$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/32915dae-42f2-38d7-86d4-d902e4d35a8d.roa File: 32915dae-42f2-38d7-86d4-d902e4d35a8d.roa (raw, json) Hash identifier: E+fmDTRXtdvYHZJysdo/NfX6Cn0XuJ4ioWzlTepbS1A= Subject key identifier: C1:82:86:1C:8A:6B:4E:AB:4F:6E:1E:FF:9A:5A:34:2D:83:DC:DD:04 Certificate issuer: /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Certificate serial: 010D0C9F432858490F7BFC8FEA23CA62A7438400 Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/32915dae-42f2-38d7-86d4-d902e4d35a8d.roa Signing time: Mon 03 Mar 2025 02:00:39 +0000 ROA not before: Mon 03 Mar 2025 02:00:39 +0000 ROA not after: Sun 01 Jun 2025 01:00:39 +0000 asID: 271 IP address blocks: 2607:f8f0:250::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:7b:fc:8f:ea:23:ca:62:a7:43:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf Validity Not Before: Mar 3 02:00:39 2025 GMT Not After : Jun 1 01:00:39 2025 GMT Subject: CN=421ec3f8-38e0-4f18-a6bf-343608915955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5a:43:48:27:dd:ff:18:c9:70:37:5f:38:74: 2e:d9:a4:cc:61:a2:95:6a:4e:cd:8c:66:6d:a5:6b: 61:07:72:30:6f:f3:93:7a:d6:d0:32:34:98:2c:9e: 2e:87:b6:90:d4:5c:d5:c1:fb:a5:db:63:0c:9d:eb: 23:a9:e6:56:bd:c2:00:cd:ae:96:2f:84:cf:b7:2f: 1e:a5:0a:c7:fd:e4:67:8b:b7:83:00:e0:06:ce:74: f0:dc:6e:a2:bd:bb:0f:19:fb:79:f6:db:97:4f:8f: 08:ed:7d:77:4e:2c:c2:c5:62:5b:d9:bd:58:52:fe: 6b:cd:9c:e7:29:f2:28:13:0a:98:7e:54:c9:ce:f9: 39:ad:cf:23:e1:a6:62:5b:77:54:66:45:03:96:31: 30:f2:ff:79:22:18:90:6f:f5:3a:19:b4:23:80:fe: 9e:ae:e4:d2:52:e1:c0:77:d8:b4:96:2a:10:14:2d: 78:d0:20:c5:80:c1:32:38:f0:eb:9b:2d:f0:56:b4: 72:7b:d8:36:5b:91:8f:82:ac:42:9a:80:30:c9:b6: dd:22:90:0e:45:cb:12:03:55:c6:92:22:dd:31:d6: fd:1b:12:7b:2d:db:6a:d1:63:14:5f:59:fd:b2:74: 63:91:cb:f3:b0:c1:29:64:97:b8:7f:56:89:77:d2: 10:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:82:86:1C:8A:6B:4E:AB:4F:6E:1E:FF:9A:5A:34:2D:83:DC:DD:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/32915dae-42f2-38d7-86d4-d902e4d35a8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl X509v3 Authority Key Identifier: keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8f0:250::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:6b:09:ab:42:ba:de:16:18:d1:9d:6a:de:fd:11:7d:e2:94: f4:a2:e1:a7:83:e2:d1:91:95:6e:81:69:53:90:de:34:61:20: 42:a9:f7:62:c2:24:c6:40:2d:a9:e1:17:bc:de:5b:91:47:c1: a1:4d:b9:3f:5a:64:0b:4e:30:17:36:fd:12:6b:b7:90:f9:53: e3:06:69:cb:66:e2:95:88:09:63:0d:02:d4:48:a5:2f:a3:a0: 21:8f:1f:ca:06:18:de:9a:c8:c6:52:9a:04:b9:2d:0a:1c:6c: 1f:88:22:8c:0a:a2:58:52:be:fd:c3:ba:82:a6:c7:03:e1:c1: b0:43:03:d7:9a:0c:6d:a2:70:f8:9b:6e:53:f9:5f:e1:9b:3b: a9:75:5c:73:e6:ca:4b:2b:1c:2d:92:b1:6d:45:fa:af:c9:06: 91:8a:02:54:f1:87:bc:58:71:c9:ee:50:ea:aa:86:5f:9c:e7: f5:35:33:4d:fc:ee:11:a4:cf:18:28:51:48:50:ab:63:02:de: 7a:46:32:98:15:9f:5a:e2:65:3c:1b:76:97:03:57:90:86:78: 75:8a:37:be:a8:b3:5e:ca:01:38:08:16:d2:8b:c0:51:1b:0a: e3:29:9a:ec:fb:9c:64:68:dc:96:76:81:0e:a5:1c:f7:aa:22: 9c:6d:3c:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkPe/yP6iPKYqdDhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZhYjUwMWItNmM2OS00NmE0LWI5MjQtYTA5YjY4Y2Ux OGNmMB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk NDIxZWMzZjgtMzhlMC00ZjE4LWE2YmYtMzQzNjA4OTE1OTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklpDSCfd/xjJcDdfOHQu2aTMYaKVak7NjGZt pWthB3Iwb/OTetbQMjSYLJ4uh7aQ1FzVwful22MMnesjqeZWvcIAza6WL4TPty8e pQrH/eRni7eDAOAGznTw3G6ivbsPGft59tuXT48I7X13TizCxWJb2b1YUv5rzZzn KfIoEwqYflTJzvk5rc8j4aZiW3dUZkUDljEw8v95IhiQb/U6GbQjgP6eruTSUuHA d9i0lioQFC140CDFgMEyOPDrmy3wVrRye9g2W5GPgqxCmoAwybbdIpAORcsSA1XG kiLdMdb9GxJ7Ldtq0WMUX1n9snRjkcvzsMEpZJe4f1aJd9IQTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMGChhyKa06rT24e/5paNC2D3N0EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFi NTAxYi02YzY5LTQ2YTQtYjkyNC1hMDliNjhjZTE4Y2YvMzI5MTVkYWUtNDJmMi0z OGQ3LTg2ZDQtZDkwMmU0ZDM1YThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTZhYjUwMWItNmM2OS00NmE0LWI5 MjQtYTA5YjY4Y2UxOGNmL2U2YWI1MDFiLTZjNjktNDZhNC1iOTI0LWEwOWI2OGNl MThjZi5jcmwwHwYDVR0jBBgwFoAU3NJzqCd+YUhl0UFSipG2IBCnAF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNmFiNTAxYi02YzY5LTQ2YTQtYjkyNC1hMDli NjhjZTE4Y2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgf48AJQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABVrCatCut4WGNGdat79EX3ilPSi4aeD4tGRlW6BaVOQ3jRhIEKp 92LCJMZALanhF7zeW5FHwaFNuT9aZAtOMBc2/RJrt5D5U+MGactm4pWICWMNAtRI pS+joCGPH8oGGN6ayMZSmgS5LQocbB+IIowKolhSvv3DuoKmxwPhwbBDA9eaDG2i cPibblP5X+GbO6l1XHPmyksrHC2SsW1F+q/JBpGKAlTxh7xYccnuUOqqhl+c5/U1 M0387hGkzxgoUUhQq2MC3npGMpgVn1riZTwbdpcDV5CGeHWKN76os17KATgIFtKL wFEbCuMpmuz7nGRo3JZ2gQ6lHPeqIpxtPFg= -----END CERTIFICATE-----Generated at Mon Apr 28 22:50:26 2025 by rpki-client