$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/a34bb302-49e0-3e41-8a06-b70ec4051c38.roa File: a34bb302-49e0-3e41-8a06-b70ec4051c38.roa (raw, json) Hash identifier: UBaICk+63cEcrD1TL5F979qlAAE+9JgvEnniweNUxhM= Subject key identifier: 00:9F:FA:7A:B9:EE:7C:08:EA:D1:1F:02:A2:63:CF:4B:3A:E4:A8:68 Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Certificate serial: 010D0C9F4328584944693036CF87F1FD7F9724A0 Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/a34bb302-49e0-3e41-8a06-b70ec4051c38.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 13807 IP address blocks: 2604:c80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:30:36:cf:87:f1:fd:7f:97:24:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=c36dc7d7-7882-44f4-bd87-fc8632245dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:dc:64:89:75:ae:3d:8a:01:40:f0:9a:f9:b2: 45:6c:58:49:01:b3:3b:d9:cf:ca:22:ff:fe:6c:af: d4:2a:49:fc:16:54:da:7b:25:04:03:1b:a9:54:d2: 44:b2:b4:8c:17:da:6f:85:66:a6:2f:34:b6:e8:9f: 7a:58:72:b6:5f:9e:4f:4c:c2:db:6e:55:44:08:bc: 7b:6c:55:51:1c:b3:57:68:a0:fa:29:6f:6c:0f:97: e3:4f:ff:d7:82:b9:03:1a:46:a3:52:f2:7c:9f:be: 9f:ea:0b:5e:70:13:23:9a:2c:80:89:b6:7e:90:87: f0:ba:2f:40:f9:af:08:39:4a:8d:48:e4:e9:43:06: fe:da:66:9f:70:19:2a:23:de:60:96:e3:12:c0:72: 12:b5:9e:af:27:05:a1:fb:3a:c0:03:97:7e:b5:99: 92:c1:0f:82:a3:05:98:0a:03:d1:10:f2:fb:04:ff: 88:d4:2f:37:83:03:8a:44:eb:c2:dd:04:9b:ba:85: d8:2c:0f:69:dc:fc:ba:f4:36:6d:69:19:0f:65:bc: 61:81:9a:87:5d:a2:6f:2b:66:0d:4d:b6:2b:d0:6d: e3:13:11:d2:2b:7d:c4:ea:36:50:71:06:9d:4f:c0: 56:f3:0e:ee:3d:0d:49:97:1d:07:eb:2d:45:81:ac: d6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9F:FA:7A:B9:EE:7C:08:EA:D1:1F:02:A2:63:CF:4B:3A:E4:A8:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/a34bb302-49e0-3e41-8a06-b70ec4051c38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl X509v3 Authority Key Identifier: keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer sbgp-ipAddrBlock: critical IPv6: 2604:c80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:00:19:d9:51:9d:31:c5:d8:35:6d:e1:7f:27:b1:20:05:1e: 54:3a:ac:18:72:a7:bd:a1:12:98:70:0e:d9:1c:cf:29:eb:c2: a2:00:44:08:c0:d9:af:6d:a3:03:f8:35:4f:8d:de:62:ad:df: ea:5f:71:d4:3d:ff:4d:d3:4f:a9:89:18:22:b0:da:25:12:84: 17:8f:45:e4:0f:28:01:6f:4a:4b:6a:ba:80:96:c0:c9:b2:c1: 47:8c:06:39:c7:9a:98:fd:fc:63:e0:1d:c4:68:ec:bb:89:8e: 37:d9:f6:34:07:5f:e5:56:2a:5e:16:f9:62:93:fa:75:62:3a: 80:b0:88:84:52:3e:16:b7:98:8f:cf:71:df:43:a0:46:1e:36: 21:f8:16:6b:5e:7f:05:23:c5:82:4c:b1:3f:24:45:23:82:e0: 1e:ff:7c:b3:d6:de:83:59:49:e0:d5:e5:79:35:70:63:51:dc: 93:f1:bd:12:8c:dd:41:99:31:1f:f2:79:32:81:2f:a3:d6:82: d5:09:7a:7d:78:3e:3c:27:64:c1:d7:9e:c9:83:b5:10:c9:01: 49:ca:3d:16:4d:e1:98:8f:71:5e:33:cc:82:db:dd:2e:b9:7f: 95:e5:fd:bb:ae:59:4b:27:76:45:01:85:28:b0:59:e5:8b:a7: 2c:ad:23:5b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElEaTA2z4fx/X+XJKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw NTM2MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk YzM2ZGM3ZDctNzg4Mi00NGY0LWJkODctZmM4NjMyMjQ1ZGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidxkiXWuPYoBQPCa+bJFbFhJAbM72c/KIv/+ bK/UKkn8FlTaeyUEAxupVNJEsrSMF9pvhWamLzS26J96WHK2X55PTMLbblVECLx7 bFVRHLNXaKD6KW9sD5fjT//XgrkDGkajUvJ8n76f6gtecBMjmiyAibZ+kIfwui9A +a8IOUqNSOTpQwb+2mafcBkqI95gluMSwHIStZ6vJwWh+zrAA5d+tZmSwQ+CowWY CgPREPL7BP+I1C83gwOKROvC3QSbuoXYLA9p3Py69DZtaRkPZbxhgZqHXaJvK2YN TbYr0G3jExHSK33E6jZQcQadT8BW8w7uPQ1Jlx0H6y1FgazWbwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFACf+nq57nwI6tEfAqJjz0s65KhoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvYTM0YmIzMDItNDllMC0z ZTQxLThhMDYtYjcwZWM0MDUxYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3 OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh ZWUwYzA1MzYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQMgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC7ABnZUZ0xxdg1beF/J7EgBR5UOqwYcqe9oRKYcA7ZHM8p68KiAEQI wNmvbaMD+DVPjd5ird/qX3HUPf9N00+piRgisNolEoQXj0XkDygBb0pLarqAlsDJ ssFHjAY5x5qY/fxj4B3EaOy7iY432fY0B1/lVipeFvlik/p1YjqAsIiEUj4Wt5iP z3HfQ6BGHjYh+BZrXn8FI8WCTLE/JEUjguAe/3yz1t6DWUng1eV5NXBjUdyT8b0S jN1BmTEf8nkygS+j1oLVCXp9eD48J2TB157Jg7UQyQFJyj0WTeGYj3FeM8yC290u uX+V5f27rllLJ3ZFAYUosFnli6csrSNb -----END CERTIFICATE-----Generated at Tue Apr 29 17:46:06 2025 by rpki-client