$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8bfee3c-de9a-3849-ad11-fa379ffff938.roa File: d8bfee3c-de9a-3849-ad11-fa379ffff938.roa (raw, json) Hash identifier: To4xmm+1c8X4/JgyZaxhS3c8jeGqDS4bYSbQP7sswbs= Subject key identifier: 89:27:0F:D5:D8:05:12:62:F8:40:17:B4:00:38:40:5B:78:96:FA:75 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BAD903199881C474C1AF40 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8bfee3c-de9a-3849-ad11-fa379ffff938.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 2600:1900:434b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d9:03:19:98:81:c4:74:c1:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d8296062-ce43-4db3-9331-9af4be56cda9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:57:39:59:47:6f:5e:89:d7:fc:e2:b0:05:49: 95:a5:ae:c6:e6:b7:0c:a7:4a:5b:79:b2:81:24:8d: e1:1a:98:9a:23:e1:fc:c2:fb:05:01:c9:b4:13:c7: 95:bf:81:b0:03:99:8b:90:9d:84:ea:79:9d:b1:73: b5:27:1c:aa:c7:d7:57:24:9f:f2:e8:1a:05:08:b7: 6d:99:6b:de:38:ac:4e:29:63:8c:b8:29:84:44:47: cf:b2:27:65:1e:84:1e:e0:46:19:c7:88:96:b7:cb: 38:ed:de:e8:f5:2a:69:f6:87:fb:f1:e0:ef:c2:eb: a2:c0:28:8b:4c:9d:f5:57:09:a8:d7:9c:3c:0c:97: 6d:4d:b0:00:69:f7:8e:34:d8:c1:f1:36:6b:a5:11: 1e:0f:48:49:74:e0:67:63:33:9a:b1:6d:ef:d0:4b: 4d:6c:05:4a:04:37:ce:a2:63:1b:16:34:12:be:e5: b6:e1:4d:70:b2:8b:42:0a:cc:f2:a5:b0:27:f4:9f: c0:ff:b0:21:81:fa:fe:e8:8e:44:9b:f8:c5:a9:8a: 54:58:b8:b1:cb:15:23:24:f1:8c:88:b4:a7:14:33: cb:90:4d:9e:c5:e6:55:2b:5a:46:b7:9c:29:37:44: 35:ea:80:50:04:54:4c:07:a8:82:35:9c:f5:60:7f: 94:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:27:0F:D5:D8:05:12:62:F8:40:17:B4:00:38:40:5B:78:96:FA:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8bfee3c-de9a-3849-ad11-fa379ffff938.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv6: 2600:1900:434b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:11:22:f2:a3:ba:82:14:af:78:bb:9c:ad:be:a7:ce:2a:a0: dd:d0:e0:e5:de:9f:6e:2c:a3:8d:10:8e:49:2a:08:23:c2:3d: fb:83:f1:cc:e9:79:b2:f1:eb:89:5b:4e:64:24:fc:70:d8:08: 2d:ab:f2:31:e2:0c:68:c2:d5:b4:8c:54:bb:2c:86:9b:b7:5a: 33:e8:d1:da:c7:4a:ca:3e:55:a1:ae:c7:18:94:20:ab:8e:bd: 11:37:34:ff:b7:a3:3f:e3:93:7e:de:72:90:35:4d:17:ba:5f: 9f:5a:df:a6:0d:14:c5:6a:68:2f:76:17:60:28:7b:ab:f7:64: 8d:04:9d:9c:58:30:f8:bf:10:b6:f7:f6:54:aa:5b:38:3f:ea: a8:90:04:cd:aa:2e:a7:47:b9:b4:75:80:eb:d4:49:b9:bc:32: 5b:12:19:3a:9c:77:5b:68:98:9f:b8:55:9d:83:dd:ae:d4:ea: 85:91:7e:f3:3a:10:c6:41:87:c0:e0:25:b0:ce:c7:17:64:b8: 30:07:b1:1e:5f:c0:a5:57:d3:5e:55:55:d7:0e:ad:f0:0c:b0: 8b:3b:1c:8a:4c:0d:36:04:ed:e2:b8:f2:23:ff:17:5c:bf:c0: 05:1b:c7:f7:4b:5e:93:1d:be:97:a8:3a:c4:e7:3d:c0:87:0a: 77:07:65:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkutkDGZiBxHTBr0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDgyOTYwNjItY2U0My00ZGIzLTkzMzEtOWFmNGJlNTZjZGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllc5WUdvXonX/OKwBUmVpa7G5rcMp0pbebKB JI3hGpiaI+H8wvsFAcm0E8eVv4GwA5mLkJ2E6nmdsXO1Jxyqx9dXJJ/y6BoFCLdt mWveOKxOKWOMuCmEREfPsidlHoQe4EYZx4iWt8s47d7o9Spp9of78eDvwuuiwCiL TJ31Vwmo15w8DJdtTbAAafeONNjB8TZrpREeD0hJdOBnYzOasW3v0EtNbAVKBDfO omMbFjQSvuW24U1wsotCCszypbAn9J/A/7Ahgfr+6I5Em/jFqYpUWLixyxUjJPGM iLSnFDPLkE2exeZVK1pGt5wpN0Q16oBQBFRMB6iCNZz1YH+U8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIknD9XYBRJi+EAXtAA4QFt4lvp1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDhiZmVlM2MtZGU5YS0z ODQ5LWFkMTEtZmEzNzlmZmZmOTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAZAENL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHwRIvKjuoIUr3i7nK2+p84qoN3Q4OXen24so40QjkkqCCPCPfuD 8czpebLx64lbTmQk/HDYCC2r8jHiDGjC1bSMVLsshpu3WjPo0drHSso+VaGuxxiU IKuOvRE3NP+3oz/jk37ecpA1TRe6X59a36YNFMVqaC92F2Aoe6v3ZI0EnZxYMPi/ ELb39lSqWzg/6qiQBM2qLqdHubR1gOvUSbm8MlsSGTqcd1tomJ+4VZ2D3a7U6oWR fvM6EMZBh8DgJbDOxxdkuDAHsR5fwKVX015VVdcOrfAMsIs7HIpMDTYE7eK48iP/ F1y/wAUbx/dLXpMdvpeoOsTnPcCHCncHZUY= -----END CERTIFICATE-----Generated at Sat Apr 26 19:19:16 2025 by rpki-client