$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/b958c9c9-ab91-3b4d-ac8b-07578817d88d.roa File: b958c9c9-ab91-3b4d-ac8b-07578817d88d.roa (raw, json) Hash identifier: TDVzQ5NN1aWbn0/zL3MTTJuKM6mBDlQh0kOTkniTWO0= Subject key identifier: 24:AA:AD:83:D3:22:4C:E8:FC:25:6E:23:88:7F:80:90:DA:9E:83:22 Certificate issuer: /CN=a7bb872d-e597-498e-8bd5-d2efae320554 Certificate serial: 010D0C9F43285849806F19F1D883D4DD5336B4A0 Authority key identifier: 0B:C1:1F:4E:79:79:D6:3F:8B:E2:4A:B8:4F:99:21:03:79:42:69:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/b958c9c9-ab91-3b4d-ac8b-07578817d88d.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 62890 IP address blocks: 2606:ed40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a7bb872d-e597-498e-8bd5-d2efae320554.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a7bb872d-e597-498e-8bd5-d2efae320554.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:19:f1:d8:83:d4:dd:53:36:b4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7bb872d-e597-498e-8bd5-d2efae320554 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=16b32ad5-120c-462d-9828-7f61c4210a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e9:98:d9:98:dc:ec:40:ee:18:9d:92:b1:cc: d5:49:59:67:b0:e0:cd:f0:35:75:01:e0:42:8e:bc: fe:dd:84:66:fd:52:f2:a8:f2:09:d5:43:bc:a1:1a: e3:ce:33:2f:1c:c7:a8:61:b0:2e:46:5d:df:01:1a: fc:5a:d0:66:84:7d:c4:cb:bf:54:6f:f7:bd:ce:28: be:17:44:09:75:0f:88:da:d0:2f:80:42:fb:dc:31: c8:d9:8e:92:4a:0f:c1:a8:f5:2e:44:2b:9e:de:6f: 47:bf:3e:81:69:56:b2:c3:85:84:43:4b:8f:6d:5a: 78:52:79:a2:17:c5:3a:e4:33:91:c9:aa:2e:9c:76: 0f:30:97:1d:d9:91:48:b5:75:2e:00:a8:49:db:1c: 98:e5:58:cd:df:22:a7:29:6f:41:19:54:d7:e0:4b: b2:2f:74:e9:af:1d:ad:96:31:68:64:45:35:ea:92: 07:ac:97:40:1c:83:23:0d:23:72:4f:a0:b4:93:63: 72:da:0b:b4:db:e2:8b:83:ec:09:2e:cd:c9:49:74: 74:9b:d3:75:f2:9e:9f:1c:b4:c0:2f:51:95:2b:41: cb:18:33:01:8f:f5:a9:51:a4:55:24:2a:a0:ad:05: a2:f3:72:87:e3:36:7f:fb:ad:bd:c2:c7:44:e8:65: 89:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AA:AD:83:D3:22:4C:E8:FC:25:6E:23:88:7F:80:90:DA:9E:83:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/b958c9c9-ab91-3b4d-ac8b-07578817d88d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a7bb872d-e597-498e-8bd5-d2efae320554.crl X509v3 Authority Key Identifier: keyid:0B:C1:1F:4E:79:79:D6:3F:8B:E2:4A:B8:4F:99:21:03:79:42:69:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554.cer sbgp-ipAddrBlock: critical IPv6: 2606:ed40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:68:32:86:c0:6a:07:6c:13:b3:86:5e:fe:0e:0f:ea:ae:55: 13:f7:ff:1d:b0:6a:d1:8c:99:37:99:f7:7a:52:47:b1:a9:9b: 57:2c:f0:fc:81:67:7b:22:70:d3:67:ba:39:b2:b9:6f:b4:34: 0e:52:33:78:0e:6a:74:dc:74:04:99:f5:c1:e2:ea:70:fd:ca: 4f:57:53:98:1e:c2:02:4c:bd:8c:8b:de:23:3d:f6:50:3c:3a: 28:99:53:a0:21:2c:92:2a:89:c6:88:5b:10:b1:d3:09:d1:63: fa:22:9e:e9:de:e4:f5:34:d1:5d:bc:d5:a9:b5:08:fa:34:f2: bb:8f:c2:3b:c5:ae:60:29:66:61:bc:56:81:e4:0d:84:9f:a6: 47:53:86:0c:50:e9:de:31:2a:5b:05:05:8a:65:af:8f:51:7a: 24:bd:53:81:59:e0:54:61:a5:6b:5d:e9:14:73:cd:86:51:b2: 91:90:f1:51:ea:51:fe:49:b8:b6:5d:1a:0c:00:12:b4:bf:b6: c8:8d:87:2a:de:85:c0:c9:44:9a:d2:f9:a8:7b:8d:15:db:57: 43:d0:67:72:5a:43:49:1e:65:03:03:cd:21:d7:43:86:3c:6a: 31:f5:73:bd:bd:d9:73:08:bb:c5:f8:3e:14:fe:96:f4:5f:cb: a7:32:c4:5a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmAbxnx2IPU3VM2tKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdiYjg3MmQtZTU5Ny00OThlLThiZDUtZDJlZmFlMzIw NTU0MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk MTZiMzJhZDUtMTIwYy00NjJkLTk4MjgtN2Y2MWM0MjEwYTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlemY2Zjc7EDuGJ2SsczVSVlnsODN8DV1AeBC jrz+3YRm/VLyqPIJ1UO8oRrjzjMvHMeoYbAuRl3fARr8WtBmhH3Ey79Ub/e9zii+ F0QJdQ+I2tAvgEL73DHI2Y6SSg/BqPUuRCue3m9Hvz6BaVayw4WEQ0uPbVp4Unmi F8U65DORyaounHYPMJcd2ZFItXUuAKhJ2xyY5VjN3yKnKW9BGVTX4EuyL3Tprx2t ljFoZEU16pIHrJdAHIMjDSNyT6C0k2Ny2gu02+KLg+wJLs3JSXR0m9N18p6fHLTA L1GVK0HLGDMBj/WpUaRVJCqgrQWi83KH4zZ/+629wsdE6GWJvQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCSqrYPTIkzo/CVuI4h/gJDanoMiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hN2Ji ODcyZC1lNTk3LTQ5OGUtOGJkNS1kMmVmYWUzMjA1NTQvYjk1OGM5YzktYWI5MS0z YjRkLWFjOGItMDc1Nzg4MTdkODhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTdiYjg3MmQtZTU5Ny00OThlLThi ZDUtZDJlZmFlMzIwNTU0L2E3YmI4NzJkLWU1OTctNDk4ZS04YmQ1LWQyZWZhZTMy MDU1NC5jcmwwHwYDVR0jBBgwFoAUC8EfTnl51j+L4kq4T5khA3lCaX0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hN2JiODcyZC1lNTk3LTQ5OGUtOGJkNS1kMmVm YWUzMjA1NTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbtQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCaaDKGwGoHbBOzhl7+Dg/qrlUT9/8dsGrRjJk3mfd6UkexqZtXLPD8 gWd7InDTZ7o5srlvtDQOUjN4Dmp03HQEmfXB4upw/cpPV1OYHsICTL2Mi94jPfZQ PDoomVOgISySKonGiFsQsdMJ0WP6Ip7p3uT1NNFdvNWptQj6NPK7j8I7xa5gKWZh vFaB5A2En6ZHU4YMUOneMSpbBQWKZa+PUXokvVOBWeBUYaVrXekUc82GUbKRkPFR 6lH+Sbi2XRoMABK0v7bIjYcq3oXAyUSa0vmoe40V21dD0GdyWkNJHmUDA80h10OG PGox9XO9vdlzCLvF+D4U/pb0X8unMsRa -----END CERTIFICATE-----Generated at Sun Apr 27 18:29:22 2025 by rpki-client