$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/efdfb3d4-cefa-3c61-8eee-5d71708406e6.roa File: efdfb3d4-cefa-3c61-8eee-5d71708406e6.roa (raw, json) Hash identifier: uvSTzjBTMiLIdb+y60ldq7v08/HXmYIZ2Ka6ECBuvpo= Subject key identifier: 92:27:43:27:5B:4B:4C:97:9C:19:FA:B8:8A:F9:E7:CB:C3:5A:77:55 Certificate issuer: /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Certificate serial: 010D0C9F432858495EEEED181EE5F3D99B823C80 Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/efdfb3d4-cefa-3c61-8eee-5d71708406e6.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 16509 IP address blocks: 2607:dd40:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:ed:18:1e:e5:f3:d9:9b:82:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=5f9b658f-d027-4931-8aa5-b010dac732aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:13:c5:34:a0:de:3f:b9:3b:93:57:28:2c:6d: e5:04:2d:cb:38:f1:46:58:41:25:b2:79:3f:1e:96: 27:36:9f:d6:f1:c4:2f:69:f1:db:33:db:fa:f4:6f: fa:50:bf:cd:d6:bd:dd:d9:2c:8c:6c:e0:b9:c4:5e: 01:1f:25:c9:1a:53:fa:8f:4f:cc:c5:d5:29:78:76: f0:fe:6d:88:ae:70:12:f7:3d:2a:ee:46:bd:9a:75: 47:f2:a3:2d:57:d6:63:51:d3:5c:df:d1:bc:e0:98: 89:08:64:1f:04:07:a6:20:13:58:38:c1:12:b4:84: 5e:7c:9d:a2:6d:4e:dd:16:8d:73:1b:3e:5f:91:07: 07:92:55:d1:f5:da:9d:6f:e3:4d:09:b4:f0:36:56: 69:13:1b:87:76:91:ce:9a:58:c7:a3:b3:40:a5:6b: 85:a0:5d:d5:3a:f7:25:90:66:a9:88:07:19:20:e9: 1d:96:55:98:aa:2f:a4:84:12:03:8a:cd:ac:75:0b: dc:c9:d4:0a:f1:47:c9:3e:fa:86:10:96:e9:ff:a6: c8:d8:43:a1:ce:c6:08:0f:7b:a8:86:ee:57:4f:02: f5:ba:15:68:aa:2b:d2:91:40:f3:62:c6:82:4c:17: 14:ae:42:8c:0d:5e:05:d6:b8:df:e8:63:ea:55:17: 19:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:27:43:27:5B:4B:4C:97:9C:19:FA:B8:8A:F9:E7:CB:C3:5A:77:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/efdfb3d4-cefa-3c61-8eee-5d71708406e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl X509v3 Authority Key Identifier: keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer sbgp-ipAddrBlock: critical IPv6: 2607:dd40:1000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:1b:5d:ea:6e:b0:f1:22:07:9e:78:ce:cb:80:b9:5b:fd:3f: d7:ca:da:0a:70:d3:8e:55:6e:eb:89:ba:88:dd:1a:b7:c1:f1: 44:67:98:63:19:0c:0a:92:ce:6d:eb:f4:12:65:89:21:4f:0b: 9f:4d:7a:30:9f:a1:26:19:e4:52:18:54:35:2e:13:eb:05:2e: 2f:89:74:29:07:65:11:d4:30:43:fe:35:48:75:41:fa:17:f1: 0f:4e:20:07:8a:b4:57:d6:1a:c4:41:e8:3d:e5:c2:0b:de:d3: 0f:1b:c8:e4:cd:c1:12:ec:69:e9:0e:86:2d:e2:c2:98:ca:44: 63:73:53:88:6e:e9:df:27:df:ca:f7:6b:37:54:31:2e:83:52: 82:ad:e3:82:9a:5f:94:ed:39:f7:b6:2c:4f:d6:e2:d9:be:5a: 2c:36:f8:a7:30:db:36:6a:04:f2:58:3b:39:d6:60:2e:5e:38: 82:ef:92:77:e2:f4:47:ba:eb:45:fd:10:8a:a4:70:d3:5d:b0: 50:e6:c2:bb:01:1d:2a:d5:c2:36:78:e7:e6:2c:4f:9f:aa:00: f4:67:74:84:46:6e:ab:84:36:1c:fc:30:d6:57:0d:cd:e3:bd: 70:4f:67:0f:22:17:aa:eb:32:5c:29:84:93:5b:70:ef:55:69: 3e:9e:8e:cd -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEle7u0YHuXz2ZuCPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkM2MzMDQtNjE5ZC00ZTZkLWFlZDUtOWUyNTE2NWNi YzczMB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk NWY5YjY1OGYtZDAyNy00OTMxLThhYTUtYjAxMGRhYzczMmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRPFNKDeP7k7k1coLG3lBC3LOPFGWEElsnk/ HpYnNp/W8cQvafHbM9v69G/6UL/N1r3d2SyMbOC5xF4BHyXJGlP6j0/MxdUpeHbw /m2IrnAS9z0q7ka9mnVH8qMtV9ZjUdNc39G84JiJCGQfBAemIBNYOMEStIRefJ2i bU7dFo1zGz5fkQcHklXR9dqdb+NNCbTwNlZpExuHdpHOmljHo7NApWuFoF3VOvcl kGapiAcZIOkdllWYqi+khBIDis2sdQvcydQK8UfJPvqGEJbp/6bI2EOhzsYID3uo hu5XTwL1uhVoqivSkUDzYsaCTBcUrkKMDV4F1rjf6GPqVRcZgwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJInQydbS0yXnBn6uIr558vDWndVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zM2Qz YzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1MTY1Y2JjNzMvZWZkZmIzZDQtY2VmYS0z YzYxLThlZWUtNWQ3MTcwODQwNmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzNkM2MzMDQtNjE5ZC00ZTZkLWFl ZDUtOWUyNTE2NWNiYzczLzMzZDNjMzA0LTYxOWQtNGU2ZC1hZWQ1LTllMjUxNjVj YmM3My5jcmwwHwYDVR0jBBgwFoAUjkoNtMfpM0cLNL0AOGQeSnjs4mowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zM2QzYzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1 MTY1Y2JjNzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgfdQBAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAfxtd6m6w8SIHnnjOy4C5W/0/18raCnDTjlVu64m6iN0at8HxRGeY YxkMCpLObev0EmWJIU8Ln016MJ+hJhnkUhhUNS4T6wUuL4l0KQdlEdQwQ/41SHVB +hfxD04gB4q0V9YaxEHoPeXCC97TDxvI5M3BEuxp6Q6GLeLCmMpEY3NTiG7p3yff yvdrN1QxLoNSgq3jgppflO0597YsT9bi2b5aLDb4pzDbNmoE8lg7OdZgLl44gu+S d+L0R7rrRf0QiqRw012wUObCuwEdKtXCNnjn5ixPn6oA9Gd0hEZuq4Q2HPww1lcN zeO9cE9nDyIXqusyXCmEk1tw71VpPp6OzQ== -----END CERTIFICATE-----Generated at Sat Apr 26 16:37:39 2025 by rpki-client