$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/797a34bc-e5eb-3080-8424-f9de46b2953e.roa File: 797a34bc-e5eb-3080-8424-f9de46b2953e.roa (raw, json) Hash identifier: pl+lNvp9jjrjpSFtbM7BSF5aZE4MxZyOX6FRA5KCZFc= Subject key identifier: 71:18:36:EA:F3:82:7E:98:85:AA:54:E7:54:95:13:75:04:6C:A2:6A Certificate issuer: /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Certificate serial: 010D0C9F4328584973DEE61A7158622AEC97BB40 Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/797a34bc-e5eb-3080-8424-f9de46b2953e.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 2152 IP address blocks: 2607:cc80:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:e6:1a:71:58:62:2a:ec:97:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=ac57f7bf-b7dd-4de2-9817-81e78f24d195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5d:1a:32:40:33:f6:d7:66:ca:7d:7a:ef:a2: 3d:8b:2a:8c:c0:8f:d0:6f:c3:e7:ab:83:c0:d3:33: dd:b4:e2:67:06:fe:ef:5b:60:d5:9c:01:18:a2:bb: 3a:bb:d6:c4:b8:9e:e1:2a:34:3b:32:48:ab:bc:2b: e1:1e:1e:d1:12:ab:da:58:5c:79:69:cb:07:1c:d9: 77:3b:7a:a7:fe:b9:cd:50:b5:ec:24:d3:42:3f:06: 67:a8:38:a4:64:9c:f1:d2:12:c3:66:07:b1:db:6b: 54:da:ae:50:df:e0:67:cc:34:15:89:4d:08:7f:02: e0:33:b4:32:80:ef:c0:07:bd:b6:fe:52:15:58:4a: 30:ba:6e:ba:41:55:23:19:bb:a7:cd:a5:6d:f1:ce: 9d:4c:c0:19:30:72:3f:79:64:ab:34:1c:b8:82:2d: 6d:76:ee:74:29:55:c3:08:b9:9e:14:54:98:f4:00: 88:c1:7e:b0:85:c7:ae:2c:6d:33:e1:fe:1a:8f:3c: 0c:b1:0b:b6:c7:f5:d0:a5:0a:d9:7c:ef:0a:2e:92: 1f:78:71:f6:b6:2c:36:85:4e:ff:45:a9:a7:9f:16: b6:21:3e:46:76:a8:1a:5e:8f:96:ba:58:a7:a0:85: 85:16:c9:2d:0d:7d:4a:dd:ec:82:dd:4e:e0:9d:bd: ef:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:18:36:EA:F3:82:7E:98:85:AA:54:E7:54:95:13:75:04:6C:A2:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/797a34bc-e5eb-3080-8424-f9de46b2953e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl X509v3 Authority Key Identifier: keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer sbgp-ipAddrBlock: critical IPv6: 2607:cc80:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:da:86:b4:00:59:08:9d:94:66:7c:66:a9:7b:4f:c4:73:6b: 46:e2:74:d2:24:a7:8b:d2:1f:7c:6f:21:11:32:01:e7:e4:54: b0:e0:4d:1c:34:a0:bc:9f:5c:fb:72:98:ab:3e:47:9a:ed:a9: 15:b9:f3:ee:77:1a:0a:e5:f4:e7:18:54:2a:29:f5:24:eb:96: 23:52:25:09:17:59:ff:b6:23:6c:89:19:25:b1:1a:ad:2a:83: e6:6e:71:0f:ba:46:9f:44:ba:eb:cb:e6:f3:bc:95:3e:9a:04: ff:00:89:64:3f:6c:06:a7:b9:65:90:91:38:6a:bb:d2:53:a8: 4d:c3:b1:98:6e:86:39:a4:37:cd:50:2f:d2:a9:1a:52:c6:3a: 51:28:38:d4:1b:50:3b:d2:e8:f1:45:76:c5:01:42:b6:6d:ca: b3:60:15:d1:1f:c0:16:43:13:c2:34:6a:32:f8:6d:68:a0:3d: 28:a0:93:4c:6e:9b:05:90:af:cf:d2:34:66:0a:da:b4:d4:e0: 03:da:8d:b0:61:13:9a:22:af:c4:cb:eb:fd:2f:0e:1d:d4:37: f2:8d:7d:12:1a:51:2f:73:90:a9:03:03:3f:17:61:92:6d:81: 71:54:82:ba:8a:6c:e6:bb:36:a2:24:a4:d2:85:af:e0:a4:06: b3:2d:d5:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElz3uYacVhiKuyXu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE1ZDNmZGItN2MyZC00MzkwLWE3MmYtZmE0NmYwMmY0 MDc4MB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk YWM1N2Y3YmYtYjdkZC00ZGUyLTk4MTctODFlNzhmMjRkMTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgV0aMkAz9tdmyn1676I9iyqMwI/Qb8Pnq4PA 0zPdtOJnBv7vW2DVnAEYors6u9bEuJ7hKjQ7MkirvCvhHh7REqvaWFx5acsHHNl3 O3qn/rnNULXsJNNCPwZnqDikZJzx0hLDZgex22tU2q5Q3+BnzDQViU0IfwLgM7Qy gO/AB722/lIVWEowum66QVUjGbunzaVt8c6dTMAZMHI/eWSrNBy4gi1tdu50KVXD CLmeFFSY9ACIwX6whceuLG0z4f4ajzwMsQu2x/XQpQrZfO8KLpIfeHH2tiw2hU7/ Ramnnxa2IT5GdqgaXo+WulinoIWFFsktDX1K3eyC3U7gnb3vYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHEYNurzgn6YhapU51SVE3UEbKJqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMTVk M2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2ZjAyZjQwNzgvNzk3YTM0YmMtZTVlYi0z MDgwLTg0MjQtZjlkZTQ2YjI5NTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTE1ZDNmZGItN2MyZC00MzkwLWE3 MmYtZmE0NmYwMmY0MDc4L2UxNWQzZmRiLTdjMmQtNDM5MC1hNzJmLWZhNDZmMDJm NDA3OC5jcmwwHwYDVR0jBBgwFoAUEMqrDaYVw2cS3TXs0nMj95zDq7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMTVkM2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2 ZjAyZjQwNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfMgCAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK3ahrQAWQidlGZ8Zql7T8Rza0bidNIkp4vSH3xvIREyAefkVLDg TRw0oLyfXPtymKs+R5rtqRW58+53Ggrl9OcYVCop9STrliNSJQkXWf+2I2yJGSWx Gq0qg+ZucQ+6Rp9EuuvL5vO8lT6aBP8AiWQ/bAanuWWQkThqu9JTqE3DsZhuhjmk N81QL9KpGlLGOlEoONQbUDvS6PFFdsUBQrZtyrNgFdEfwBZDE8I0ajL4bWigPSig k0xumwWQr8/SNGYK2rTU4APajbBhE5oir8TL6/0vDh3UN/KNfRIaUS9zkKkDAz8X YZJtgXFUgrqKbOa7NqIkpNKFr+CkBrMt1bY= -----END CERTIFICATE-----Generated at Tue Apr 29 09:54:49 2025 by rpki-client