$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/022d5c6a-7e45-3587-8084-f8af25ed8817.roa File: 022d5c6a-7e45-3587-8084-f8af25ed8817.roa (raw, json) Hash identifier: R9jO6APlY9qIrlzxvXYaUZ6sFCrx4bX24YTt3BDMV7k= Subject key identifier: 1D:D3:6B:31:58:D8:3C:2A:B9:EE:9F:5B:FB:F1:31:92:D5:06:0B:11 Certificate issuer: /CN=a9694c21-178c-4e7b-9e78-08bc978c5e6f Certificate serial: 010D0C9F432858498CFF15F187DBFA0A69FD9600 Authority key identifier: 84:39:81:4F:67:A4:F0:69:AB:6B:59:7D:A3:EA:1C:66:EE:44:88:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/022d5c6a-7e45-3587-8084-f8af25ed8817.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 32815 IP address blocks: 2607:e140::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/a9694c21-178c-4e7b-9e78-08bc978c5e6f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/a9694c21-178c-4e7b-9e78-08bc978c5e6f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:15:f1:87:db:fa:0a:69:fd:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9694c21-178c-4e7b-9e78-08bc978c5e6f Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=ff47f31b-a320-4ec2-a587-46667b4dd195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:25:95:51:09:d3:f9:f8:ef:1b:1b:48:2a:ad: 2e:92:dd:d2:9d:d0:91:85:7c:bf:5f:66:c9:bf:a9: 3b:7e:2a:9e:56:21:d5:bf:df:bc:c2:bc:c3:f8:68: 33:bc:68:d1:f7:3d:43:7f:c6:c5:d8:fa:06:92:cb: 40:6e:ca:5a:0b:6e:0a:06:7a:81:3f:49:61:4b:a2: bb:f0:e2:66:39:6d:cd:d7:15:86:e4:70:67:13:3a: 79:75:0d:ce:74:1f:32:e0:17:88:af:d5:eb:f5:d4: 57:a7:05:69:57:9b:43:c1:d3:90:19:fa:61:74:48: f3:56:32:9a:d5:ef:da:7d:45:91:17:c1:2e:26:12: f1:d0:de:d6:36:75:86:c4:35:90:26:f0:7b:c3:67: f5:4f:b6:57:3f:bb:41:81:ae:68:54:e0:13:f5:36: 97:75:7c:b7:c8:00:0f:fd:9c:a8:f2:d2:f9:5c:62: cb:2d:57:ed:ca:2d:26:11:64:94:f8:46:3b:42:2e: 77:91:f6:b7:ca:0c:80:76:9f:e8:d0:65:7f:23:a8: 2d:9b:d2:bd:4a:4d:55:28:69:c0:40:76:19:e4:5c: 5a:b5:13:bd:19:1c:f8:cb:d1:29:02:39:b7:64:ce: 75:5f:6c:09:b4:f5:ea:2a:46:45:83:75:22:e8:86: b1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D3:6B:31:58:D8:3C:2A:B9:EE:9F:5B:FB:F1:31:92:D5:06:0B:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/022d5c6a-7e45-3587-8084-f8af25ed8817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f/a9694c21-178c-4e7b-9e78-08bc978c5e6f.crl X509v3 Authority Key Identifier: keyid:84:39:81:4F:67:A4:F0:69:AB:6B:59:7D:A3:EA:1C:66:EE:44:88:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a9694c21-178c-4e7b-9e78-08bc978c5e6f.cer sbgp-ipAddrBlock: critical IPv6: 2607:e140::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:11:8b:45:1c:3c:28:de:5d:d8:55:4b:ec:f3:7f:c1:51:72: 69:63:d8:ca:04:9b:97:04:1d:bb:6e:e8:9e:ac:e4:3b:f3:b2: ac:91:70:65:17:09:69:05:07:d2:aa:42:a6:7c:6e:f7:09:ad: d4:05:8c:69:9e:af:21:15:30:cb:a4:37:98:3a:dd:6f:5d:45: 84:86:3d:72:2f:53:47:b4:be:4f:28:73:95:32:50:b3:e3:e5: fb:e9:45:7c:cc:7a:49:7c:20:3e:98:6c:6f:7c:6c:a6:2e:69: a4:f2:b9:09:48:27:b5:79:1a:af:15:ef:01:de:a8:c4:7e:89: f4:78:77:21:33:ce:de:50:d5:9d:4f:86:17:8c:23:7a:8c:ed: 1f:87:bf:c8:47:61:23:21:b6:49:5b:42:9c:32:7d:74:a5:8c: 15:0a:f9:fa:01:40:4e:90:06:a4:f9:83:0f:0c:3f:3c:5f:e9: ca:0d:5f:bd:67:2f:0e:0f:ee:75:49:f2:b8:4b:c2:7d:9d:f6: d5:79:26:b4:b8:7b:59:4f:b3:cd:64:8e:ad:f7:0b:fa:11:c5: 26:97:64:d3:01:9f:63:3c:4f:78:e3:12:aa:4b:28:b3:c0:78: 66:f9:fa:f3:42:f0:02:c9:3c:48:ba:c9:35:4e:e5:b2:66:74: c3:ae:23:66 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmM/xXxh9v6Cmn9lgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk2OTRjMjEtMTc4Yy00ZTdiLTllNzgtMDhiYzk3OGM1 ZTZmMB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk ZmY0N2YzMWItYTMyMC00ZWMyLWE1ODctNDY2NjdiNGRkMTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SWVUQnT+fjvGxtIKq0ukt3SndCRhXy/X2bJ v6k7fiqeViHVv9+8wrzD+GgzvGjR9z1Df8bF2PoGkstAbspaC24KBnqBP0lhS6K7 8OJmOW3N1xWG5HBnEzp5dQ3OdB8y4BeIr9Xr9dRXpwVpV5tDwdOQGfphdEjzVjKa 1e/afUWRF8EuJhLx0N7WNnWGxDWQJvB7w2f1T7ZXP7tBga5oVOAT9TaXdXy3yAAP /Zyo8tL5XGLLLVftyi0mEWSU+EY7Qi53kfa3ygyAdp/o0GV/I6gtm9K9Sk1VKGnA QHYZ5FxatRO9GRz4y9EpAjm3ZM51X2wJtPXqKkZFg3Ui6IaxVwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB3TazFY2Dwque6fW/vxMZLVBgsRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hOTY5 NGMyMS0xNzhjLTRlN2ItOWU3OC0wOGJjOTc4YzVlNmYvMDIyZDVjNmEtN2U0NS0z NTg3LTgwODQtZjhhZjI1ZWQ4ODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTk2OTRjMjEtMTc4Yy00ZTdiLTll NzgtMDhiYzk3OGM1ZTZmL2E5Njk0YzIxLTE3OGMtNGU3Yi05ZTc4LTA4YmM5Nzhj NWU2Zi5jcmwwHwYDVR0jBBgwFoAUhDmBT2ek8Gmra1l9o+ocZu5EiB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hOTY5NGMyMS0xNzhjLTRlN2ItOWU3OC0wOGJj OTc4YzVlNmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfhQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBjEYtFHDwo3l3YVUvs83/BUXJpY9jKBJuXBB27buierOQ787KskXBl FwlpBQfSqkKmfG73Ca3UBYxpnq8hFTDLpDeYOt1vXUWEhj1yL1NHtL5PKHOVMlCz 4+X76UV8zHpJfCA+mGxvfGymLmmk8rkJSCe1eRqvFe8B3qjEfon0eHchM87eUNWd T4YXjCN6jO0fh7/IR2EjIbZJW0KcMn10pYwVCvn6AUBOkAak+YMPDD88X+nKDV+9 Zy8OD+51SfK4S8J9nfbVeSa0uHtZT7PNZI6t9wv6EcUml2TTAZ9jPE944xKqSyiz wHhm+frzQvACyTxIusk1TuWyZnTDriNm -----END CERTIFICATE-----Generated at Tue Apr 29 00:36:07 2025 by rpki-client