99:c4:11:0f:e6:8e:be:12:c6:0d:17:b1:0c:a3:f0: ef:0e:d5:c6:8c:e4:b8:96:d7:71:63:8b:31:2a:d3: f7:8a:f5:d2:3d:88:b8:a0:88:d4:a7:57:e4:ed:e4: ef:50:3f:cd:bb:9f:54:3e:ad:b0:34:24:79:00:15: 26:7c:b2:a7:23:ab:a4:14:41:9c:2a:1c:20:cb:bb: 03:2b:6a:7c:41:0a:03:d5:a1:da:b4:1c:17:c4:7e: 8c:91:1f:67:ed:47:bc:1c:04:05:4a:8b:e3:eb:8e: c3:5d:bb:88:21:80:91:60:05:ae:00:4c:88:01:d4: 79:b4:b3:8c:4b:8d:53:63:d1:e5:3f:ee:a7:0c:ee: eb:c9:88:db:c2:d5:fb:97:8d:70:69:ec:cf:40:32: 85:1b:ac:b0:4c:8e:b3:e0:5d:be:25:e3:41:01:89: 56:36:d1:7e:2e:e6:96:24:bf:76:bd:8d:6f:c4:73: 83:e2:36:23:14:54:b8:3f:15:f1:c1:b9:bc:49:59: 9e:7d:ae:ef:ff:6f:b0:07:fb:d4:b6:1b:df:dd:a1: d7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:23:B9:6B:0E:B4:59:3D:96:AA:9F:3B:E8:79:23:F4:53:8A:F3:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/994b5274-465b-3e10-be1a-3b92a6baa5e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:16:3b:1f:a3:f2:d0:3c:93:6e:0b:43:41:eb:e0:c6:bb:55: 9e:48:62:87:99:2f:99:f8:0d:64:94:fe:16:28:6f:e2:72:6a: 5c:41:0e:12:d2:47:8b:25:89:94:db:ea:e0:cd:17:bd:f9:3f: 64:7f:09:7c:4e:91:86:f7:e9:de:45:de:f9:56:0b:72:eb:89: 3b:92:f9:27:1b:31:be:09:c8:cb:5e:fb:be:b9:82:17:64:6d: 0d:4d:2d:6f:fb:7f:4b:45:03:ec:d8:a7:e2:34:c0:90:03:82: f7:04:21:0d:fe:aa:88:e2:dd:88:55:65:72:d4:c4:5b:b4:d5: eb:5b:40:7e:38:6d:9b:fe:97:29:d1:83:30:40:93:b5:3c:d8: 94:cf:fd:18:00:09:18:a8:3b:a3:b2:3a:b8:e2:7e:42:e2:a2: c4:d6:d5:72:80:26:01:3d:bf:1f:ab:18:07:11:77:88:e8:4a: 10:50:5f:cc:96:19:9f:ca:3d:1c:23:c6:59:27:ee:5e:67:e1: 4e:b7:28:de:a7:00:6c:f0:78:17:da:01:b4:1c:a9:58:ad:c7: 9d:e3:81:5e:e7:8d:df:c2:a3:0c:8d:a5:72:7c:51:c2:27:78: f0:40:64:c2:98:33:29:f0:8e:06:49:c1:8d:c3:aa:96:a4:90: 3c:3d:c5:68 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEl1RGvI5/8M/DJOIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk Y2YxZWUwYzUtZjk4My00MWJiLWEwMzEtMTZhNmQwZTNkMmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1Lrsm8vPhmvRaaaeBdCQcbMVX9Vpg06EmXR pXYRcJP07fzqJEPV/So7fkiZxBEP5o6+EsYNF7EMo/DvDtXGjOS4ltdxY4sxKtP3 ivXSPYi4oIjUp1fk7eTvUD/Nu59UPq2wNCR5ABUmfLKnI6ukFEGcKhwgy7sDK2p8 QQoD1aHatBwXxH6MkR9n7Ue8HAQFSovj647DXbuIIYCRYAWuAEyIAdR5tLOMS41T Y9HlP+6nDO7ryYjbwtX7l41waezPQDKFG6ywTI6z4F2+JeNBAYlWNtF+LuaWJL92 vY1vxHOD4jYjFFS4PxXxwbm8SVmefa7v/2+wB/vUthvf3aHXZQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFE0juWsOtFk9lqqfO+h5I/RTivMYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTk0YjUyNzQtNDY1Yi0z ZTEwLWJlMWEtM2I5MmE2YmFhNWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAYFjsfo/LQPJNuC0NB6+DGu1WeSGKHmS+Z+A1k lP4WKG/icmpcQQ4S0keLJYmU2+rgzRe9+T9kfwl8TpGG9+neRd75Vgty64k7kvkn GzG+CcjLXvu+uYIXZG0NTS1v+39LRQPs2KfiNMCQA4L3BCEN/qqI4t2IVWVy1MRb tNXrW0B+OG2b/pcp0YMwQJO1PNiUz/0YAAkYqDujsjq44n5C4qLE1tVygCYBPb8f qxgHEXeI6EoQUF/Mlhmfyj0cI8ZZJ+5eZ+FOtyjepwBs8HgX2gG0HKlYrced44Fe 543fwqMMjaVyfFHCJ3jwQGTCmDMp8I4GScGNw6qWpJA8PcVo -----END CERTIFICATE-----Generated at Sat Apr 12 00:01:11 2025 by rpki-client