$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/3a5532ac-c330-360b-87ba-d368fdf0b0b6.roa File: 3a5532ac-c330-360b-87ba-d368fdf0b0b6.roa (raw, json) Hash identifier: kVQ34C8OMjE1upx5MOtqohOtrYbaL6/hAfDCTFN+Hj8= Subject key identifier: 79:88:88:CB:3B:D1:14:34:8C:46:8B:21:6F:4F:C5:DD:FC:7B:8E:2B Certificate issuer: /CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Certificate serial: 010D0C9F432858498769AEA488A87DAFFFB16000 Authority key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/3a5532ac-c330-360b-87ba-d368fdf0b0b6.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 3584 IP address blocks: 2607:2a00:2::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:ae:a4:88:a8:7d:af:ff:b1:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=9d5c65bd-6dc4-43e3-ad2a-b32601ec5e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:69:e2:35:65:93:b8:c9:d0:cb:04:f0:f9:00: 8c:8d:d8:42:90:1f:ca:62:84:ee:41:25:8d:53:a3: 65:3b:06:ee:65:53:ae:ba:a3:a5:00:7c:1c:98:85: be:81:3d:89:d8:23:b1:a9:ad:1d:62:9c:cb:07:8f: ec:09:e0:0f:8b:8c:2a:53:22:13:dd:8b:2d:40:40: d6:3d:96:4f:cf:06:11:bb:68:c2:02:39:41:6c:7a: 93:8b:0b:4f:e5:e6:e7:84:c1:c8:23:69:28:88:e1: 51:d8:4a:b5:a1:ad:68:c8:0f:b1:63:6c:9d:66:63: 34:e2:ac:08:06:f4:35:65:2a:d2:14:59:ca:54:1a: 49:98:56:e7:4b:86:67:9a:fe:42:e2:28:6b:00:54: 13:15:12:ac:5a:04:c0:cf:85:60:bd:50:82:2e:7d: fc:f3:d0:e9:11:fe:d5:0b:9d:2e:52:c8:a4:71:77: 74:36:37:f1:33:a2:6c:c9:90:8a:eb:53:18:e6:0a: 49:d5:41:e5:a1:fa:44:17:b6:49:6d:1d:e2:33:7b: 4a:31:91:fd:c0:7b:2f:36:93:82:c1:64:5b:c0:39: e2:72:8f:4a:1b:96:5e:46:3a:9f:70:ed:dd:1e:c5: 29:43:95:b1:e9:8a:ed:43:2b:0c:46:ea:21:03:f8: d7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:88:88:CB:3B:D1:14:34:8C:46:8B:21:6F:4F:C5:DD:FC:7B:8E:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/3a5532ac-c330-360b-87ba-d368fdf0b0b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl X509v3 Authority Key Identifier: keyid:BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer sbgp-ipAddrBlock: critical IPv6: 2607:2a00:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:c5:39:3d:28:52:d3:71:01:43:3f:2e:b1:53:41:ec:53:c2: 37:7e:2b:d2:d7:50:9a:fe:17:22:a9:f3:4c:46:50:a0:09:7f: 88:3e:50:6b:52:e3:e7:2b:65:56:8a:4d:e7:4a:b0:51:7d:69: bc:d6:34:1a:35:dc:f6:61:8a:63:00:8f:c0:0d:38:f3:b1:87: ff:e4:f6:a4:19:a6:5e:5a:fd:56:31:20:47:6a:f1:83:66:7b: a5:6f:d6:79:c8:b9:02:8d:a6:03:bd:d3:35:7d:2e:f6:59:16: 4d:67:b7:14:6a:5b:7e:c9:13:53:60:8f:73:47:15:31:86:c8: 78:7a:fc:97:05:62:8f:5e:a9:db:c7:ce:08:d9:48:a1:89:05: 1b:b3:53:e5:60:b4:00:64:e4:c4:9d:38:7e:cc:f6:92:ed:bf: c1:bc:08:9d:b3:85:87:b3:63:89:fc:51:cb:3d:3d:56:3d:39: 7a:6c:a5:6a:cf:7c:ec:84:99:09:1d:4b:a3:28:23:3c:55:f3: 47:d0:a2:11:fd:43:b5:b7:0d:57:57:73:a5:03:0c:12:2e:50: 5c:b9:09:0e:6b:66:ab:d2:a4:cf:23:14:e7:a7:a5:c6:01:40: d5:67:43:ab:24:89:5c:2c:0c:a6:34:28:fd:e5:a3:ed:06:73: 81:48:3f:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmHaa6kiKh9r/+xYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBjNDNiNzUtMTA2Zi00OWU3LWJmM2EtNGFlYjk0NTY2 ZTkwMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk OWQ1YzY1YmQtNmRjNC00M2UzLWFkMmEtYjMyNjAxZWM1ZTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2niNWWTuMnQywTw+QCMjdhCkB/KYoTuQSWN U6NlOwbuZVOuuqOlAHwcmIW+gT2J2COxqa0dYpzLB4/sCeAPi4wqUyIT3YstQEDW PZZPzwYRu2jCAjlBbHqTiwtP5ebnhMHII2koiOFR2Eq1oa1oyA+xY2ydZmM04qwI BvQ1ZSrSFFnKVBpJmFbnS4Znmv5C4ihrAFQTFRKsWgTAz4VgvVCCLn3889DpEf7V C50uUsikcXd0NjfxM6JsyZCK61MY5gpJ1UHlofpEF7ZJbR3iM3tKMZH9wHsvNpOC wWRbwDnico9KG5ZeRjqfcO3dHsUpQ5Wx6YrtQysMRuohA/jXtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHmIiMs70RQ0jEaLIW9Pxd38e44rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0 M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWViOTQ1NjZlOTAvM2E1NTMyYWMtYzMzMC0z NjBiLTg3YmEtZDM2OGZkZjBiMGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBjNDNiNzUtMTA2Zi00OWU3LWJm M2EtNGFlYjk0NTY2ZTkwL2IwYzQzYjc1LTEwNmYtNDllNy1iZjNhLTRhZWI5NDU2 NmU5MC5jcmwwHwYDVR0jBBgwFoAUu0SUXwFyTe65Irjq0C6iB25OIzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWVi OTQ1NjZlOTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcqAAAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACvFOT0oUtNxAUM/LrFTQexTwjd+K9LXUJr+FyKp80xGUKAJf4g+ UGtS4+crZVaKTedKsFF9abzWNBo13PZhimMAj8ANOPOxh//k9qQZpl5a/VYxIEdq 8YNme6Vv1nnIuQKNpgO90zV9LvZZFk1ntxRqW37JE1Ngj3NHFTGGyHh6/JcFYo9e qdvHzgjZSKGJBRuzU+VgtABk5MSdOH7M9pLtv8G8CJ2zhYezY4n8Ucs9PVY9OXps pWrPfOyEmQkdS6MoIzxV80fQohH9Q7W3DVdXc6UDDBIuUFy5CQ5rZqvSpM8jFOen pcYBQNVnQ6skiVwsDKY0KP3lo+0Gc4FIP6I= -----END CERTIFICATE-----Generated at Tue Apr 29 10:25:51 2025 by rpki-client