$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/81f40de9-e302-3803-82c7-d50a229618c2.roa File: 81f40de9-e302-3803-82c7-d50a229618c2.roa (raw, json) Hash identifier: EbSsTTuyN4rQ8ChS7gZm3+b+fOLtOdjcsZMSrRwgMLI= Subject key identifier: 73:A8:B8:DC:31:BD:8A:30:B9:DC:31:06:F0:D3:46:A0:33:88:DA:D8 Certificate issuer: /CN=cbe5a201-74d3-4759-8d65-120a9abc8eaa Certificate serial: 010D0C9F43285849350EAE96239C85C8A84ECE58 Authority key identifier: DF:CE:26:E8:A1:07:21:33:BF:11:9C:AA:53:94:D3:08:BE:14:55:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/81f40de9-e302-3803-82c7-d50a229618c2.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 399989 IP address blocks: 2604:3540::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/cbe5a201-74d3-4759-8d65-120a9abc8eaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/cbe5a201-74d3-4759-8d65-120a9abc8eaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:ae:96:23:9c:85:c8:a8:4e:ce:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbe5a201-74d3-4759-8d65-120a9abc8eaa Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=09b74956-3fe2-4de8-a671-c29ccce5a3c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:be:23:26:1b:82:5e:dd:65:b0:ac:56:81:02: d9:c9:fd:27:2a:60:a9:ed:63:42:6e:ea:5f:5e:23: e3:98:04:f4:aa:da:45:4a:d3:4f:ee:ce:97:b2:4d: ac:74:90:df:db:21:01:73:a2:be:74:43:8c:25:c4: e4:d9:05:2e:9e:ba:6a:92:f1:ae:7e:08:77:c1:df: 34:c9:85:c8:47:ce:d2:b9:06:56:63:b9:d9:6e:6d: 4b:36:07:20:06:9d:3e:4b:0f:ad:73:d6:87:77:03: a2:1b:ed:69:06:4a:2e:22:e3:71:9e:c4:64:5c:30: 7f:f5:1d:81:bc:3b:03:2d:69:11:90:65:46:35:8a: a9:68:eb:0d:70:08:b8:c0:38:91:a8:75:8b:20:07: ff:fd:d0:cc:0d:d4:07:93:c1:fc:46:dd:6a:4b:1f: 95:ec:ac:86:be:17:06:99:6a:76:70:d5:a4:ea:ed: f6:c5:87:97:4b:e2:a9:a3:83:d6:e5:b4:1c:71:41: 1b:b3:c9:58:e5:a9:93:10:08:d5:85:86:aa:2d:3a: 8e:9c:67:b7:00:98:c2:e6:f2:61:f2:70:cc:86:30: 1c:b3:31:73:14:55:f0:00:21:f8:5a:96:2a:b0:ab: 9c:37:84:58:34:ab:de:b2:78:29:b7:15:9f:88:55: 02:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A8:B8:DC:31:BD:8A:30:B9:DC:31:06:F0:D3:46:A0:33:88:DA:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/81f40de9-e302-3803-82c7-d50a229618c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa/cbe5a201-74d3-4759-8d65-120a9abc8eaa.crl X509v3 Authority Key Identifier: keyid:DF:CE:26:E8:A1:07:21:33:BF:11:9C:AA:53:94:D3:08:BE:14:55:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cbe5a201-74d3-4759-8d65-120a9abc8eaa.cer sbgp-ipAddrBlock: critical IPv6: 2604:3540::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:48:23:b1:dc:bf:c7:dc:76:83:73:e2:40:87:1c:f5:42:97: 7a:52:6e:d5:60:a4:1d:36:d1:c3:a1:85:29:34:9f:e2:31:8d: 3e:9f:2e:76:b6:96:5a:6d:35:17:80:2e:09:22:c5:28:55:46: c4:7d:78:ca:dc:52:dd:5f:31:d0:73:e5:46:e2:9f:02:56:81: dd:c8:a5:44:14:d3:25:41:5c:b7:d6:30:1b:83:bd:97:ea:a9: cf:5a:67:46:ad:b7:ef:38:07:49:d6:5b:4c:0a:12:89:91:20: ec:c1:f0:56:d0:fa:be:12:b6:0a:ca:76:0a:94:9b:59:ba:15: 3a:3f:c9:9b:4d:c5:a8:d8:d9:07:e1:1a:65:a2:b1:17:e0:de: 6e:f7:bb:bb:75:82:f1:07:f7:3a:d5:ac:7f:37:1b:77:54:39: 60:16:04:8f:22:35:26:74:77:d7:b4:e5:19:26:2a:e7:d8:30: c7:21:d2:a6:4f:59:f5:53:aa:04:eb:a1:f7:da:5c:43:00:85: e7:b0:e5:3c:d0:9c:b9:a0:e0:2c:52:56:03:16:22:bc:60:2a: 7c:18:9b:a3:4b:4d:08:ee:d8:38:bd:9d:dc:3a:ad:b3:1c:1b: cf:e6:f6:12:62:bf:2f:90:8b:39:a9:8e:e2:3c:8a:cb:62:2c: 5d:60:de:7d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEk1Dq6WI5yFyKhOzlgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JlNWEyMDEtNzRkMy00NzU5LThkNjUtMTIwYTlhYmM4 ZWFhMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk MDliNzQ5NTYtM2ZlMi00ZGU4LWE2NzEtYzI5Y2NjZTVhM2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjb4jJhuCXt1lsKxWgQLZyf0nKmCp7WNCbupf XiPjmAT0qtpFStNP7s6Xsk2sdJDf2yEBc6K+dEOMJcTk2QUunrpqkvGufgh3wd80 yYXIR87SuQZWY7nZbm1LNgcgBp0+Sw+tc9aHdwOiG+1pBkouIuNxnsRkXDB/9R2B vDsDLWkRkGVGNYqpaOsNcAi4wDiRqHWLIAf//dDMDdQHk8H8Rt1qSx+V7KyGvhcG mWp2cNWk6u32xYeXS+Kpo4PW5bQccUEbs8lY5amTEAjVhYaqLTqOnGe3AJjC5vJh 8nDMhjAcszFzFFXwACH4WpYqsKucN4RYNKvesngptxWfiFUCOwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHOouNwxvYowudwxBvDTRqAziNrYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYmU1 YTIwMS03NGQzLTQ3NTktOGQ2NS0xMjBhOWFiYzhlYWEvODFmNDBkZTktZTMwMi0z ODAzLTgyYzctZDUwYTIyOTYxOGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2JlNWEyMDEtNzRkMy00NzU5LThk NjUtMTIwYTlhYmM4ZWFhL2NiZTVhMjAxLTc0ZDMtNDc1OS04ZDY1LTEyMGE5YWJj OGVhYS5jcmwwHwYDVR0jBBgwFoAU384m6KEHITO/EZyqU5TTCL4UVXswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYmU1YTIwMS03NGQzLTQ3NTktOGQ2NS0xMjBh OWFiYzhlYWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgQ1QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQANSCOx3L/H3HaDc+JAhxz1Qpd6Um7VYKQdNtHDoYUpNJ/iMY0+ny52 tpZabTUXgC4JIsUoVUbEfXjK3FLdXzHQc+VG4p8CVoHdyKVEFNMlQVy31jAbg72X 6qnPWmdGrbfvOAdJ1ltMChKJkSDswfBW0Pq+ErYKynYKlJtZuhU6P8mbTcWo2NkH 4RplorEX4N5u97u7dYLxB/c61ax/Nxt3VDlgFgSPIjUmdHfXtOUZJirn2DDHIdKm T1n1U6oE66H32lxDAIXnsOU80Jy5oOAsUlYDFiK8YCp8GJujS00I7tg4vZ3cOq2z HBvP5vYSYr8vkIs5qY7iPIrLYixdYN59 -----END CERTIFICATE-----Generated at Sun Apr 27 09:11:25 2025 by rpki-client