$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb7506f3-b460-3df5-a4fd-e7aaf86a566b.roa File: fb7506f3-b460-3df5-a4fd-e7aaf86a566b.roa (raw, json) Hash identifier: kJ7C7NtROrs4KPZl4lJAgPZydg7GENqpw8JhU4THcRY= Subject key identifier: B7:ED:65:3C:D0:2D:7E:1A:16:25:F2:2A:86:57:6E:7B:A7:4C:E7:55 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB07D5BB3178817A2D49200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb7506f3-b460-3df5-a4fd-e7aaf86a566b.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33659 IP address blocks: 2601:8a:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:7d:5b:b3:17:88:17:a2:d4:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=07d2d9cf-dc6d-4f3d-96cc-806079a8bc44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:53:d4:da:72:6d:51:c7:a5:c2:d9:9c:1f:a8: ca:12:3e:ef:10:f5:4f:a5:87:98:8d:98:5b:f6:1d: 80:65:f1:42:b6:99:86:cc:8a:76:dc:9c:23:da:a3: 70:87:90:cf:26:a5:16:99:14:66:50:c7:5c:e0:7b: da:e6:6e:90:cb:d3:3a:c8:c6:45:5d:c3:c6:05:5e: 17:5c:db:4c:ee:b3:c3:63:ed:e4:9d:c5:18:17:0c: 9b:a7:79:9e:20:ec:2b:4c:3c:3a:12:78:32:04:f7: bf:98:51:9d:f4:b5:f8:57:e6:f3:61:ec:6d:e8:44: 07:7a:88:cb:75:56:6b:1f:df:95:a5:3c:fc:02:71: ab:0e:49:18:b6:4e:c0:62:aa:3f:d7:f2:49:2c:98: a4:3f:0a:2e:74:e9:57:2c:5d:36:4e:93:98:d3:95: 21:55:aa:a3:e2:2b:62:ff:99:b6:aa:c4:eb:37:37: 44:16:85:35:01:b5:79:06:6c:95:24:5f:a3:40:37: 16:76:c3:73:be:6a:44:38:e5:91:0b:c4:28:03:99: 48:3e:6f:ba:bc:dd:3b:1e:f3:2b:94:2c:dc:02:69: 6e:b6:4b:80:dc:e1:dc:ff:33:3b:2e:d7:fc:7f:3f: 19:89:9d:d2:b1:63:38:12:e6:0d:63:fe:8d:91:85: b5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:ED:65:3C:D0:2D:7E:1A:16:25:F2:2A:86:57:6E:7B:A7:4C:E7:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb7506f3-b460-3df5-a4fd-e7aaf86a566b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:8a:8000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:cf:0d:1d:eb:82:37:5e:b8:c3:cc:85:cb:5b:37:61:9f:69: db:03:09:75:88:b7:52:24:58:4e:c1:aa:53:8b:55:f6:67:bf: bb:e4:61:18:aa:b4:7e:fc:4b:dc:e0:93:89:62:23:57:63:bf: d3:d6:53:b4:93:8e:08:be:f9:2f:b5:40:27:db:57:28:68:f4: 5b:5b:4b:77:1d:90:8e:33:3a:6b:3e:dc:e9:91:78:89:01:4c: 95:88:a9:32:21:58:30:37:d8:80:71:d1:83:b1:bc:11:de:28: c3:c8:1f:12:5e:df:cd:13:0b:49:04:51:ad:50:31:a4:b9:82: b7:e3:3e:77:86:52:63:cd:c5:5d:6c:ab:8a:4e:8d:ae:c0:0f: 9d:b8:3a:81:3a:2e:99:19:a1:e8:a9:77:29:1f:84:07:86:93: ce:32:ed:b0:9b:08:63:91:64:29:da:ab:ac:d4:c9:2c:ed:fc: 5b:ca:c0:45:51:55:c0:49:8f:16:b8:34:ef:d1:f1:f7:81:2a: 08:84:a5:d4:09:df:40:05:fd:d7:c1:e3:81:89:c0:ce:6f:eb: 12:db:38:9f:a3:62:ff:8e:f4:47:bd:2e:d8:b0:2d:64:38:39: 36:98:9e:64:44:24:6d:3a:be:e4:b2:8a:79:d8:06:21:d5:91: ee:b1:cd:ec -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkssH1bsxeIF6LUkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MDdkMmQ5Y2YtZGM2ZC00ZjNkLTk2Y2MtODA2MDc5YThiYzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFPU2nJtUcelwtmcH6jKEj7vEPVPpYeYjZhb 9h2AZfFCtpmGzIp23Jwj2qNwh5DPJqUWmRRmUMdc4Hva5m6Qy9M6yMZFXcPGBV4X XNtM7rPDY+3kncUYFwybp3meIOwrTDw6EngyBPe/mFGd9LX4V+bzYext6EQHeojL dVZrH9+VpTz8AnGrDkkYtk7AYqo/1/JJLJikPwoudOlXLF02TpOY05UhVaqj4iti /5m2qsTrNzdEFoU1AbV5BmyVJF+jQDcWdsNzvmpEOOWRC8QoA5lIPm+6vN07HvMr lCzcAmlutkuA3OHc/zM7Ltf8fz8ZiZ3SsWM4EuYNY/6NkYW1zQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLftZTzQLX4aFiXyKoZXbnunTOdVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmI3NTA2ZjMtYjQ2MC0z ZGY1LWE0ZmQtZTdhYWY4NmE1NjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEAioAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAqM8NHeuCN164w8yFy1s3YZ9p2wMJdYi3UiRYTsGqU4tV9me/u+Rh GKq0fvxL3OCTiWIjV2O/09ZTtJOOCL75L7VAJ9tXKGj0W1tLdx2QjjM6az7c6ZF4 iQFMlYipMiFYMDfYgHHRg7G8Ed4ow8gfEl7fzRMLSQRRrVAxpLmCt+M+d4ZSY83F XWyrik6NrsAPnbg6gToumRmh6Kl3KR+EB4aTzjLtsJsIY5FkKdqrrNTJLO38W8rA RVFVwEmPFrg079Hx94EqCISl1AnfQAX918HjgYnAzm/rEts4n6Ni/470R70u2LAt ZDg5NpieZEQkbTq+5LKKedgGIdWR7rHN7A== -----END CERTIFICATE-----Generated at Sun Apr 27 13:11:24 2025 by rpki-client