$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/84a1f65b-11a0-36ff-9041-d379bbbafa46.roa File: 84a1f65b-11a0-36ff-9041-d379bbbafa46.roa (raw, json) Hash identifier: chkXG/KwbVAxsny2+0V2Kf2SPDbeyE/J16SJQA+bBWU= Subject key identifier: 96:9E:18:17:C1:29:F8:61:E4:09:59:0B:35:A7:4C:E0:DC:0C:73:45 Certificate issuer: /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8 Certificate serial: 010D0C9F432858496803CFC3F890943F7A761200 Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/84a1f65b-11a0-36ff-9041-d379bbbafa46.roa Signing time: Thu 03 Apr 2025 19:05:34 +0000 ROA not before: Thu 03 Apr 2025 19:05:34 +0000 ROA not after: Wed 02 Jul 2025 19:05:34 +0000 asID: 0 IP address blocks: 2001:504:96::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:03:cf:c3:f8:90:94:3f:7a:76:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8 Validity Not Before: Apr 3 19:05:34 2025 GMT Not After : Jul 2 19:05:34 2025 GMT Subject: CN=aea80b07-56f1-4947-bad1-95bace556b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:38:34:31:32:88:df:55:79:14:a7:6f:e9:fe: 42:a9:ec:f3:21:b6:09:8c:77:10:b8:f2:cc:df:00: 10:fb:da:ae:00:06:c6:56:58:d6:33:5c:0d:a6:b5: 20:24:75:be:6c:d2:3a:07:2f:25:e3:45:1e:ee:fe: 67:75:b9:9b:19:7e:9a:c6:79:15:1c:77:f2:63:76: ac:70:d8:90:a7:55:45:da:85:6a:c0:ed:0f:a5:31: ae:c4:b6:58:35:36:c6:c2:5a:f3:05:7a:c5:a7:56: d5:fc:16:0e:ce:a4:f7:ed:4e:88:f6:ab:64:8b:00: e7:c4:6f:62:ab:09:19:bb:f5:84:f3:5c:80:ec:ea: 6f:50:d5:a2:6a:75:76:32:d2:b8:d9:b3:a8:69:32: ad:fd:45:38:5a:45:4a:81:e2:e7:83:a9:92:97:b4: a8:00:95:5e:fc:df:92:0a:fc:8e:81:ca:26:93:79: 42:18:36:a2:75:a3:de:f4:b7:2a:78:88:1e:b9:a4: 8a:88:f1:32:0c:1f:52:d8:df:5c:87:b2:ea:79:24: d4:85:86:91:15:6f:28:e2:00:53:b7:c4:b9:d7:c4: a4:06:cf:12:dc:02:6d:7e:85:c9:05:83:76:53:81: 62:d1:dc:fb:43:40:ca:5e:b9:ec:0a:65:08:1c:b7: ee:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9E:18:17:C1:29:F8:61:E4:09:59:0B:35:A7:4C:E0:DC:0C:73:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/84a1f65b-11a0-36ff-9041-d379bbbafa46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl X509v3 Authority Key Identifier: keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:96::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:d3:e1:c8:fb:1a:2c:a5:be:a0:f4:e5:17:58:24:21:30:20: d8:db:80:0c:be:6c:2c:e8:8b:51:b0:e5:a6:8c:7f:08:2f:c1: a4:3a:78:33:14:16:9e:c7:fa:1f:eb:a8:57:33:99:a7:01:b2: 40:77:57:8f:b7:13:7f:61:70:d6:8c:05:c1:a6:ec:b7:de:dd: 3e:25:95:cd:cb:e8:d0:3f:7d:5c:94:c2:9b:0b:68:4e:d7:9f: 49:49:31:db:21:05:19:c4:69:c6:9b:cd:89:69:7a:91:87:ae: e8:80:7f:77:8f:7a:ab:22:5f:95:0f:fa:28:d5:e3:9f:39:97: 78:8a:02:00:bf:2f:7d:ee:e0:47:c5:9a:02:8b:43:56:ed:94: 40:bb:52:70:30:83:58:79:15:0e:a8:d4:44:70:a8:8a:e8:ba: 8b:d2:a8:49:f5:08:2e:8b:44:4a:78:b6:86:54:c4:5c:b6:e6: 62:f4:0f:dc:9b:12:9b:b6:3d:b7:3e:68:51:3b:5c:aa:22:22: aa:67:c1:fb:58:e7:2c:25:f4:ed:2e:df:a7:25:09:0e:e0:c2: fe:e5:a0:bf:8a:e2:15:57:7c:22:e6:bd:af:4c:5d:01:04:3e: b2:08:ad:60:c0:c6:10:c4:2b:6d:2e:f0:09:5c:41:b0:8e:0b: 45:82:75:df -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEloA8/D+JCUP3p2EgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2NhYTljMjctNmI2OC00NWE4LWI3NzctNGM3YjAwNDgy YWI4MB4XDTI1MDQwMzE5MDUzNFoXDTI1MDcwMjE5MDUzNFowLzEtMCsGA1UEAxMk YWVhODBiMDctNTZmMS00OTQ3LWJhZDEtOTViYWNlNTU2Yjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDg0MTKI31V5FKdv6f5CqezzIbYJjHcQuPLM 3wAQ+9quAAbGVljWM1wNprUgJHW+bNI6By8l40Ue7v5ndbmbGX6axnkVHHfyY3as cNiQp1VF2oVqwO0PpTGuxLZYNTbGwlrzBXrFp1bV/BYOzqT37U6I9qtkiwDnxG9i qwkZu/WE81yA7OpvUNWianV2MtK42bOoaTKt/UU4WkVKgeLng6mSl7SoAJVe/N+S CvyOgcomk3lCGDaidaPe9LcqeIgeuaSKiPEyDB9S2N9ch7LqeSTUhYaRFW8o4gBT t8S518SkBs8S3AJtfoXJBYN2U4Fi0dz7Q0DKXrnsCmUIHLfuSQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFJaeGBfBKfhh5AlZCzWnTODcDHNFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jY2Fh OWMyNy02YjY4LTQ1YTgtYjc3Ny00YzdiMDA0ODJhYjgvODRhMWY2NWItMTFhMC0z NmZmLTkwNDEtZDM3OWJiYmFmYTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2NhYTljMjctNmI2OC00NWE4LWI3 NzctNGM3YjAwNDgyYWI4L2NjYWE5YzI3LTZiNjgtNDVhOC1iNzc3LTRjN2IwMDQ4 MmFiOC5jcmwwHwYDVR0jBBgwFoAUokHvW5pqS+aRVpyHiqhu3FSyf4YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jY2FhOWMyNy02YjY4LTQ1YTgtYjc3Ny00Yzdi MDA0ODJhYjguY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEFBACW AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAl9PhyPsaLKW+oPTlF1gkITAg2NuADL5sLOiLUbDlpox/CC/B pDp4MxQWnsf6H+uoVzOZpwGyQHdXj7cTf2Fw1owFwabst97dPiWVzcvo0D99XJTC mwtoTtefSUkx2yEFGcRpxpvNiWl6kYeu6IB/d496qyJflQ/6KNXjnzmXeIoCAL8v fe7gR8WaAotDVu2UQLtScDCDWHkVDqjURHCoiui6i9KoSfUILotESni2hlTEXLbm YvQP3JsSm7Y9tz5oUTtcqiIiqmfB+1jnLCX07S7fpyUJDuDC/uWgv4riFVd8Iua9 r0xdAQQ+sgitYMDGEMQrbS7wCVxBsI4LRYJ13w== -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:45 2025 by rpki-client