$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/9383c5fa-66ba-3e20-8d2f-3409e291cf77.roa File: 9383c5fa-66ba-3e20-8d2f-3409e291cf77.roa (raw, json) Hash identifier: fMgj14NiJmJaqEZekf9+nM3JziZkOK6SXezBn8WQ5qY= Subject key identifier: B0:1A:D7:C3:9A:1A:B9:A8:C9:8A:1C:FB:99:9B:E6:56:F2:36:BB:8A Certificate issuer: /CN=cba86acd-9af7-450a-ac5c-6c872671a7a3 Certificate serial: 010D0C9F43285849AD1A0648939075E524F79B60 Authority key identifier: AE:34:8C:DA:F6:97:BA:1F:63:8D:6B:B6:67:AD:27:A3:25:6F:1E:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/9383c5fa-66ba-3e20-8d2f-3409e291cf77.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 36222 IP address blocks: 2604:d9c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:06:48:93:90:75:e5:24:f7:9b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cba86acd-9af7-450a-ac5c-6c872671a7a3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=01853eba-1735-4c23-9f12-b7284a809678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fa:40:f5:d3:15:c1:7e:51:9b:8c:91:53:fd: 76:c2:91:b7:78:40:bb:b3:51:0b:f6:5a:5f:03:0d: d1:da:d8:e5:a8:1e:31:4b:13:e0:1f:aa:2e:3d:72: 05:8d:f4:89:83:f3:b4:ab:c6:09:98:15:58:5c:bc: 4c:d7:bd:75:ca:36:c6:ac:1c:d1:ea:f9:9a:17:2c: 5c:42:41:23:01:3e:8d:0c:ff:3e:d0:ce:87:d7:c0: a5:7f:53:6c:98:16:c0:ac:6f:b4:da:4b:ba:f6:ee: 31:ba:bd:be:42:f8:dc:87:83:c5:f1:96:73:35:f5: 61:80:5d:89:a7:3f:b8:dc:87:25:9a:51:5f:90:1d: 53:ab:62:63:b3:7b:43:e8:e1:db:03:42:64:cd:c3: bd:01:0b:df:0c:4a:2d:92:68:82:5f:1e:f3:d2:cc: b6:4e:69:7a:40:7a:33:26:79:44:99:de:08:9b:6b: d1:e4:05:08:91:69:97:14:12:70:43:37:1d:fb:4b: d2:60:a4:b0:78:a7:67:90:61:bc:01:8c:97:ff:15: 26:d6:5d:20:12:b2:bc:a9:e6:e4:56:be:5a:76:1f: 88:01:62:61:fe:5d:b7:70:05:4e:ea:06:f7:be:07: ab:11:5a:11:99:b5:69:82:3c:b5:5f:81:6b:6f:04: 86:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1A:D7:C3:9A:1A:B9:A8:C9:8A:1C:FB:99:9B:E6:56:F2:36:BB:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/9383c5fa-66ba-3e20-8d2f-3409e291cf77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.crl X509v3 Authority Key Identifier: keyid:AE:34:8C:DA:F6:97:BA:1F:63:8D:6B:B6:67:AD:27:A3:25:6F:1E:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer sbgp-ipAddrBlock: critical IPv6: 2604:d9c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:51:a8:a4:6e:ab:ca:4c:06:82:73:c5:77:89:c4:6c:e6:ac: 2d:bf:48:5a:31:cf:00:31:1e:8e:b3:ad:ff:1f:f5:75:a3:6b: 16:90:4a:9d:38:4e:88:a5:e8:8e:35:eb:48:cc:f9:0c:d6:f7: b4:8e:74:44:69:89:41:66:c8:97:89:00:be:f7:3c:b0:fb:af: 2c:d2:2d:7c:a5:40:fc:0f:85:17:b9:f7:87:b7:bb:9e:4f:74: 05:4a:a8:96:fc:9f:85:8e:c5:1c:d8:8a:ff:08:ca:29:cf:5b: 6f:79:54:f0:02:11:b2:f9:8f:01:13:51:59:07:73:a6:6e:a8: 48:51:7a:d5:86:5f:0b:58:71:9b:a8:83:99:cd:25:25:c9:3d: e3:c9:b7:45:55:13:d9:88:49:55:64:21:92:55:4f:2d:78:43: d2:b2:4c:29:36:2d:a4:25:e9:6e:01:9f:82:bc:68:45:3a:51: 30:a5:13:5b:10:5b:01:93:50:c4:d4:be:2e:65:17:c0:94:ac: 20:ad:53:a1:9f:bc:80:8e:de:2b:3e:d1:47:60:a1:cc:2c:4c: 3f:ac:68:d9:6a:5a:46:bf:1a:72:95:d5:37:56:38:17:36:7e: 8b:c9:ad:9b:a9:ab:60:5c:9f:58:26:c8:06:19:25:23:15:ec: 9d:46:48:94 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtGgZIk5B15ST3m2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JhODZhY2QtOWFmNy00NTBhLWFjNWMtNmM4NzI2NzFh N2EzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MDE4NTNlYmEtMTczNS00YzIzLTlmMTItYjcyODRhODA5Njc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vpA9dMVwX5Rm4yRU/12wpG3eEC7s1EL9lpf Aw3R2tjlqB4xSxPgH6ouPXIFjfSJg/O0q8YJmBVYXLxM1711yjbGrBzR6vmaFyxc QkEjAT6NDP8+0M6H18Clf1NsmBbArG+02ku69u4xur2+Qvjch4PF8ZZzNfVhgF2J pz+43IclmlFfkB1Tq2Jjs3tD6OHbA0JkzcO9AQvfDEotkmiCXx7z0sy2Tml6QHoz JnlEmd4Im2vR5AUIkWmXFBJwQzcd+0vSYKSweKdnkGG8AYyX/xUm1l0gErK8qebk Vr5adh+IAWJh/l23cAVO6gb3vgerEVoRmbVpgjy1X4FrbwSGlQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLAa18OaGrmoyYoc+5mb5lbyNruKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYmE4 NmFjZC05YWY3LTQ1MGEtYWM1Yy02Yzg3MjY3MWE3YTMvOTM4M2M1ZmEtNjZiYS0z ZTIwLThkMmYtMzQwOWUyOTFjZjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2JhODZhY2QtOWFmNy00NTBhLWFj NWMtNmM4NzI2NzFhN2EzL2NiYTg2YWNkLTlhZjctNDUwYS1hYzVjLTZjODcyNjcx YTdhMy5jcmwwHwYDVR0jBBgwFoAUrjSM2vaXuh9jjWu2Z60noyVvHiIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYmE4NmFjZC05YWY3LTQ1MGEtYWM1Yy02Yzg3 MjY3MWE3YTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTZwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCAUaikbqvKTAaCc8V3icRs5qwtv0haMc8AMR6Os63/H/V1o2sWkEqd OE6IpeiONetIzPkM1ve0jnREaYlBZsiXiQC+9zyw+68s0i18pUD8D4UXufeHt7ue T3QFSqiW/J+FjsUc2Ir/CMopz1tveVTwAhGy+Y8BE1FZB3OmbqhIUXrVhl8LWHGb qIOZzSUlyT3jybdFVRPZiElVZCGSVU8teEPSskwpNi2kJeluAZ+CvGhFOlEwpRNb EFsBk1DE1L4uZRfAlKwgrVOhn7yAjt4rPtFHYKHMLEw/rGjZalpGvxpyldU3VjgX Nn6Lya2bqatgXJ9YJsgGGSUjFeydRkiU -----END CERTIFICATE-----Generated at Tue Apr 29 08:12:26 2025 by rpki-client