$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b41aff8-95c6-3d06-b569-35d5d3bdd243.roa File: 9b41aff8-95c6-3d06-b569-35d5d3bdd243.roa (raw, json) Hash identifier: nGoeWfoLlw6P6j9YMhMdkG2RGcICYn1ET08GuOKdhiI= Subject key identifier: E2:C8:85:92:CD:CB:E4:D2:DA:7A:D6:FE:7D:5C:CD:86:89:F5:D4:89 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F432858491941987C2F216E5EB9762780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b41aff8-95c6-3d06-b569-35d5d3bdd243.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 396565 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:98:7c:2f:21:6e:5e:b9:76:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=b1504004-33b9-4c59-8bac-5db3daf68e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a3:1c:e8:62:b6:a8:48:28:4f:d1:2d:b8:46: 48:64:a4:c7:3e:7c:a9:ff:f9:de:49:c5:db:11:ed: 31:70:33:f2:28:25:84:71:a9:97:cd:c4:98:3f:88: 6e:dd:55:01:2b:a4:61:d6:c2:bf:e4:4e:28:3d:b8: 12:83:c0:04:5f:79:24:9e:99:01:0c:1b:c0:f8:c3: 59:bb:e4:9c:c5:a0:0c:c9:06:7b:fd:73:e6:3e:f1: 22:d7:d5:ed:fa:e1:90:a8:fa:59:e5:0c:2c:c2:a9: ce:52:01:6a:f3:35:37:26:f0:18:e4:af:79:90:d5: 9c:81:ff:9a:57:3d:c6:68:75:61:89:f7:63:db:40: 3c:94:67:e0:c9:d1:44:66:f3:9c:83:4c:44:a8:6d: 0c:66:3f:d1:02:77:68:ed:a4:fb:59:59:d4:cb:1a: 6e:76:29:ed:c3:09:58:73:ab:d2:11:37:c6:56:88: ee:40:f3:e9:5b:6d:44:3c:3d:a9:f6:02:17:cf:ea: bc:a8:f0:84:58:5d:5c:15:08:e8:27:c3:52:5b:b5: 84:92:22:b6:f6:df:de:d3:7b:b4:d7:c1:ac:b6:5f: 79:bb:fb:50:25:d1:b2:10:f2:84:9b:c7:3c:28:9d: 02:7c:04:75:db:2c:b1:30:a9:7c:f5:57:8a:dc:05: ce:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C8:85:92:CD:CB:E4:D2:DA:7A:D6:FE:7D:5C:CD:86:89:F5:D4:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b41aff8-95c6-3d06-b569-35d5d3bdd243.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:70:44:27:94:de:b2:8d:66:fa:3e:9d:64:6e:8a:db:29:70: 01:0a:9d:bf:e2:74:42:80:f8:a2:f9:ba:55:d0:41:ad:ec:fe: 6b:60:28:fe:b4:58:e7:94:e8:6b:0b:4d:c0:9e:54:f0:07:2e: 09:d2:a3:4f:c9:9f:65:c0:f5:a9:ef:05:1e:db:1e:af:b9:c3: 9b:42:af:ae:66:73:04:12:f7:da:71:c0:4c:2c:22:1f:59:69: e0:bb:9b:21:e4:82:5a:ea:ca:94:ec:ed:f8:1b:c5:5e:fc:16: 07:62:1e:04:50:d0:43:6a:a5:7b:43:62:c3:90:53:a3:95:d3: 16:17:1b:3a:1f:7f:bd:ec:1c:66:da:79:99:0f:bd:a5:54:07: 09:13:24:c8:60:9c:9b:18:b1:c4:c8:db:60:34:7b:29:fb:23: 4c:19:c5:d8:13:89:0d:f7:ef:7e:90:c6:1d:e0:0d:ee:17:47: f4:d3:89:bf:59:e6:cc:ee:eb:77:08:ef:aa:73:58:19:6f:01: de:3f:6d:93:cf:48:31:00:56:30:d5:5e:b8:81:e9:b2:fb:43: 65:5e:e3:06:5a:b7:0a:2f:32:77:d3:bf:79:44:c2:68:3f:47: a6:e8:73:7f:13:9e:3b:7f:1a:f2:c5:7d:dd:7a:23:75:eb:b5: 7f:4e:7b:11 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkZQZh8LyFuXrl2J4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk YjE1MDQwMDQtMzNiOS00YzU5LThiYWMtNWRiM2RhZjY4ZTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKMc6GK2qEgoT9EtuEZIZKTHPnyp//neScXb Ee0xcDPyKCWEcamXzcSYP4hu3VUBK6Rh1sK/5E4oPbgSg8AEX3kknpkBDBvA+MNZ u+ScxaAMyQZ7/XPmPvEi19Xt+uGQqPpZ5QwswqnOUgFq8zU3JvAY5K95kNWcgf+a Vz3GaHVhifdj20A8lGfgydFEZvOcg0xEqG0MZj/RAndo7aT7WVnUyxpudintwwlY c6vSETfGVojuQPPpW21EPD2p9gIXz+q8qPCEWF1cFQjoJ8NSW7WEkiK29t/e03u0 18Gstl95u/tQJdGyEPKEm8c8KJ0CfAR12yyxMKl89VeK3AXO0wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOLIhZLNy+TS2nrW/n1czYaJ9dSJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWI0MWFmZjgtOTVjNi0z ZDA2LWI1NjktMzVkNWQzYmRkMjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQATcEQnlN6yjWb6Pp1kborbKXABCp2/4nRCgPii +bpV0EGt7P5rYCj+tFjnlOhrC03AnlTwBy4J0qNPyZ9lwPWp7wUe2x6vucObQq+u ZnMEEvfaccBMLCIfWWngu5sh5IJa6sqU7O34G8Ve/BYHYh4EUNBDaqV7Q2LDkFOj ldMWFxs6H3+97Bxm2nmZD72lVAcJEyTIYJybGLHEyNtgNHsp+yNMGcXYE4kN9+9+ kMYd4A3uF0f004m/WebM7ut3CO+qc1gZbwHeP22Tz0gxAFYw1V64gemy+0NlXuMG WrcKLzJ30795RMJoP0em6HN/E547fxryxX3deiN167V/TnsR -----END CERTIFICATE-----Generated at Fri Apr 11 23:55:34 2025 by rpki-client