$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/f61e2318-b560-3ef5-9e74-a61671a8a365.roa File: f61e2318-b560-3ef5-9e74-a61671a8a365.roa (raw, json) Hash identifier: iny3I7GaJLvRud6/CRs2Tphdb8l47dB9YXhbhqJmA5Y= Subject key identifier: 81:A2:82:42:76:C1:EC:44:E4:46:35:4C:B0:3E:18:CA:D6:58:36:80 Certificate issuer: /CN=caf392a1-07e9-49f4-9a03-df5005333708 Certificate serial: 010D0C9F4328584988CF33F15FB50D0B1C2039C0 Authority key identifier: 44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/f61e2318-b560-3ef5-9e74-a61671a8a365.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 46962 IP address blocks: 2606:2ac0:8101::/48 maxlen: 48 2606:2ac0:8102::/48 maxlen: 48 2606:2ac0:8103::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:33:f1:5f:b5:0d:0b:1c:20:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf392a1-07e9-49f4-9a03-df5005333708 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=4c352728-21c1-412b-bcde-bbccd075936b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2e:c4:ae:b3:93:8d:f6:78:49:df:83:56:d5: 78:ab:11:f7:aa:e6:55:ae:f1:b7:6b:c8:07:ab:05: 32:6e:80:49:7b:34:4a:5d:30:d5:1c:25:4f:f2:03: e8:22:58:1f:0c:55:69:4d:60:89:5c:a9:b1:4f:c5: 3e:80:bd:3d:b3:91:58:3b:1e:b5:a2:08:be:5f:4c: 11:c1:51:96:5a:3b:28:ff:3b:2f:ba:d0:fc:53:0e: a7:a6:e9:09:b3:9e:6a:92:41:eb:c3:ef:87:3c:ae: de:fb:14:45:61:f0:6e:f4:22:39:0f:8a:34:f0:9e: 4c:1d:be:62:19:88:e9:d8:69:fc:7d:00:9a:0a:f2: 99:7e:a6:00:65:aa:4a:b7:60:55:8d:af:95:e5:33: c1:45:49:8f:16:b8:f9:86:3f:2d:02:58:b2:b4:0e: 64:9f:78:49:47:5b:01:f2:81:3f:e9:ca:f1:87:af: de:96:9b:e6:c2:d8:de:39:4a:41:73:03:8f:c8:9c: 0a:4f:a9:9b:89:a1:90:f7:3d:69:0d:06:7a:51:f4: 3d:3d:0c:98:27:df:dc:86:20:b5:eb:a4:62:bf:95: e8:33:77:61:22:0a:f7:4e:33:b3:c1:1d:87:40:20: 60:9c:e9:c9:b3:d4:c4:95:93:d2:00:68:2a:2b:90: fa:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A2:82:42:76:C1:EC:44:E4:46:35:4C:B0:3E:18:CA:D6:58:36:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/f61e2318-b560-3ef5-9e74-a61671a8a365.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl X509v3 Authority Key Identifier: keyid:44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer sbgp-ipAddrBlock: critical IPv6: 2606:2ac0:8101::-2606:2ac0:8103:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:d9:86:d4:42:2e:b0:be:58:f7:a7:4d:c3:99:86:ee:8c:c0: 0b:21:f8:a2:bb:2e:46:49:70:e2:86:e6:e1:03:0e:4d:ba:7d: ec:45:c5:16:f9:1e:8c:60:10:72:71:67:68:05:a1:e4:8e:81: 8c:71:10:76:9b:0b:24:50:ce:de:b5:8c:a1:cc:18:5d:b0:67: e6:32:3c:54:4b:44:25:25:b9:c0:b7:d6:da:92:fd:77:3b:32: b9:00:9c:6e:95:54:01:ff:9d:b9:4e:e5:b2:f6:48:63:fc:8a: 0e:da:e8:39:25:e4:c3:0c:51:16:3a:95:30:7f:f3:54:e9:52: 81:df:4a:ac:e3:ea:2b:77:2d:84:cb:2e:60:aa:73:05:af:a4: 64:21:60:eb:19:6f:7d:17:f8:fc:2c:9b:42:64:af:ea:ad:30: 18:4b:64:04:aa:d5:29:b5:c9:3a:56:8b:ee:2c:09:39:fe:f2: 3f:e2:31:df:69:7a:70:af:f1:72:28:4f:72:68:39:8b:09:1a: 86:86:73:dc:af:ca:50:f6:12:84:00:49:5e:38:c1:31:3e:a3: 4b:95:df:62:a8:fd:28:09:7c:78:e8:f6:f0:d6:e4:03:70:04: 5b:ab:ac:2c:25:2f:05:ab:02:a3:ff:c2:93:1e:f5:5b:61:97: 07:47:8b:dc -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEmIzzPxX7UNCxwgOcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmMzkyYTEtMDdlOS00OWY0LTlhMDMtZGY1MDA1MzMz NzA4MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk NGMzNTI3MjgtMjFjMS00MTJiLWJjZGUtYmJjY2QwNzU5MzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi7ErrOTjfZ4Sd+DVtV4qxH3quZVrvG3a8gH qwUyboBJezRKXTDVHCVP8gPoIlgfDFVpTWCJXKmxT8U+gL09s5FYOx61ogi+X0wR wVGWWjso/zsvutD8Uw6npukJs55qkkHrw++HPK7e+xRFYfBu9CI5D4o08J5MHb5i GYjp2Gn8fQCaCvKZfqYAZapKt2BVja+V5TPBRUmPFrj5hj8tAliytA5kn3hJR1sB 8oE/6crxh6/elpvmwtjeOUpBcwOPyJwKT6mbiaGQ9z1pDQZ6UfQ9PQyYJ9/chiC1 66Riv5XoM3dhIgr3TjOzwR2HQCBgnOnJs9TElZPSAGgqK5D6QwIDAQABo4IDYzCC A18wHQYDVR0OBBYEFIGigkJ2wexE5EY1TLA+GMrWWDaAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYWYz OTJhMS0wN2U5LTQ5ZjQtOWEwMy1kZjUwMDUzMzM3MDgvZjYxZTIzMTgtYjU2MC0z ZWY1LTllNzQtYTYxNjcxYThhMzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2FmMzkyYTEtMDdlOS00OWY0LTlh MDMtZGY1MDA1MzMzNzA4L2NhZjM5MmExLTA3ZTktNDlmNC05YTAzLWRmNTAwNTMz MzcwOC5jcmwwHwYDVR0jBBgwFoAURC8Ry3nbTZVcRvWNkst9EsMqGU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYWYzOTJhMS0wN2U5LTQ5ZjQtOWEwMy1kZjUw MDUzMzM3MDguY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmBirA gQEDBwImBirAgQAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAWtmG1EIusL5Y96dNw5mG7ozACyH4orsuRklw 4obm4QMOTbp97EXFFvkejGAQcnFnaAWh5I6BjHEQdpsLJFDO3rWMocwYXbBn5jI8 VEtEJSW5wLfW2pL9dzsyuQCcbpVUAf+duU7lsvZIY/yKDtroOSXkwwxRFjqVMH/z VOlSgd9KrOPqK3cthMsuYKpzBa+kZCFg6xlvfRf4/CybQmSv6q0wGEtkBKrVKbXJ OlaL7iwJOf7yP+Ix32l6cK/xcihPcmg5iwkahoZz3K/KUPYShABJXjjBMT6jS5Xf Yqj9KAl8eOj28NbkA3AEW6usLCUvBasCo//Ckx71W2GXB0eL3A== -----END CERTIFICATE-----Generated at Tue Apr 29 09:44:59 2025 by rpki-client