$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/ba7664f1-2748-3772-a538-56d297826de2.roa File: ba7664f1-2748-3772-a538-56d297826de2.roa (raw, json) Hash identifier: nB7emZ/De1QvLpg+SdJD6NMgWsYECvGPyUBbDLLHHvQ= Subject key identifier: 4F:93:E2:C3:B3:03:7D:3A:57:63:56:31:D8:A6:0D:FA:57:71:B5:F7 Certificate issuer: /CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88 Certificate serial: 010D0C9F432858492D92ED057F1B5D97A344E840 Authority key identifier: 7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/ba7664f1-2748-3772-a538-56d297826de2.roa Signing time: Thu 13 Mar 2025 20:41:14 +0000 ROA not before: Thu 13 Mar 2025 20:41:14 +0000 ROA not after: Wed 11 Jun 2025 20:41:14 +0000 asID: 214609 IP address blocks: 2607:1c0:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2d:92:ed:05:7f:1b:5d:97:a3:44:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88 Validity Not Before: Mar 13 20:41:14 2025 GMT Not After : Jun 11 20:41:14 2025 GMT Subject: CN=027c4ba9-c2dc-4350-aaef-bfebd200afb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5d:67:25:41:c3:ae:08:f5:28:c1:53:3f:16: d7:4d:1e:6e:d4:b7:bb:30:0a:db:e6:b1:bc:43:d4: 89:05:77:04:30:1d:94:f2:6b:f9:47:55:01:1b:3f: b3:9c:9d:1a:48:8d:6f:04:d1:91:c6:e5:e5:7d:1f: 21:25:b6:0e:23:42:fe:d1:58:49:ce:39:c6:f3:14: 86:ad:0c:7f:cd:f3:bb:d5:03:71:36:77:92:87:2a: 81:de:e6:f1:a1:61:0a:be:1e:b9:f8:38:91:d3:73: bc:04:d9:b9:69:54:ec:22:7a:88:13:67:33:76:68: 4e:06:fc:36:95:7c:a5:5a:f7:c1:52:09:e9:27:4a: 83:3d:14:17:a5:61:f4:27:53:3c:cb:f6:97:32:23: db:46:e9:e3:51:23:e7:12:49:fb:fe:5a:ca:6b:38: da:9c:d9:54:4b:2b:1c:a8:fe:ac:e8:26:5e:70:1e: 7e:8d:31:db:ab:08:91:96:dd:71:15:7f:26:85:6e: 3b:73:ce:da:53:dd:f6:36:da:15:56:86:77:d8:c7: a9:06:b0:f7:7c:5b:d3:d4:e9:35:ac:66:5b:9a:a3: 3f:58:63:2d:eb:e6:58:a4:0b:9e:48:a7:8b:5e:4a: cf:4c:94:5a:73:85:d9:67:e0:0f:39:cb:a1:cd:71: 43:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:93:E2:C3:B3:03:7D:3A:57:63:56:31:D8:A6:0D:FA:57:71:B5:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/ba7664f1-2748-3772-a538-56d297826de2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl X509v3 Authority Key Identifier: keyid:7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer sbgp-ipAddrBlock: critical IPv6: 2607:1c0:2000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:7c:40:75:8f:c3:33:f3:34:cf:0e:48:ed:31:0b:93:62:23: 2a:80:16:40:82:86:fc:20:81:6d:3c:62:61:a9:8a:86:02:12: 21:37:fa:dd:c5:31:c6:a1:5b:54:ef:1c:73:18:6f:f7:8f:99: 26:1f:5d:cd:ed:23:99:86:8e:2c:a4:0b:ef:89:c9:32:89:01: 9a:ff:ee:99:06:a2:b8:9e:f7:d1:c6:64:ff:6f:46:b8:b8:cb: 32:67:03:b2:9e:77:75:0a:34:a9:d3:2d:46:c2:aa:c1:04:17: 7b:4b:d2:e7:3e:09:ed:be:73:f9:e9:0c:36:f4:c7:7b:dd:27: bf:55:4b:c2:22:e5:aa:4b:91:bf:c1:c1:5d:0b:b6:1b:2f:38: 39:40:76:a9:2c:cd:fc:80:bf:8e:20:a2:d1:58:b5:a9:86:2c: be:63:40:9a:73:ad:68:26:d4:e0:20:b3:5a:6f:cb:8c:ef:09: 09:2f:35:47:9f:27:d3:85:3d:92:a9:53:ae:a1:23:b2:8b:df: 23:a7:16:0e:bf:a3:fa:c3:fc:6e:77:d5:af:9e:32:c2:22:a8: 0f:89:76:6a:e8:34:ac:27:a6:fd:a7:f6:a3:55:ac:77:cc:2f: ce:3b:63:30:d3:a4:15:3e:8e:a4:05:b7:f3:6d:f4:fe:ff:51: 61:e2:76:d0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEktku0Ffxtdl6NE6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNjMTdkYjctMjA0Yy00MWUyLTg1Y2EtNmE1YTQ0OGE4 Yjg4MB4XDTI1MDMxMzIwNDExNFoXDTI1MDYxMTIwNDExNFowLzEtMCsGA1UEAxMk MDI3YzRiYTktYzJkYy00MzUwLWFhZWYtYmZlYmQyMDBhZmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzV1nJUHDrgj1KMFTPxbXTR5u1Le7MArb5rG8 Q9SJBXcEMB2U8mv5R1UBGz+znJ0aSI1vBNGRxuXlfR8hJbYOI0L+0VhJzjnG8xSG rQx/zfO71QNxNneShyqB3ubxoWEKvh65+DiR03O8BNm5aVTsInqIE2czdmhOBvw2 lXylWvfBUgnpJ0qDPRQXpWH0J1M8y/aXMiPbRunjUSPnEkn7/lrKazjanNlUSysc qP6s6CZecB5+jTHbqwiRlt1xFX8mhW47c87aU932NtoVVoZ32MepBrD3fFvT1Ok1 rGZbmqM/WGMt6+ZYpAueSKeLXkrPTJRac4XZZ+APOcuhzXFDFQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFE+T4sOzA306V2NWMdimDfpXcbX3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2Mx N2RiNy0yMDRjLTQxZTItODVjYS02YTVhNDQ4YThiODgvYmE3NjY0ZjEtMjc0OC0z NzcyLWE1MzgtNTZkMjk3ODI2ZGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNjMTdkYjctMjA0Yy00MWUyLTg1 Y2EtNmE1YTQ0OGE4Yjg4L2MzYzE3ZGI3LTIwNGMtNDFlMi04NWNhLTZhNWE0NDhh OGI4OC5jcmwwHwYDVR0jBBgwFoAUfS26/0Pb6XKW6UWHlVxFclTUa4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2MxN2RiNy0yMDRjLTQxZTItODVjYS02YTVh NDQ4YThiODguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgcBwCAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAInxAdY/DM/M0zw5I7TELk2IjKoAWQIKG/CCBbTxiYamKhgISITf6 3cUxxqFbVO8ccxhv94+ZJh9dze0jmYaOLKQL74nJMokBmv/umQaiuJ730cZk/29G uLjLMmcDsp53dQo0qdMtRsKqwQQXe0vS5z4J7b5z+ekMNvTHe90nv1VLwiLlqkuR v8HBXQu2Gy84OUB2qSzN/IC/jiCi0Vi1qYYsvmNAmnOtaCbU4CCzWm/LjO8JCS81 R58n04U9kqlTrqEjsovfI6cWDr+j+sP8bnfVr54ywiKoD4l2aug0rCem/af2o1Ws d8wvzjtjMNOkFT6OpAW38230/v9RYeJ20A== -----END CERTIFICATE-----Generated at Sun Apr 27 04:30:53 2025 by rpki-client