$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/ecf3d650-29cd-3e1b-8cbc-93e223ab6249.roa File: ecf3d650-29cd-3e1b-8cbc-93e223ab6249.roa (raw, json) Hash identifier: dfOA8mor/SxwnEgUXvgnVIL3m9w1vxnhRSPkLJFfU5U= Subject key identifier: 4F:EF:5B:5F:71:6B:CF:AD:43:31:77:FE:74:DD:12:BE:CB:B8:89:94 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F432858499C59E805A8044EEEFB4CBE90 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/ecf3d650-29cd-3e1b-8cbc-93e223ab6249.roa Signing time: Tue 22 Apr 2025 13:01:00 +0000 ROA not before: Tue 22 Apr 2025 13:01:00 +0000 ROA not after: Mon 21 Jul 2025 13:01:00 +0000 asID: 198949 IP address blocks: 2607:f460::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:59:e8:05:a8:04:4e:ee:fb:4c:be:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Apr 22 13:01:00 2025 GMT Not After : Jul 21 13:01:00 2025 GMT Subject: CN=8731cd9b-79dc-43cf-958a-e2e0defc584f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6f:c7:d9:7d:ff:72:51:2c:57:d3:98:88:54: a7:f8:95:04:bb:57:e6:9c:8c:26:fc:99:af:9b:1a: 29:f6:54:6a:ab:c9:fd:8f:30:18:47:1e:6f:7c:23: 0f:44:28:ec:7d:b2:90:c6:26:a6:71:67:66:8f:b3: d4:4f:36:60:86:75:4f:76:af:70:68:d7:f9:42:69: 68:bc:f1:37:10:04:70:58:4b:2a:e2:ac:72:bb:d5: 54:3e:72:68:e7:c5:2e:1a:9b:a1:e9:a8:eb:6b:67: 6d:db:ff:2b:c8:ff:53:63:53:85:b0:57:2e:df:57: eb:e6:fd:ba:bf:56:b1:c6:3d:b7:25:70:62:cb:16: 9d:9e:a2:8c:1f:90:99:c0:c2:a1:12:d8:25:62:20: fe:99:6b:94:33:46:8d:0f:29:a1:d5:ce:d6:49:63: 0a:0a:31:3a:4d:47:d8:15:67:25:14:f3:9a:d7:dc: 8e:46:20:b8:5f:49:4a:19:56:87:ea:57:61:28:1e: 8a:8d:e5:90:a3:5e:cf:ee:6a:3d:af:8e:b2:c7:07: 1f:d7:b8:85:03:a4:5d:75:65:01:bc:bb:00:ae:40: 8a:49:c5:29:43:03:74:5b:2e:66:db:2b:66:20:18: 36:04:94:5d:c9:70:05:6d:52:41:d4:57:f1:65:1d: 24:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:EF:5B:5F:71:6B:CF:AD:43:31:77:FE:74:DD:12:BE:CB:B8:89:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/ecf3d650-29cd-3e1b-8cbc-93e223ab6249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv6: 2607:f460::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:7b:90:5f:ef:38:33:bf:f3:b8:8d:ac:54:18:df:35:98:23: 52:c4:8f:3f:57:20:68:45:81:28:b8:0b:f2:bd:a4:4d:17:a7: 33:22:7d:b4:71:0d:b4:0c:ff:a5:3d:9f:5d:be:90:ad:3d:d1: 76:58:fd:58:04:c8:57:ea:3b:42:41:5c:63:95:d2:54:1b:95: 14:4c:89:4a:42:18:74:79:74:00:7b:4c:dc:7a:74:ca:90:54: 9f:7c:ac:0b:6a:32:61:9d:7d:9f:5a:4e:55:4c:96:ae:0c:f7: 9a:3d:b3:0a:68:61:7f:bb:55:8f:9d:f0:be:e0:cc:c9:69:66: 98:44:21:66:f6:6d:00:11:ab:09:ce:92:a6:57:8c:05:32:28: 16:4b:3f:7d:8a:c2:57:f2:94:8b:3e:bb:41:f4:92:d6:fb:c7: a8:7b:69:b6:62:e9:69:e2:c3:12:6f:d5:a2:ad:59:2f:7e:01: 4b:fb:d0:d7:d0:fd:58:33:26:38:cc:15:85:01:56:43:a3:94: 21:8a:4d:ba:07:03:83:68:4f:b2:49:9d:c0:65:42:94:13:72: 6f:e3:e6:1c:0b:15:bd:26:9a:fc:2a:65:f2:4c:70:39:e1:80: 17:fe:04:a1:31:a5:c1:6a:cc:ed:25:3e:0d:17:6d:c4:a0:6e: e3:07:26:db -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmcWegFqARO7vtMvpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI1MDQyMjEzMDEwMFoXDTI1MDcyMTEzMDEwMFowLzEtMCsGA1UEAxMk ODczMWNkOWItNzlkYy00M2NmLTk1OGEtZTJlMGRlZmM1ODRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm/H2X3/clEsV9OYiFSn+JUEu1fmnIwm/Jmv mxop9lRqq8n9jzAYRx5vfCMPRCjsfbKQxiamcWdmj7PUTzZghnVPdq9waNf5Qmlo vPE3EARwWEsq4qxyu9VUPnJo58UuGpuh6ajra2dt2/8ryP9TY1OFsFcu31fr5v26 v1axxj23JXBiyxadnqKMH5CZwMKhEtglYiD+mWuUM0aNDymh1c7WSWMKCjE6TUfY FWclFPOa19yORiC4X0lKGVaH6ldhKB6KjeWQo17P7mo9r46yxwcf17iFA6RddWUB vLsArkCKScUpQwN0Wy5m2ytmIBg2BJRdyXAFbVJB1FfxZR0kZQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE/vW19xa8+tQzF3/nTdEr7LuImUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvZWNmM2Q2NTAtMjljZC0z ZTFiLThjYmMtOTNlMjIzYWI2MjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf0YDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA2e5Bf7zgzv/O4jaxUGN81mCNSxI8/VyBoRYEouAvyvaRNF6czIn20 cQ20DP+lPZ9dvpCtPdF2WP1YBMhX6jtCQVxjldJUG5UUTIlKQhh0eXQAe0zcenTK kFSffKwLajJhnX2fWk5VTJauDPeaPbMKaGF/u1WPnfC+4MzJaWaYRCFm9m0AEasJ zpKmV4wFMigWSz99isJX8pSLPrtB9JLW+8eoe2m2Yulp4sMSb9WirVkvfgFL+9DX 0P1YMyY4zBWFAVZDo5Qhik26BwODaE+ySZ3AZUKUE3Jv4+YcCxW9Jpr8KmXyTHA5 4YAX/gShMaXBasztJT4NF23EoG7jBybb -----END CERTIFICATE-----Generated at Sun Apr 27 22:59:10 2025 by rpki-client