$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ae636f1a-35e3-362c-a291-972d10f2a58a.roa File: ae636f1a-35e3-362c-a291-972d10f2a58a.roa (raw, json) Hash identifier: ShiS1CwYlz8x0qhuVsGBYbjkUjZyOMpWrxLNvDFXOjE= Subject key identifier: 80:A1:46:CD:99:86:27:9A:87:12:F9:C9:BF:D1:FB:6A:A2:88:E1:7D Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584A03A54FF5B522071FD5C37560 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ae636f1a-35e3-362c-a291-972d10f2a58a.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 21928 IP address blocks: 2001:4870:e00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:4f:f5:b5:22:07:1f:d5:c3:75:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=ba152295-21d9-4fef-92ef-08b51f87d837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:77:af:4c:82:9d:3f:c7:8e:53:6d:e4:39:e8: 50:d0:68:ed:fe:3d:d5:a5:ad:83:60:43:cd:a5:20: b9:25:48:2e:e1:53:c1:a7:60:49:35:e1:2e:c7:cf: c4:15:cd:40:04:f7:e9:a0:26:38:9e:27:ac:f5:d6: 7d:dc:bc:91:9e:82:3b:27:76:46:1a:49:64:5f:15: 9f:a6:38:ec:41:c5:8d:ac:09:01:9f:b2:b6:a9:a8: 61:6d:58:27:05:53:7c:84:58:aa:52:ba:e7:04:4d: c8:86:fa:14:7b:7e:da:22:2d:c6:a2:7b:78:24:1b: 2e:b9:a1:f8:e6:39:b7:83:87:a8:fa:97:5a:8c:5a: 1d:2c:79:c2:a2:c2:8d:61:73:87:10:8d:fc:7c:ee: 71:80:21:8a:04:96:96:09:a6:76:80:ba:fb:4c:d0: e4:58:d3:1b:52:60:5b:f4:24:3f:ee:05:b9:c0:47: 46:5f:20:08:71:4c:3d:35:dd:02:82:3e:6f:b5:3b: 53:cc:98:cc:42:11:b7:74:42:d2:d8:0a:8e:fb:9b: 0a:e7:b7:e4:19:4d:93:26:96:3d:d8:7d:67:d5:17: 5b:77:2f:02:5e:c9:4a:d0:2b:9d:ba:91:bf:7a:ec: d4:39:eb:37:82:1e:c3:66:8e:01:03:55:75:18:e9: e5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A1:46:CD:99:86:27:9A:87:12:F9:C9:BF:D1:FB:6A:A2:88:E1:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ae636f1a-35e3-362c-a291-972d10f2a58a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv6: 2001:4870:e00b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:71:b8:aa:de:19:1a:a7:14:87:c3:e7:ca:c8:b2:ff:9b:6d: fd:8c:9a:b9:d3:fa:a4:1b:2e:1b:4b:33:e6:09:93:1f:bf:33: ee:21:1e:5f:6d:23:86:8b:41:ec:97:66:cf:00:5e:f9:2c:e2: 70:b8:a1:4c:97:67:af:c8:59:f7:91:4e:0b:ff:7e:67:65:0d: 38:ec:d0:1d:a9:72:7a:14:26:ad:ea:2a:82:f6:b0:79:d7:5d: 07:31:e0:d4:72:b3:25:24:29:99:83:6b:fb:ca:19:4b:b6:4c: 0b:ae:6d:d6:e2:7b:83:93:c1:92:ec:3e:51:10:84:a0:ae:e8: dc:02:02:07:8e:e3:a7:0d:a6:82:bb:2c:70:26:b6:b2:9e:f9: 07:4a:cf:38:e4:e5:1e:e1:63:02:ff:d8:92:fe:5f:56:55:64: dc:25:13:48:e0:dd:18:8e:f6:e8:95:50:c6:91:48:1b:cc:25: 4e:02:1b:9f:89:81:d9:ed:6d:ee:23:d4:8f:4a:a1:d8:52:12: ef:cb:19:d6:bd:00:62:8c:30:85:25:dd:aa:1b:d1:40:6c:1d: a1:0d:2c:a7:6a:2e:13:fd:53:23:05:04:2a:cf:79:c0:cc:f7: ef:74:59:d2:26:6f:1c:c3:db:f5:71:bb:79:a1:80:04:3c:81: f7:05:86:f4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoDpU/1tSIHH9XDdWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk YmExNTIyOTUtMjFkOS00ZmVmLTkyZWYtMDhiNTFmODdkODM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXevTIKdP8eOU23kOehQ0Gjt/j3Vpa2DYEPN pSC5JUgu4VPBp2BJNeEux8/EFc1ABPfpoCY4nies9dZ93LyRnoI7J3ZGGklkXxWf pjjsQcWNrAkBn7K2qahhbVgnBVN8hFiqUrrnBE3IhvoUe37aIi3Gont4JBsuuaH4 5jm3g4eo+pdajFodLHnCosKNYXOHEI38fO5xgCGKBJaWCaZ2gLr7TNDkWNMbUmBb 9CQ/7gW5wEdGXyAIcUw9Nd0Cgj5vtTtTzJjMQhG3dELS2AqO+5sK57fkGU2TJpY9 2H1n1Rdbdy8CXslK0CudupG/euzUOes3gh7DZo4BA1V1GOnlowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIChRs2ZhieahxL5yb/R+2qiiOF9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvYWU2MzZmMWEtMzVlMy0z NjJjLWEyOTEtOTcyZDEwZjJhNThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIcOAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAChxuKreGRqnFIfD58rIsv+bbf2MmrnT+qQbLhtLM+YJkx+/M+4h Hl9tI4aLQeyXZs8AXvks4nC4oUyXZ6/IWfeRTgv/fmdlDTjs0B2pcnoUJq3qKoL2 sHnXXQcx4NRysyUkKZmDa/vKGUu2TAuubdbie4OTwZLsPlEQhKCu6NwCAgeO46cN poK7LHAmtrKe+QdKzzjk5R7hYwL/2JL+X1ZVZNwlE0jg3RiO9uiVUMaRSBvMJU4C G5+Jgdntbe4j1I9KodhSEu/LGda9AGKMMIUl3aob0UBsHaENLKdqLhP9UyMFBCrP ecDM9+90WdImbxzD2/Vxu3mhgAQ8gfcFhvQ= -----END CERTIFICATE-----Generated at Mon Jun 16 20:59:24 2025 by rpki-client