$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/3f4859ee-4094-37c0-a7ca-e5788edb5cd4.roa File: 3f4859ee-4094-37c0-a7ca-e5788edb5cd4.roa (raw, json) Hash identifier: TlAE5cDFTKTkfw1sHMZUXkVK8CDQ4f2X7UpMdjgnBPg= Subject key identifier: 08:1D:5F:B9:DB:5F:CC:20:4E:93:C3:1F:66:3D:C5:54:ED:90:2B:CE Certificate issuer: /CN=1f54df1e-3d93-4ac5-b209-e24261193230 Certificate serial: 010D0C9F4328584962A512595D98EF4A89B05800 Authority key identifier: C1:18:CE:85:A0:84:C9:29:0D:E8:36:23:F1:B1:62:A2:EA:B8:74:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/3f4859ee-4094-37c0-a7ca-e5788edb5cd4.roa Signing time: Tue 01 Apr 2025 20:55:39 +0000 ROA not before: Tue 01 Apr 2025 20:55:39 +0000 ROA not after: Mon 30 Jun 2025 20:55:39 +0000 asID: 30211 IP address blocks: 2604:ff40::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:62:a5:12:59:5d:98:ef:4a:89:b0:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f54df1e-3d93-4ac5-b209-e24261193230 Validity Not Before: Apr 1 20:55:39 2025 GMT Not After : Jun 30 20:55:39 2025 GMT Subject: CN=0e29d0de-0042-4ad5-b2ad-e075448a3c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c9:a0:e2:1e:b6:3e:1d:0a:98:49:77:93:fc: 81:e7:aa:d5:01:0a:23:4d:df:d5:f6:50:d0:8a:70: 7b:ce:77:6e:5b:88:1e:d7:d4:33:33:d8:c0:1d:06: cf:13:38:6d:1f:0b:de:b0:59:a4:0f:2a:b2:99:e9: 2e:f7:e1:a7:32:ab:aa:b2:5d:15:ce:70:b3:10:14: e4:a2:8b:da:2d:a6:76:8c:8c:6f:ce:db:04:b6:72: f9:57:19:4a:37:bd:98:9a:50:56:5e:f1:8f:7c:45: b0:7e:55:84:4c:f1:bf:cc:d0:b8:14:bd:90:10:03: f7:ac:28:74:06:f3:3f:9a:ce:27:39:48:f5:09:97: 6d:64:9b:1b:20:f6:1e:30:fd:86:55:ed:e0:ed:cc: 02:9b:6a:ce:8b:0d:0a:f7:ea:d2:5a:0c:0a:75:de: d2:bb:81:be:7b:ea:73:a6:67:61:43:55:22:6f:8d: 38:71:7b:58:8a:df:f5:ce:8e:24:f7:0d:8f:40:94: bc:4c:19:56:78:f9:89:f0:8f:7e:a1:f1:d4:2f:b9: 8b:04:a0:ce:93:dd:b6:cb:06:00:a2:f0:0d:94:ba: bf:43:a9:31:79:bb:4e:14:1d:10:a3:13:23:9a:cb: c5:f2:e0:39:a8:84:2d:ca:a6:13:cb:4d:a4:94:92: 93:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:1D:5F:B9:DB:5F:CC:20:4E:93:C3:1F:66:3D:C5:54:ED:90:2B:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/3f4859ee-4094-37c0-a7ca-e5788edb5cd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.crl X509v3 Authority Key Identifier: keyid:C1:18:CE:85:A0:84:C9:29:0D:E8:36:23:F1:B1:62:A2:EA:B8:74:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer sbgp-ipAddrBlock: critical IPv6: 2604:ff40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:db:d1:0b:20:e9:ea:ee:b0:71:77:bd:72:96:8e:f9:69:59: c0:49:bc:a0:74:74:72:94:6c:4d:2b:e5:d6:d3:1a:10:00:84: a3:4d:8e:f1:31:3e:39:56:97:3f:e1:d8:20:c8:40:7f:44:59: 7c:59:9d:c4:8e:7a:65:15:93:0e:ec:fb:1e:a9:25:90:72:a7: 22:65:71:1e:8e:40:e6:70:4a:f7:2e:53:fb:c7:a8:ff:32:60: a8:80:9c:28:24:11:fa:22:cb:e4:46:12:e6:13:19:9b:de:32: 8b:64:0a:e7:44:e2:c5:8f:56:e7:07:e0:dc:3c:82:fd:e4:b9: 74:53:12:1c:66:12:1c:bb:e1:c5:17:c7:45:0f:d3:22:26:af: f1:2f:ac:a4:d9:97:4d:5f:ee:9d:72:e2:e0:5f:04:d4:86:04: b2:bf:7a:98:fe:59:e9:6d:a2:6e:a8:07:41:88:7b:6d:1c:87: c6:03:1e:3b:1e:75:cb:42:b0:6f:bf:d5:59:14:a9:a8:1b:9a: 45:d0:bd:78:66:d0:00:c8:c1:ea:88:1f:0c:50:a6:09:b7:c1: 77:7c:8a:6d:dc:bb:f9:76:8e:d6:ad:59:6b:1e:f4:3e:1b:a2: c4:8e:87:b8:33:27:43:3f:23:12:0a:1a:39:93:f8:4e:37:84: 90:02:83:95 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElipRJZXZjvSomwWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1NGRmMWUtM2Q5My00YWM1LWIyMDktZTI0MjYxMTkz MjMwMB4XDTI1MDQwMTIwNTUzOVoXDTI1MDYzMDIwNTUzOVowLzEtMCsGA1UEAxMk MGUyOWQwZGUtMDA0Mi00YWQ1LWIyYWQtZTA3NTQ0OGEzYzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8mg4h62Ph0KmEl3k/yB56rVAQojTd/V9lDQ inB7znduW4ge19QzM9jAHQbPEzhtHwvesFmkDyqymeku9+GnMquqsl0VznCzEBTk oovaLaZ2jIxvztsEtnL5VxlKN72YmlBWXvGPfEWwflWETPG/zNC4FL2QEAP3rCh0 BvM/ms4nOUj1CZdtZJsbIPYeMP2GVe3g7cwCm2rOiw0K9+rSWgwKdd7Su4G+e+pz pmdhQ1Uib404cXtYit/1zo4k9w2PQJS8TBlWePmJ8I9+ofHUL7mLBKDOk922ywYA ovANlLq/Q6kxebtOFB0QoxMjmsvF8uA5qIQtyqYTy02klJKTEwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAgdX7nbX8wgTpPDH2Y9xVTtkCvOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZjU0 ZGYxZS0zZDkzLTRhYzUtYjIwOS1lMjQyNjExOTMyMzAvM2Y0ODU5ZWUtNDA5NC0z N2MwLWE3Y2EtZTU3ODhlZGI1Y2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWY1NGRmMWUtM2Q5My00YWM1LWIy MDktZTI0MjYxMTkzMjMwLzFmNTRkZjFlLTNkOTMtNGFjNS1iMjA5LWUyNDI2MTE5 MzIzMC5jcmwwHwYDVR0jBBgwFoAUwRjOhaCEySkN6DYj8bFiouq4dPIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZjU0ZGYxZS0zZDkzLTRhYzUtYjIwOS1lMjQy NjExOTMyMzAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT/QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAc29ELIOnq7rBxd71ylo75aVnASbygdHRylGxNK+XW0xoQAISjTY7x MT45Vpc/4dggyEB/RFl8WZ3EjnplFZMO7PseqSWQcqciZXEejkDmcEr3LlP7x6j/ MmCogJwoJBH6IsvkRhLmExmb3jKLZArnROLFj1bnB+DcPIL95Ll0UxIcZhIcu+HF F8dFD9MiJq/xL6yk2ZdNX+6dcuLgXwTUhgSyv3qY/lnpbaJuqAdBiHttHIfGAx47 HnXLQrBvv9VZFKmoG5pF0L14ZtAAyMHqiB8MUKYJt8F3fIpt3Lv5do7WrVlrHvQ+ G6LEjoe4MydDPyMSCho5k/hON4SQAoOV -----END CERTIFICATE-----Generated at Tue Apr 29 05:27:34 2025 by rpki-client