$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db42e30a-99cf-3cdd-90b1-8901e5f03b0d.roa File: db42e30a-99cf-3cdd-90b1-8901e5f03b0d.roa (raw, json) Hash identifier: is2puzOvGInqVBNvAgf7t0OILhfxN4aFphEF1spQtWY= Subject key identifier: 16:41:81:04:40:0D:E2:AE:65:F6:7A:5E:EA:E8:0D:FF:61:CE:50:64 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584975446AC98898A1389B32F1EF Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db42e30a-99cf-3cdd-90b1-8901e5f03b0d.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 397207 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:6a:c9:88:98:a1:38:9b:32:f1:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=ce7d6892-fe33-47fb-b165-7e490ec3d33e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2b:7a:65:b3:d2:99:4d:a9:80:59:27:3e:8d: 8f:ef:be:35:72:ed:01:09:75:95:8f:df:e2:64:5f: 73:39:73:71:fc:cd:70:53:42:e8:8d:25:73:f9:88: c3:af:4e:bc:2f:00:bf:38:e3:3b:79:5b:47:30:8d: 1c:cb:47:da:3d:9d:5c:35:74:37:98:e4:68:2f:0f: eb:7d:58:8c:25:6f:72:6d:d8:0f:d4:39:b2:4b:ef: 17:c6:a4:22:ec:23:83:f5:bc:93:6f:03:b9:7a:d5: 3f:86:c0:15:95:b4:ef:ba:eb:9a:78:1b:52:a0:8a: 09:ed:25:1a:67:a7:54:71:f9:f8:51:4b:81:80:d2: 45:87:6b:1d:1a:04:11:d9:6c:aa:59:f8:fd:82:34: a9:79:56:31:3e:df:5c:3d:a3:18:da:ca:5d:0f:ba: 42:1e:e4:7f:33:6e:12:50:85:3b:31:5c:96:02:5f: df:31:28:ea:bd:bd:97:25:8c:49:bd:a0:03:a6:df: 98:dd:3a:af:8b:b4:dd:d1:bf:b5:92:b6:7f:a8:82: 0c:a5:2d:b9:6a:63:ad:a7:59:32:f6:b1:35:27:c0: 6c:16:57:c6:06:6b:43:96:5a:6d:af:c4:2d:50:c1: 38:f8:b8:dc:d7:50:d7:8e:cb:0d:12:1b:60:9f:b2: d0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:41:81:04:40:0D:E2:AE:65:F6:7A:5E:EA:E8:0D:FF:61:CE:50:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db42e30a-99cf-3cdd-90b1-8901e5f03b0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:2e:0e:0d:ca:79:dd:43:fc:62:e2:f5:bb:60:a3:49:0a:af: d4:08:d8:18:94:08:b8:21:71:09:de:f5:a1:26:4d:2b:b3:61: 9d:d2:4b:9a:46:41:c7:24:29:23:27:db:b6:95:99:95:2f:b0: 86:05:18:ee:bf:a6:02:7f:ea:96:ae:16:ad:d5:fe:8f:ad:fb: cc:46:76:ec:37:c2:0f:ac:74:a7:da:52:44:97:3b:81:14:70: 57:f0:44:8f:ac:2c:25:1d:66:d9:df:68:7f:58:17:b4:42:64: 88:6a:72:50:1d:4f:9c:3f:df:8f:17:96:9e:4e:db:01:4f:c3: b7:5e:15:1e:70:3a:48:50:7e:90:47:9f:9b:aa:a2:8f:67:f8: bf:2d:8b:59:13:4c:a0:2f:5c:b3:29:73:9f:3c:4f:a7:a6:ef: 96:05:5c:c0:ef:32:c5:35:94:63:b7:fa:51:00:d3:44:84:72: 26:d6:8a:07:f4:62:77:3a:52:b9:b1:33:50:2f:31:68:b3:aa: cc:de:26:36:b4:a4:a2:d0:f0:94:68:f8:3c:94:6c:e9:55:0f: 50:60:7c:b1:b1:d0:16:bf:01:1b:52:7b:bc:9d:da:ad:7b:6e: b4:4b:4f:06:f2:7f:f2:4c:2f:69:3d:14:07:c3:19:07:f9:02: e9:92:44:bd -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEl1RGrJiJihOJsy8e8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk Y2U3ZDY4OTItZmUzMy00N2ZiLWIxNjUtN2U0OTBlYzNkMzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhit6ZbPSmU2pgFknPo2P7741cu0BCXWVj9/i ZF9zOXNx/M1wU0LojSVz+YjDr068LwC/OOM7eVtHMI0cy0faPZ1cNXQ3mORoLw/r fViMJW9ybdgP1DmyS+8XxqQi7COD9byTbwO5etU/hsAVlbTvuuuaeBtSoIoJ7SUa Z6dUcfn4UUuBgNJFh2sdGgQR2WyqWfj9gjSpeVYxPt9cPaMY2spdD7pCHuR/M24S UIU7MVyWAl/fMSjqvb2XJYxJvaADpt+Y3Tqvi7Td0b+1krZ/qIIMpS25amOtp1ky 9rE1J8BsFlfGBmtDllptr8QtUME4+Ljc11DXjssNEhtgn7LQFwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBZBgQRADeKuZfZ6XuroDf9hzlBkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGI0MmUzMGEtOTljZi0z Y2RkLTkwYjEtODkwMWU1ZjAzYjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCKLg4NynndQ/xi4vW7YKNJCq/UCNgYlAi4IXEJ 3vWhJk0rs2Gd0kuaRkHHJCkjJ9u2lZmVL7CGBRjuv6YCf+qWrhat1f6PrfvMRnbs N8IPrHSn2lJElzuBFHBX8ESPrCwlHWbZ32h/WBe0QmSIanJQHU+cP9+PF5aeTtsB T8O3XhUecDpIUH6QR5+bqqKPZ/i/LYtZE0ygL1yzKXOfPE+npu+WBVzA7zLFNZRj t/pRANNEhHIm1ooH9GJ3OlK5sTNQLzFos6rM3iY2tKSi0PCUaPg8lGzpVQ9QYHyx sdAWvwEbUnu8ndqte260S08G8n/yTC9pPRQHwxkH+QLpkkS9 -----END CERTIFICATE-----Generated at Fri Apr 11 23:41:00 2025 by rpki-client