$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa9d8d66-0b2d-39cf-b4b4-cb4663faed69.roa File: aa9d8d66-0b2d-39cf-b4b4-cb4663faed69.roa (raw, json) Hash identifier: 0vkvPA0j8OsZCD0E30hAsR0vAUu1MQyVUCr3Cup6gzw= Subject key identifier: BE:E5:AD:F7:41:C0:A0:3A:F5:12:2B:5A:7D:D1:C5:78:3B:F3:5A:71 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849B14A2C1F79F9B34C2EF24140 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa9d8d66-0b2d-39cf-b4b4-cb4663faed69.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 396605 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:2c:1f:79:f9:b3:4c:2e:f2:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=545b5baf-dbbd-438f-8eb7-7f321b82fd74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0c:f1:62:6a:e3:bb:8f:ed:62:28:98:87:64: b0:dd:8c:55:ca:62:eb:ae:89:fc:8c:69:db:f3:f9: ef:e2:14:c1:8f:9a:d4:d2:44:8f:e7:fb:ac:ab:23: 8f:50:13:67:85:3a:4e:00:04:6d:09:32:14:86:d7: b8:38:7b:4e:27:8a:ba:d1:fe:34:ff:8c:73:51:d3: b3:6a:23:ae:65:49:9d:0c:ae:50:5c:81:b0:71:89: 09:7e:f3:b9:51:17:d8:9c:65:59:d5:4b:80:c6:95: 37:04:01:3b:22:00:ba:94:b1:69:88:30:4f:77:d6: c7:c9:f0:45:3e:8d:13:ba:c4:0c:f6:85:43:aa:26: 25:73:a3:d9:7e:2d:c8:41:47:46:a6:57:89:b1:fd: 9c:62:fc:46:db:08:5e:2f:d4:ea:b6:f4:a2:df:e1: 5f:a7:af:c4:03:c4:ac:f9:36:ed:fa:a9:5c:8d:c2: 2e:1e:32:c2:55:9d:5e:18:65:c8:9f:39:04:14:88: 43:b5:9d:8a:5f:aa:7a:c1:e5:a0:ee:0a:f2:36:ae: 92:4b:50:f9:d2:f1:2c:50:8e:9f:76:78:fa:80:97: 73:65:48:e4:87:93:b9:48:d7:13:fe:9f:e0:09:1b: 38:49:8e:19:ed:b3:5a:e4:51:6e:d6:97:01:ee:53: 21:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E5:AD:F7:41:C0:A0:3A:F5:12:2B:5A:7D:D1:C5:78:3B:F3:5A:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa9d8d66-0b2d-39cf-b4b4-cb4663faed69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:0f:3d:9e:be:1d:13:52:39:42:15:33:e0:0c:a1:ba:a5:87: 23:6e:a6:ff:5c:e1:82:51:51:65:6b:77:6e:18:ba:99:85:c3: bc:be:35:ab:ea:9e:6b:23:fb:19:37:99:af:6c:f2:eb:89:70: fb:a8:e1:48:d5:de:b8:b0:a3:85:b3:8d:11:25:93:3b:37:a3: f6:de:9c:0b:76:74:4b:82:77:07:6c:52:bd:a3:cd:2d:e7:5b: 38:5f:58:79:af:69:2b:e7:a7:c1:d9:44:47:7e:a4:08:1a:93: 1d:c5:d5:26:18:14:a4:6e:8f:eb:90:ce:3d:73:4e:8a:30:25: c1:24:bf:43:85:73:12:46:ad:c5:b6:b0:fb:b5:02:e9:62:fb: 0b:fe:1a:11:a2:db:7f:4c:9d:66:01:2d:c7:e5:b9:be:94:32: 55:e5:dd:0c:8d:92:5c:7f:35:40:9d:10:3b:cc:f0:76:46:ba: 68:d9:a6:22:73:90:b1:c4:76:99:f6:d2:9f:81:13:89:4b:47: 31:f6:ed:5c:4a:f1:d4:35:9f:87:42:0a:03:5d:48:ae:8a:a4: 55:e7:4c:17:c2:6e:89:85:bf:5e:17:02:78:e0:e5:01:40:ef: 4d:fa:d9:aa:8d:21:bf:2d:ab:15:00:dd:62:5e:42:a6:91:de: ef:3b:96:98 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmxSiwfefmzTC7yQUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NTQ1YjViYWYtZGJiZC00MzhmLThlYjctN2YzMjFiODJmZDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQzxYmrju4/tYiiYh2Sw3YxVymLrron8jGnb 8/nv4hTBj5rU0kSP5/usqyOPUBNnhTpOAARtCTIUhte4OHtOJ4q60f40/4xzUdOz aiOuZUmdDK5QXIGwcYkJfvO5URfYnGVZ1UuAxpU3BAE7IgC6lLFpiDBPd9bHyfBF Po0TusQM9oVDqiYlc6PZfi3IQUdGpleJsf2cYvxG2wheL9TqtvSi3+Ffp6/EA8Ss +Tbt+qlcjcIuHjLCVZ1eGGXInzkEFIhDtZ2KX6p6weWg7gryNq6SS1D50vEsUI6f dnj6gJdzZUjkh5O5SNcT/p/gCRs4SY4Z7bNa5FFu1pcB7lMh9QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFL7lrfdBwKA69RIrWn3RxXg781pxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWE5ZDhkNjYtMGIyZC0z OWNmLWI0YjQtY2I0NjYzZmFlZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB6Dz2evh0TUjlCFTPgDKG6pYcjbqb/XOGCUVFl a3duGLqZhcO8vjWr6p5rI/sZN5mvbPLriXD7qOFI1d64sKOFs40RJZM7N6P23pwL dnRLgncHbFK9o80t51s4X1h5r2kr56fB2URHfqQIGpMdxdUmGBSkbo/rkM49c06K MCXBJL9DhXMSRq3FtrD7tQLpYvsL/hoRott/TJ1mAS3H5bm+lDJV5d0MjZJcfzVA nRA7zPB2Rrpo2aYic5CxxHaZ9tKfgROJS0cx9u1cSvHUNZ+HQgoDXUiuiqRV50wX wm6Jhb9eFwJ44OUBQO9N+tmqjSG/LasVAN1iXkKmkd7vO5aY -----END CERTIFICATE-----Generated at Sat Jun 7 04:19:28 2025 by rpki-client