$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4a7da04-0d35-3299-81c5-78e3b98e77ae.roa File: a4a7da04-0d35-3299-81c5-78e3b98e77ae.roa (raw, json) Hash identifier: 0JifkOYFTi1aILGb/djMW5uueoGMawUO3pBpifUsaP0= Subject key identifier: 3D:88:CB:04:0E:A5:86:50:DC:8A:F7:B5:8E:A6:EA:35:A8:EB:F9:85 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285848F9268C4AD10A8758B0854880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4a7da04-0d35-3299-81c5-78e3b98e77ae.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 396597 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:8c:4a:d1:0a:87:58:b0:85:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=aaa9f8f0-2dcb-4115-9807-b6ec782f01d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a6:d2:c0:19:40:e7:cb:4a:fc:74:5d:be:e1: 7e:11:0f:3c:84:96:25:79:1d:8a:e8:83:18:20:69: 00:36:3d:52:8a:6c:73:65:c3:eb:7d:73:25:6d:5f: 24:a7:2a:d2:78:00:65:6b:c4:68:ef:b9:bc:46:b2: 92:a1:03:7c:15:03:6b:33:a4:fd:29:a3:7b:68:30: 14:bf:3a:ce:ac:14:77:8e:cd:e8:6b:73:29:ed:c7: 35:a7:90:e4:ac:6f:1e:85:76:c1:2f:7f:56:6e:87: c3:88:e9:78:26:eb:40:2a:58:41:29:26:12:35:c5: 7e:17:87:9e:d1:e7:fa:2f:d2:c1:9a:2e:ab:5d:3b: db:23:74:7d:12:3c:ee:fd:8b:de:a3:ad:25:cb:65: b5:cc:62:e3:61:88:23:fc:f2:25:47:58:bf:95:69: 3c:f4:3f:e3:63:b3:bf:39:7a:60:8a:1d:85:75:86: 46:24:f9:30:d7:c4:9c:0a:77:09:ca:22:ba:fb:f7: 58:28:98:80:8a:ad:1e:e8:1e:15:77:ff:75:06:01: e7:56:ee:c5:34:6f:24:4b:60:b5:65:7b:d7:bb:37: 02:ec:88:ce:66:6c:df:bb:06:8c:a9:94:48:ff:41: ff:ef:1f:30:da:09:f9:f3:81:c1:f8:4c:58:4c:06: 60:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:88:CB:04:0E:A5:86:50:DC:8A:F7:B5:8E:A6:EA:35:A8:EB:F9:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a4a7da04-0d35-3299-81c5-78e3b98e77ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:2f:ab:42:46:24:75:9a:db:93:13:06:4e:a8:86:ce:17:73: 15:f9:f5:a8:1d:56:fa:f0:89:f6:86:00:d6:34:25:fa:92:57: 38:3d:6e:b3:c7:e7:6e:23:9d:9c:fe:9d:b1:53:36:ed:5d:7b: 5f:85:d2:3d:d0:00:d6:8f:36:d7:da:1c:a6:c2:be:f1:f1:f2: 15:d4:3c:e1:1a:82:38:ff:48:fa:6d:26:2e:7d:74:7f:e9:c2: 8b:c5:52:3a:06:58:c0:35:1b:2b:66:78:a3:85:dc:51:72:ca: a1:8c:1c:7e:3c:fc:e5:44:34:e1:58:76:66:c2:b1:83:a8:4d: c8:8a:9c:6f:da:73:96:fe:0c:46:42:0e:7b:3b:aa:fe:11:2c: 7b:e3:db:75:62:70:20:de:86:b9:db:39:df:f2:df:56:83:7a: 48:f9:f5:38:03:41:74:3d:bb:50:1e:2e:df:bc:b5:d4:f3:36: 36:f5:4a:13:b6:e7:9a:db:12:d5:53:96:d6:d2:e9:94:0a:3a: 4a:28:bb:18:4c:ab:18:9c:4e:a7:41:7e:a3:57:f0:53:bd:37: c6:a7:3b:2c:9e:6e:2e:e9:1e:b7:43:26:9d:30:71:44:d0:f8: 3d:44:a0:55:de:52:98:ed:b6:68:29:02:23:9f:f3:c7:e6:15: c9:e9:ee:8b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEj5JoxK0QqHWLCFSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YWFhOWY4ZjAtMmRjYi00MTE1LTk4MDctYjZlYzc4MmYwMWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqbSwBlA58tK/HRdvuF+EQ88hJYleR2K6IMY IGkANj1SimxzZcPrfXMlbV8kpyrSeABla8Ro77m8RrKSoQN8FQNrM6T9KaN7aDAU vzrOrBR3js3oa3Mp7cc1p5DkrG8ehXbBL39WbofDiOl4JutAKlhBKSYSNcV+F4ee 0ef6L9LBmi6rXTvbI3R9Ejzu/Yveo60ly2W1zGLjYYgj/PIlR1i/lWk89D/jY7O/ OXpgih2FdYZGJPkw18ScCncJyiK6+/dYKJiAiq0e6B4Vd/91BgHnVu7FNG8kS2C1 ZXvXuzcC7IjOZmzfuwaMqZRI/0H/7x8w2gn584HB+ExYTAZgSQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFD2IywQOpYZQ3Ir3tY6m6jWo6/mFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTRhN2RhMDQtMGQzNS0z Mjk5LTgxYzUtNzhlM2I5OGU3N2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBRL6tCRiR1mtuTEwZOqIbOF3MV+fWoHVb68In2 hgDWNCX6klc4PW6zx+duI52c/p2xUzbtXXtfhdI90ADWjzbX2hymwr7x8fIV1Dzh GoI4/0j6bSYufXR/6cKLxVI6BljANRsrZnijhdxRcsqhjBx+PPzlRDThWHZmwrGD qE3Iipxv2nOW/gxGQg57O6r+ESx749t1YnAg3oa52znf8t9Wg3pI+fU4A0F0PbtQ Hi7fvLXU8zY29UoTtuea2xLVU5bW0umUCjpKKLsYTKsYnE6nQX6jV/BTvTfGpzss nm4u6R63QyadMHFE0Pg9RKBV3lKY7bZoKQIjn/PH5hXJ6e6L -----END CERTIFICATE-----Generated at Fri Apr 11 23:40:31 2025 by rpki-client