$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/1a27f483-55e2-3798-a805-046502b1533b.roa File: 1a27f483-55e2-3798-a805-046502b1533b.roa (raw, json) Hash identifier: 4T9EIaF7jOw9gjretG8C2tlG0i/STWM0vQPUyLCaVuA= Subject key identifier: 92:A4:20:06:2F:D5:9C:39:11:D8:DF:19:D9:F0:22:4F:A5:23:EE:48 Certificate issuer: /CN=c0094aab-7ad1-4889-853f-ce946552206b Certificate serial: 010D0C9F43285849955F23FB3D60B5462A90B040 Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/1a27f483-55e2-3798-a805-046502b1533b.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 198949 IP address blocks: 2001:420::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:23:fb:3d:60:b5:46:2a:90:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=c880b735-9c78-4a46-8f76-da9833df3362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5d:29:cc:f0:9b:5e:7f:64:e5:a2:0c:39:ea: 80:e2:ca:2d:8f:23:74:08:f8:81:65:cf:bb:46:22: 60:b2:82:8a:f8:fe:03:1b:6a:8b:b9:fe:b7:6d:89: 18:15:9f:09:5b:b0:42:42:de:30:d7:e3:31:c8:b4: 89:e1:d4:f5:6a:63:5f:9c:b1:66:ce:6e:cf:bc:52: 85:da:56:da:24:2d:15:01:2f:8d:7f:71:18:1a:cf: 0d:05:8b:81:11:4f:0e:76:81:de:ec:89:9e:b2:ab: 50:3e:b3:83:de:bb:b0:9c:8a:f9:cb:ed:d6:39:89: 1e:39:0e:b9:f5:bf:4a:7a:3f:7b:d9:28:f6:84:59: ca:c5:23:d1:eb:6a:a1:84:4b:0e:bb:40:cf:23:f8: 06:0f:2c:ce:1e:5b:14:c0:11:c9:0f:c4:bb:36:04: e5:d2:b6:a4:0d:dd:2c:2f:7e:59:e1:84:c5:b1:e2: d8:ec:85:3b:02:5c:2f:02:be:a6:2a:fb:d0:24:ca: 0f:89:54:0f:a1:9a:f8:6d:00:38:c7:cb:71:49:9d: cf:47:a4:29:16:27:f0:09:a4:77:6b:ae:fa:fe:1c: 1c:95:8c:03:e7:a8:02:5c:27:b6:e1:97:1a:94:f6: ac:cd:a0:30:5e:68:96:b8:a8:9f:57:1a:6b:1d:0f: 01:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A4:20:06:2F:D5:9C:39:11:D8:DF:19:D9:F0:22:4F:A5:23:EE:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/1a27f483-55e2-3798-a805-046502b1533b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl X509v3 Authority Key Identifier: keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer sbgp-ipAddrBlock: critical IPv6: 2001:420::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:c4:d7:9b:9f:e9:69:27:d5:58:16:68:c5:5d:9c:80:ff:7e: 2d:f7:42:d6:6c:6a:1c:fe:8f:db:78:d3:66:87:36:71:d3:96: b0:0b:f3:66:14:73:c5:69:16:81:18:cd:81:c7:f5:03:a6:d6: 91:58:21:bc:2e:10:54:d3:e3:3f:00:b9:be:44:3d:24:b1:44: b2:dc:bd:0b:d8:8a:0c:f6:49:09:85:72:f3:ed:f4:57:5d:63: 01:53:98:e9:e3:88:9c:0d:fe:8a:2e:9e:c4:48:91:29:4a:d5: aa:dd:c5:b6:24:23:b1:73:64:8e:f0:2f:7a:dd:a2:b8:c8:d7: 37:e9:59:da:62:67:9e:10:e9:d6:2f:01:ae:67:fd:8e:f3:94: 73:c3:c9:e5:ff:e6:fd:e1:b6:d6:34:bc:7e:d7:64:c0:4e:ba: e5:34:2a:a4:2c:3d:31:06:43:be:79:34:14:c8:d1:9c:14:08: c1:a5:1b:65:08:56:2b:6f:1e:8d:d2:81:00:52:01:5f:de:7f: 41:ea:0e:36:ae:95:bc:f3:e9:22:8f:b3:8c:c6:fc:dc:b0:ea: c7:87:e1:e3:11:73:b8:bf:52:31:43:fb:8a:b9:84:0a:67:88: 09:5d:ad:5d:77:28:cf:e5:e6:ac:0f:f6:f7:48:a1:ed:99:93: df:df:cd:b0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmVXyP7PWC1RiqQsEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAwOTRhYWItN2FkMS00ODg5LTg1M2YtY2U5NDY1NTIy MDZiMB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk Yzg4MGI3MzUtOWM3OC00YTQ2LThmNzYtZGE5ODMzZGYzMzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl0pzPCbXn9k5aIMOeqA4sotjyN0CPiBZc+7 RiJgsoKK+P4DG2qLuf63bYkYFZ8JW7BCQt4w1+MxyLSJ4dT1amNfnLFmzm7PvFKF 2lbaJC0VAS+Nf3EYGs8NBYuBEU8OdoHe7ImesqtQPrOD3ruwnIr5y+3WOYkeOQ65 9b9Kej972Sj2hFnKxSPR62qhhEsOu0DPI/gGDyzOHlsUwBHJD8S7NgTl0rakDd0s L35Z4YTFseLY7IU7AlwvAr6mKvvQJMoPiVQPoZr4bQA4x8txSZ3PR6QpFifwCaR3 a676/hwclYwD56gCXCe24ZcalPaszaAwXmiWuKifVxprHQ8BzQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJKkIAYv1Zw5EdjfGdnwIk+lI+5IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5 NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0NjU1MjIwNmIvMWEyN2Y0ODMtNTVlMi0z Nzk4LWE4MDUtMDQ2NTAyYjE1MzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzAwOTRhYWItN2FkMS00ODg5LTg1 M2YtY2U5NDY1NTIyMDZiL2MwMDk0YWFiLTdhZDEtNDg4OS04NTNmLWNlOTQ2NTUy MjA2Yi5jcmwwHwYDVR0jBBgwFoAUj3vgUXfanU4hkDXXgc3toQDHub4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0 NjU1MjIwNmIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEEIDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBoxNebn+lpJ9VYFmjFXZyA/34t90LWbGoc/o/beNNmhzZx05awC/Nm FHPFaRaBGM2Bx/UDptaRWCG8LhBU0+M/ALm+RD0ksUSy3L0L2IoM9kkJhXLz7fRX XWMBU5jp44icDf6KLp7ESJEpStWq3cW2JCOxc2SO8C963aK4yNc36VnaYmeeEOnW LwGuZ/2O85Rzw8nl/+b94bbWNLx+12TATrrlNCqkLD0xBkO+eTQUyNGcFAjBpRtl CFYrbx6N0oEAUgFf3n9B6g42rpW88+kij7OMxvzcsOrHh+HjEXO4v1IxQ/uKuYQK Z4gJXa1ddyjP5easD/b3SKHtmZPf382w -----END CERTIFICATE-----Generated at Mon Apr 28 00:03:12 2025 by rpki-client