$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/7b1b00c5-7f65-3e15-8bb5-56a94dfa4365.roa File: 7b1b00c5-7f65-3e15-8bb5-56a94dfa4365.roa (raw, json) Hash identifier: bEQ0fOwwiytNgkBPbzmzKXPnVTRPUmbWOB1IJYcDy68= Subject key identifier: 21:2C:A5:9D:A1:5A:FC:E1:D5:C7:E9:CE:D8:E8:E3:5D:C6:58:E5:22 Certificate issuer: /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72 Certificate serial: 010D0C9F43285848FD56A9C235729069DC9195C0 Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/7b1b00c5-7f65-3e15-8bb5-56a94dfa4365.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 212149 IP address blocks: 2605:f440:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:a9:c2:35:72:90:69:dc:91:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=60e8e58f-bd85-4df3-80e1-1e57ba58f7a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c8:61:79:d5:02:79:b2:38:52:9d:4d:2a:92: 5e:66:69:ed:04:76:f3:02:97:c6:e0:97:ad:76:d2: dd:99:21:f0:ab:64:7a:86:44:75:8e:02:d5:70:40: 43:54:15:9e:6a:1b:24:7c:cf:4a:4c:77:d3:47:08: b9:6e:7f:85:2b:49:6d:f6:63:ae:80:0c:f5:3f:fc: 0b:f1:8b:81:07:08:74:e5:a7:55:41:56:d8:44:01: 38:b7:30:5e:6a:7c:a4:e5:1f:7e:c3:6e:57:0e:bb: 13:7b:94:d7:ca:d9:17:2a:25:83:b8:95:cf:bb:56: 14:0c:bf:21:52:19:14:96:f3:4a:f7:9a:7d:ce:2d: dc:68:11:ad:78:f0:77:22:5e:6e:e3:76:ba:52:e4: 61:80:70:13:f3:61:f3:90:ed:ea:80:06:73:55:cd: f6:bb:34:8d:0c:02:ca:33:c3:b3:9d:22:66:df:f6: 13:34:f7:d8:53:57:93:ab:4f:e2:06:e0:6a:62:50: d9:e5:23:4f:7b:41:5c:02:bb:f9:6b:6a:56:a2:1c: 45:14:01:0a:8b:40:e9:27:2c:db:e1:5e:34:bb:c7: af:32:73:f1:77:61:f2:d3:90:bb:cc:26:67:a8:ce: f9:30:de:da:a2:b8:dc:6f:37:b5:e9:c7:a9:47:c9: f2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2C:A5:9D:A1:5A:FC:E1:D5:C7:E9:CE:D8:E8:E3:5D:C6:58:E5:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/7b1b00c5-7f65-3e15-8bb5-56a94dfa4365.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl X509v3 Authority Key Identifier: keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer sbgp-ipAddrBlock: critical IPv6: 2605:f440:b00b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:82:be:0d:e6:5d:b6:9a:b7:4a:d6:5d:47:33:1c:5f:80:c7: 33:4e:88:ae:8c:fd:fc:03:97:25:bc:1e:b1:89:ae:06:3c:84: c2:a3:d4:50:aa:69:2f:73:a8:7d:41:8a:8f:48:e7:70:b2:31: 6d:75:80:ae:0d:94:50:5d:a3:fa:b2:7f:7f:51:c1:83:ce:4b: c1:d4:1c:97:d6:d3:9c:cd:95:ec:01:85:ce:10:49:8c:54:21: 3b:a9:72:a0:5a:45:97:ad:a0:a8:5a:0d:3b:5e:8d:13:aa:02: ec:59:2e:29:8d:27:db:a1:8e:51:96:2e:cf:85:99:1e:89:fb: e0:27:48:17:6a:3b:da:ae:c0:55:0d:59:35:45:bd:07:8f:03: 90:ea:e9:23:ef:eb:d6:5f:11:ea:d1:32:23:ed:c6:28:9c:4e: 80:ee:18:6d:20:d2:8c:df:3e:03:6f:42:ab:af:31:11:17:38: df:3a:da:f9:12:61:e1:52:30:7a:5c:f2:45:b4:48:b4:c0:83: b5:4f:13:2c:58:79:b4:11:0f:b3:a1:83:1b:9e:d1:39:20:97: 5a:81:fc:61:be:85:37:b2:c6:86:2a:f5:c8:94:bf:fc:51:64: b3:ef:80:94:b3:83:e6:8e:a9:4f:73:52:c3:fa:6f:bc:32:4f: db:ee:90:5d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj9VqnCNXKQadyRlcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmYzZDI1YTAtZjdlNS00MjFkLTg4NDItZmM5NjdiZjA4 ZjcyMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk NjBlOGU1OGYtYmQ4NS00ZGYzLTgwZTEtMWU1N2JhNThmN2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8hhedUCebI4Up1NKpJeZmntBHbzApfG4Jet dtLdmSHwq2R6hkR1jgLVcEBDVBWeahskfM9KTHfTRwi5bn+FK0lt9mOugAz1P/wL 8YuBBwh05adVQVbYRAE4tzBeanyk5R9+w25XDrsTe5TXytkXKiWDuJXPu1YUDL8h UhkUlvNK95p9zi3caBGtePB3Il5u43a6UuRhgHAT82HzkO3qgAZzVc32uzSNDALK M8OznSJm3/YTNPfYU1eTq0/iBuBqYlDZ5SNPe0FcArv5a2pWohxFFAEKi0DpJyzb 4V40u8evMnPxd2Hy05C7zCZnqM75MN7aorjcbze16cepR8nypwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCEspZ2hWvzh1cfpztjo413GWOUiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNk MjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2N2JmMDhmNzIvN2IxYjAwYzUtN2Y2NS0z ZTE1LThiYjUtNTZhOTRkZmE0MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmYzZDI1YTAtZjdlNS00MjFkLTg4 NDItZmM5NjdiZjA4ZjcyLzZmM2QyNWEwLWY3ZTUtNDIxZC04ODQyLWZjOTY3YmYw OGY3Mi5jcmwwHwYDVR0jBBgwFoAUV9Ck+WN+PQBHgSzdpn7Mfk696aowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNkMjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2 N2JmMDhmNzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgX0QLAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAGCvg3mXbaat0rWXUczHF+AxzNOiK6M/fwDlyW8HrGJrgY8hMKj 1FCqaS9zqH1Bio9I53CyMW11gK4NlFBdo/qyf39RwYPOS8HUHJfW05zNlewBhc4Q SYxUITupcqBaRZetoKhaDTtejROqAuxZLimNJ9uhjlGWLs+FmR6J++AnSBdqO9qu wFUNWTVFvQePA5Dq6SPv69ZfEerRMiPtxiicToDuGG0g0ozfPgNvQquvMREXON86 2vkSYeFSMHpc8kW0SLTAg7VPEyxYebQRD7Ohgxue0Tkgl1qB/GG+hTeyxoYq9ciU v/xRZLPvgJSzg+aOqU9zUsP6b7wyT9vukF0= -----END CERTIFICATE-----Generated at Sat Apr 26 19:08:55 2025 by rpki-client