$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/6758e236-250b-3365-a146-9e1a9f1e2a79.roa File: 6758e236-250b-3365-a146-9e1a9f1e2a79.roa (raw, json) Hash identifier: Hi2YnOTLBc56p2kATGl7h8aePuYQkPurspjXps8jG0c= Subject key identifier: B6:B1:43:59:F6:66:20:77:3F:0D:6E:A7:9A:C7:61:00:BD:2D:53:01 Certificate issuer: /CN=3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c Certificate serial: 010D0C9F43285849ABB4A776CF209CA824B52B40 Authority key identifier: 0F:17:1D:BE:80:A6:E2:81:10:8B:B7:67:F1:60:C9:37:79:07:C0:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/6758e236-250b-3365-a146-9e1a9f1e2a79.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 25819 IP address blocks: 23.181.112.0/24 maxlen: 24 2602:fc6d::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:a7:76:cf:20:9c:a8:24:b5:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=11f45731-60ce-42a9-b4ba-06c2c5726c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:72:ec:0d:4c:65:37:45:bb:32:0f:10:78:fc: e8:4a:c9:90:72:7d:4f:de:02:f9:b5:15:0e:09:dd: 3f:3f:15:a6:49:d7:5d:60:6e:91:b3:a9:1e:f6:91: f2:b9:c7:37:fc:e1:cd:a7:0b:df:de:49:65:25:0b: 40:b0:75:d7:64:5e:dc:ca:bf:78:f3:c5:b1:00:0d: a7:67:77:e6:b0:1c:27:b6:3c:26:5c:f6:31:e9:70: e5:af:d6:9f:ac:03:82:83:56:a3:48:0d:15:a2:98: b0:dc:6f:ca:09:71:94:55:ce:ac:68:e2:6f:c9:ec: aa:df:65:9e:b3:0e:af:e1:31:09:dc:f5:ac:05:61: 66:85:e9:9c:5c:81:a5:7d:fa:36:42:eb:70:52:51: cc:5d:80:b2:19:22:9e:42:d7:8c:93:8c:42:72:14: 82:e8:7a:9d:c8:3f:df:5d:64:ea:13:b3:8f:52:06: ce:aa:54:1e:61:f4:4a:0a:16:b5:33:56:46:3e:17: 80:b8:f8:92:bb:cb:96:de:b9:9c:5f:38:e9:2a:a7: ae:9c:da:61:b3:6d:02:da:4c:e9:c8:14:56:79:cf: 46:b4:92:49:59:f2:30:8b:69:81:ee:84:0b:3c:33: 91:ce:df:2b:ce:1f:c8:c0:60:72:50:04:7f:14:ff: 5e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B1:43:59:F6:66:20:77:3F:0D:6E:A7:9A:C7:61:00:BD:2D:53:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/6758e236-250b-3365-a146-9e1a9f1e2a79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.crl X509v3 Authority Key Identifier: keyid:0F:17:1D:BE:80:A6:E2:81:10:8B:B7:67:F1:60:C9:37:79:07:C0:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3c9f60d4-cfbd-4f6d-97bf-e51ba029d44c.cer sbgp-ipAddrBlock: critical IPv4: 23.181.112.0/24 IPv6: 2602:fc6d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:c9:39:b7:c2:3a:99:da:9f:ec:05:fb:04:e7:7d:78:1a:d0: 39:9c:ff:c1:47:de:87:0d:18:53:a8:7e:6d:33:83:96:1a:5f: ae:ea:e9:ec:46:c5:ac:3a:e9:ee:de:ec:74:ff:c8:40:65:3a: 31:b8:da:e3:68:86:e4:61:2d:b2:b9:8c:85:06:09:6f:dd:8f: 14:ee:b9:47:a7:42:df:cb:6d:9a:2a:22:93:7f:b1:d3:c7:a5: 17:72:95:bf:a3:ce:38:76:d1:6e:9a:44:d9:52:b7:34:b2:29: b8:24:c6:3c:2b:5b:33:9b:71:37:dd:42:e2:2c:4e:0e:25:98: 86:5c:ac:4e:9c:eb:80:a5:67:b9:c3:cc:21:7f:f5:46:22:b9: f0:61:23:82:96:46:cc:fd:e7:76:8d:fe:e4:ff:07:7d:9b:75: cf:ab:8d:1d:56:72:84:d1:61:81:9f:ea:9d:a6:f0:42:b2:7c: b3:17:ff:39:eb:d2:5a:15:31:5b:90:22:0e:b5:0b:4a:26:59: c5:83:f7:fa:f3:2e:f7:71:b9:db:05:e4:c4:ac:14:0b:80:4b: 90:eb:aa:2e:aa:20:f6:c1:a3:0d:74:d6:d2:93:c5:cc:30:7b: b1:3d:87:5c:89:3c:dd:4a:85:fa:10:1a:3c:49:35:c1:c6:5d: 0a:fb:93:b0 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEmrtKd2zyCcqCS1K0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M5ZjYwZDQtY2ZiZC00ZjZkLTk3YmYtZTUxYmEwMjlk NDRjMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk MTFmNDU3MzEtNjBjZS00MmE5LWI0YmEtMDZjMmM1NzI2YzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnLsDUxlN0W7Mg8QePzoSsmQcn1P3gL5tRUO Cd0/PxWmSdddYG6Rs6ke9pHyucc3/OHNpwvf3kllJQtAsHXXZF7cyr9488WxAA2n Z3fmsBwntjwmXPYx6XDlr9afrAOCg1ajSA0Vopiw3G/KCXGUVc6saOJvyeyq32We sw6v4TEJ3PWsBWFmhemcXIGlffo2QutwUlHMXYCyGSKeQteMk4xCchSC6HqdyD/f XWTqE7OPUgbOqlQeYfRKCha1M1ZGPheAuPiSu8uW3rmcXzjpKqeunNphs20C2kzp yBRWec9GtJJJWfIwi2mB7oQLPDORzt8rzh/IwGByUAR/FP9egQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLaxQ1n2ZiB3Pw1up5rHYQC9LVMBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYzlm NjBkNC1jZmJkLTRmNmQtOTdiZi1lNTFiYTAyOWQ0NGMvNjc1OGUyMzYtMjUwYi0z MzY1LWExNDYtOWUxYTlmMWUyYTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2M5ZjYwZDQtY2ZiZC00ZjZkLTk3 YmYtZTUxYmEwMjlkNDRjLzNjOWY2MGQ0LWNmYmQtNGY2ZC05N2JmLWU1MWJhMDI5 ZDQ0Yy5jcmwwHwYDVR0jBBgwFoAUDxcdvoCm4oEQi7dn8WDJN3kHwLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYzlmNjBkNC1jZmJkLTRmNmQtOTdiZi1lNTFi YTAyOWQ0NGMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7VwMA4E AgACMAgDBgAmAvxtADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCeyTm3wjqZ2p/sBfsE5314GtA5nP/BR96H DRhTqH5tM4OWGl+u6unsRsWsOunu3ux0/8hAZToxuNrjaIbkYS2yuYyFBglv3Y8U 7rlHp0Lfy22aKiKTf7HTx6UXcpW/o844dtFumkTZUrc0sim4JMY8K1szm3E33ULi LE4OJZiGXKxOnOuApWe5w8whf/VGIrnwYSOClkbM/ed2jf7k/wd9m3XPq40dVnKE 0WGBn+qdpvBCsnyzF/8569JaFTFbkCIOtQtKJlnFg/f68y73cbnbBeTErBQLgEuQ 66ouqiD2waMNdNbSk8XMMHuxPYdciTzdSoX6EBo8STXBxl0K+5Ow -----END CERTIFICATE-----Generated at Mon Apr 28 16:02:18 2025 by rpki-client