$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d814ede2-b2ca-33f3-b8c6-e8d205735d3d.roa File: d814ede2-b2ca-33f3-b8c6-e8d205735d3d.roa (raw, json) Hash identifier: SI6hRZgmra9IScVyGZ5GFwsQOlo4CBdD6Uc8wGxYHXc= Subject key identifier: C5:82:9F:0B:19:13:5A:90:5D:87:77:A8:7F:8D:CC:91:C5:00:D8:69 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F43285849D85FD3DDBF8C29C0B19CAE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d814ede2-b2ca-33f3-b8c6-e8d205735d3d.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 397196 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:d3:dd:bf:8c:29:c0:b1:9c:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=0ce8d276-e9f4-4425-8080-c0b1bdd4bc38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:02:e8:a3:d1:b4:d7:d2:64:90:3d:fa:c8:74: 7d:11:99:27:cf:a2:dc:1a:2d:9c:31:86:86:c7:dd: 0b:07:37:10:f4:26:75:6a:84:ab:a4:93:03:eb:8d: 4e:61:bf:27:24:c9:be:3b:12:6c:47:bf:90:48:8e: ac:55:37:ae:09:77:61:1e:d4:3e:0d:21:d9:ba:79: 95:ed:8e:87:fd:ff:db:13:10:9b:45:23:19:1d:6c: 9b:d0:3c:c0:9f:04:db:c0:6d:04:a7:b2:64:b9:0a: bb:62:6b:bd:b1:44:06:ad:6f:e0:86:7a:df:2f:87: 2b:77:c1:43:1b:a1:79:09:58:f4:b4:7c:72:b7:f1: 93:60:77:9d:33:70:2c:15:7f:c3:b3:99:c7:d4:c6: 9c:df:46:5b:ed:6d:33:90:c6:77:49:1c:62:ef:9a: 00:e9:af:65:9a:64:cc:31:ac:42:53:38:78:2e:70: 73:3b:c4:62:5a:de:e6:6e:af:4e:d9:82:d8:56:94: 65:56:bc:a1:22:69:0f:bd:3d:2f:e6:fb:10:ff:8b: e2:c7:08:fd:da:07:43:01:b5:70:22:b0:62:51:f3: b1:c0:05:25:4b:bb:4a:c8:b8:2e:d9:1b:25:bf:a0: 18:8a:f4:9b:2b:7a:8c:18:f2:2d:4b:e4:3c:ff:2e: 57:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:82:9F:0B:19:13:5A:90:5D:87:77:A8:7F:8D:CC:91:C5:00:D8:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d814ede2-b2ca-33f3-b8c6-e8d205735d3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:dd:a4:9a:4b:7e:65:91:5a:fc:80:c2:37:62:b3:f6:a5:10: 1b:f1:80:43:eb:e8:37:4c:bc:01:7e:e2:d1:27:dc:0b:1c:d1: be:ed:58:34:22:2d:ef:65:70:24:26:49:38:90:90:3f:ad:19: e3:ef:0c:71:84:7c:9b:f0:f6:15:a1:9d:b8:70:33:02:54:a3: b3:92:da:75:0e:7a:22:f4:0f:00:55:ec:5c:6c:ca:5f:4c:b5: 0c:14:85:fe:ce:54:91:b2:46:a3:a5:06:b9:2b:ad:31:8c:15: c9:58:ab:36:4f:e5:ce:6c:c3:2e:96:48:72:d0:0c:0d:8a:ce: d3:df:b2:5c:5f:27:24:f9:23:8d:27:84:57:bb:25:dd:c9:67: 9c:26:f5:fb:1b:30:9d:f1:a7:7f:2e:be:ff:00:ea:5e:8f:2f: 65:0e:a4:0a:7c:f4:99:b1:43:11:4c:c4:4c:1f:5f:4c:fb:5d: 11:da:84:44:8f:fb:0b:28:0e:84:6f:87:5f:43:2c:bc:a5:e2: a6:6d:b7:85:94:0b:92:6a:75:b2:94:94:a0:11:3c:20:7a:da: 29:3f:42:46:a1:a6:74:ea:18:65:96:1e:bb:73:25:aa:89:65: 80:6d:bd:da:77:ad:9c:ed:1d:10:1a:c4:1d:3b:d7:86:f1:af: 72:3b:80:ea -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEnYX9Pdv4wpwLGcroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk MGNlOGQyNzYtZTlmNC00NDI1LTgwODAtYzBiMWJkZDRiYzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQLoo9G019JkkD36yHR9EZknz6LcGi2cMYaG x90LBzcQ9CZ1aoSrpJMD641OYb8nJMm+OxJsR7+QSI6sVTeuCXdhHtQ+DSHZunmV 7Y6H/f/bExCbRSMZHWyb0DzAnwTbwG0Ep7JkuQq7Ymu9sUQGrW/ghnrfL4crd8FD G6F5CVj0tHxyt/GTYHedM3AsFX/Ds5nH1Mac30Zb7W0zkMZ3SRxi75oA6a9lmmTM MaxCUzh4LnBzO8RiWt7mbq9O2YLYVpRlVryhImkPvT0v5vsQ/4vixwj92gdDAbVw IrBiUfOxwAUlS7tKyLgu2Rslv6AYivSbK3qMGPItS+Q8/y5XoQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMWCnwsZE1qQXYd3qH+NzJHFANhpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDgxNGVkZTItYjJjYS0z M2YzLWI4YzYtZThkMjA1NzM1ZDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB53aSaS35lkVr8gMI3YrP2pRAb8YBD6+g3TLwB fuLRJ9wLHNG+7Vg0Ii3vZXAkJkk4kJA/rRnj7wxxhHyb8PYVoZ24cDMCVKOzktp1 Dnoi9A8AVexcbMpfTLUMFIX+zlSRskajpQa5K60xjBXJWKs2T+XObMMulkhy0AwN is7T37JcXyck+SONJ4RXuyXdyWecJvX7GzCd8ad/Lr7/AOpejy9lDqQKfPSZsUMR TMRMH19M+10R2oREj/sLKA6Eb4dfQyy8peKmbbeFlAuSanWylJSgETwgetopP0JG oaZ06hhllh67cyWqiWWAbb3ad62c7R0QGsQdO9eG8a9yO4Dq -----END CERTIFICATE-----Generated at Sat Jun 7 04:34:44 2025 by rpki-client