$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/5b4385d4-3792-3f26-9dea-55e5f859a324.roa File: 5b4385d4-3792-3f26-9dea-55e5f859a324.roa (raw, json) Hash identifier: BODhjkKK4v6OS+MhnzcfWDAr6z+cxHp9cSWwdDuUM2M= Subject key identifier: 03:38:9B:72:1D:4D:E9:D4:B4:42:D0:D1:9C:CF:A9:E3:D9:A5:33:3D Certificate issuer: /CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b Certificate serial: 010D0C9F432858491246ABEFDBC1406A10374990 Authority key identifier: 56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/5b4385d4-3792-3f26-9dea-55e5f859a324.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 16509 IP address blocks: 2606:7740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ab:ef:db:c1:40:6a:10:37:49:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=b95e0176-b5b2-4c6b-a693-4e67aab60878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:68:f3:8a:88:ed:62:de:4b:75:57:3f:6e:cf: d2:a4:e1:ae:ce:4b:48:6e:84:c5:37:0b:9f:2d:18: d4:28:8c:76:21:28:2c:64:da:38:42:ec:b8:3f:89: 4f:cc:2d:f0:14:cd:d2:b5:13:1e:13:4c:c4:44:1a: e1:9b:a8:b0:79:0b:98:42:41:93:67:15:6d:c2:8c: 6d:09:e5:82:5b:ed:9a:29:33:3c:59:df:dc:32:73: 07:a0:cb:7b:c5:5b:bd:05:8f:d9:15:92:ce:05:3c: 40:39:70:09:65:62:2a:63:61:d3:0d:34:d8:75:39: 33:2e:07:ab:c4:94:3a:c6:ae:21:7a:f0:6c:6e:a9: 8b:a6:96:b9:8f:7b:23:3c:92:a3:dd:53:72:34:8d: c5:bb:6c:f3:98:2b:91:a6:1b:06:da:bb:eb:f7:4c: 17:5e:31:23:c9:80:d7:de:8f:e6:76:44:5d:14:57: f2:72:94:3f:3b:1e:97:22:2e:d6:5e:a8:41:98:dd: eb:f6:d3:4b:f6:ff:24:27:70:99:a3:74:70:dd:b3: 1d:88:7a:37:5b:80:ce:0d:cb:b7:34:ab:b7:ff:a4: d4:d4:a1:c6:3e:b5:c0:5c:81:67:19:60:3d:10:54: 3e:e4:6c:ec:a7:7a:e0:a2:ef:bf:2b:51:5b:88:b2: 2a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:38:9B:72:1D:4D:E9:D4:B4:42:D0:D1:9C:CF:A9:E3:D9:A5:33:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/5b4385d4-3792-3f26-9dea-55e5f859a324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl X509v3 Authority Key Identifier: keyid:56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer sbgp-ipAddrBlock: critical IPv6: 2606:7740::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:fa:11:b9:9d:94:81:df:1a:eb:0d:21:29:4f:0e:31:96:1f: 17:67:52:c0:f2:e9:7b:66:0e:e7:54:54:c2:55:c0:82:f1:3d: bf:e3:67:1d:12:93:72:8e:d1:ae:e8:9a:8b:18:e2:4c:3a:ca: f9:cf:d7:6b:87:93:eb:a9:74:f2:0f:f1:c3:28:c2:aa:c8:5a: f6:04:ea:64:12:42:9c:65:c9:8f:75:b7:c0:52:38:bf:63:cf: 0f:c6:b5:5d:0f:2e:a7:7f:36:cf:63:5b:65:09:7e:b5:02:93: c4:39:8a:78:69:fb:33:d6:43:f5:78:ca:de:4b:98:2a:f4:0f: a2:3e:27:4d:48:83:a3:e9:b5:3d:31:aa:a6:7e:e7:55:0b:29: ec:c4:fb:49:98:13:cc:10:79:3c:a4:bf:74:53:f0:06:df:68: ef:06:b0:61:6a:93:7d:61:64:a5:e0:05:68:86:31:73:f7:41: 67:c6:3c:c1:35:66:2c:5e:d3:38:c1:bb:48:b3:9b:f1:2d:b7: e4:9a:48:ad:bd:2e:b9:2c:4b:24:79:b1:b0:b1:9d:79:0e:9d: 22:7a:b8:ee:47:3d:5b:f0:ca:b4:d2:48:0f:bb:f1:67:a1:9a: 53:74:a5:45:ca:2c:a3:96:f3:0c:5d:72:aa:c4:e9:34:a8:2a: a0:ce:9d:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkSRqvv28FAahA3SZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjEzYzI5OGUtMzE3OS00ZjM1LTllN2QtODg2ZWUzZjli ZTBiMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk Yjk1ZTAxNzYtYjViMi00YzZiLWE2OTMtNGU2N2FhYjYwODc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWjziojtYt5LdVc/bs/SpOGuzktIboTFNwuf LRjUKIx2ISgsZNo4Quy4P4lPzC3wFM3StRMeE0zERBrhm6iweQuYQkGTZxVtwoxt CeWCW+2aKTM8Wd/cMnMHoMt7xVu9BY/ZFZLOBTxAOXAJZWIqY2HTDTTYdTkzLger xJQ6xq4hevBsbqmLppa5j3sjPJKj3VNyNI3Fu2zzmCuRphsG2rvr90wXXjEjyYDX 3o/mdkRdFFfycpQ/Ox6XIi7WXqhBmN3r9tNL9v8kJ3CZo3Rw3bMdiHo3W4DODcu3 NKu3/6TU1KHGPrXAXIFnGWA9EFQ+5Gzsp3rgou+/K1FbiLIqiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAM4m3IdTenUtELQ0ZzPqePZpTM9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMTNj Mjk4ZS0zMTc5LTRmMzUtOWU3ZC04ODZlZTNmOWJlMGIvNWI0Mzg1ZDQtMzc5Mi0z ZjI2LTlkZWEtNTVlNWY4NTlhMzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjEzYzI5OGUtMzE3OS00ZjM1LTll N2QtODg2ZWUzZjliZTBiL2YxM2MyOThlLTMxNzktNGYzNS05ZTdkLTg4NmVlM2Y5 YmUwYi5jcmwwHwYDVR0jBBgwFoAUVlbPxbTjRRY3+Rn6Z5c9Lkgn50IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mMTNjMjk4ZS0zMTc5LTRmMzUtOWU3ZC04ODZl ZTNmOWJlMGIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ3QAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEz6EbmdlIHfGusNISlPDjGWHxdnUsDy6XtmDudUVMJVwILxPb/j Zx0Sk3KO0a7omosY4kw6yvnP12uHk+updPIP8cMowqrIWvYE6mQSQpxlyY91t8BS OL9jzw/GtV0PLqd/Ns9jW2UJfrUCk8Q5inhp+zPWQ/V4yt5LmCr0D6I+J01Ig6Pp tT0xqqZ+51ULKezE+0mYE8wQeTykv3RT8AbfaO8GsGFqk31hZKXgBWiGMXP3QWfG PME1Zixe0zjBu0izm/Ett+SaSK29LrksSyR5sbCxnXkOnSJ6uO5HPVvwyrTSSA+7 8WehmlN0pUXKLKOW8wxdcqrE6TSoKqDOnbU= -----END CERTIFICATE-----Generated at Sat Apr 5 11:20:57 2025 by rpki-client