$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa File: 3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa (raw, json) Hash identifier: 5fjtjd/cCxWxpAlhFrOXQ/s48MpFGsFq/ACo/vcRNog= Subject key identifier: 08:0E:95:D8:77:B3:C8:D9:80:F0:B9:8F:5C:BD:6A:B8:91:3E:B6:7E Certificate issuer: /CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Certificate serial: 010D0C9F432858498339F1E8535F784E004A9800 Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 14230 IP address blocks: 2607:fb20::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:f1:e8:53:5f:78:4e:00:4a:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=578d2938-f074-4d08-ad01-a75336a8f485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e8:77:50:6f:0d:d2:09:51:af:e4:1c:c4:60: 14:c3:1e:94:23:62:8d:f9:27:58:12:13:41:8d:e6: a5:da:a3:31:9b:90:7a:98:99:9b:b8:f8:eb:12:76: 19:0d:d3:88:61:c4:ee:6b:b6:f0:29:bf:3a:5b:d1: 74:a8:bb:5e:7f:ac:cf:c8:7a:49:c2:82:54:d4:19: 3b:af:59:95:af:00:ad:15:5d:f8:76:1c:ed:76:f4: c4:68:50:79:1f:b4:04:51:61:76:b7:a3:8d:15:bc: 62:6e:67:26:04:ce:c8:5e:0a:4f:3b:9b:73:a5:cf: 0d:bf:fa:c8:d6:74:a0:83:f7:8e:ce:09:50:ad:28: 68:7c:91:ff:3e:13:5a:80:d7:cd:d1:18:03:eb:b7: 85:b8:bf:08:96:b9:40:65:d4:e7:2d:06:6f:78:9e: b3:64:42:88:4a:f9:65:4e:e3:fb:b1:92:e4:18:8f: 00:c2:92:51:d1:08:84:23:50:a7:ec:df:30:11:a9: 5b:f0:42:fe:92:8e:86:54:fe:29:de:1c:82:2a:d8: 78:b8:e3:03:6f:6b:3c:98:32:c7:b4:0b:a2:78:57: 39:3a:fc:cd:23:1a:7a:23:ce:a7:22:25:87:10:c1: 10:b7:90:71:44:35:54:98:cd:f2:82:a2:39:b0:f4: e7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0E:95:D8:77:B3:C8:D9:80:F0:B9:8F:5C:BD:6A:B8:91:3E:B6:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/3dcf6f67-8a4f-3e3d-a035-083713d6ced3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl X509v3 Authority Key Identifier: keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer sbgp-ipAddrBlock: critical IPv6: 2607:fb20::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:04:49:27:97:56:15:49:98:e2:c2:a9:e8:cc:4a:cb:e2:82: 0f:82:52:bf:76:93:0f:9b:0f:50:92:88:67:6e:21:b6:3d:04: 10:55:50:37:98:52:c0:ac:56:24:37:8f:77:e2:b3:71:a5:f0: 27:e5:d1:b3:b5:bd:88:0c:87:6f:f6:00:da:2a:59:a3:43:76: 9a:93:18:9c:cb:2d:69:4e:43:50:d2:8b:6c:03:43:b0:12:64: e2:d6:24:68:b2:2f:e0:62:92:b9:42:0c:61:83:03:f4:87:e4: 97:ab:1f:01:57:23:5c:6b:d8:26:f8:72:4f:65:ef:9d:96:54: 8b:37:5e:92:5a:69:7b:09:51:14:09:11:7e:d5:c6:c8:d8:ff: 9f:0a:ea:23:33:35:ac:b4:28:1c:bd:b7:09:63:09:ae:2d:51: 1a:f8:02:51:72:13:dd:58:54:05:31:3d:a6:9e:06:67:4d:f8: 1a:0d:6f:5c:93:2e:45:2b:9c:ab:b2:4c:bf:87:c4:4c:a1:da: 1f:8f:aa:0d:18:fe:65:24:4d:6c:b3:a8:fc:33:e8:74:bb:13: 1b:e4:61:cb:2f:0a:97:07:c6:9b:5d:8f:d4:84:56:e1:2c:f8: 8b:f7:51:42:6c:cb:13:99:84:36:e8:3e:e7:c3:4d:4d:aa:30: ee:d2:61:a1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmDOfHoU194TgBKmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhkZjM0NmQtM2Y2Ni00NTU1LWIyYWItNjdmNDUwZWZk Y2IzMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk NTc4ZDI5MzgtZjA3NC00ZDA4LWFkMDEtYTc1MzM2YThmNDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOh3UG8N0glRr+QcxGAUwx6UI2KN+SdYEhNB jeal2qMxm5B6mJmbuPjrEnYZDdOIYcTua7bwKb86W9F0qLtef6zPyHpJwoJU1Bk7 r1mVrwCtFV34dhztdvTEaFB5H7QEUWF2t6ONFbxibmcmBM7IXgpPO5tzpc8Nv/rI 1nSgg/eOzglQrShofJH/PhNagNfN0RgD67eFuL8IlrlAZdTnLQZveJ6zZEKISvll TuP7sZLkGI8AwpJR0QiEI1Cn7N8wEalb8EL+ko6GVP4p3hyCKth4uOMDb2s8mDLH tAuieFc5OvzNIxp6I86nIiWHEMEQt5BxRDVUmM3ygqI5sPTnNwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAgOldh3s8jZgPC5j1y9ariRPrZ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yOGRm MzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0NTBlZmRjYjMvM2RjZjZmNjctOGE0Zi0z ZTNkLWEwMzUtMDgzNzEzZDZjZWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjhkZjM0NmQtM2Y2Ni00NTU1LWIy YWItNjdmNDUwZWZkY2IzLzI4ZGYzNDZkLTNmNjYtNDU1NS1iMmFiLTY3ZjQ1MGVm ZGNiMy5jcmwwHwYDVR0jBBgwFoAU0TE0tLR3LAyK//WCA1AodurlHZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yOGRmMzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0 NTBlZmRjYjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf7IDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBsBEknl1YVSZjiwqnozErL4oIPglK/dpMPmw9QkohnbiG2PQQQVVA3 mFLArFYkN4934rNxpfAn5dGztb2IDIdv9gDaKlmjQ3aakxicyy1pTkNQ0otsA0Ow EmTi1iRosi/gYpK5QgxhgwP0h+SXqx8BVyNca9gm+HJPZe+dllSLN16SWml7CVEU CRF+1cbI2P+fCuojMzWstCgcvbcJYwmuLVEa+AJRchPdWFQFMT2mngZnTfgaDW9c ky5FK5yrsky/h8RModofj6oNGP5lJE1ss6j8M+h0uxMb5GHLLwqXB8abXY/UhFbh LPiL91FCbMsTmYQ26D7nw01NqjDu0mGh -----END CERTIFICATE-----Generated at Sun Apr 27 12:56:38 2025 by rpki-client