$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6f39d40-f2d1-34d7-9ec3-6a057db00813.roa File: a6f39d40-f2d1-34d7-9ec3-6a057db00813.roa (raw, json) Hash identifier: XyBoRrYa5e/ceakVIfsY+I6Gce8tlc9L0H711jxZ6Q0= Subject key identifier: 37:91:8B:20:01:71:B3:5C:A9:73:F7:7A:0B:67:73:98:B6:59:63:12 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849D85FD3115DDF3508A7D54C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6f39d40-f2d1-34d7-9ec3-6a057db00813.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 396587 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:d3:11:5d:df:35:08:a7:d5:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=5e9739fa-8216-427e-ba41-a2d69105b5c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3d:5f:97:40:70:e9:b5:d6:8d:49:91:68:9c: 7e:a6:8d:3e:bc:14:26:74:19:65:4a:4f:8c:06:b6: 36:fc:34:06:f9:62:a2:4f:cd:ef:85:58:33:7b:28: d0:01:00:ff:35:8d:51:37:b1:69:ef:b0:2b:ca:ed: 95:79:c0:e0:64:0c:66:c5:88:ab:34:86:98:b4:12: 6d:be:be:57:ec:93:58:4d:e6:42:ff:22:46:5e:4e: b7:15:b6:66:c9:f1:fa:81:30:cf:93:4d:60:5c:b4: 05:8a:9f:e3:75:ff:4f:c7:e2:07:00:86:40:8b:90: 2b:7b:57:ca:93:6d:ee:20:b7:d4:c8:24:4e:0c:8c: 60:80:0e:53:1f:41:57:58:b5:60:b8:39:39:88:b5: f6:fe:1f:61:ab:d9:c5:f7:80:ba:2a:d9:30:ce:ad: 06:e7:ee:15:cd:60:f9:e6:5c:75:58:76:76:3c:a9: d3:c8:6b:33:b4:98:ce:e1:ba:67:e9:c5:5a:f9:4b: cd:24:06:26:3b:26:4e:47:10:a8:6f:93:7b:35:b0: 50:1e:14:6e:04:ca:0c:5b:e0:05:7a:f2:06:6b:6e: 01:4f:b9:e1:35:90:ae:94:b5:67:9c:13:96:7f:c2: 13:99:67:26:c1:bd:db:3d:3e:3b:c4:19:a4:e4:2b: f9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:91:8B:20:01:71:B3:5C:A9:73:F7:7A:0B:67:73:98:B6:59:63:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6f39d40-f2d1-34d7-9ec3-6a057db00813.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:9b:8f:db:90:77:d0:33:c2:f0:5f:c1:40:41:5f:05:96:df: bb:9f:93:fa:f5:43:7c:00:17:48:08:80:82:e9:e3:6a:da:be: 2d:76:dc:57:29:70:2c:10:8d:72:6f:ac:4f:aa:e6:5c:2c:59: 1d:52:a9:67:d5:0d:19:b1:2a:f6:80:78:df:41:4d:f4:f9:19: b9:69:98:f3:82:60:1f:eb:6a:c5:f9:2c:3f:52:15:a1:c2:1f: fa:d9:c6:c3:0b:3e:ff:21:5e:c9:d2:0e:1f:12:7e:23:2d:8a: b2:e0:ca:0c:a7:bd:f6:92:a7:4d:29:94:41:c1:09:05:cd:81: be:9f:53:17:aa:da:a3:62:7d:b1:99:47:cc:ea:68:dd:20:c7: c7:94:ef:7b:c2:6b:68:12:1b:73:92:1d:44:68:a9:ae:89:df: 14:f3:1c:94:05:01:e2:b1:89:15:2f:f4:41:c1:9e:0f:cb:7c: d5:ac:a1:59:ae:68:7a:49:71:1b:54:18:a3:38:cd:32:fb:ae: 80:2b:86:fb:2d:1f:01:e6:18:e6:45:df:de:0a:68:fe:74:90: 35:e9:aa:89:39:16:cc:52:5e:5f:7a:a6:83:cb:12:fb:87:c7: 86:41:01:f3:8a:d0:38:fa:3f:18:40:ee:02:a0:e7:49:e3:7e: 4c:fa:9c:5b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnYX9MRXd81CKfVTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NWU5NzM5ZmEtODIxNi00MjdlLWJhNDEtYTJkNjkxMDViNWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmT1fl0Bw6bXWjUmRaJx+po0+vBQmdBllSk+M BrY2/DQG+WKiT83vhVgzeyjQAQD/NY1RN7Fp77Aryu2VecDgZAxmxYirNIaYtBJt vr5X7JNYTeZC/yJGXk63FbZmyfH6gTDPk01gXLQFip/jdf9Px+IHAIZAi5Are1fK k23uILfUyCRODIxggA5TH0FXWLVguDk5iLX2/h9hq9nF94C6Ktkwzq0G5+4VzWD5 5lx1WHZ2PKnTyGsztJjO4bpn6cVa+UvNJAYmOyZORxCob5N7NbBQHhRuBMoMW+AF evIGa24BT7nhNZCulLVnnBOWf8ITmWcmwb3bPT47xBmk5Cv5bQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDeRiyABcbNcqXP3egtnc5i2WWMSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTZmMzlkNDAtZjJkMS0z NGQ3LTllYzMtNmEwNTdkYjAwODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQALm4/bkHfQM8LwX8FAQV8Flt+7n5P69UN8ABdI CICC6eNq2r4tdtxXKXAsEI1yb6xPquZcLFkdUqln1Q0ZsSr2gHjfQU30+Rm5aZjz gmAf62rF+Sw/UhWhwh/62cbDCz7/IV7J0g4fEn4jLYqy4MoMp732kqdNKZRBwQkF zYG+n1MXqtqjYn2xmUfM6mjdIMfHlO97wmtoEhtzkh1EaKmuid8U8xyUBQHisYkV L/RBwZ4Py3zVrKFZrmh6SXEbVBijOM0y+66AK4b7LR8B5hjmRd/eCmj+dJA16aqJ ORbMUl5feqaDyxL7h8eGQQHzitA4+j8YQO4CoOdJ435M+pxb -----END CERTIFICATE-----Generated at Sat Jun 7 04:20:04 2025 by rpki-client