$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/c3a3580b-378c-3dba-9fb3-ce13215f65ab.roa File: c3a3580b-378c-3dba-9fb3-ce13215f65ab.roa (raw, json) Hash identifier: Mq5XWiB41XHvHMwzcpG84TDyloB6R73qT++YaphdMgo= Subject key identifier: DC:D6:0C:23:70:A3:21:CE:6F:BD:69:68:3F:47:A5:3A:0D:19:12:BB Certificate issuer: /CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e Certificate serial: 010D0C9F43285849B31132536E24DF2E0B0F1000 Authority key identifier: AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/c3a3580b-378c-3dba-9fb3-ce13215f65ab.roa Signing time: Wed 30 Apr 2025 16:18:10 +0000 ROA not before: Wed 30 Apr 2025 16:18:10 +0000 ROA not after: Tue 29 Jul 2025 16:18:10 +0000 asID: 3477 IP address blocks: 2607:9bc0:1010::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b3:11:32:53:6e:24:df:2e:0b:0f:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e Validity Not Before: Apr 30 16:18:10 2025 GMT Not After : Jul 29 16:18:10 2025 GMT Subject: CN=afd33d0c-18cb-49f3-ab6d-04a0a18758de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8f:bb:da:25:6b:1d:a0:77:45:6b:39:57:61: 19:31:06:0e:0c:63:8d:e6:ef:ee:33:42:94:a8:de: f0:ab:d1:4e:75:c9:4d:f0:49:c8:d5:66:2b:0e:b4: 39:97:01:a6:1c:63:ce:98:56:cd:f8:d8:2a:96:a8: bc:c6:07:de:a8:3c:3b:d8:7e:4a:bd:27:72:81:91: 41:77:38:b9:07:75:6e:88:25:04:26:45:96:ab:ee: 00:a4:a9:3b:1a:38:26:b3:4b:5b:9c:02:d9:71:cb: 7c:6b:dc:48:32:0c:f8:ff:aa:42:af:e2:99:55:66: b2:7c:fd:1e:23:14:8c:63:d6:27:0b:7c:92:ef:68: 81:92:bb:f8:92:59:ae:eb:89:4b:72:eb:52:e7:db: 42:d1:62:d0:21:b0:fe:37:b6:d7:00:52:4f:62:9c: 1f:6f:a9:20:78:13:41:5b:f9:43:a6:7d:61:65:3f: 46:65:52:5d:af:b8:c8:79:d5:d0:3c:87:89:42:cb: cc:31:e9:b5:91:10:8d:9a:3e:7f:7c:e1:01:e2:c5: 6e:a7:46:b5:45:21:e4:b2:04:2d:2f:1d:1f:ea:08: 07:c5:57:d6:19:16:64:1e:26:41:8c:47:2c:2b:9c: 1d:58:c2:1a:ff:59:7b:dc:d3:45:ee:0a:ae:89:15: 82:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D6:0C:23:70:A3:21:CE:6F:BD:69:68:3F:47:A5:3A:0D:19:12:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/c3a3580b-378c-3dba-9fb3-ce13215f65ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl X509v3 Authority Key Identifier: keyid:AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer sbgp-ipAddrBlock: critical IPv6: 2607:9bc0:1010::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:36:47:92:8b:df:91:cf:3f:60:67:59:ea:5f:21:a9:09:e2: 3b:a8:c4:91:3a:fd:3c:93:20:33:5f:1e:69:17:d2:69:98:ed: 43:da:f5:73:a9:1f:63:0d:73:de:ca:ca:f3:14:f8:be:3f:23: 1b:47:7e:22:67:42:82:16:4c:6a:4b:f2:dd:b4:6c:ba:92:b5: 15:ae:1a:bd:60:23:02:af:cf:cf:15:33:eb:6d:ff:f1:bf:02: 89:37:8d:15:c1:3c:84:41:ef:a9:e5:36:9f:6c:af:8d:0a:88: 0e:ec:1b:ab:7f:00:da:eb:f5:88:96:69:44:dd:bd:3f:3d:18: ab:d3:de:19:17:e8:01:fa:32:13:a7:ea:e8:22:0b:1d:c6:c3: 59:54:fd:ac:da:f2:d1:da:c3:fc:65:d2:c6:3c:21:41:90:c2: ff:a5:b1:bf:6c:6e:38:7a:30:1f:0c:ab:ec:05:20:9d:de:2d: 73:14:98:da:e8:05:4b:25:5d:dc:b4:53:60:12:02:21:b7:a0: 2d:4b:db:bf:c0:2b:97:d6:16:c1:ad:4c:6f:f7:39:57:19:a0: fb:21:be:8b:27:c7:ff:a1:81:22:55:98:2f:e1:90:37:39:9c: d9:4a:fa:bb:10:fe:71:0a:55:b1:ea:47:bc:f1:1e:3a:a4:c1: c3:8e:ec:ae -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmzETJTbiTfLgsPEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJkYThlYTItYTE2OC00YThiLWIwMWItMjFhNDIxZTcx MzBlMB4XDTI1MDQzMDE2MTgxMFoXDTI1MDcyOTE2MTgxMFowLzEtMCsGA1UEAxMk YWZkMzNkMGMtMThjYi00OWYzLWFiNmQtMDRhMGExODc1OGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4+72iVrHaB3RWs5V2EZMQYODGON5u/uM0KU qN7wq9FOdclN8EnI1WYrDrQ5lwGmHGPOmFbN+Ngqlqi8xgfeqDw72H5KvSdygZFB dzi5B3VuiCUEJkWWq+4ApKk7Gjgms0tbnALZcct8a9xIMgz4/6pCr+KZVWayfP0e IxSMY9YnC3yS72iBkrv4klmu64lLcutS59tC0WLQIbD+N7bXAFJPYpwfb6kgeBNB W/lDpn1hZT9GZVJdr7jIedXQPIeJQsvMMem1kRCNmj5/fOEB4sVup0a1RSHksgQt Lx0f6ggHxVfWGRZkHiZBjEcsK5wdWMIa/1l73NNF7gquiRWCkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNzWDCNwoyHOb71paD9HpToNGRK7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYmRh OGVhMi1hMTY4LTRhOGItYjAxYi0yMWE0MjFlNzEzMGUvYzNhMzU4MGItMzc4Yy0z ZGJhLTlmYjMtY2UxMzIxNWY2NWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGJkYThlYTItYTE2OC00YThiLWIw MWItMjFhNDIxZTcxMzBlL2RiZGE4ZWEyLWExNjgtNGE4Yi1iMDFiLTIxYTQyMWU3 MTMwZS5jcmwwHwYDVR0jBBgwFoAUr/w7HHl4MT3z8v6+TaRLIToIXqUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYmRhOGVhMi1hMTY4LTRhOGItYjAxYi0yMWE0 MjFlNzEzMGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgebwBAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG42R5KL35HPP2BnWepfIakJ4juoxJE6/TyTIDNfHmkX0mmY7UPa 9XOpH2MNc97KyvMU+L4/IxtHfiJnQoIWTGpL8t20bLqStRWuGr1gIwKvz88VM+tt //G/Aok3jRXBPIRB76nlNp9sr40KiA7sG6t/ANrr9YiWaUTdvT89GKvT3hkX6AH6 MhOn6ugiCx3Gw1lU/aza8tHaw/xl0sY8IUGQwv+lsb9sbjh6MB8Mq+wFIJ3eLXMU mNroBUslXdy0U2ASAiG3oC1L27/AK5fWFsGtTG/3OVcZoPshvosnx/+hgSJVmC/h kDc5nNlK+rsQ/nEKVbHqR7zxHjqkwcOO7K4= -----END CERTIFICATE-----Generated at Fri May 2 23:25:08 2025 by rpki-client