$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/7d91392f-83f2-35b7-b65b-48348b34691a.roa File: 7d91392f-83f2-35b7-b65b-48348b34691a.roa (raw, json) Hash identifier: KSReOD3TUxF1QO2Ee3YM8Zr4VV7K9FOK3z5si2yTWwY= Subject key identifier: 82:00:CF:7A:9E:9E:AE:25:87:9D:DE:7A:D4:E1:49:A6:60:12:96:50 Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F4328584929E3C82170F19837438CEB80 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/7d91392f-83f2-35b7-b65b-48348b34691a.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 3477 IP address blocks: 2601:a005::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:c8:21:70:f1:98:37:43:8c:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=61cc7490-65b4-4a4b-a770-06aecfe1501b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:95:79:c5:44:e8:a6:84:24:b7:a0:ed:96:73: 53:50:83:75:fc:ff:32:02:fb:e1:88:24:cd:67:74: 44:f5:ac:ec:cc:d9:f4:95:14:ea:8a:cd:e6:a3:63: 66:bf:ce:76:29:e9:7e:24:d7:d4:5d:51:3c:4c:62: 23:56:de:26:6d:70:c9:c0:af:1c:49:b8:ae:ae:1c: cb:6b:98:ee:a8:bd:d2:b3:9a:d6:36:4d:4a:83:6f: 9c:30:43:01:28:0e:7f:5c:12:97:2b:f6:07:86:43: c7:ef:2f:d2:35:49:90:a6:7c:54:e0:7d:8a:48:da: 38:93:74:06:7a:c8:38:76:4b:28:f6:3a:59:36:db: c6:d6:60:13:56:28:a8:ff:a7:3b:9a:ce:a2:e6:25: 05:84:00:16:a8:78:98:86:f7:0b:2e:97:74:3f:97: e1:7a:fc:47:ec:65:98:1b:98:f4:14:82:90:01:21: 14:83:74:ec:ed:b7:e9:37:7f:8b:6b:19:24:f6:99: 58:08:79:4a:5e:a8:d4:97:cc:50:82:65:40:b7:3d: 1c:1f:a7:e0:c1:95:99:e3:ae:63:35:8f:0f:03:32: d2:b9:31:92:dd:92:85:54:98:ec:e1:da:24:e9:6e: a0:4d:99:b3:f0:65:e0:46:3b:f2:2e:56:bf:3b:70: d4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:00:CF:7A:9E:9E:AE:25:87:9D:DE:7A:D4:E1:49:A6:60:12:96:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/7d91392f-83f2-35b7-b65b-48348b34691a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2601:a005::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:3b:77:f7:a0:d2:aa:0a:d0:1a:b3:cb:91:11:94:1f:26:4b: b0:06:0e:45:8f:80:7d:9b:a7:c4:dd:37:45:c6:7f:37:e7:07: d5:c4:11:ea:b6:c8:76:17:d9:67:36:8c:bb:82:ab:26:3a:8b: e1:9f:33:34:05:a7:cf:5a:02:87:77:d2:6e:7a:3b:26:ea:16: 53:d8:03:d9:e6:d1:a3:6e:c5:2d:a2:38:74:37:1f:fc:e9:b0: a6:39:d0:75:fc:3f:e5:9f:27:22:00:ca:d0:ea:75:28:24:d7: 68:88:90:9e:bb:f2:58:da:16:08:4e:46:95:ce:8a:cd:ed:48: 82:25:2c:83:95:4d:5c:5d:4b:7e:3f:16:f1:27:f4:8a:9f:17: b1:d8:03:2c:20:0b:00:12:2c:42:d6:ab:7e:0c:d7:fe:9a:f0: 35:55:88:97:7d:ab:0b:35:4b:d1:70:e4:b8:54:83:b4:2d:dc: 1b:ff:6a:a5:ed:4f:fc:cf:bd:13:ff:33:d4:23:d1:ae:a1:97: d2:a5:9e:86:a4:16:fb:1d:c8:25:07:6d:15:49:b5:1f:70:14: ee:b5:41:9f:46:19:1f:a8:f7:b4:d0:7c:28:29:cb:f6:d7:1f: e1:d9:ff:2a:fa:02:1a:5e:7b:0c:9b:5e:fc:ba:78:eb:d2:48: d1:c0:86:ed -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkp48ghcPGYN0OM64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk NjFjYzc0OTAtNjViNC00YTRiLWE3NzAtMDZhZWNmZTE1MDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZV5xUTopoQkt6DtlnNTUIN1/P8yAvvhiCTN Z3RE9azszNn0lRTqis3mo2Nmv852Kel+JNfUXVE8TGIjVt4mbXDJwK8cSbiurhzL a5juqL3Ss5rWNk1Kg2+cMEMBKA5/XBKXK/YHhkPH7y/SNUmQpnxU4H2KSNo4k3QG esg4dkso9jpZNtvG1mATViio/6c7ms6i5iUFhAAWqHiYhvcLLpd0P5fhevxH7GWY G5j0FIKQASEUg3Ts7bfpN3+Laxkk9plYCHlKXqjUl8xQgmVAtz0cH6fgwZWZ465j NY8PAzLSuTGS3ZKFVJjs4dok6W6gTZmz8GXgRjvyLla/O3DUuwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIIAz3qenq4lh53eetThSaZgEpZQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvN2Q5MTM5MmYtODNmMi0z NWI3LWI2NWItNDgzNDhiMzQ2OTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgGgBTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBcO3f3oNKqCtAas8uREZQfJkuwBg5Fj4B9m6fE3TdFxn835wfVxBHq tsh2F9lnNoy7gqsmOovhnzM0BafPWgKHd9Juejsm6hZT2APZ5tGjbsUtojh0Nx/8 6bCmOdB1/D/lnyciAMrQ6nUoJNdoiJCeu/JY2hYITkaVzorN7UiCJSyDlU1cXUt+ PxbxJ/SKnxex2AMsIAsAEixC1qt+DNf+mvA1VYiXfasLNUvRcOS4VIO0Ldwb/2ql 7U/8z70T/zPUI9GuoZfSpZ6GpBb7HcglB20VSbUfcBTutUGfRhkfqPe00HwoKcv2 1x/h2f8q+gIaXnsMm178unjr0kjRwIbt -----END CERTIFICATE-----Generated at Thu May 1 11:18:03 2025 by rpki-client