$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/5e4dbc0c-0321-32d5-a924-0b7c07b5752a.roa File: 5e4dbc0c-0321-32d5-a924-0b7c07b5752a.roa (raw, json) Hash identifier: ckxphgDM9jbJ5mG2zOlzGTML1X4H0X5Cm+agF66KhV8= Subject key identifier: 07:5A:2B:72:2E:4C:F2:7A:A3:38:46:D5:0F:94:AB:16:B0:81:16:14 Certificate issuer: /CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Certificate serial: 010D0C9F4328584925B3A9E05AD780FE86564940 Authority key identifier: E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/5e4dbc0c-0321-32d5-a924-0b7c07b5752a.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 4226 IP address blocks: 2604:f587:8000::/34 maxlen: 34 2604:f587:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:a9:e0:5a:d7:80:fe:86:56:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=a885cc0b-2b36-4396-9c5e-b0283f3d2db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bd:39:de:54:07:13:b9:a0:88:45:26:06:7f: 21:e8:26:4e:15:ef:2f:ec:85:a4:02:bd:77:f5:b1: f6:36:0e:b4:b3:44:6f:ad:ee:bb:bd:d1:e8:0a:6f: 8f:45:1d:a8:18:b4:1e:95:8a:6c:4a:8f:a9:69:dd: 38:48:63:ca:b6:1f:17:3c:fe:f1:47:a1:a2:f0:41: 53:55:97:8e:8b:0e:28:72:42:15:8b:98:9a:23:93: 0d:e8:82:7b:7a:ac:ad:92:d3:58:29:1c:18:70:44: 1c:16:60:73:a9:ea:fe:34:12:f7:45:7d:7d:2e:c9: 98:93:ca:0a:02:e3:0f:24:b0:f1:1b:62:2f:72:41: b7:03:1e:c9:bf:41:4f:10:61:60:55:12:4c:a1:22: 0b:32:40:26:5f:d5:4a:c6:e9:55:ca:57:b8:1c:e5: 34:d8:a2:7d:e1:38:42:b1:d9:b3:c4:d8:fd:06:7d: 4b:8e:41:7a:9a:d9:7d:dd:e5:31:7d:05:11:60:e1: a0:92:99:29:79:80:a9:68:20:46:56:11:ab:e4:fd: e4:78:47:62:bd:59:18:2f:a6:e8:db:d6:d7:de:a7: 43:a2:d0:1a:89:a5:ff:13:93:f0:70:ae:1d:42:c0: b8:40:18:4d:3c:d5:d5:30:a2:82:81:a7:7d:49:cd: f0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:5A:2B:72:2E:4C:F2:7A:A3:38:46:D5:0F:94:AB:16:B0:81:16:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/5e4dbc0c-0321-32d5-a924-0b7c07b5752a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl X509v3 Authority Key Identifier: keyid:E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer sbgp-ipAddrBlock: critical IPv6: 2604:f587:8000::/33 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:34:70:06:88:6e:ed:78:05:3c:27:80:72:13:17:bd:5a:d2: 68:06:b7:87:c3:86:e4:11:4e:04:d8:18:03:25:35:f6:2b:41: aa:05:05:23:b6:9f:88:84:6b:0e:db:e0:8d:3f:4a:88:41:5c: 99:80:af:84:4c:0b:3d:6e:77:68:e4:8f:8a:07:f5:1b:4a:dd: 53:77:78:f6:9d:a1:8e:56:2c:31:01:ef:3d:ff:5c:35:8f:c2: 1a:77:b1:39:ae:21:26:e9:29:eb:1c:3d:32:ef:06:10:a0:0b: 02:59:44:85:e1:b7:4e:bd:bf:a1:ae:12:c8:d0:3f:33:dd:fe: 7b:3f:70:c5:07:a7:48:34:fe:a9:26:b9:98:23:ca:a0:dc:95: eb:8d:66:f8:b5:1c:11:a9:af:97:01:88:16:ea:1e:4f:99:4a: 19:f6:3a:b0:e4:f9:0b:93:a6:9d:37:ea:17:25:a0:65:1f:7b: db:de:51:12:0c:e3:34:71:33:8e:5a:89:ee:e0:c5:77:93:3d: 2d:45:a1:82:b3:b6:70:02:19:66:90:8f:05:96:a2:b0:02:0a: a3:23:a3:67:56:51:de:7a:c8:a3:53:94:d9:cc:76:7a:12:69: 63:fe:13:d3:d1:d4:74:11:11:43:41:d6:16:8e:b9:98:c6:cc: 67:c0:b7:77 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkls6ngWteA/oZWSUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODcyMWQtYjZiNC00ZTg4LTkzMjgtM2E4MzRkYzM2 MDA1MB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk YTg4NWNjMGItMmIzNi00Mzk2LTljNWUtYjAyODNmM2QyZGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr053lQHE7mgiEUmBn8h6CZOFe8v7IWkAr13 9bH2Ng60s0Rvre67vdHoCm+PRR2oGLQelYpsSo+pad04SGPKth8XPP7xR6Gi8EFT VZeOiw4ockIVi5iaI5MN6IJ7eqytktNYKRwYcEQcFmBzqer+NBL3RX19LsmYk8oK AuMPJLDxG2IvckG3Ax7Jv0FPEGFgVRJMoSILMkAmX9VKxulVyle4HOU02KJ94ThC sdmzxNj9Bn1LjkF6mtl93eUxfQURYOGgkpkpeYCpaCBGVhGr5P3keEdivVkYL6bo 29bX3qdDotAaiaX/E5PwcK4dQsC4QBhNPNXVMKKCgad9Sc3wFQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAdaK3IuTPJ6ozhG1Q+UqxawgRYUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4 NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgzNGRjMzYwMDUvNWU0ZGJjMGMtMDMyMS0z MmQ1LWE5MjQtMGI3YzA3YjU3NTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjVmODcyMWQtYjZiNC00ZTg4LTkz MjgtM2E4MzRkYzM2MDA1LzY1Zjg3MjFkLWI2YjQtNGU4OC05MzI4LTNhODM0ZGMz NjAwNS5jcmwwHwYDVR0jBBgwFoAU4yy2/QFQ8SHtUmVellx61PtPd/QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgz NGRjMzYwMDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHJgT1h4Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEARTRwBohu7XgFPCeAchMXvVrSaAa3h8OG5BFOBNgYAyU19itBqgUF I7afiIRrDtvgjT9KiEFcmYCvhEwLPW53aOSPigf1G0rdU3d49p2hjlYsMQHvPf9c NY/CGnexOa4hJukp6xw9Mu8GEKALAllEheG3Tr2/oa4SyNA/M93+ez9wxQenSDT+ qSa5mCPKoNyV641m+LUcEamvlwGIFuoeT5lKGfY6sOT5C5OmnTfqFyWgZR97295R EgzjNHEzjlqJ7uDFd5M9LUWhgrO2cAIZZpCPBZaisAIKoyOjZ1ZR3nrIo1OU2cx2 ehJpY/4T09HUdBERQ0HWFo65mMbMZ8C3dw== -----END CERTIFICATE-----Generated at Mon Apr 28 15:30:50 2025 by rpki-client