$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3270547c-bf4b-3bb4-b025-73d8a1ee2b08.roa File: 3270547c-bf4b-3bb4-b025-73d8a1ee2b08.roa (raw, json) Hash identifier: uRjc04zVtleaXWfvgQHcIu6XcpvoYhqOJLREMSUJkqU= Subject key identifier: 78:E3:19:AD:6A:59:B9:F9:E9:AD:67:33:A1:67:ED:E8:F4:A7:6E:49 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858499829C3D2E78A22FED4DC3820 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3270547c-bf4b-3bb4-b025-73d8a1ee2b08.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 33661 IP address blocks: 2001:558:250::/44 maxlen: 44 2001:558:2d0::/44 maxlen: 44 2001:558:310::/44 maxlen: 44 2001:558:4fef::/48 maxlen: 48 2001:558:500b::/48 maxlen: 48 2001:558:500f::/48 maxlen: 48 2001:558:5017::/48 maxlen: 48 2001:558:6004::/48 maxlen: 48 2001:558:600b::/48 maxlen: 48 2001:558:6015::/48 maxlen: 48 2001:558:fe08::/47 maxlen: 47 2001:558:fe38::/48 maxlen: 48 2001:558:fe3a::/48 maxlen: 48 2001:559:124::/48 maxlen: 48 2001:559:135::/48 maxlen: 48 2001:559:157::/48 maxlen: 48 2001:559:237::/48 maxlen: 48 2001:559:4ed::/48 maxlen: 48 2001:559:4ee::/48 maxlen: 48 2001:559:731::/48 maxlen: 48 2001:559:7a0::/48 maxlen: 48 2001:559:824e::/48 maxlen: 48 2001:559:8298::/48 maxlen: 48 2001:559:8299::/48 maxlen: 48 2001:559:82f9::/48 maxlen: 48 2001:559:830d::/48 maxlen: 48 2001:559:8320::/48 maxlen: 48 2001:559:8339::/48 maxlen: 48 2001:559:839c::/48 maxlen: 48 2001:559:83d8::/48 maxlen: 48 2001:559:8462::/48 maxlen: 48 2001:559:85d6::/48 maxlen: 48 2001:559:864f::/48 maxlen: 48 2001:559:878c::/48 maxlen: 48 2001:559:87d4::/48 maxlen: 48 2001:559:c202::/48 maxlen: 48 2001:559:c22b::/48 maxlen: 48 2001:559:c4b9::/48 maxlen: 48 2001:559:c4ea::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:c3:d2:e7:8a:22:fe:d4:dc:38:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=67f1f014-9888-455c-9826-7d88fea24039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b0:ed:7b:95:0d:52:a8:26:87:e6:44:8b:09: cc:66:3a:51:a4:46:73:3e:8f:ab:3a:07:26:68:b7: 45:fd:92:d8:79:82:b6:63:9e:a9:b5:92:1d:c2:e2: 2a:6c:a5:4d:56:b9:3d:9b:73:e2:a0:53:9c:de:4e: 17:e7:04:c3:75:83:cf:14:6c:73:9d:62:15:c2:02: 55:ca:9a:2b:d0:0b:8f:62:2e:ed:0f:d3:6a:99:08: 36:48:f9:81:05:09:fb:ca:b8:49:04:c7:6a:dd:2f: e9:2f:c5:b9:a3:6b:95:64:ea:3b:2c:fa:bc:cd:19: f2:a7:3b:0b:30:a9:29:4c:74:a8:7b:e0:c4:06:c4: 5e:42:1f:90:36:b7:d8:c9:7c:95:e6:ca:d4:29:ca: 62:c2:a8:02:05:90:24:48:d4:9f:5e:c1:2a:2e:c5: 4c:d8:2f:da:59:a6:47:a9:9e:93:d9:4a:ec:7c:4c: 4a:21:b6:10:75:36:c3:53:a4:4e:d8:8c:4a:2f:c6: d3:39:5f:53:d8:8d:f6:ee:c5:e0:2a:cb:e4:d6:95: ff:9b:0d:f0:21:c4:b3:f4:da:83:13:d1:19:54:54: 48:4f:d5:7b:05:37:11:4c:d2:b3:9c:6b:5f:04:d3: b8:79:7c:33:05:a5:fe:14:11:82:21:78:1c:a2:51: 52:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E3:19:AD:6A:59:B9:F9:E9:AD:67:33:A1:67:ED:E8:F4:A7:6E:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3270547c-bf4b-3bb4-b025-73d8a1ee2b08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:558:250::/44 2001:558:2d0::/44 2001:558:310::/44 2001:558:4fef::/48 2001:558:500b::/48 2001:558:500f::/48 2001:558:5017::/48 2001:558:6004::/48 2001:558:600b::/48 2001:558:6015::/48 2001:558:fe08::/47 2001:558:fe38::/48 2001:558:fe3a::/48 2001:559:124::/48 2001:559:135::/48 2001:559:157::/48 2001:559:237::/48 2001:559:4ed::-2001:559:4ee:ffff:ffff:ffff:ffff:ffff 2001:559:731::/48 2001:559:7a0::/48 2001:559:824e::/48 2001:559:8298::/47 2001:559:82f9::/48 2001:559:830d::/48 2001:559:8320::/48 2001:559:8339::/48 2001:559:839c::/48 2001:559:83d8::/48 2001:559:8462::/48 2001:559:85d6::/48 2001:559:864f::/48 2001:559:878c::/48 2001:559:87d4::/48 2001:559:c202::/48 2001:559:c22b::/48 2001:559:c4b9::/48 2001:559:c4ea::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:ee:d5:58:79:11:1a:99:5b:8a:3a:75:b0:10:37:78:62:ca: b2:92:6d:20:c0:78:60:ef:c6:33:34:58:2a:35:a3:d4:11:ea: ba:0a:0b:ce:19:ca:d4:77:23:ab:fd:a8:28:2f:29:52:8d:7e: e4:46:ec:05:1f:90:42:c7:09:ad:8d:12:65:22:01:b7:27:0a: ca:1a:27:c3:80:7f:4f:c2:52:70:4d:29:4a:59:20:30:ea:4c: 8f:bd:a5:26:bf:93:b2:fd:3d:d6:19:70:a9:57:03:b3:3b:88: ed:9e:c6:13:a8:9c:96:08:17:8c:be:d1:3a:89:8f:d9:97:e9: 2f:fc:ce:df:12:b7:47:af:30:2f:c5:fb:2b:40:28:1e:51:6f: 82:1a:be:c7:46:34:8e:87:53:a7:03:f9:37:3a:c3:fc:c8:d0: 95:ef:70:d3:a3:89:03:18:af:11:b4:c6:3e:40:03:af:77:ca: 45:64:de:38:08:32:23:a2:c2:28:f0:68:63:17:1a:52:93:b8: e7:dc:67:65:f3:6d:18:60:b2:02:1e:3e:5b:a2:85:4e:d6:68: 38:9d:12:c5:78:48:16:5e:5b:73:88:8d:f5:d5:9f:82:5a:d3: b4:92:87:6d:5e:22:72:84:37:cc:1d:0f:02:f7:91:43:53:41: 39:1d:b2:ff -----BEGIN CERTIFICATE----- MIIHnzCCBoegAwIBAgIUAQ0Mn0MoWEmYKcPS54oi/tTcOCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk NjdmMWYwMTQtOTg4OC00NTVjLTk4MjYtN2Q4OGZlYTI0MDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7Dte5UNUqgmh+ZEiwnMZjpRpEZzPo+rOgcm aLdF/ZLYeYK2Y56ptZIdwuIqbKVNVrk9m3PioFOc3k4X5wTDdYPPFGxznWIVwgJV ypor0AuPYi7tD9NqmQg2SPmBBQn7yrhJBMdq3S/pL8W5o2uVZOo7LPq8zRnypzsL MKkpTHSoe+DEBsReQh+QNrfYyXyV5srUKcpiwqgCBZAkSNSfXsEqLsVM2C/aWaZH qZ6T2UrsfExKIbYQdTbDU6RO2IxKL8bTOV9T2I327sXgKsvk1pX/mw3wIcSz9NqD E9EZVFRIT9V7BTcRTNKznGtfBNO4eXwzBaX+FBGCIXgcolFSyQIDAQABo4IEsTCC BK0wHQYDVR0OBBYEFHjjGa1qWbn56a1nM6Fn7ej0p25JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzI3MDU0N2MtYmY0Yi0z YmI0LWIwMjUtNzNkOGExZWUyYjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMIIBeQYIKwYBBQUHAQcBAf8EggFoMIIBZDCCAWAEAgACMIIB WAMHBCABBVgCUAMHBCABBVgC0AMHBCABBVgDEAMHACABBVhP7wMHACABBVhQCwMH ACABBVhQDwMHACABBVhQFwMHACABBVhgBAMHACABBVhgCwMHACABBVhgFQMHASAB BVj+CAMHACABBVj+OAMHACABBVj+OgMHACABBVkBJAMHACABBVkBNQMHACABBVkB VwMHACABBVkCNzASAwcAIAEFWQTtAwcAIAEFWQTuAwcAIAEFWQcxAwcAIAEFWQeg AwcAIAEFWYJOAwcBIAEFWYKYAwcAIAEFWYL5AwcAIAEFWYMNAwcAIAEFWYMgAwcA IAEFWYM5AwcAIAEFWYOcAwcAIAEFWYPYAwcAIAEFWYRiAwcAIAEFWYXWAwcAIAEF WYZPAwcAIAEFWYeMAwcAIAEFWYfUAwcAIAEFWcICAwcAIAEFWcIrAwcAIAEFWcS5 AwcAIAEFWcTqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABXu1Vh5ERqZW4o6dbAQN3hiyrKSbSDAeGDvxjM0 WCo1o9QR6roKC84ZytR3I6v9qCgvKVKNfuRG7AUfkELHCa2NEmUiAbcnCsoaJ8OA f0/CUnBNKUpZIDDqTI+9pSa/k7L9PdYZcKlXA7M7iO2exhOonJYIF4y+0TqJj9mX 6S/8zt8St0evMC/F+ytAKB5Rb4IavsdGNI6HU6cD+Tc6w/zI0JXvcNOjiQMYrxG0 xj5AA693ykVk3jgIMiOiwijwaGMXGlKTuOfcZ2XzbRhgsgIePluihU7WaDidEsV4 SBZeW3OIjfXVn4Ja07SSh21eInKEN8wdDwL3kUNTQTkdsv8= -----END CERTIFICATE-----Generated at Sun Apr 27 17:44:48 2025 by rpki-client