$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/3db1fae6-f3e3-3c7a-aa5f-9c795b0cce3d.roa File: 3db1fae6-f3e3-3c7a-aa5f-9c795b0cce3d.roa (raw, json) Hash identifier: j/NwKt6pQWYJETbc2sov/RGygXnhdemlCKlnxfWQ9WQ= Subject key identifier: 88:B2:EE:C8:82:A7:57:93:5D:2E:F5:E9:E1:78:4C:4B:6F:FF:96:80 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584996C4B0096D24BB8F0F4E6580 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/3db1fae6-f3e3-3c7a-aa5f-9c795b0cce3d.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 64286 IP address blocks: 2606:f180:40::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b0:09:6d:24:bb:8f:0f:4e:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=db36e546-d1a6-47b1-aa71-75f0c39b4c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5b:01:6e:ad:5e:67:2c:3c:97:b7:d6:fd:a1: 66:de:56:ab:1b:48:10:a1:a4:a1:73:36:50:f3:ff: bb:44:1f:f7:90:70:29:f1:b7:1f:2a:24:93:7b:a2: d7:0f:29:51:2e:dc:c2:bf:5b:cb:de:c3:7e:e8:f1: 42:75:20:47:38:84:4f:e9:d7:13:da:1b:e0:d9:6e: 86:f6:92:b7:8f:c9:e7:a7:e3:f9:72:04:d8:7d:34: fd:17:6b:19:da:1f:f3:66:cf:0c:f8:a4:74:dd:d8: 23:d8:d3:ff:4a:be:6f:f8:0b:3f:30:45:c0:02:09: d0:c7:d1:65:47:28:0f:c9:9a:d2:7b:9b:27:67:fb: 6d:b1:d9:4f:9b:f7:3a:18:84:aa:ee:34:7f:ec:23: 11:52:62:6f:d5:3d:f2:63:51:69:df:44:d6:bc:b0: b8:87:26:0f:ed:d5:8a:50:dc:d6:27:0c:58:5d:ed: 12:19:00:5e:a3:cb:c4:1e:75:fa:f6:2d:a0:2f:6e: c8:6c:26:ec:46:70:4d:01:7b:08:8c:37:92:f0:e9: bb:1e:c3:4d:5f:35:a8:de:94:bd:94:b8:0d:15:07: a9:bd:22:a3:40:47:73:8f:42:c3:46:13:81:ae:80: 64:8e:56:0b:2b:0c:fa:ba:0f:c5:41:02:1c:9a:64: f4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B2:EE:C8:82:A7:57:93:5D:2E:F5:E9:E1:78:4C:4B:6F:FF:96:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/3db1fae6-f3e3-3c7a-aa5f-9c795b0cce3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv6: 2606:f180:40::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:4e:4a:c4:aa:27:b6:16:8c:83:f4:51:f1:17:a6:5a:e6:22: 84:f7:d5:1a:ba:21:fb:d1:5c:22:b6:02:41:4a:f5:cb:7b:a3: 91:72:a2:31:2f:07:58:c7:1a:b9:d2:d9:1a:0e:6c:8a:9a:3f: df:e1:f2:4d:39:a3:0b:87:04:65:cf:0d:32:51:d3:d0:b4:8d: b8:75:1f:f4:d7:fc:ee:c8:61:6b:07:48:cd:5e:de:60:24:58: 87:18:ce:91:3c:10:a7:16:b6:b5:19:8a:94:1e:60:36:85:bf: af:07:d7:24:5c:dd:cc:2b:d2:60:4b:ff:6c:8d:62:f3:6a:b7: 03:02:68:3a:53:05:5b:58:3f:83:9c:62:a8:43:2a:79:95:ec: 8d:1f:2c:e9:19:08:a8:fb:f7:b1:df:dc:1d:e9:00:16:9b:6d: 97:d1:a3:d7:51:1f:2b:7c:7c:7c:79:2f:45:99:12:7b:8b:47: 0b:a7:3b:7c:9d:cf:76:23:52:c3:8c:84:b1:07:39:02:46:0c: 62:2a:4d:a6:92:3b:12:42:d4:43:ae:f2:c5:f7:09:47:2d:2e: fe:68:0c:1e:c6:ec:fe:77:44:02:de:73:ce:e9:9d:ec:a1:b3: 59:a9:f5:97:a6:d1:72:3e:4c:bb:50:2b:34:c6:8a:db:64:3d: 2b:85:03:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmWxLAJbSS7jw9OZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk ZGIzNmU1NDYtZDFhNi00N2IxLWFhNzEtNzVmMGMzOWI0YzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1sBbq1eZyw8l7fW/aFm3larG0gQoaShczZQ 8/+7RB/3kHAp8bcfKiSTe6LXDylRLtzCv1vL3sN+6PFCdSBHOIRP6dcT2hvg2W6G 9pK3j8nnp+P5cgTYfTT9F2sZ2h/zZs8M+KR03dgj2NP/Sr5v+As/MEXAAgnQx9Fl RygPyZrSe5snZ/ttsdlPm/c6GISq7jR/7CMRUmJv1T3yY1Fp30TWvLC4hyYP7dWK UNzWJwxYXe0SGQBeo8vEHnX69i2gL27IbCbsRnBNAXsIjDeS8Om7HsNNXzWo3pS9 lLgNFQepvSKjQEdzj0LDRhOBroBkjlYLKwz6ug/FQQIcmmT0OwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIiy7siCp1eTXS716eF4TEtv/5aAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvM2RiMWZhZTYtZjNlMy0z YzdhLWFhNWYtOWM3OTViMGNjZTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgbxgABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAExOSsSqJ7YWjIP0UfEXplrmIoT31Rq6IfvRXCK2AkFK9ct7o5Fy ojEvB1jHGrnS2RoObIqaP9/h8k05owuHBGXPDTJR09C0jbh1H/TX/O7IYWsHSM1e 3mAkWIcYzpE8EKcWtrUZipQeYDaFv68H1yRc3cwr0mBL/2yNYvNqtwMCaDpTBVtY P4OcYqhDKnmV7I0fLOkZCKj797Hf3B3pABabbZfRo9dRHyt8fHx5L0WZEnuLRwun O3ydz3YjUsOMhLEHOQJGDGIqTaaSOxJC1EOu8sX3CUctLv5oDB7G7P53RALec87p neyhs1mp9Zem0XI+TLtQKzTGittkPSuFA2s= -----END CERTIFICATE-----Generated at Sun Apr 27 01:25:55 2025 by rpki-client