$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/9916c0f3-dcb9-3d6b-b1d1-bd73c842be2e.roa File: 9916c0f3-dcb9-3d6b-b1d1-bd73c842be2e.roa (raw, json) Hash identifier: YXgDdwJ7zmmesvPolfKiZNziuRyV0K1ncKVh2pfc+y0= Subject key identifier: 93:47:A5:A8:02:80:00:2C:6D:AE:03:F5:A2:3E:F0:DE:86:51:7A:DE Certificate issuer: /CN=7afae497-a3f6-4f52-abeb-632cca8db94a Certificate serial: 010D0C9F43285848DBD66DFAAD907D458F7D2380 Authority key identifier: 4C:82:BD:2B:3F:94:20:83:FF:E4:68:4E:63:B7:64:55:C2:CB:79:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/9916c0f3-dcb9-3d6b-b1d1-bd73c842be2e.roa Signing time: Wed 12 Feb 2025 14:00:53 +0000 ROA not before: Wed 12 Feb 2025 14:00:53 +0000 ROA not after: Tue 13 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 2606:40c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/7afae497-a3f6-4f52-abeb-632cca8db94a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/7afae497-a3f6-4f52-abeb-632cca8db94a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:db:d6:6d:fa:ad:90:7d:45:8f:7d:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7afae497-a3f6-4f52-abeb-632cca8db94a Validity Not Before: Feb 12 14:00:53 2025 GMT Not After : May 13 13:00:53 2025 GMT Subject: CN=ec1943d4-a9ff-47ae-aadb-013dc041fb71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:77:3d:a4:6f:09:81:19:a6:b5:86:e9:63:56: 27:3a:51:1a:56:69:ec:b0:f4:b0:54:f5:12:d4:90: 5a:c5:b8:1a:b3:e9:31:b7:bb:3a:b5:ba:97:ed:7e: 02:35:51:34:e8:e4:04:84:60:64:48:63:79:ca:de: 5f:f7:8e:02:f7:25:11:19:17:26:8f:94:7b:70:61: ca:cf:b4:bb:87:74:82:4f:13:0c:99:7d:fc:32:51: a9:d7:ec:c7:66:c7:d6:27:05:e9:48:5d:1a:8a:a2: dc:45:e7:2c:58:3a:e5:fd:35:df:21:73:63:6b:45: 2a:31:c2:1f:c2:b2:91:e8:bc:9d:0d:90:9f:e7:dd: c8:58:b0:b7:68:eb:ef:ac:e0:48:02:b9:db:cd:a6: 4a:88:f7:02:a1:78:02:45:b6:dc:5c:cc:fd:0d:46: 7d:e0:6b:6f:e0:41:df:44:64:dc:ad:35:e2:eb:b0: 35:7e:c0:14:2e:3f:0e:26:17:35:05:cf:d3:de:b0: af:09:50:c5:6b:89:d7:4e:80:bf:b9:d0:7b:df:47: 82:51:08:7e:5c:f6:00:93:94:b5:07:3a:7a:88:66: 4d:36:a8:87:9a:eb:97:f1:c5:93:a8:82:6b:8a:18: 82:83:00:16:85:2a:4b:25:f4:29:75:ef:47:7c:2e: 4c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:47:A5:A8:02:80:00:2C:6D:AE:03:F5:A2:3E:F0:DE:86:51:7A:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/9916c0f3-dcb9-3d6b-b1d1-bd73c842be2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/7afae497-a3f6-4f52-abeb-632cca8db94a.crl X509v3 Authority Key Identifier: keyid:4C:82:BD:2B:3F:94:20:83:FF:E4:68:4E:63:B7:64:55:C2:CB:79:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a.cer sbgp-ipAddrBlock: critical IPv6: 2606:40c0::/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:aa:f4:34:3c:19:b1:30:5e:32:06:5e:6b:76:3a:06:91:fc: fd:f4:cc:d1:9d:fc:ed:37:c1:2d:d2:af:5b:f5:b4:c9:30:b8: 68:3f:0c:ae:73:62:46:77:a4:ed:ea:7a:d5:7b:0f:ad:a8:63: a0:b4:72:b1:98:cf:e3:be:a3:47:da:1e:c2:36:15:0e:86:44: 6f:f4:28:2b:6b:ec:bd:e7:04:44:e8:76:dd:68:9f:64:30:29: c7:fa:61:b7:70:34:f6:23:37:4a:c8:2d:b1:66:4a:43:95:b3: e2:33:4b:7a:87:78:dc:b4:e6:bd:08:93:09:02:7f:48:a8:18: 8d:f6:7f:50:4d:77:61:b4:be:f5:83:72:90:f6:c5:04:9e:07: 0b:61:14:0f:2b:7f:0e:78:0f:1a:5d:ec:e6:8d:99:b0:d2:dc: c3:17:ee:78:a1:20:3c:eb:8d:0d:57:c3:54:35:8e:1c:28:41: e1:03:fd:a4:bd:fa:71:11:43:f8:a1:f8:2a:00:0a:c0:f9:b0: 66:8d:cd:31:86:f1:57:44:41:4c:49:99:13:ac:3f:f0:a6:fa: 75:bf:5d:cc:86:23:56:f6:39:2c:ea:24:72:e3:df:9f:8c:81: 45:f3:3a:40:5e:95:db:05:4b:08:b9:51:a1:7c:d3:be:34:01: d2:2d:5c:cc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjb1m36rZB9RY99I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2FmYWU0OTctYTNmNi00ZjUyLWFiZWItNjMyY2NhOGRi OTRhMB4XDTI1MDIxMjE0MDA1M1oXDTI1MDUxMzEzMDA1M1owLzEtMCsGA1UEAxMk ZWMxOTQzZDQtYTlmZi00N2FlLWFhZGItMDEzZGMwNDFmYjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHc9pG8JgRmmtYbpY1YnOlEaVmnssPSwVPUS 1JBaxbgas+kxt7s6tbqX7X4CNVE06OQEhGBkSGN5yt5f944C9yURGRcmj5R7cGHK z7S7h3SCTxMMmX38MlGp1+zHZsfWJwXpSF0aiqLcRecsWDrl/TXfIXNja0UqMcIf wrKR6LydDZCf593IWLC3aOvvrOBIArnbzaZKiPcCoXgCRbbcXMz9DUZ94Gtv4EHf RGTcrTXi67A1fsAULj8OJhc1Bc/T3rCvCVDFa4nXToC/udB730eCUQh+XPYAk5S1 Bzp6iGZNNqiHmuuX8cWTqIJrihiCgwAWhSpLJfQpde9HfC5MjQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJNHpagCgAAsba4D9aI+8N6GUXreMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YWZh ZTQ5Ny1hM2Y2LTRmNTItYWJlYi02MzJjY2E4ZGI5NGEvOTkxNmMwZjMtZGNiOS0z ZDZiLWIxZDEtYmQ3M2M4NDJiZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2FmYWU0OTctYTNmNi00ZjUyLWFi ZWItNjMyY2NhOGRiOTRhLzdhZmFlNDk3LWEzZjYtNGY1Mi1hYmViLTYzMmNjYThk Yjk0YS5jcmwwHwYDVR0jBBgwFoAUTIK9Kz+UIIP/5GhOY7dkVcLLeaQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YWZhZTQ5Ny1hM2Y2LTRmNTItYWJlYi02MzJj Y2E4ZGI5NGEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDJgZAwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBdqvQ0PBmxMF4yBl5rdjoGkfz99MzRnfztN8Et0q9b9bTJMLhoPwyu c2JGd6Tt6nrVew+tqGOgtHKxmM/jvqNH2h7CNhUOhkRv9Cgra+y95wRE6HbdaJ9k MCnH+mG3cDT2IzdKyC2xZkpDlbPiM0t6h3jctOa9CJMJAn9IqBiN9n9QTXdhtL71 g3KQ9sUEngcLYRQPK38OeA8aXezmjZmw0tzDF+54oSA8640NV8NUNY4cKEHhA/2k vfpxEUP4ofgqAArA+bBmjc0xhvFXREFMSZkTrD/wpvp1v13MhiNW9jks6iRy49+f jIFF8zpAXpXbBUsIuVGhfNO+NAHSLVzM -----END CERTIFICATE-----Generated at Mon Apr 28 08:25:47 2025 by rpki-client