$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b9d08728-9a90-31f2-9be7-80926065c949.roa File: b9d08728-9a90-31f2-9be7-80926065c949.roa (raw, json) Hash identifier: H/f+YhNzjw+U6tELzPHENtrD4ERahsXXaOtR6liyRqo= Subject key identifier: FF:A4:12:DB:77:13:26:E1:7E:26:0C:5A:50:6F:1F:59:18:77:FD:2A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584919419706A9B807D3FAD65F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b9d08728-9a90-31f2-9be7-80926065c949.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 396594 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:97:06:a9:b8:07:d3:fa:d6:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=6acfde4b-bc4a-4ae9-98eb-c77ddc983c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c8:0e:06:52:c3:4e:65:84:20:30:75:14:4e: e7:32:db:77:c1:09:d8:32:72:a9:7e:f3:e6:45:e2: f8:fa:19:85:98:d0:6f:78:30:35:3c:24:b4:5e:26: 0f:cf:80:78:2b:66:33:ae:0a:e9:e7:5d:30:be:bf: 34:e1:f2:fc:86:72:a0:86:f4:ce:f0:30:71:cf:08: 7b:95:c4:eb:c6:62:4c:7b:98:1a:5f:69:e2:69:6b: fa:6b:48:d1:97:86:3b:97:fc:ce:8d:71:ec:cb:5d: 06:81:a4:4c:58:f2:ff:56:98:05:38:9b:92:c4:54: d0:7d:02:2a:a7:67:b7:21:a5:ef:a1:c2:f7:75:9a: 54:7d:48:17:e2:61:a9:18:cb:c6:4e:db:13:51:73: 62:65:98:8b:5f:07:cd:b8:2f:30:9f:cd:14:d5:e6: 6a:2b:e0:cc:34:76:a1:f8:0d:b3:e3:63:dc:bf:3f: 06:e0:63:35:de:ba:bd:bb:c8:7f:8d:3c:d1:43:66: 7f:3e:76:f2:42:2b:cf:32:8b:ad:ce:b1:cb:66:c4: 3e:5d:9e:d0:fd:c9:27:af:68:92:e5:13:79:c4:81: 80:7c:65:df:ac:67:63:af:0f:0c:c4:60:d4:7d:2e: f5:bf:42:f6:bf:50:41:d5:61:a8:e6:93:4b:4b:56: d1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A4:12:DB:77:13:26:E1:7E:26:0C:5A:50:6F:1F:59:18:77:FD:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b9d08728-9a90-31f2-9be7-80926065c949.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:08:fb:d6:cc:6e:75:88:ff:c9:2c:0d:2e:c0:1d:91:eb:d2: e2:67:9e:24:52:79:b2:fb:80:e8:6e:1c:5b:2d:c2:95:5e:b1: 78:3e:ef:0e:dd:97:9a:06:63:ee:d9:0d:d7:3b:59:8b:ce:d8: 96:d4:0b:51:cd:c7:16:c8:9c:78:bb:b4:6e:ee:8b:d1:4e:97: e0:86:87:79:e5:18:6c:af:d0:22:d4:85:b3:10:bb:3d:de:d8: fd:d3:e7:4d:56:e5:0e:e1:4e:80:46:8f:82:54:bc:20:43:47: 64:bf:dd:61:8a:f4:21:da:93:76:6b:60:32:68:53:f0:20:1b: a4:b1:8d:4c:7b:c7:95:eb:0e:4d:a2:c8:13:25:bb:6d:cc:4a: 4a:ee:2f:6c:08:aa:ec:a2:d2:87:ef:7e:37:75:ea:86:a8:d6: 70:df:b4:ac:f0:04:5c:03:eb:6e:c0:40:83:1d:b5:9e:5e:c7: c4:52:88:f3:9f:7a:ab:f2:72:9c:61:02:67:cf:c1:54:88:9a: 17:24:5b:64:14:5a:b1:6f:0c:2a:81:31:8b:1c:3e:bf:c2:69: 43:57:c7:3d:16:3b:15:55:dc:85:fd:06:00:59:2f:f7:dd:9b: d6:7d:cf:9f:dd:c6:bf:06:c5:2f:1b:74:ac:7f:1b:10:32:12: 17:f8:89:fc -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkZQZcGqbgH0/rWXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk NmFjZmRlNGItYmM0YS00YWU5LTk4ZWItYzc3ZGRjOTgzYzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMgOBlLDTmWEIDB1FE7nMtt3wQnYMnKpfvPm ReL4+hmFmNBveDA1PCS0XiYPz4B4K2Yzrgrp510wvr804fL8hnKghvTO8DBxzwh7 lcTrxmJMe5gaX2niaWv6a0jRl4Y7l/zOjXHsy10GgaRMWPL/VpgFOJuSxFTQfQIq p2e3IaXvocL3dZpUfUgX4mGpGMvGTtsTUXNiZZiLXwfNuC8wn80U1eZqK+DMNHah +A2z42Pcvz8G4GM13rq9u8h/jTzRQ2Z/PnbyQivPMoutzrHLZsQ+XZ7Q/cknr2iS 5RN5xIGAfGXfrGdjrw8MxGDUfS71v0L2v1BB1WGo5pNLS1bRlwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFP+kEtt3EybhfiYMWlBvH1kYd/0qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjlkMDg3MjgtOWE5MC0z MWYyLTliZTctODA5MjYwNjVjOTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBGCPvWzG51iP/JLA0uwB2R69LiZ54kUnmy+4Do bhxbLcKVXrF4Pu8O3ZeaBmPu2Q3XO1mLztiW1AtRzccWyJx4u7Ru7ovRTpfghod5 5Rhsr9Ai1IWzELs93tj90+dNVuUO4U6ARo+CVLwgQ0dkv91hivQh2pN2a2AyaFPw IBuksY1Me8eV6w5NosgTJbttzEpK7i9sCKrsotKH7343deqGqNZw37Ss8ARcA+tu wECDHbWeXsfEUojzn3qr8nKcYQJnz8FUiJoXJFtkFFqxbwwqgTGLHD6/wmlDV8c9 FjsVVdyF/QYAWS/33ZvWfc+f3ca/BsUvG3SsfxsQMhIX+In8 -----END CERTIFICATE-----Generated at Sat Apr 12 00:11:30 2025 by rpki-client