$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/17ab3a7c-33b1-34e1-940a-935a63494ab3.roa File: 17ab3a7c-33b1-34e1-940a-935a63494ab3.roa (raw, json) Hash identifier: I4iPZNbkCr73NUB3z8X48k/mp+S5opwlQm2T4cbT9uI= Subject key identifier: 61:63:DB:8B:92:74:27:9C:71:04:16:3E:90:01:04:BD:B6:87:94:48 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F432858491246AD068B7C8F1D25A4A680 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/17ab3a7c-33b1-34e1-940a-935a63494ab3.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 0 IP address blocks: 2607:ff00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ad:06:8b:7c:8f:1d:25:a4:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=6fcc59fe-ed3e-44e4-89c1-6b518f7345f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0e:54:a6:5d:36:b5:ce:5e:ab:85:9f:3e:64: 09:99:51:9d:fb:fd:e3:b0:e9:f0:8f:18:62:e4:67: 95:8c:8c:6c:f0:48:d4:0a:3b:6f:93:f0:4f:b1:22: c3:e7:86:da:73:c0:d6:85:46:9c:3c:59:2d:bb:3e: 33:06:df:a0:b3:35:00:de:0c:fd:18:27:b3:2b:46: e8:ee:22:f5:2b:31:1b:68:97:7f:49:7f:6d:3c:fb: ef:c5:c0:45:47:1e:4b:c8:6c:36:7a:ce:9d:5e:e1: 3e:0f:47:df:80:e3:aa:82:a4:91:07:1f:b4:99:92: 38:10:46:a6:97:61:91:2a:f5:1e:0f:15:8d:e3:ca: e1:97:29:20:e3:aa:2f:f0:c2:cb:b2:3c:05:c1:1b: a1:11:b2:72:c3:13:7b:aa:e3:93:43:01:9c:30:51: b7:07:44:e8:84:70:98:2b:b6:34:4a:39:b0:92:42: 8f:99:98:46:68:41:44:cd:9e:d1:78:03:56:d5:01: 4e:c5:50:a5:dd:c7:da:52:4d:96:74:68:5f:e1:aa: 76:db:71:68:5a:0b:73:22:6d:e1:54:d5:0e:97:a2: d1:fc:f9:95:34:ea:90:66:c7:49:7a:47:ed:e9:07: 21:62:0b:0b:b5:4f:2b:b7:3f:95:6b:54:cf:df:b0: 4d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:63:DB:8B:92:74:27:9C:71:04:16:3E:90:01:04:BD:B6:87:94:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/17ab3a7c-33b1-34e1-940a-935a63494ab3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv6: 2607:ff00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:36:b2:b6:53:11:4b:b0:04:cb:b3:57:14:20:d8:46:3c:16: 33:44:e0:a1:16:90:2a:e1:30:db:98:4d:a9:b5:4a:ae:ee:8e: 52:1a:19:5b:20:e0:db:84:0c:3a:70:2d:9f:88:8c:71:0c:64: cf:d6:d0:cb:18:8d:5c:f6:07:2b:eb:c4:18:8b:3b:2c:d0:bd: 02:bd:af:87:36:e2:de:92:39:6a:d4:0d:b6:66:43:51:e6:9b: 49:f0:40:e3:9b:99:11:4d:3f:df:c7:6e:f8:39:5d:2d:e0:b3: 42:1c:50:51:4f:3e:6e:3f:ab:a2:e4:28:7c:50:f9:e4:60:eb: 9d:a1:4d:b9:c6:e9:d4:91:46:af:b5:f1:65:11:f3:a9:e3:15: 71:cd:77:93:47:e9:6d:de:a2:c7:18:8f:7d:78:b3:14:0a:5f: 2a:5d:5d:05:24:54:0e:0c:35:7c:05:6d:96:8c:28:ca:08:a8: 36:3c:6e:62:68:cb:e5:a1:7c:96:9b:5f:ce:fc:51:d3:5e:ca: 08:17:84:22:3d:bc:42:cd:d8:84:af:21:e4:7a:ae:0b:5f:b9: 77:3c:4d:00:ee:86:7d:e1:28:f5:e8:15:db:04:97:df:e2:ef: ed:c6:0c:fc:40:45:e6:62:ce:1f:97:79:2a:d4:0d:2d:38:54: 98:7e:50:05 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkSRq0Gi3yPHSWkpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NmZjYzU5ZmUtZWQzZS00NGU0LTg5YzEtNmI1MThmNzM0NWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjA5Upl02tc5eq4WfPmQJmVGd+/3jsOnwjxhi 5GeVjIxs8EjUCjtvk/BPsSLD54bac8DWhUacPFktuz4zBt+gszUA3gz9GCezK0bo 7iL1KzEbaJd/SX9tPPvvxcBFRx5LyGw2es6dXuE+D0ffgOOqgqSRBx+0mZI4EEam l2GRKvUeDxWN48rhlykg46ov8MLLsjwFwRuhEbJywxN7quOTQwGcMFG3B0TohHCY K7Y0SjmwkkKPmZhGaEFEzZ7ReANW1QFOxVCl3cfaUk2WdGhf4ap223FoWgtzIm3h VNUOl6LR/PmVNOqQZsdJekft6QchYgsLtU8rtz+Va1TP37BNLQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGFj24uSdCeccQQWPpABBL22h5RIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMTdhYjNhN2MtMzNiMS0z NGUxLTk0MGEtOTM1YTYzNDk0YWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf/ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBvNrK2UxFLsATLs1cUINhGPBYzROChFpAq4TDbmE2ptUqu7o5SGhlb IODbhAw6cC2fiIxxDGTP1tDLGI1c9gcr68QYizss0L0Cva+HNuLekjlq1A22ZkNR 5ptJ8EDjm5kRTT/fx274OV0t4LNCHFBRTz5uP6ui5Ch8UPnkYOudoU25xunUkUav tfFlEfOp4xVxzXeTR+lt3qLHGI99eLMUCl8qXV0FJFQODDV8BW2WjCjKCKg2PG5i aMvloXyWm1/O/FHTXsoIF4QiPbxCzdiEryHkeq4LX7l3PE0A7oZ94Sj16BXbBJff 4u/txgz8QEXmYs4fl3kq1A0tOFSYflAF -----END CERTIFICATE-----Generated at Sat Apr 26 12:54:57 2025 by rpki-client