$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1476b3a9-9230-3a81-b5f8-4419b8d3f144.roa File: 1476b3a9-9230-3a81-b5f8-4419b8d3f144.roa (raw, json) Hash identifier: p8QbYlVSmJqUKvJMOBKZ2fGGc1hX4pEZoOZm6wBjuPM= Subject key identifier: 33:2A:D4:E6:78:A3:6B:57:62:92:E7:BF:D9:AA:97:3A:06:F6:05:C6 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F43285849350EA78F7FE5ABBC6C577F80 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1476b3a9-9230-3a81-b5f8-4419b8d3f144.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 2606:7bc0:1061::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:a7:8f:7f:e5:ab:bc:6c:57:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=be6848c6-43e4-43c7-bc49-8eb388014d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0f:37:08:4a:44:1c:f3:6f:71:03:33:0f:c8: 38:39:9f:8f:d4:81:ab:66:c7:da:e6:8e:96:c0:52: cc:59:4c:dc:66:c6:3f:14:3f:dc:19:be:c9:a2:23: 9c:2d:2c:ea:ed:cb:9a:65:bb:41:fa:3c:08:f0:92: da:d8:33:21:83:30:fc:ec:84:6e:33:a3:47:65:d9: 50:2d:a9:47:dd:d3:66:e5:98:67:68:bf:c1:9e:d7: cd:97:bf:41:51:ac:62:15:2e:dd:a4:44:f1:39:35: ea:a3:7d:4b:fe:73:fe:62:73:80:3f:83:94:d0:f5: c8:b1:47:69:5f:d0:63:42:31:e9:e7:32:a5:7c:b0: db:c7:f3:de:19:fd:7c:d4:ae:ba:cf:2d:f5:34:74: 94:1d:a1:97:0a:0e:b7:94:4f:19:bb:ec:12:81:c9: 8a:cf:58:0b:1b:99:0e:b9:f1:67:e7:7c:de:86:2e: 9c:1a:4e:74:6a:a1:48:9e:bc:6d:bf:1e:22:fc:78: f1:3e:a6:a2:42:c5:22:05:e6:d0:ca:43:d9:70:91: cd:eb:cd:76:5a:96:d4:05:e5:34:14:cf:c5:91:6e: 89:48:a0:1e:62:94:95:ad:d2:1f:75:28:aa:a6:b4: 9f:7c:8f:fa:55:cd:1e:59:78:2b:d6:3e:31:a3:39: 0c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2A:D4:E6:78:A3:6B:57:62:92:E7:BF:D9:AA:97:3A:06:F6:05:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1476b3a9-9230-3a81-b5f8-4419b8d3f144.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv6: 2606:7bc0:1061::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:d9:39:a7:eb:32:77:41:99:52:45:f9:93:09:5a:84:28:50: a6:ee:79:95:bb:22:3a:3d:fc:10:7c:47:1c:91:e2:1c:f2:f1: fc:65:3e:54:db:53:08:ec:29:e5:c4:22:c6:08:1f:a6:57:56: fa:f6:c1:bd:4e:a1:ad:a6:50:bb:7e:76:31:fd:04:ad:58:e1: 5a:88:20:bb:0f:ef:8f:a6:bb:2c:cf:80:f1:fe:96:70:5d:bc: ed:26:b1:81:02:50:db:74:40:2e:3a:25:4c:49:ac:fe:ff:bd: 01:19:f5:2f:b4:27:dd:3b:6a:5d:b2:80:3a:23:aa:de:fd:f7: 44:00:48:4d:84:de:16:80:bf:7a:4b:c3:c5:a1:e9:07:fd:55: 9c:e2:76:e3:b2:15:f3:24:78:91:b7:fd:f9:70:44:8f:aa:25: fc:20:0a:52:5c:74:cf:c8:1c:78:3e:78:42:f1:6d:22:98:59: e2:ba:b9:a9:4c:79:40:a6:a7:d9:5a:75:30:8b:df:97:ea:10: 7e:6d:c0:4c:22:9c:58:1f:ba:c6:fb:e4:1e:01:32:f0:fb:b4: a3:72:31:59:ed:3b:43:fc:5f:45:d2:9c:c6:91:93:fd:5b:b7: 4b:36:ba:9e:a3:52:28:9c:16:cc:e0:e1:64:98:41:3b:39:dd: df:ce:d9:78 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk1DqePf+WrvGxXf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk YmU2ODQ4YzYtNDNlNC00M2M3LWJjNDktOGViMzg4MDE0ZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA83CEpEHPNvcQMzD8g4OZ+P1IGrZsfa5o6W wFLMWUzcZsY/FD/cGb7JoiOcLSzq7cuaZbtB+jwI8JLa2DMhgzD87IRuM6NHZdlQ LalH3dNm5ZhnaL/BntfNl79BUaxiFS7dpETxOTXqo31L/nP+YnOAP4OU0PXIsUdp X9BjQjHp5zKlfLDbx/PeGf181K66zy31NHSUHaGXCg63lE8Zu+wSgcmKz1gLG5kO ufFn53zehi6cGk50aqFInrxtvx4i/HjxPqaiQsUiBebQykPZcJHN6812WpbUBeU0 FM/FkW6JSKAeYpSVrdIfdSiqprSffI/6Vc0eWXgr1j4xozkMVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDMq1OZ4o2tXYpLnv9mqlzoG9gXGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvMTQ3NmIzYTktOTIzMC0z YTgxLWI1ZjgtNDQxOWI4ZDNmMTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ7wBBh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEfZOafrMndBmVJF+ZMJWoQoUKbueZW7Ijo9/BB8RxyR4hzy8fxl PlTbUwjsKeXEIsYIH6ZXVvr2wb1Ooa2mULt+djH9BK1Y4VqIILsP74+muyzPgPH+ lnBdvO0msYECUNt0QC46JUxJrP7/vQEZ9S+0J907al2ygDojqt7990QASE2E3haA v3pLw8Wh6Qf9VZziduOyFfMkeJG3/flwRI+qJfwgClJcdM/IHHg+eELxbSKYWeK6 ualMeUCmp9ladTCL35fqEH5twEwinFgfusb75B4BMvD7tKNyMVntO0P8X0XSnMaR k/1bt0s2up6jUiicFszg4WSYQTs53d/O2Xg= -----END CERTIFICATE-----Generated at Sat Apr 5 11:15:30 2025 by rpki-client