$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/99cb8fe7-e52a-32f7-94d5-61f95870046d.roa File: 99cb8fe7-e52a-32f7-94d5-61f95870046d.roa (raw, json) Hash identifier: 8+N8IGLVC1UGDaJ5SLMHXFrq6OEKk55Z6GUnrFXGdp8= Subject key identifier: 80:61:0D:E9:E1:78:3E:74:4B:F6:87:1D:90:F6:F9:F5:95:88:A9:65 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848D2110C93E39A9260DDFD8480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/99cb8fe7-e52a-32f7-94d5-61f95870046d.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 396577 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:0c:93:e3:9a:92:60:dd:fd:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=33b45cd8-a108-4b35-8bc0-edb9a50942a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:25:82:d7:8c:14:bf:4d:75:bd:1d:af:d3:dc: 3f:9e:b8:9a:9d:f1:60:b2:7c:2e:90:b4:dd:16:39: 6f:fe:6a:70:bd:88:bf:51:f6:c4:df:66:57:f0:b4: c5:21:42:2c:ca:4a:d4:f8:70:46:33:48:ba:03:48: ef:f2:cb:e8:d5:50:f0:04:b2:86:9d:63:45:87:1c: f5:57:45:04:a0:b3:4a:5a:66:16:2d:b5:c0:fe:f4: 26:18:e4:5d:32:9b:38:31:8e:8b:9f:f2:1d:b0:bc: 1a:bc:01:cc:18:be:ee:a9:f4:dd:5b:bc:26:b9:b0: ea:47:fd:63:d8:ba:d3:10:70:a6:bf:84:18:5f:38: 92:3f:19:96:98:ec:a2:26:cb:da:21:ec:06:ac:4b: d9:ce:39:1b:fb:5b:74:a9:51:70:6d:5b:4b:98:a6: 4d:4c:bc:03:61:dd:ac:d6:d5:af:61:30:a1:97:6e: 37:09:2e:ed:07:ba:ba:aa:83:55:db:81:5d:19:7a: e0:94:86:59:32:7b:6b:e5:f2:b3:ba:30:f3:04:27: 8d:ee:18:fd:31:65:22:f7:ca:b6:34:26:a7:62:c1: ef:1f:15:bc:f8:ee:c7:c1:c5:03:ed:ba:88:65:4f: 46:92:fe:8f:9f:f7:81:e5:0a:df:ab:23:ed:82:60: f7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:61:0D:E9:E1:78:3E:74:4B:F6:87:1D:90:F6:F9:F5:95:88:A9:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/99cb8fe7-e52a-32f7-94d5-61f95870046d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:21:56:71:e0:5b:15:d4:3a:12:1b:09:67:98:95:9d:1c:cf: ab:36:68:78:48:a1:ed:7e:b3:ba:90:3d:28:3d:c3:b7:0a:7c: 84:d0:4d:07:8a:c2:61:32:c4:db:53:ed:27:20:95:49:b9:b7: e1:1e:44:0e:61:cc:02:8c:0f:7e:fb:c5:7c:36:62:a7:48:af: 73:05:13:b0:af:9e:1e:e4:53:83:90:98:f7:34:90:68:4b:5d: 65:38:f4:10:a3:08:b5:a8:36:66:ea:8e:a5:a2:0a:8c:3e:9b: f1:90:cb:2c:bd:0a:87:04:77:a4:c6:42:0c:2d:35:3f:db:fe: ae:77:fd:14:ab:a8:31:5c:c5:3d:e0:29:ce:f0:85:ac:4e:8c: 7d:2a:49:6a:b0:c3:2c:e4:18:1d:6f:56:95:40:cc:5e:71:b9: fd:7a:f5:56:3c:17:f8:d8:90:a2:f4:09:eb:97:b1:53:ee:76: 77:85:85:10:61:de:86:0b:6e:98:b7:da:bf:b1:89:a3:0d:c1: 1c:6a:44:15:f2:e9:bb:b7:42:23:43:ba:43:c3:7c:cb:58:5a: d0:a7:25:c5:fd:96:ca:4b:b7:68:ac:3c:65:46:d0:38:1a:ed: 55:09:82:98:c7:a5:51:79:70:fa:b3:49:37:31:3a:e4:ea:d0: 0b:b5:41:b2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjSEQyT45qSYN39hIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MzNiNDVjZDgtYTEwOC00YjM1LThiYzAtZWRiOWE1MDk0MmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiWC14wUv011vR2v09w/nrianfFgsnwukLTd Fjlv/mpwvYi/UfbE32ZX8LTFIUIsykrU+HBGM0i6A0jv8svo1VDwBLKGnWNFhxz1 V0UEoLNKWmYWLbXA/vQmGORdMps4MY6Ln/IdsLwavAHMGL7uqfTdW7wmubDqR/1j 2LrTEHCmv4QYXziSPxmWmOyiJsvaIewGrEvZzjkb+1t0qVFwbVtLmKZNTLwDYd2s 1tWvYTChl243CS7tB7q6qoNV24FdGXrglIZZMntr5fKzujDzBCeN7hj9MWUi98q2 NCanYsHvHxW8+O7HwcUD7bqIZU9Gkv6Pn/eB5QrfqyPtgmD3zwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIBhDenheD50S/aHHZD2+fWViKllMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTljYjhmZTctZTUyYS0z MmY3LTk0ZDUtNjFmOTU4NzAwNDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBkIVZx4FsV1DoSGwlnmJWdHM+rNmh4SKHtfrO6 kD0oPcO3CnyE0E0HisJhMsTbU+0nIJVJubfhHkQOYcwCjA9++8V8NmKnSK9zBROw r54e5FODkJj3NJBoS11lOPQQowi1qDZm6o6logqMPpvxkMssvQqHBHekxkIMLTU/ 2/6ud/0Uq6gxXMU94CnO8IWsTox9KklqsMMs5Bgdb1aVQMxecbn9evVWPBf42JCi 9Anrl7FT7nZ3hYUQYd6GC26Yt9q/sYmjDcEcakQV8um7t0IjQ7pDw3zLWFrQpyXF /ZbKS7dorDxlRtA4Gu1VCYKYx6VReXD6s0k3MTrk6tALtUGy -----END CERTIFICATE-----Generated at Sat Apr 12 02:16:00 2025 by rpki-client