$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/c3e6db55-bfca-3e4b-817d-7472db3f9575.roa File: c3e6db55-bfca-3e4b-817d-7472db3f9575.roa (raw, json) Hash identifier: KkShITr1bHr4Kif7LzOsIJ40HU41B9kkAd/3Bdi72Es= Subject key identifier: 98:08:9C:C5:4D:CA:18:52:5A:0D:89:C6:F7:83:85:50:26:D3:79:17 Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d Certificate serial: 010D0C9F432858498604687C13D408863B528C80 Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/c3e6db55-bfca-3e4b-817d-7472db3f9575.roa Signing time: Mon 14 Apr 2025 13:00:59 +0000 ROA not before: Mon 14 Apr 2025 13:00:59 +0000 ROA not after: Sun 13 Jul 2025 13:00:59 +0000 asID: 3800 IP address blocks: 2605:8900::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:86:04:68:7c:13:d4:08:86:3b:52:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d Validity Not Before: Apr 14 13:00:59 2025 GMT Not After : Jul 13 13:00:59 2025 GMT Subject: CN=72298142-24d7-4489-b485-af1ae560c429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ef:84:75:0d:b3:b1:b0:f5:59:3e:24:0e:b7: 83:ba:f8:f3:35:6b:28:15:60:4d:c3:d1:be:e3:40: db:37:9a:98:7c:bd:f5:5a:7d:95:dd:8c:b7:5a:8e: 34:bb:a7:d9:0f:7d:11:ea:f7:4d:db:77:fb:f4:46: 7a:0f:00:34:e6:42:64:f7:80:ad:5c:0c:00:3d:7d: 39:84:b6:31:43:e5:23:55:f8:5b:05:c2:c2:b4:49: c4:5b:31:74:86:32:6b:16:0e:93:a5:58:44:4c:1b: 18:bd:a9:20:21:01:a1:82:c0:f2:1f:6c:61:65:d2: eb:03:b4:c1:0b:e9:ca:b6:77:5a:f2:63:af:11:a8: 64:a3:a7:84:7a:0e:55:63:52:dc:a5:62:08:bf:9a: b8:2c:aa:14:15:90:62:87:4f:5e:a1:8d:8e:1f:73: 22:be:0a:d0:92:62:59:5c:79:44:0d:95:db:37:79: 9c:9b:06:a9:c4:5f:e8:c8:f3:0d:54:a1:3b:25:db: dc:a8:bd:89:b0:d3:b1:cf:61:53:15:82:4a:ed:b7: e4:1f:a6:9f:0a:39:ac:41:ae:b2:8d:b0:dd:8d:62: f8:00:6a:e8:58:0e:84:76:dd:1a:38:04:0d:8c:bb: 0a:18:a1:03:c7:eb:d3:ba:45:c7:a5:5e:58:eb:af: 40:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:08:9C:C5:4D:CA:18:52:5A:0D:89:C6:F7:83:85:50:26:D3:79:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/c3e6db55-bfca-3e4b-817d-7472db3f9575.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl X509v3 Authority Key Identifier: keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer sbgp-ipAddrBlock: critical IPv6: 2605:8900::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:bc:28:3a:01:2d:ce:e5:0d:b6:28:be:7a:94:0f:ed:14:34: 2d:53:23:4d:d2:61:37:22:a8:f2:30:85:fb:eb:5b:4c:8e:10: 41:a6:a9:c7:95:b4:90:cb:a1:14:30:38:db:76:1e:6b:ea:0a: b6:1b:0c:f4:52:ab:e5:81:fd:58:c4:43:ea:6c:43:bf:3a:a9: e9:b8:e1:f7:f7:41:c1:df:5f:da:5d:8d:98:3a:16:0e:54:1e: 84:a7:f6:b4:35:67:2c:64:16:57:9a:39:a8:e7:34:eb:59:9e: 0a:fe:6d:19:67:79:d7:14:a3:3e:0a:77:54:d5:ce:f3:73:f3: 55:ae:9b:44:0f:b1:29:a8:a0:70:88:2a:e0:b9:b7:2b:1e:71: 45:9b:c0:d3:bc:66:6d:59:85:34:75:24:1f:64:e7:5a:48:c9: 62:1b:7d:9c:63:29:90:01:5c:1a:0e:08:78:bb:18:9e:79:14: fb:c1:61:64:44:d2:77:17:02:83:52:b0:91:67:c4:fc:ee:83: ee:dc:c3:f9:81:56:ef:1f:08:9b:8a:e2:46:80:b1:d0:88:1d: aa:c2:9b:58:f5:54:64:f2:3c:f6:18:ea:9e:97:53:6b:f2:80: ca:12:1c:f1:ca:7e:c8:66:82:fd:c2:45:29:a1:29:90:61:84: a9:68:56:5f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmGBGh8E9QIhjtSjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw YzRkMB4XDTI1MDQxNDEzMDA1OVoXDTI1MDcxMzEzMDA1OVowLzEtMCsGA1UEAxMk NzIyOTgxNDItMjRkNy00NDg5LWI0ODUtYWYxYWU1NjBjNDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie+EdQ2zsbD1WT4kDreDuvjzNWsoFWBNw9G+ 40DbN5qYfL31Wn2V3Yy3Wo40u6fZD30R6vdN23f79EZ6DwA05kJk94CtXAwAPX05 hLYxQ+UjVfhbBcLCtEnEWzF0hjJrFg6TpVhETBsYvakgIQGhgsDyH2xhZdLrA7TB C+nKtnda8mOvEahko6eEeg5VY1LcpWIIv5q4LKoUFZBih09eoY2OH3MivgrQkmJZ XHlEDZXbN3mcmwapxF/oyPMNVKE7JdvcqL2JsNOxz2FTFYJK7bfkH6afCjmsQa6y jbDdjWL4AGroWA6Edt0aOAQNjLsKGKEDx+vTukXHpV5Y669A1QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJgInMVNyhhSWg2JxveDhVAm03kXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvYzNlNmRiNTUtYmZjYS0z ZTRiLTgxN2QtNzQ3MmRiM2Y5NTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0 ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3 MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl YWI4NzBjNGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWJADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB9vCg6AS3O5Q22KL56lA/tFDQtUyNN0mE3IqjyMIX761tMjhBBpqnH lbSQy6EUMDjbdh5r6gq2Gwz0Uqvlgf1YxEPqbEO/OqnpuOH390HB31/aXY2YOhYO VB6Ep/a0NWcsZBZXmjmo5zTrWZ4K/m0ZZ3nXFKM+CndU1c7zc/NVrptED7EpqKBw iCrgubcrHnFFm8DTvGZtWYU0dSQfZOdaSMliG32cYymQAVwaDgh4uxieeRT7wWFk RNJ3FwKDUrCRZ8T87oPu3MP5gVbvHwibiuJGgLHQiB2qwptY9VRk8jz2GOqel1Nr 8oDKEhzxyn7IZoL9wkUpoSmQYYSpaFZf -----END CERTIFICATE-----Generated at Sun Apr 27 03:47:00 2025 by rpki-client