$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9a8e0ef1-17a6-3295-911c-186451a8fe5e.roa File: 9a8e0ef1-17a6-3295-911c-186451a8fe5e.roa (raw, json) Hash identifier: FVI9DeVt5om2lx5Yt8gQoVq1qS5OfHQoN8t9Y81oBQc= Subject key identifier: A8:83:07:64:DA:6A:FA:39:A6:A2:8A:7A:D0:85:BF:7A:E1:8E:52:16 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584961B9A5E4FB11FB22DAD27A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9a8e0ef1-17a6-3295-911c-186451a8fe5e.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 396590 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:a5:e4:fb:11:fb:22:da:d2:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=9dd57342-fb00-480e-a8b6-5804d24f9e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d1:2c:de:23:ec:cf:ea:94:87:c0:88:05:c0: c7:a6:87:da:19:a3:0a:8c:00:e4:66:33:d0:08:cd: 60:86:c5:d9:94:ef:32:5d:ea:7b:a5:b1:64:ed:cd: f4:0e:57:5d:dc:c2:f6:d6:d4:4d:96:6c:96:ae:38: 89:ca:4f:98:4d:80:a2:3f:d6:e9:c5:80:03:a7:ec: 72:62:34:db:42:7b:a5:e1:d1:23:36:d2:4d:4e:7d: c1:58:df:9d:fb:9a:54:db:45:32:31:3f:48:14:a1: 56:94:9f:4a:37:36:a5:69:57:77:94:2f:fc:1d:44: 3c:01:fe:1e:bf:f4:f9:4f:e1:9b:20:b6:74:14:56: 4a:1c:46:33:5c:18:cd:c1:10:1f:d6:73:4e:10:ea: 22:5a:bf:ee:9a:50:3d:1d:c7:a3:35:31:5a:0d:51: 97:a2:5b:4a:39:dc:95:9d:b3:87:03:93:0a:7d:fa: 2e:05:68:22:f3:94:7f:32:2d:a1:08:15:1e:4c:23: f7:6d:7b:20:56:93:9c:18:0c:fc:93:23:17:7a:8d: bf:11:b8:f9:28:ab:42:2b:da:fb:2e:71:6a:fb:dc: 29:86:64:ca:3e:f0:3f:92:8b:7f:cc:e2:65:19:4d: 3f:d5:8e:f0:89:ec:fb:d1:1a:4a:5b:24:bd:49:f3: b1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:83:07:64:DA:6A:FA:39:A6:A2:8A:7A:D0:85:BF:7A:E1:8E:52:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9a8e0ef1-17a6-3295-911c-186451a8fe5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:78:8f:4d:76:d9:68:42:d7:86:f6:b5:e4:21:9f:91:55:1f: 51:83:13:29:15:a4:1d:6c:43:81:7e:b6:e7:4e:52:c0:0d:ce: 76:70:8b:31:d0:33:64:f8:94:9c:fb:c9:35:62:cd:0c:13:63: 31:7b:f9:43:4c:25:ff:e8:e9:95:13:2d:c7:bd:bd:c2:e1:d9: e5:7a:fb:2c:42:d6:ad:de:f3:1b:63:ca:3c:3b:c5:9c:34:09: 17:b8:62:27:eb:a7:ba:80:5b:c6:25:d7:fc:0b:a2:78:3a:1a: 86:0b:b6:52:38:cc:55:89:a5:c9:47:76:59:ba:21:33:ce:c8: a3:1e:09:7a:90:7e:e7:99:b9:c8:40:de:da:f1:98:55:b0:fa: c7:01:6e:29:29:30:08:4b:5d:07:09:00:b3:df:82:31:17:c0: 4c:c1:d2:28:c4:4f:6f:6e:4e:4d:f2:c4:d9:86:cb:a1:3f:a6: 8d:10:93:45:2a:ef:38:1e:32:5c:bb:a1:57:86:f6:5e:a8:d7: c9:eb:46:8e:0d:75:7a:d2:6e:40:fa:10:77:2c:21:35:b6:79: a1:c5:12:c8:9f:cc:f0:42:c4:d0:ec:ad:46:b1:c0:33:14:f9: da:71:21:b8:ff:80:00:f1:d9:44:31:e6:7d:a0:cf:7e:3b:70: a0:24:9f:13 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWElhuaXk+xH7ItrSeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk OWRkNTczNDItZmIwMC00ODBlLWE4YjYtNTgwNGQyNGY5ZTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdEs3iPsz+qUh8CIBcDHpofaGaMKjADkZjPQ CM1ghsXZlO8yXep7pbFk7c30Dldd3ML21tRNlmyWrjiJyk+YTYCiP9bpxYADp+xy YjTbQnul4dEjNtJNTn3BWN+d+5pU20UyMT9IFKFWlJ9KNzalaVd3lC/8HUQ8Af4e v/T5T+GbILZ0FFZKHEYzXBjNwRAf1nNOEOoiWr/umlA9HcejNTFaDVGXoltKOdyV nbOHA5MKffouBWgi85R/Mi2hCBUeTCP3bXsgVpOcGAz8kyMXeo2/Ebj5KKtCK9r7 LnFq+9wphmTKPvA/kot/zOJlGU0/1Y7wiez70RpKWyS9SfOxEQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKiDB2Taavo5pqKKetCFv3rhjlIWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWE4ZTBlZjEtMTdhNi0z Mjk1LTkxMWMtMTg2NDUxYThmZTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAaeI9NdtloQteG9rXkIZ+RVR9RgxMpFaQdbEOB frbnTlLADc52cIsx0DNk+JSc+8k1Ys0ME2Mxe/lDTCX/6OmVEy3Hvb3C4dnlevss Qtat3vMbY8o8O8WcNAkXuGIn66e6gFvGJdf8C6J4OhqGC7ZSOMxViaXJR3ZZuiEz zsijHgl6kH7nmbnIQN7a8ZhVsPrHAW4pKTAIS10HCQCz34IxF8BMwdIoxE9vbk5N 8sTZhsuhP6aNEJNFKu84HjJcu6FXhvZeqNfJ60aODXV60m5A+hB3LCE1tnmhxRLI n8zwQsTQ7K1GscAzFPnacSG4/4AA8dlEMeZ9oM9+O3CgJJ8T -----END CERTIFICATE-----Generated at Sat Apr 12 00:08:45 2025 by rpki-client