$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/43c5549b-dc14-309e-bf49-854015bbb2ec.roa File: 43c5549b-dc14-309e-bf49-854015bbb2ec.roa (raw, json) Hash identifier: iOV31UQADHUNPgtxRr8UJmJSt42LdNrVVWRWgo9ZURQ= Subject key identifier: C8:C1:9E:97:CA:66:E5:D3:63:61:13:7B:F2:D5:A6:4C:23:21:EE:FD Certificate issuer: /CN=9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a Certificate serial: 010D0C9F4328584981D45ACCECA8B34B45A21EC0 Authority key identifier: E1:C1:D3:7A:4C:9C:9C:5B:88:AA:59:1C:49:70:60:9B:47:48:6A:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/43c5549b-dc14-309e-bf49-854015bbb2ec.roa Signing time: Sun 13 Apr 2025 01:00:44 +0000 ROA not before: Sun 13 Apr 2025 01:00:44 +0000 ROA not after: Sat 12 Jul 2025 01:00:44 +0000 asID: 40864 IP address blocks: 2604:840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:d4:5a:cc:ec:a8:b3:4b:45:a2:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a Validity Not Before: Apr 13 01:00:44 2025 GMT Not After : Jul 12 01:00:44 2025 GMT Subject: CN=4460c376-3faf-486a-9ede-0b94243a9623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b4:f4:53:96:4c:87:b1:4d:d5:a1:49:6a:0b: cb:c0:93:04:92:18:0f:ae:74:03:dd:0c:07:c9:15: 6c:aa:6f:bd:aa:16:a9:dc:d9:8d:8e:20:13:50:dd: 3e:d5:a8:12:0e:74:9b:c8:61:7c:f1:46:2f:99:a2: 8b:65:92:82:14:40:1b:55:b5:11:cc:f1:38:09:16: b0:ba:ed:80:85:4f:92:dc:3a:ac:b3:20:2b:c3:60: 7f:cf:f0:5b:90:57:4a:9b:34:ba:12:cb:82:4d:30: e8:5c:34:ca:f2:37:79:5f:ef:d2:2b:01:09:a7:5e: f9:77:a4:f3:30:67:4a:a6:80:41:ac:17:b2:15:a6: 97:c7:8f:42:e4:a9:33:bc:c7:a7:20:f4:62:cc:ba: e9:cd:3a:35:7c:b8:98:75:2b:3c:d0:97:98:d9:d9: 6a:4a:d9:c9:ba:6a:c5:85:89:e9:9d:4c:ac:bc:ad: 20:dd:f4:2c:5d:a8:7c:d8:46:0f:9c:a2:97:80:9a: e4:52:72:ec:b2:5f:b6:07:d4:3e:c0:3e:a0:a8:74: eb:ca:0d:c7:69:3f:37:f4:38:29:36:8c:69:6a:98: 3d:56:2f:2e:46:eb:ea:d2:07:eb:d9:ab:df:7b:2d: 04:58:3e:24:6d:ce:4b:e9:e1:f9:c8:bb:ad:4a:d8: 90:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C1:9E:97:CA:66:E5:D3:63:61:13:7B:F2:D5:A6:4C:23:21:EE:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/43c5549b-dc14-309e-bf49-854015bbb2ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.crl X509v3 Authority Key Identifier: keyid:E1:C1:D3:7A:4C:9C:9C:5B:88:AA:59:1C:49:70:60:9B:47:48:6A:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.cer sbgp-ipAddrBlock: critical IPv6: 2604:840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:69:74:24:d5:25:68:87:e2:53:53:a0:09:6e:c5:95:60:ca: 7a:c9:ed:dc:d4:c2:78:48:f6:6b:c4:2e:3e:1b:f2:83:e0:f9: b4:f2:db:7a:de:75:ed:f3:31:60:ef:e5:e8:89:21:f6:43:a2: e0:42:7f:6a:5e:d2:c0:aa:6c:8c:d0:29:ff:da:31:49:6b:44: bb:a9:46:d3:de:ee:37:ce:61:98:41:fa:42:c3:a1:05:f8:33: c2:6b:93:66:f9:ce:d7:3a:b5:06:4c:a8:d5:a9:0f:d7:49:5c: 37:d3:50:89:95:89:24:74:76:5e:0e:85:eb:63:d8:89:31:e8: 53:07:d3:dd:5e:00:8e:1d:cb:f8:cf:41:b4:0c:2c:a5:b1:9d: 18:4d:4f:95:bf:f9:0f:a4:f3:60:bb:49:44:ec:81:17:e2:96: 78:e8:7f:d7:ed:a6:6e:e6:25:fd:e4:54:4f:3b:52:d0:23:c0: af:33:cf:a6:94:4d:64:96:ab:72:1b:4f:f2:34:61:07:34:53: 25:0b:98:ea:de:b2:44:78:30:04:8d:eb:e0:93:f1:c5:a5:2e: 8b:f4:16:71:76:d4:7b:76:f4:d3:dd:9f:be:24:62:35:4c:5f: aa:3c:8b:a1:d8:e9:84:87:e7:d7:b0:64:91:2a:42:c1:39:1c: 08:c8:4d:ec -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmB1FrM7KizS0WiHsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZhY2MxNTUtNmFkOS00M2Y1LWFkMmMtMmQ4ZGRiMGNh NzhhMB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk NDQ2MGMzNzYtM2ZhZi00ODZhLTllZGUtMGI5NDI0M2E5NjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLT0U5ZMh7FN1aFJagvLwJMEkhgPrnQD3QwH yRVsqm+9qhap3NmNjiATUN0+1agSDnSbyGF88UYvmaKLZZKCFEAbVbURzPE4CRaw uu2AhU+S3DqssyArw2B/z/BbkFdKmzS6EsuCTTDoXDTK8jd5X+/SKwEJp175d6Tz MGdKpoBBrBeyFaaXx49C5KkzvMenIPRizLrpzTo1fLiYdSs80JeY2dlqStnJumrF hYnpnUysvK0g3fQsXah82EYPnKKXgJrkUnLssl+2B9Q+wD6gqHTryg3HaT839Dgp Noxpapg9Vi8uRuvq0gfr2avfey0EWD4kbc5L6eH5yLutStiQKQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMjBnpfKZuXTY2ETe/LVpkwjIe79MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ZmFj YzE1NS02YWQ5LTQzZjUtYWQyYy0yZDhkZGIwY2E3OGEvNDNjNTU0OWItZGMxNC0z MDllLWJmNDktODU0MDE1YmJiMmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOWZhY2MxNTUtNmFkOS00M2Y1LWFk MmMtMmQ4ZGRiMGNhNzhhLzlmYWNjMTU1LTZhZDktNDNmNS1hZDJjLTJkOGRkYjBj YTc4YS5jcmwwHwYDVR0jBBgwFoAU4cHTekycnFuIqlkcSXBgm0dIahIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ZmFjYzE1NS02YWQ5LTQzZjUtYWQyYy0yZDhk ZGIwY2E3OGEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQIQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBraXQk1SVoh+JTU6AJbsWVYMp6ye3c1MJ4SPZrxC4+G/KD4Pm08tt6 3nXt8zFg7+XoiSH2Q6LgQn9qXtLAqmyM0Cn/2jFJa0S7qUbT3u43zmGYQfpCw6EF +DPCa5Nm+c7XOrUGTKjVqQ/XSVw301CJlYkkdHZeDoXrY9iJMehTB9PdXgCOHcv4 z0G0DCylsZ0YTU+Vv/kPpPNgu0lE7IEX4pZ46H/X7aZu5iX95FRPO1LQI8CvM8+m lE1klqtyG0/yNGEHNFMlC5jq3rJEeDAEjevgk/HFpS6L9BZxdtR7dvTT3Z++JGI1 TF+qPIuh2OmEh+fXsGSRKkLBORwIyE3s -----END CERTIFICATE-----Generated at Sun Apr 27 22:56:21 2025 by rpki-client