$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/90f541f6-d068-3fd7-881e-02e73edc9f1d.roa File: 90f541f6-d068-3fd7-881e-02e73edc9f1d.roa (raw, json) Hash identifier: +vKw5KJpLVVNXA73IwN/H0kurmvDQU1Nyr/6RJ4A3gs= Subject key identifier: 05:A8:CA:A6:DC:60:FF:E2:B1:E7:D5:E5:B8:3B:2A:72:A3:E9:6B:5C Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F43285848DE1B6033AD1802D8F788C480 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/90f541f6-d068-3fd7-881e-02e73edc9f1d.roa Signing time: Thu 13 Feb 2025 09:31:30 +0000 ROA not before: Thu 13 Feb 2025 09:31:30 +0000 ROA not after: Wed 14 May 2025 08:31:30 +0000 asID: 54994 IP address blocks: 2607:3f40:ff26::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:1b:60:33:ad:18:02:d8:f7:88:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Feb 13 09:31:30 2025 GMT Not After : May 14 08:31:30 2025 GMT Subject: CN=ce95132d-63b1-42c3-8b80-6c8c3ee1f684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5b:b3:d1:c3:d9:12:43:fe:a4:78:88:3e:ab: 32:04:10:c3:6a:3b:1c:1b:0e:43:99:71:d0:ad:e9: 91:89:76:44:20:df:fc:53:d8:db:f1:ab:46:ae:0e: c0:17:79:2a:97:ca:e1:af:b3:a4:54:1c:d7:a9:15: 42:9c:b4:26:c4:da:79:bc:ce:20:b6:fe:9c:6b:82: 5f:aa:b6:62:66:dc:b2:ca:79:26:25:4b:f2:c5:1d: 31:f3:ad:d8:25:83:fe:20:77:8f:a0:c5:4c:12:80: 10:6b:11:04:81:9c:af:7a:f6:69:9d:b6:82:72:b9: b4:5f:f2:12:98:0d:01:96:df:89:12:0f:92:0a:f5: fa:22:b7:b9:13:84:8a:68:d2:ec:05:bb:52:e9:12: ce:14:1f:81:c2:7a:ba:b0:af:91:49:b1:de:d1:ef: 38:3b:91:31:23:91:ea:04:26:db:34:9a:00:47:ba: 57:e3:d2:a8:52:17:51:d7:f4:58:35:b0:5e:43:99: 27:49:34:66:ae:26:83:8b:67:0f:ca:34:ba:03:63: b8:b6:51:0c:d1:61:74:4a:29:20:b5:07:2e:03:50: 81:04:85:5a:1e:93:19:d4:a7:77:d7:1c:48:d6:93: 4a:3c:d2:c3:ea:64:f2:19:a2:73:89:f4:8e:d2:df: a4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A8:CA:A6:DC:60:FF:E2:B1:E7:D5:E5:B8:3B:2A:72:A3:E9:6B:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/90f541f6-d068-3fd7-881e-02e73edc9f1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv6: 2607:3f40:ff26::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:de:87:db:17:dd:dd:97:a3:93:0f:90:ca:2b:01:8d:b1:77: 73:b4:62:a3:71:40:bd:a5:6b:f0:02:fa:98:7c:e7:78:1e:bd: a2:98:44:cb:e5:0c:4b:4d:86:9a:bf:f0:83:19:4a:6b:d3:1a: a1:f6:55:2a:ef:5f:bb:b7:a2:5c:78:59:42:2b:13:eb:5b:cf: 1e:4c:59:64:a4:c7:b5:99:de:c7:4d:af:06:ea:1c:96:c1:55: 27:38:c5:54:bf:6c:f1:48:3a:c8:e4:a0:52:27:99:d6:1b:7a: 91:20:08:11:76:d9:70:cb:19:2f:57:74:b5:5a:4b:81:6e:da: 41:93:0d:db:3b:85:e5:f6:6c:29:6e:e7:ea:fd:ae:07:a4:b1: 7b:cf:69:82:97:e1:7e:7d:0e:00:82:e8:55:60:7a:7d:14:f4: 76:60:11:b7:b5:a0:50:ae:5f:40:4d:1e:6e:e9:c8:f2:98:dc: 65:70:82:0e:ad:2f:ed:5f:da:9b:be:4a:cb:d3:f7:3e:11:a6: ff:d0:4c:e4:da:cb:12:37:2a:c9:86:cd:06:06:82:5d:ef:c9: 11:8a:7b:14:1f:95:67:21:8a:2d:91:44:f2:37:bd:7d:f7:9f: 64:ca:c2:4f:30:0b:e1:91:6b:37:45:2d:ed:da:d0:84:62:b2: 65:7e:5d:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjeG2AzrRgC2PeIxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDIxMzA5MzEzMFoXDTI1MDUxNDA4MzEzMFowLzEtMCsGA1UEAxMk Y2U5NTEzMmQtNjNiMS00MmMzLThiODAtNmM4YzNlZTFmNjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVuz0cPZEkP+pHiIPqsyBBDDajscGw5DmXHQ remRiXZEIN/8U9jb8atGrg7AF3kql8rhr7OkVBzXqRVCnLQmxNp5vM4gtv6ca4Jf qrZiZtyyynkmJUvyxR0x863YJYP+IHePoMVMEoAQaxEEgZyvevZpnbaCcrm0X/IS mA0Blt+JEg+SCvX6Ire5E4SKaNLsBbtS6RLOFB+Bwnq6sK+RSbHe0e84O5ExI5Hq BCbbNJoAR7pX49KoUhdR1/RYNbBeQ5knSTRmriaDi2cPyjS6A2O4tlEM0WF0Sikg tQcuA1CBBIVaHpMZ1Kd31xxI1pNKPNLD6mTyGaJzifSO0t+kkwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAWoyqbcYP/isefV5bg7KnKj6WtcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvOTBmNTQxZjYtZDA2OC0z ZmQ3LTg4MWUtMDJlNzNlZGM5ZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgc/QP8m MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACDeh9sX3d2Xo5MPkMorAY2xd3O0YqNxQL2la/AC+ph853gevaKY RMvlDEtNhpq/8IMZSmvTGqH2VSrvX7u3olx4WUIrE+tbzx5MWWSkx7WZ3sdNrwbq HJbBVSc4xVS/bPFIOsjkoFInmdYbepEgCBF22XDLGS9XdLVaS4Fu2kGTDds7heX2 bClu5+r9rgeksXvPaYKX4X59DgCC6FVgen0U9HZgEbe1oFCuX0BNHm7pyPKY3GVw gg6tL+1f2pu+SsvT9z4Rpv/QTOTayxI3KsmGzQYGgl3vyRGKexQflWchii2RRPI3 vX33n2TKwk8wC+GRazdFLe3a0IRismV+XYM= -----END CERTIFICATE-----Generated at Sun Apr 27 08:54:15 2025 by rpki-client