$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/02a53edb-05fd-32fd-9cd9-bcd9c1e88f94.roa File: 02a53edb-05fd-32fd-9cd9-bcd9c1e88f94.roa (raw, json) Hash identifier: Azolo4g5QM6/DqU+F6EK/lRFKVBpQ0tY0+zLdxTVtLk= Subject key identifier: 14:16:C7:F9:4F:0E:B9:1A:52:89:B5:C1:42:B0:2D:8B:33:86:C4:25 Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F43285849301EC20A3C02BEE7F537CD00 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/02a53edb-05fd-32fd-9cd9-bcd9c1e88f94.roa Signing time: Fri 14 Mar 2025 18:34:36 +0000 ROA not before: Fri 14 Mar 2025 18:34:36 +0000 ROA not after: Thu 12 Jun 2025 18:34:36 +0000 asID: 398014 IP address blocks: 2604:7ac0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:1e:c2:0a:3c:02:be:e7:f5:37:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Mar 14 18:34:36 2025 GMT Not After : Jun 12 18:34:36 2025 GMT Subject: CN=f46ac636-4b0b-4f73-b22a-e6ed36aef56f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:43:d2:54:2d:08:4d:dc:d0:06:98:16:d4:51: 53:a0:83:1d:b7:dc:99:b3:df:4f:96:cd:5d:e9:62: b2:8b:6a:59:03:4c:3c:df:9b:05:5b:c3:70:29:37: f3:fd:40:63:39:ff:f8:c7:4d:4d:45:8c:77:a3:5d: a3:42:3c:59:2d:0b:0f:22:d3:63:52:a0:78:b5:2d: 0d:0c:fa:13:75:d0:dd:73:ba:b0:6d:08:87:51:17: 69:57:fe:78:a8:a3:44:01:e0:a7:08:c3:2e:7a:05: 7e:f7:ca:31:e8:20:9b:99:28:52:12:6a:6d:fc:ea: b7:0e:12:dc:cf:19:52:2c:4d:dc:c7:66:68:34:ee: c6:b9:09:01:e4:45:8a:97:91:60:4c:4b:0a:d5:5e: d2:6d:d2:9d:97:43:14:b5:b8:d5:8e:07:49:08:f9: 33:39:1c:bd:aa:74:f2:6a:e0:84:c4:d5:87:c9:f8: fa:75:60:17:90:cd:16:c0:92:60:61:26:01:1e:1d: 47:89:5e:c6:33:ee:71:4d:6e:ee:0d:85:94:92:8a: 4a:21:7b:20:30:e7:2c:99:16:69:bf:1a:b2:4c:62: 5c:d1:c2:75:f5:a2:3f:4f:b0:52:12:7f:af:b5:76: 6b:b9:be:7e:d6:3e:77:26:47:c8:6b:71:79:02:4b: 5c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:16:C7:F9:4F:0E:B9:1A:52:89:B5:C1:42:B0:2D:8B:33:86:C4:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/02a53edb-05fd-32fd-9cd9-bcd9c1e88f94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv6: 2604:7ac0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:52:69:fe:43:ae:de:a8:93:6e:2a:26:90:80:23:f1:08:35: 1a:98:bc:aa:ec:8d:cb:cf:38:35:cd:6f:6a:17:98:27:0f:c3: e4:02:e6:eb:02:bf:f9:81:52:18:d4:a3:c2:58:1a:83:39:40: e6:dd:0c:08:73:0c:3c:f3:85:6c:71:74:2f:c8:15:26:6a:a7: 2c:64:14:cf:17:95:33:cb:f5:f4:8d:60:df:f7:12:ee:8d:b0: 27:24:9d:c2:1d:87:83:97:a1:39:a7:76:cb:4e:0f:10:7c:d6: f4:9b:d9:15:2b:2b:65:b0:ec:95:76:f8:66:f0:b0:de:ce:4a: 4b:c6:01:44:61:e0:97:72:09:91:61:c8:ad:ae:56:6f:91:13: 75:a4:58:9d:44:16:72:93:a9:b6:04:7e:73:cb:bd:06:0c:36: 02:9b:90:eb:2a:2c:7a:18:05:b4:42:79:94:55:a1:2b:30:54: e5:05:d7:3e:1e:bf:6f:92:69:a0:24:b3:93:eb:64:11:c4:27: 8e:c2:77:b1:e9:cf:a2:6d:aa:ec:89:0d:a5:9e:35:2d:2c:7e: eb:40:39:cd:6d:33:e7:a1:65:b0:81:c2:2b:30:32:5c:93:03: c1:58:b4:21:53:f9:e5:7d:d9:08:bd:03:27:2e:ff:cb:4a:e8: 66:42:cb:84 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkwHsIKPAK+5/U3zQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI1MDMxNDE4MzQzNloXDTI1MDYxMjE4MzQzNlowLzEtMCsGA1UEAxMk ZjQ2YWM2MzYtNGIwYi00ZjczLWIyMmEtZTZlZDM2YWVmNTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEPSVC0ITdzQBpgW1FFToIMdt9yZs99Pls1d 6WKyi2pZA0w835sFW8NwKTfz/UBjOf/4x01NRYx3o12jQjxZLQsPItNjUqB4tS0N DPoTddDdc7qwbQiHURdpV/54qKNEAeCnCMMuegV+98ox6CCbmShSEmpt/Oq3DhLc zxlSLE3cx2ZoNO7GuQkB5EWKl5FgTEsK1V7SbdKdl0MUtbjVjgdJCPkzORy9qnTy auCExNWHyfj6dWAXkM0WwJJgYSYBHh1HiV7GM+5xTW7uDYWUkopKIXsgMOcsmRZp vxqyTGJc0cJ19aI/T7BSEn+vtXZrub5+1j53JkfIa3F5AktcgwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBQWx/lPDrkaUom1wUKwLYszhsQlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvMDJhNTNlZGItMDVmZC0z MmZkLTljZDktYmNkOWMxZTg4Zjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgR6wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAkUmn+Q67eqJNuKiaQgCPxCDUamLyq7I3Lzzg1zW9qF5gnD8PkAubr Ar/5gVIY1KPCWBqDOUDm3QwIcww884VscXQvyBUmaqcsZBTPF5Uzy/X0jWDf9xLu jbAnJJ3CHYeDl6E5p3bLTg8QfNb0m9kVKytlsOyVdvhm8LDezkpLxgFEYeCXcgmR YcitrlZvkRN1pFidRBZyk6m2BH5zy70GDDYCm5DrKix6GAW0QnmUVaErMFTlBdc+ Hr9vkmmgJLOT62QRxCeOwnex6c+ibarsiQ2lnjUtLH7rQDnNbTPnoWWwgcIrMDJc kwPBWLQhU/nlfdkIvQMnLv/LSuhmQsuE -----END CERTIFICATE-----Generated at Tue Apr 29 23:28:32 2025 by rpki-client