$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/7a1afb00-3b48-3239-b40b-55c2034d9a94.roa File: 7a1afb00-3b48-3239-b40b-55c2034d9a94.roa (raw, json) Hash identifier: Zg/O8yWAM+vAEKzj9/TUFtIYl7dGrIrCcuyQZ3AaRqg= Subject key identifier: 12:E0:76:FF:D5:CE:A0:34:5C:3F:F2:CB:3D:62:54:F2:09:6B:0C:90 Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584944694DD0D5F43983E0340CA0 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/7a1afb00-3b48-3239-b40b-55c2034d9a94.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 16509 IP address blocks: 2607:f380:101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:4d:d0:d5:f4:39:83:e0:34:0c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=407a44df-55d0-4e31-a12c-3739b7df6326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:64:95:9a:bd:1e:10:2e:37:a7:97:75:9e:77: e7:89:d5:47:8b:9f:35:b9:9c:5d:40:f3:db:5c:78: 0d:80:3c:2b:f8:2d:3a:e1:ad:70:b5:87:63:ee:41: 42:73:0f:4b:f3:4d:f8:72:f1:32:1e:09:0d:5b:4a: 34:89:9b:58:f3:09:b6:30:b6:7d:87:f1:dd:91:83: 2b:e0:38:39:b8:1e:e2:c4:c1:81:ef:2f:da:23:c8: ca:ce:c6:b5:5f:d6:f2:9d:80:c3:4c:36:63:d2:fa: 93:84:72:81:a1:1b:0e:5c:48:90:24:96:17:c4:3e: b3:90:33:ed:b7:57:19:0f:db:d8:31:2b:43:e4:db: e7:81:7e:4d:a5:31:a2:66:51:b1:62:70:20:4d:64: 7b:ba:a1:4f:cb:02:27:0b:18:82:fc:1a:cc:35:00: 89:47:3b:85:f0:e7:57:05:df:2d:e5:6c:a4:98:e4: e1:a9:8b:32:a8:fc:8c:fa:4f:b4:c7:ac:c8:c9:b1: b3:28:95:02:3c:22:08:74:cb:91:a0:b3:92:9b:f4: 17:f3:37:54:c9:b7:cd:1b:ce:c8:d3:16:e8:e5:18: dc:b7:39:26:6c:18:33:af:8d:00:f9:1c:5a:30:06: cf:a6:9b:6e:1e:5d:76:13:bd:08:1f:a0:78:45:b9: c6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E0:76:FF:D5:CE:A0:34:5C:3F:F2:CB:3D:62:54:F2:09:6B:0C:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/7a1afb00-3b48-3239-b40b-55c2034d9a94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv6: 2607:f380:101::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:83:7e:84:1c:03:fa:e1:ba:66:6a:e0:46:9b:ac:2b:e7:17: 8b:13:7d:1d:0c:0d:fa:b6:30:ab:40:13:0b:21:ae:17:de:f8: 8c:8b:9b:f5:a6:28:01:27:69:b7:6c:1c:1c:0f:2a:77:1c:05: 38:af:96:d3:af:f0:81:18:e0:16:14:5a:3d:d2:94:c1:90:57: 71:94:b8:74:5e:03:02:93:ea:cb:2f:b0:dd:91:aa:a0:b5:43: 9a:cd:6a:a3:8a:94:0c:00:4e:ca:10:0f:e9:21:4a:35:b2:bf: dd:44:46:0e:43:d0:a0:00:e1:1f:5b:16:be:e4:7b:96:99:0c: 6d:27:a7:44:64:62:25:1b:a6:09:94:ba:dd:a0:7e:7a:02:1c: 49:eb:f4:0f:e3:c6:04:0e:19:61:04:22:d7:17:64:8e:41:e0: fa:65:1f:6c:6b:40:0b:70:3f:6c:ae:c9:a2:23:70:a7:7b:1f: f5:28:04:1f:63:45:5a:d5:7f:9d:7f:b2:5c:6d:86:26:a8:a8: fc:68:d0:84:93:7d:b6:62:0b:67:53:14:af:b2:d8:5c:db:3a: 68:c6:9b:0b:72:f2:ce:09:db:9f:b5:62:fb:16:5b:a1:67:b4: b1:51:2b:c2:5f:9e:c0:cb:fa:53:c7:89:22:6c:8f:0c:64:a6: cf:39:20:66 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElEaU3Q1fQ5g+A0DKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk NDA3YTQ0ZGYtNTVkMC00ZTMxLWExMmMtMzczOWI3ZGY2MzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWSVmr0eEC43p5d1nnfnidVHi581uZxdQPPb XHgNgDwr+C064a1wtYdj7kFCcw9L8034cvEyHgkNW0o0iZtY8wm2MLZ9h/HdkYMr 4Dg5uB7ixMGB7y/aI8jKzsa1X9bynYDDTDZj0vqThHKBoRsOXEiQJJYXxD6zkDPt t1cZD9vYMStD5NvngX5NpTGiZlGxYnAgTWR7uqFPywInCxiC/BrMNQCJRzuF8OdX Bd8t5WykmOThqYsyqPyM+k+0x6zIybGzKJUCPCIIdMuRoLOSm/QX8zdUybfNG87I 0xbo5RjctzkmbBgzr40A+RxaMAbPpptuHl12E70IH6B4RbnG3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBLgdv/VzqA0XD/yyz1iVPIJawyQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvN2ExYWZiMDAtM2I0OC0z MjM5LWI0MGItNTVjMjAzNGQ5YTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfzgAEB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALGDfoQcA/rhumZq4EabrCvnF4sTfR0MDfq2MKtAEwshrhfe+IyL m/WmKAEnabdsHBwPKnccBTivltOv8IEY4BYUWj3SlMGQV3GUuHReAwKT6ssvsN2R qqC1Q5rNaqOKlAwATsoQD+khSjWyv91ERg5D0KAA4R9bFr7ke5aZDG0np0RkYiUb pgmUut2gfnoCHEnr9A/jxgQOGWEEItcXZI5B4PplH2xrQAtwP2yuyaIjcKd7H/Uo BB9jRVrVf51/slxthiaoqPxo0ISTfbZiC2dTFK+y2FzbOmjGmwty8s4J25+1YvsW W6FntLFRK8JfnsDL+lPHiSJsjwxkps85IGY= -----END CERTIFICATE-----Generated at Sat Apr 5 12:23:40 2025 by rpki-client