$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d1e1809b-32ce-3131-90d0-28c02d9448ea.roa File: d1e1809b-32ce-3131-90d0-28c02d9448ea.roa (raw, json) Hash identifier: jjrCWwzS0EVSOZIgsPY8K0OQLf4ponr2c/u2NSmBmQQ= Subject key identifier: 12:8A:D2:32:A8:E6:8A:69:CD:C1:F1:8F:ED:C3:28:86:EB:A1:C7:64 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F432858491ED6EE08B8E1F43F7E9EA780 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d1e1809b-32ce-3131-90d0-28c02d9448ea.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 16839 IP address blocks: 2606:3600:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:ee:08:b8:e1:f4:3f:7e:9e:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=b0bd289a-6cb6-42d7-9171-7d6f936843ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:62:95:02:4b:e5:3d:5c:4d:f9:65:e3:9b:e0: 9f:26:ab:9b:c9:39:e8:2e:16:d0:5a:e4:97:79:08: 15:af:d3:5e:22:12:25:aa:6c:07:81:61:a0:cc:1f: e7:99:a6:a8:07:04:b2:32:93:88:ff:fc:14:6d:33: 40:9e:db:65:07:da:fe:9a:fc:ba:13:aa:6f:75:ab: 16:f8:91:7f:f5:01:fc:35:ec:cb:c0:47:f4:b3:c2: 38:39:75:0a:c2:f4:bf:1c:c3:df:cb:c6:00:7d:27: 9e:ae:a6:23:db:14:4a:d9:53:33:0a:fc:67:8c:c7: 4d:51:36:54:0c:cd:36:61:cf:e2:a5:c7:c0:33:83: a5:fd:dc:45:be:3e:11:f8:b5:f0:b0:f2:f4:7d:be: 52:17:55:53:5c:d2:8c:28:f2:40:a0:55:ec:28:8c: 41:f9:5c:2d:6d:11:63:7b:cc:1f:02:d1:77:42:45: 51:a5:be:8e:57:b6:b3:79:00:39:71:63:dd:b0:e6: 21:b2:b9:2b:c3:39:a0:aa:f9:dc:95:50:20:a7:db: 92:51:60:db:66:ff:2f:86:65:94:b3:5d:de:45:d0: db:1c:c4:8f:00:29:13:de:3d:71:4b:21:a2:86:ca: 35:be:7c:1b:23:78:e2:63:7d:0b:65:83:19:18:7c: 7a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8A:D2:32:A8:E6:8A:69:CD:C1:F1:8F:ED:C3:28:86:EB:A1:C7:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/d1e1809b-32ce-3131-90d0-28c02d9448ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600:4000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:d4:1f:b7:61:30:75:b6:3a:1a:6d:6a:c4:d2:de:14:94:f8: 03:d5:a4:31:6c:1d:fd:ab:af:67:9d:8d:99:3c:cd:97:24:8e: d0:15:f3:d8:5b:99:74:97:c0:a0:f0:a2:d8:d9:e3:54:d1:24: 53:54:c1:12:3b:73:8c:a6:5d:3c:6a:37:dc:44:a4:3e:eb:5f: 4b:0c:af:fb:5b:b0:33:b9:5a:70:87:6b:01:f6:70:7f:24:66: 19:0e:0a:e5:6d:a5:f5:64:6e:5d:b7:57:23:3a:be:24:45:3a: 02:81:1c:2d:3e:a9:89:45:bf:4a:67:5a:ed:f1:45:73:51:c2: e6:59:e5:41:80:a7:87:68:19:66:05:57:97:89:40:41:34:39: 02:fb:67:df:67:b5:b2:43:32:9d:a4:e9:51:fc:92:89:ba:ea: a6:47:74:0f:cb:e5:63:d7:97:39:c7:d9:17:d4:4d:03:3f:70: f0:83:93:e5:55:25:1c:d9:ea:a8:6e:92:48:e1:bd:94:3d:66: 19:ff:55:ac:93:55:68:76:22:23:4d:0e:70:3a:be:45:0e:4a: 90:0a:b7:82:6a:91:a0:f6:47:69:29:93:d9:c5:01:46:98:96: e1:bb:3d:f5:5b:b2:c1:c9:bd:48:04:1e:1d:9f:e5:54:5f:ae: 8d:30:43:67 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEke1u4IuOH0P36ep4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk YjBiZDI4OWEtNmNiNi00MmQ3LTkxNzEtN2Q2ZjkzNjg0M2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWKVAkvlPVxN+WXjm+CfJqubyTnoLhbQWuSX eQgVr9NeIhIlqmwHgWGgzB/nmaaoBwSyMpOI//wUbTNAnttlB9r+mvy6E6pvdasW +JF/9QH8NezLwEf0s8I4OXUKwvS/HMPfy8YAfSeerqYj2xRK2VMzCvxnjMdNUTZU DM02Yc/ipcfAM4Ol/dxFvj4R+LXwsPL0fb5SF1VTXNKMKPJAoFXsKIxB+VwtbRFj e8wfAtF3QkVRpb6OV7azeQA5cWPdsOYhsrkrwzmgqvnclVAgp9uSUWDbZv8vhmWU s13eRdDbHMSPACkT3j1xSyGihso1vnwbI3jiY30LZYMZGHx67wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBKK0jKo5oppzcHxj+3DKIbrocdkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZDFlMTgwOWItMzJjZS0z MTMxLTkwZDAtMjhjMDJkOTQ0OGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgY2AEAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAB9Qft2EwdbY6Gm1qxNLeFJT4A9WkMWwd/auvZ52NmTzNlySO0BXz 2FuZdJfAoPCi2NnjVNEkU1TBEjtzjKZdPGo33ESkPutfSwyv+1uwM7lacIdrAfZw fyRmGQ4K5W2l9WRuXbdXIzq+JEU6AoEcLT6piUW/Smda7fFFc1HC5lnlQYCnh2gZ ZgVXl4lAQTQ5Avtn32e1skMynaTpUfySibrqpkd0D8vlY9eXOcfZF9RNAz9w8IOT 5VUlHNnqqG6SSOG9lD1mGf9VrJNVaHYiI00OcDq+RQ5KkAq3gmqRoPZHaSmT2cUB RpiW4bs99Vuywcm9SAQeHZ/lVF+ujTBDZw== -----END CERTIFICATE-----Generated at Mon Apr 7 14:18:41 2025 by rpki-client