$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/0d7550d9-17ed-3859-9a5c-f704483bd1bb.roa File: 0d7550d9-17ed-3859-9a5c-f704483bd1bb.roa (raw, json) Hash identifier: 1wSc3VAv7NEfWJ9HYNfReWI2DdfaKt5WJS33hUhbNJc= Subject key identifier: 4A:9D:17:9F:D7:BE:30:9C:19:BB:D7:8A:B9:2B:F1:BE:76:C4:C7:D4 Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F4328584929E3C84396F8C85EE31DD8C0 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/0d7550d9-17ed-3859-9a5c-f704483bd1bb.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 3477 IP address blocks: 2601:a008::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:c8:43:96:f8:c8:5e:e3:1d:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=4661bbee-fda7-40ab-9f38-3148567ec452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:28:74:7b:bf:64:df:0c:78:a9:f3:c4:68:59: fc:0f:1c:81:ec:78:ed:1d:5d:a8:8b:43:9c:5f:a4: e9:16:52:26:2f:b7:ab:fa:ee:62:e2:ca:a0:13:e7: a4:dc:7b:62:c6:5b:fe:b5:e1:3c:60:c8:6a:3f:16: a7:4a:42:38:a6:83:38:5d:15:1f:14:6c:1f:d2:9c: 5b:6f:b6:7c:eb:59:eb:01:64:8b:76:ad:33:53:2c: 3a:9c:76:44:5e:31:5d:da:7a:ba:05:88:bd:80:4d: 37:4b:34:ff:0a:58:b3:e2:8b:cc:96:80:3c:d5:d2: 4c:74:9d:68:a5:0b:11:9c:c2:e7:11:90:c4:9a:9d: 32:88:18:50:82:6a:99:d1:1a:f0:52:36:ed:28:b1: 82:ae:87:3e:56:f5:8f:36:d5:50:bd:dc:f0:c9:3d: 13:53:8a:b4:d6:d6:46:70:3f:53:6a:cd:40:e6:86: 19:33:36:ac:ea:ee:42:d3:1a:f1:aa:ee:f5:11:4e: a3:1f:eb:89:a6:3f:56:c2:d5:0c:a1:37:b4:20:2c: ca:76:7a:84:48:47:15:e0:69:f8:8b:da:95:9b:fa: 0e:cd:3a:10:28:2e:96:a1:fe:53:84:95:6e:30:82: 42:ff:fd:9c:a5:34:b4:fd:13:76:e4:63:a7:39:fb: 20:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9D:17:9F:D7:BE:30:9C:19:BB:D7:8A:B9:2B:F1:BE:76:C4:C7:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/0d7550d9-17ed-3859-9a5c-f704483bd1bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2601:a008::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:aa:e4:5c:33:cc:b4:7c:25:3c:9f:fb:a9:7e:b5:17:2d:59: 90:82:57:83:c6:a2:1c:a2:f8:60:bf:0e:72:72:2c:95:67:79: 07:fd:60:b2:9c:8f:7b:70:65:88:1c:db:05:a3:04:d4:82:9b: 72:80:56:7b:6d:19:f5:78:17:8e:66:5d:71:9c:03:f6:b5:2e: 1b:43:66:01:8f:97:00:ef:2b:b5:84:e3:90:98:f0:53:83:c0: 20:23:f0:ad:35:13:19:5c:bf:d2:35:a4:b2:8b:d8:40:77:ed: 93:92:17:6f:d3:a6:e8:49:cb:a0:1d:f1:37:63:cc:92:46:a9: 30:7b:25:28:d5:e0:fc:72:84:3c:57:6c:db:ad:a9:8d:04:ef: db:b8:3b:b7:8b:25:8f:a7:e0:be:18:42:56:45:3a:c2:6f:59: 7f:60:02:4b:2f:0e:95:49:ea:db:4b:31:95:28:71:20:94:f7: ca:f5:2a:e0:26:2d:39:6a:4e:1b:db:df:d9:0f:85:da:ac:a9: ac:5c:d2:1f:15:06:e0:e1:12:8f:b0:c9:43:c3:a4:e1:4c:c7: 42:a2:5a:80:af:8d:f8:20:38:14:9e:52:d5:5d:96:c5:58:99: c3:12:1b:38:ce:52:7c:48:7b:83:bc:cb:76:48:0b:96:af:f4: 3e:23:fa:57 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkp48hDlvjIXuMd2MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk NDY2MWJiZWUtZmRhNy00MGFiLTlmMzgtMzE0ODU2N2VjNDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSh0e79k3wx4qfPEaFn8DxyB7HjtHV2oi0Oc X6TpFlImL7er+u5i4sqgE+ek3Htixlv+teE8YMhqPxanSkI4poM4XRUfFGwf0pxb b7Z861nrAWSLdq0zUyw6nHZEXjFd2nq6BYi9gE03SzT/Cliz4ovMloA81dJMdJ1o pQsRnMLnEZDEmp0yiBhQgmqZ0RrwUjbtKLGCroc+VvWPNtVQvdzwyT0TU4q01tZG cD9Tas1A5oYZMzas6u5C0xrxqu71EU6jH+uJpj9WwtUMoTe0ICzKdnqESEcV4Gn4 i9qVm/oOzToQKC6Wof5ThJVuMIJC//2cpTS0/RN25GOnOfsg6wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEqdF5/XvjCcGbvXirkr8b52xMfUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvMGQ3NTUwZDktMTdlZC0z ODU5LTlhNWMtZjcwNDQ4M2JkMWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgGgCDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBSquRcM8y0fCU8n/upfrUXLVmQgleDxqIcovhgvw5yciyVZ3kH/WCy nI97cGWIHNsFowTUgptygFZ7bRn1eBeOZl1xnAP2tS4bQ2YBj5cA7yu1hOOQmPBT g8AgI/CtNRMZXL/SNaSyi9hAd+2Tkhdv06boScugHfE3Y8ySRqkweyUo1eD8coQ8 V2zbramNBO/buDu3iyWPp+C+GEJWRTrCb1l/YAJLLw6VSerbSzGVKHEglPfK9Srg Ji05ak4b29/ZD4XarKmsXNIfFQbg4RKPsMlDw6ThTMdColqAr434IDgUnlLVXZbF WJnDEhs4zlJ8SHuDvMt2SAuWr/Q+I/pX -----END CERTIFICATE-----Generated at Sat Apr 5 03:55:41 2025 by rpki-client