$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362/3a01ca3b-82fa-313e-9731-0878fe27d2c5.roa File: 3a01ca3b-82fa-313e-9731-0878fe27d2c5.roa (raw, json) Hash identifier: d8bcPltV8Frdoem/mn6v6ANZFC/f0N2iYGtE1HYmbAc= Subject key identifier: F1:3B:8D:8D:76:AB:E6:7A:15:39:BD:B1:18:E6:BB:9D:62:DC:75:5C Certificate issuer: /CN=db0c6eca-2399-410f-9a3e-c3cede4c4362 Certificate serial: 010D0C9F43285849350EAA9ECE60F41E2E6C1740 Authority key identifier: 3C:39:77:48:E1:E8:88:33:B9:F2:CB:C9:E1:A3:49:E6:D0:87:15:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362/3a01ca3b-82fa-313e-9731-0878fe27d2c5.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 13927 IP address blocks: 2607:ba00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362/db0c6eca-2399-410f-9a3e-c3cede4c4362.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362/db0c6eca-2399-410f-9a3e-c3cede4c4362.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:aa:9e:ce:60:f4:1e:2e:6c:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db0c6eca-2399-410f-9a3e-c3cede4c4362 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=ab18f95b-e6fd-422e-8b91-068447f547c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:41:c1:d7:91:45:7a:a3:3a:b2:29:58:c4:cc: 99:98:52:74:51:9f:9c:fa:f0:01:5b:2d:86:32:ca: 6f:28:de:5e:7e:61:e2:61:7a:d6:d7:e9:06:15:50: be:17:1b:18:8a:36:7b:c3:39:29:45:9d:2d:aa:ab: 57:6d:2c:c0:e7:ec:8b:1a:5e:cf:f8:b4:1c:92:a7: 44:be:e2:9b:e3:cc:30:67:d7:c0:34:a0:6f:6f:9a: cc:9e:13:cc:53:a2:2d:be:1d:ea:e2:b2:75:60:9e: 40:19:67:91:e5:ea:98:d7:1a:08:d5:9a:46:53:ef: 33:79:91:8e:e0:c0:ad:f9:cc:a7:92:80:46:9f:1b: ec:d5:31:d9:ae:3b:d8:e2:31:9b:21:82:46:05:81: c4:93:7c:ae:67:bc:b3:97:a9:0b:35:f0:fc:5d:4a: 29:c7:53:7c:18:0b:60:43:57:5d:76:b7:54:93:e8: 4e:e1:cf:aa:5a:64:02:67:60:19:a1:da:05:42:84: 06:a7:a0:e0:3c:eb:6b:eb:3a:29:21:6a:63:35:2c: a5:ad:88:29:cf:4c:7c:d1:bb:10:e0:d0:a7:65:ce: 4c:77:62:c5:5c:9f:9e:b2:b8:eb:1a:40:87:10:4b: b7:0c:7d:43:29:5b:e5:b1:84:30:95:39:7b:52:11: 24:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3B:8D:8D:76:AB:E6:7A:15:39:BD:B1:18:E6:BB:9D:62:DC:75:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362/3a01ca3b-82fa-313e-9731-0878fe27d2c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362/db0c6eca-2399-410f-9a3e-c3cede4c4362.crl X509v3 Authority Key Identifier: keyid:3C:39:77:48:E1:E8:88:33:B9:F2:CB:C9:E1:A3:49:E6:D0:87:15:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362.cer sbgp-ipAddrBlock: critical IPv6: 2607:ba00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:de:94:d7:5e:3a:a3:6f:89:1e:49:dc:26:6d:25:28:24:a6: a7:7b:66:82:6e:c0:c5:72:80:15:f6:26:33:f5:6b:c8:c9:26: 7a:12:47:ac:a8:31:ad:4a:d9:59:de:0d:24:8e:c7:14:be:91: 22:26:99:a3:98:2e:34:3b:5e:52:40:9d:3b:ce:dd:7e:08:eb: e4:1d:49:10:d5:72:39:35:a4:37:cd:70:fc:da:70:4f:f6:de: 7f:3e:f3:e9:18:cd:2e:9b:87:78:20:6d:2f:ea:6c:ce:84:65: 4a:2c:1c:1c:e5:67:83:77:51:fe:43:d4:74:66:18:25:ca:cc: 05:9a:4d:f4:23:0b:b0:7e:ce:a8:f2:a7:75:aa:45:70:f1:0f: c5:e1:a2:f8:a5:2b:ed:1e:17:a5:65:51:2a:5b:65:0f:e6:f9: 48:9a:fd:4a:d2:6e:47:88:f8:dc:b2:72:eb:9d:11:af:8b:f9: c2:50:ab:f0:e7:69:ae:ae:77:92:87:ee:35:b1:0d:1d:4f:88: 97:75:f4:70:1a:dc:d1:0d:91:1e:2f:46:64:e7:c4:7f:1c:88: 81:25:39:bf:fd:61:a9:e9:63:dd:93:3f:1d:36:c6:30:64:92: be:0d:06:bb:aa:f2:e5:13:02:1f:0c:f2:d8:d5:84:5c:2b:b8: 7e:de:a6:70 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEk1DqqezmD0Hi5sF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIwYzZlY2EtMjM5OS00MTBmLTlhM2UtYzNjZWRlNGM0 MzYyMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk YWIxOGY5NWItZTZmZC00MjJlLThiOTEtMDY4NDQ3ZjU0N2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUHB15FFeqM6silYxMyZmFJ0UZ+c+vABWy2G MspvKN5efmHiYXrW1+kGFVC+FxsYijZ7wzkpRZ0tqqtXbSzA5+yLGl7P+LQckqdE vuKb48wwZ9fANKBvb5rMnhPMU6Itvh3q4rJ1YJ5AGWeR5eqY1xoI1ZpGU+8zeZGO 4MCt+cynkoBGnxvs1THZrjvY4jGbIYJGBYHEk3yuZ7yzl6kLNfD8XUopx1N8GAtg Q1dddrdUk+hO4c+qWmQCZ2AZodoFQoQGp6DgPOtr6zopIWpjNSylrYgpz0x80bsQ 4NCnZc5Md2LFXJ+esrjrGkCHEEu3DH1DKVvlsYQwlTl7UhEkQQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPE7jY12q+Z6FTm9sRjmu51i3HVcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjBj NmVjYS0yMzk5LTQxMGYtOWEzZS1jM2NlZGU0YzQzNjIvM2EwMWNhM2ItODJmYS0z MTNlLTk3MzEtMDg3OGZlMjdkMmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGIwYzZlY2EtMjM5OS00MTBmLTlh M2UtYzNjZWRlNGM0MzYyL2RiMGM2ZWNhLTIzOTktNDEwZi05YTNlLWMzY2VkZTRj NDM2Mi5jcmwwHwYDVR0jBBgwFoAUPDl3SOHoiDO58svJ4aNJ5tCHFRQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjBjNmVjYS0yMzk5LTQxMGYtOWEzZS1jM2Nl ZGU0YzQzNjIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJge6ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCM3pTXXjqjb4keSdwmbSUoJKane2aCbsDFcoAV9iYz9WvIySZ6Ekes qDGtStlZ3g0kjscUvpEiJpmjmC40O15SQJ07zt1+COvkHUkQ1XI5NaQ3zXD82nBP 9t5/PvPpGM0um4d4IG0v6mzOhGVKLBwc5WeDd1H+Q9R0ZhglyswFmk30Iwuwfs6o 8qd1qkVw8Q/F4aL4pSvtHhelZVEqW2UP5vlImv1K0m5HiPjcsnLrnRGvi/nCUKvw 52murneSh+41sQ0dT4iXdfRwGtzRDZEeL0Zk58R/HIiBJTm//WGp6WPdkz8dNsYw ZJK+DQa7qvLlEwIfDPLY1YRcK7h+3qZw -----END CERTIFICATE-----Generated at Wed Apr 30 02:55:00 2025 by rpki-client