$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c625fd72-037d-34e0-acb3-3db086a6a8b9.roa File: c625fd72-037d-34e0-acb3-3db086a6a8b9.roa (raw, json) Hash identifier: kFxEITwp4ZXoEzpqMN5Jq4AhmRZLu6GfIL06re1OIhs= Subject key identifier: 5E:CC:47:C8:FC:A1:BF:83:FE:B0:23:03:04:82:0E:E8:57:5A:E7:EA Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F432858495529541900241B0C111A7B38 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c625fd72-037d-34e0-acb3-3db086a6a8b9.roa Signing time: Fri 28 Mar 2025 01:00:41 +0000 ROA not before: Fri 28 Mar 2025 01:00:41 +0000 ROA not after: Thu 26 Jun 2025 01:00:41 +0000 asID: 14618 IP address blocks: 2606:7bc0:1065::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:55:29:54:19:00:24:1b:0c:11:1a:7b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Mar 28 01:00:41 2025 GMT Not After : Jun 26 01:00:41 2025 GMT Subject: CN=c75a4c84-d6f2-4b8f-8418-48c482dfab72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bb:bf:f5:b4:60:05:31:cb:9b:8a:32:8d:40: 28:92:6f:cb:0c:ac:40:d8:d2:e6:8d:4e:a8:0d:74: 0a:4b:88:32:43:e5:32:f8:ff:8b:c2:05:07:98:9c: ce:24:44:b8:44:84:fa:a3:49:b3:98:b9:de:43:38: 97:96:a4:7a:e2:8e:de:ce:c4:11:11:92:37:92:b7: 09:05:72:fe:b7:6e:6b:bd:8e:63:b8:d3:02:65:b9: f0:d8:1e:17:c6:b9:d5:e4:0b:96:e7:01:37:4b:35: 0a:23:50:02:70:ed:48:25:82:70:14:ba:49:01:e9: f2:46:ac:ee:38:e8:d5:db:c4:56:ea:05:c9:71:89: e1:2c:d7:7f:1a:6e:36:57:cd:2e:1c:fc:bd:9c:35: 00:94:9b:8a:d6:af:0c:79:bf:99:9e:98:23:86:b9: 28:00:37:ef:9b:07:a7:45:62:41:41:dd:b4:00:b3: b1:3f:fe:8d:6e:35:15:46:c9:8e:b5:61:a2:51:21: a7:32:57:81:25:24:88:ab:e5:0b:e5:b2:45:3a:f1: bd:25:c1:5f:dc:14:2f:80:21:93:16:8f:cc:af:bf: 05:dc:e8:33:10:5b:d8:d8:14:fb:9a:27:c0:92:3f: 94:b3:b4:65:45:0f:a3:aa:6a:a1:23:88:ff:03:b1: 51:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CC:47:C8:FC:A1:BF:83:FE:B0:23:03:04:82:0E:E8:57:5A:E7:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c625fd72-037d-34e0-acb3-3db086a6a8b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv6: 2606:7bc0:1065::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:80:7c:48:1f:90:f6:cd:64:8d:f7:18:3e:9c:e3:28:e6:92: f4:b3:82:dd:d2:79:fe:a8:4e:50:0b:25:3a:d7:73:87:78:01: ae:9f:84:bf:4c:01:71:b9:1c:5d:d4:46:2b:dc:33:0b:fd:6a: 7e:de:7c:a5:fc:2e:1c:da:63:ac:ae:b5:8a:47:8f:41:1c:54: ed:1d:53:bc:88:30:64:e3:c0:56:a6:b1:89:d1:4e:ec:b4:14: 0e:40:45:62:03:d5:52:0c:bc:63:b1:33:79:39:18:be:99:3e: 1f:1b:1b:83:d7:41:dc:46:23:24:a7:35:52:9c:98:45:f6:b7: 94:16:35:0a:c7:d1:65:8b:1f:6c:85:ab:3f:f0:ef:c1:94:fa: 61:d6:66:be:82:81:9f:37:55:0f:4f:4b:ba:40:34:d2:96:9e: f4:15:92:df:17:a7:ce:77:0d:8d:1a:af:d2:5a:f3:34:c6:9e: f5:d1:cf:b1:31:2f:2f:36:36:d2:fb:9b:3d:a4:17:96:03:2f: d2:19:d0:9b:53:03:92:4f:86:22:99:68:13:4c:71:c6:d1:89: c0:11:5f:79:ea:53:59:96:a8:c5:5f:1d:b9:19:3f:ce:59:7f: 6f:f6:b2:4f:a6:f7:4f:b0:8d:5e:97:dd:62:5e:72:2b:be:80: 6a:26:b3:32 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElVKVQZACQbDBEaezgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk Yzc1YTRjODQtZDZmMi00YjhmLTg0MTgtNDhjNDgyZGZhYjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7u/9bRgBTHLm4oyjUAokm/LDKxA2NLmjU6o DXQKS4gyQ+Uy+P+LwgUHmJzOJES4RIT6o0mzmLneQziXlqR64o7ezsQREZI3krcJ BXL+t25rvY5juNMCZbnw2B4XxrnV5AuW5wE3SzUKI1ACcO1IJYJwFLpJAenyRqzu OOjV28RW6gXJcYnhLNd/Gm42V80uHPy9nDUAlJuK1q8Meb+ZnpgjhrkoADfvmwen RWJBQd20ALOxP/6NbjUVRsmOtWGiUSGnMleBJSSIq+UL5bJFOvG9JcFf3BQvgCGT Fo/Mr78F3OgzEFvY2BT7mifAkj+Us7RlRQ+jqmqhI4j/A7FRCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF7MR8j8ob+D/rAjAwSCDuhXWufqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvYzYyNWZkNzItMDM3ZC0z NGUwLWFjYjMtM2RiMDg2YTZhOGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ7wBBl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHCAfEgfkPbNZI33GD6c4yjmkvSzgt3Sef6oTlALJTrXc4d4Aa6f hL9MAXG5HF3URivcMwv9an7efKX8LhzaY6yutYpHj0EcVO0dU7yIMGTjwFamsYnR Tuy0FA5ARWID1VIMvGOxM3k5GL6ZPh8bG4PXQdxGIySnNVKcmEX2t5QWNQrH0WWL H2yFqz/w78GU+mHWZr6CgZ83VQ9PS7pANNKWnvQVkt8Xp853DY0ar9Ja8zTGnvXR z7ExLy82NtL7mz2kF5YDL9IZ0JtTA5JPhiKZaBNMccbRicARX3nqU1mWqMVfHbkZ P85Zf2/2sk+m90+wjV6X3WJeciu+gGomszI= -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:18 2025 by rpki-client