$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/3b4f9036-fe1e-3bb9-ac0a-f779487a479e.roa File: 3b4f9036-fe1e-3bb9-ac0a-f779487a479e.roa (raw, json) Hash identifier: qiHhCmgFFJfluyTlvQ8AqvfzSqN4MQBTEcxtC1QlsjU= Subject key identifier: A6:43:9C:C5:1C:69:C0:48:78:54:EB:5C:3E:FD:45:F0:BE:55:66:F8 Certificate issuer: /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd Certificate serial: 010D0C9F432858491A00FA14727E3058AB3E8B80 Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/3b4f9036-fe1e-3bb9-ac0a-f779487a479e.roa Signing time: Thu 06 Mar 2025 20:26:49 +0000 ROA not before: Thu 06 Mar 2025 20:26:49 +0000 ROA not after: Wed 04 Jun 2025 19:26:49 +0000 asID: 0 IP address blocks: 2602:fd10:400::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:00:fa:14:72:7e:30:58:ab:3e:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd Validity Not Before: Mar 6 20:26:49 2025 GMT Not After : Jun 4 19:26:49 2025 GMT Subject: CN=e4de9a63-d07d-4f4b-a647-89b5c018d1b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:71:b6:34:8e:3f:e8:ef:cb:20:1c:f5:d7:b9: bc:33:5d:cc:06:ea:94:c4:b4:78:db:38:44:65:3d: 45:ba:64:ed:40:5e:60:45:ee:a3:50:81:ac:6c:93: dc:39:6a:2c:79:84:73:ad:2b:89:6f:2f:b5:81:4f: 2e:ee:01:cb:a3:b6:65:da:9b:d7:8c:87:45:53:39: 7e:9d:52:44:fe:6e:13:20:96:47:50:fc:48:ec:67: be:ea:c5:78:11:9e:36:4b:13:9a:af:1e:1a:09:6b: eb:7b:79:21:bf:37:3d:86:f8:7f:3c:92:ac:17:2b: 14:df:58:ce:25:e1:b7:a7:01:77:cf:bc:ae:7c:23: 10:40:69:3f:3b:8a:84:11:c6:58:86:0b:d4:a6:7d: b9:2f:df:a6:d5:0d:4c:e8:0b:99:dd:04:5b:82:29: 5b:8c:d7:94:11:2f:72:e7:89:fc:3a:6c:d0:bd:5a: ca:e9:5a:1c:f4:8b:97:47:26:58:9f:d8:2d:cd:c7: bf:ed:8e:b3:de:85:52:d3:fa:6c:27:c2:99:bf:87: 8a:3a:6e:21:65:85:d7:b6:a1:1c:07:39:f6:57:88: 9d:2f:d7:8e:c6:c6:87:6a:fe:de:94:34:01:89:57: fd:86:a3:58:dc:26:bb:99:05:e3:ce:4d:d8:9f:5a: 51:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:43:9C:C5:1C:69:C0:48:78:54:EB:5C:3E:FD:45:F0:BE:55:66:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/3b4f9036-fe1e-3bb9-ac0a-f779487a479e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl X509v3 Authority Key Identifier: keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer sbgp-ipAddrBlock: critical IPv6: 2602:fd10:400::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:d6:ad:0d:92:af:51:32:80:c1:c6:7f:2b:ee:f9:d6:b0:95: d9:b2:d7:9f:be:ce:6e:c7:a3:0a:46:3a:24:33:c4:c0:04:e2: 74:63:e3:6d:4d:1d:bd:3a:92:c8:cc:35:87:4d:3c:e3:bd:f5: 18:05:84:d4:e1:1c:47:9c:23:d4:5f:46:f0:a8:09:b0:39:d8: 09:ee:ff:13:fa:e1:3a:9f:8e:e1:2f:09:5b:fd:b7:cc:ca:98: c9:f1:73:1c:7a:fc:9b:82:77:82:f0:05:7f:1d:c8:97:e5:18: 57:fa:d8:a6:3e:cf:61:be:78:a1:70:06:6c:9e:8d:ce:7a:47: 43:21:65:38:e9:16:b9:94:a4:47:c8:eb:5b:d9:51:0e:78:0b: cd:21:64:24:17:4d:e4:c2:84:f0:8d:f0:3a:4c:cf:02:da:b9: 7b:56:8a:c8:d8:9e:35:ef:ba:85:65:c0:b7:f8:f7:4f:44:d6: 10:6a:62:3d:9c:b3:5f:6a:30:23:a7:cf:f2:9f:b7:08:b7:f5: a9:26:75:2e:4a:f8:ea:5e:d0:1f:c5:52:2f:85:43:85:5e:a4: 70:fc:4c:bc:66:26:1e:c4:f0:64:b4:1e:24:48:9d:aa:ed:2e: 46:e5:61:b0:a3:71:bf:fc:31:45:d0:19:10:cc:e4:12:be:2e: b5:7e:66:ed -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkaAPoUcn4wWKs+i4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTQyYzU3OTUtOTU0ZC00NjhmLTlkZWItN2YzYWI2M2Mx MWRkMB4XDTI1MDMwNjIwMjY0OVoXDTI1MDYwNDE5MjY0OVowLzEtMCsGA1UEAxMk ZTRkZTlhNjMtZDA3ZC00ZjRiLWE2NDctODliNWMwMThkMWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3G2NI4/6O/LIBz117m8M13MBuqUxLR42zhE ZT1FumTtQF5gRe6jUIGsbJPcOWoseYRzrSuJby+1gU8u7gHLo7Zl2pvXjIdFUzl+ nVJE/m4TIJZHUPxI7Ge+6sV4EZ42SxOarx4aCWvre3khvzc9hvh/PJKsFysU31jO JeG3pwF3z7yufCMQQGk/O4qEEcZYhgvUpn25L9+m1Q1M6AuZ3QRbgilbjNeUES9y 54n8OmzQvVrK6Voc9IuXRyZYn9gtzce/7Y6z3oVS0/psJ8KZv4eKOm4hZYXXtqEc Bzn2V4idL9eOxsaHav7elDQBiVf9hqNY3Ca7mQXjzk3Yn1pRxwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKZDnMUcacBIeFTrXD79RfC+VWb4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNDJj NTc5NS05NTRkLTQ2OGYtOWRlYi03ZjNhYjYzYzExZGQvM2I0ZjkwMzYtZmUxZS0z YmI5LWFjMGEtZjc3OTQ4N2E0NzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTQyYzU3OTUtOTU0ZC00NjhmLTlk ZWItN2YzYWI2M2MxMWRkL2E0MmM1Nzk1LTk1NGQtNDY4Zi05ZGViLTdmM2FiNjNj MTFkZC5jcmwwHwYDVR0jBBgwFoAUhQ9DF07j3MbPHnpY1nyLgvEX3HAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNDJjNTc5NS05NTRkLTQ2OGYtOWRlYi03ZjNh YjYzYzExZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL9EAQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAV9atDZKvUTKAwcZ/K+751rCV2bLXn77ObsejCkY6JDPEwATidGPj bU0dvTqSyMw1h0084731GAWE1OEcR5wj1F9G8KgJsDnYCe7/E/rhOp+O4S8JW/23 zMqYyfFzHHr8m4J3gvAFfx3Il+UYV/rYpj7PYb54oXAGbJ6NznpHQyFlOOkWuZSk R8jrW9lRDngLzSFkJBdN5MKE8I3wOkzPAtq5e1aKyNieNe+6hWXAt/j3T0TWEGpi PZyzX2owI6fP8p+3CLf1qSZ1Lkr46l7QH8VSL4VDhV6kcPxMvGYmHsTwZLQeJEid qu0uRuVhsKNxv/wxRdAZEMzkEr4utX5m7Q== -----END CERTIFICATE-----Generated at Fri Apr 11 23:14:06 2025 by rpki-client