$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/cfc625d2-59fc-3fca-a96c-ec36601abffc.roa File: cfc625d2-59fc-3fca-a96c-ec36601abffc.roa (raw, json) Hash identifier: LqR7zx5hUAnm+e0+mXnmHVuEJBVlXlqTqRy1Yh2QJ7c= Subject key identifier: 53:75:3B:40:54:12:00:EC:EB:14:E8:CA:EE:11:50:F4:D7:31:9A:2D Certificate issuer: /CN=b4ac08c7-b64b-4701-92e6-e136f50164b9 Certificate serial: 010D0C9F43285849350EAAB02CC3F81B503BE000 Authority key identifier: 29:2F:8C:27:8A:C6:AB:14:31:91:62:BC:EC:C2:13:15:F5:3B:8B:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/cfc625d2-59fc-3fca-a96c-ec36601abffc.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 393819 IP address blocks: 2606:cac0::/32 maxlen: 32 2606:cac0:35::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/b4ac08c7-b64b-4701-92e6-e136f50164b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/b4ac08c7-b64b-4701-92e6-e136f50164b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:aa:b0:2c:c3:f8:1b:50:3b:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4ac08c7-b64b-4701-92e6-e136f50164b9 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=5b8f0471-0574-4257-a1f5-aca287799245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:84:2c:a9:0a:90:e3:c2:db:d2:e3:48:d1:f0: 6f:92:41:b3:15:e9:5b:3c:ff:ab:fb:f3:c9:30:36: f1:b7:9a:55:03:13:8a:87:62:16:7a:d3:b6:5f:e4: 61:68:76:e7:81:f4:3d:c7:39:e8:0f:83:dc:b5:7f: a9:c0:91:d6:cb:14:73:5d:97:7d:24:22:1a:92:2a: 3f:99:c6:66:99:27:52:3e:1a:f2:a8:b2:32:67:9a: 6b:58:bb:6d:f3:fb:4b:66:f4:7c:cc:72:28:90:e7: 70:4e:a4:b8:5d:d8:81:66:0f:ce:8b:ce:09:f1:69: dd:76:1c:dc:f2:4e:74:86:03:62:7c:bd:e4:c7:28: 43:e6:ff:87:09:45:bc:93:c4:1e:6a:9f:21:12:aa: ec:f1:14:e0:18:c6:a5:15:a9:75:2c:98:88:43:96: c7:ce:5e:32:d3:2c:02:f4:e0:dd:76:39:d8:26:1b: df:51:b8:d8:ef:29:50:ca:25:a9:76:bf:62:0b:6a: 27:55:b8:0d:18:eb:74:a3:de:05:1a:33:1b:19:4d: 07:2f:c8:3e:a0:71:12:63:f9:c8:bd:72:4b:36:3e: b5:f9:65:29:c0:24:39:5b:66:cb:a6:a1:ef:9e:da: fa:cf:c1:bd:4c:58:8a:2c:ed:4b:68:66:7f:83:36: cc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:75:3B:40:54:12:00:EC:EB:14:E8:CA:EE:11:50:F4:D7:31:9A:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/cfc625d2-59fc-3fca-a96c-ec36601abffc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/b4ac08c7-b64b-4701-92e6-e136f50164b9.crl X509v3 Authority Key Identifier: keyid:29:2F:8C:27:8A:C6:AB:14:31:91:62:BC:EC:C2:13:15:F5:3B:8B:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9.cer sbgp-ipAddrBlock: critical IPv6: 2606:cac0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:13:a8:17:74:78:1f:8a:7c:18:c2:38:be:8c:48:af:23:e8: 96:2c:95:33:81:af:a8:0b:ce:1c:aa:09:ba:5f:3f:4c:01:6b: d2:ce:2e:6d:d3:a3:4b:b6:4c:bc:70:2e:c0:4e:2f:98:36:b3: 29:d3:48:e3:b4:db:28:32:7e:f5:46:bc:19:95:cb:4c:1a:4a: 84:9e:c1:15:12:77:95:62:1f:de:d2:85:78:92:2c:29:86:fc: ed:da:11:9f:8e:1b:0d:b9:65:ec:1f:7b:84:59:bf:0d:cf:70: 81:15:92:48:15:e7:4c:ea:fd:1f:5f:35:1f:92:23:b2:aa:45: 0b:2f:ad:35:08:39:80:35:cb:13:a4:af:81:ac:56:9f:57:55: e5:4b:38:14:af:1b:4c:bc:2b:7c:c2:0a:bf:fc:7b:e4:fb:d3: f1:0f:75:c7:9a:4c:94:3e:e5:92:1f:67:09:7b:34:0b:e2:16: 51:9f:a1:b7:13:dd:a5:98:d4:12:fe:32:f8:2c:0b:48:62:ae: 9f:ca:c8:c9:dd:56:53:3b:a6:25:99:14:cc:54:ae:ba:ef:e5: 7a:1e:96:da:83:ea:95:ff:ac:9d:ff:50:13:62:81:b3:63:69: e2:40:22:7b:1b:7e:24:03:82:32:c4:9f:5b:93:1e:d6:7b:96: 58:f0:ea:68 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEk1DqqwLMP4G1A74AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRhYzA4YzctYjY0Yi00NzAxLTkyZTYtZTEzNmY1MDE2 NGI5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk NWI4ZjA0NzEtMDU3NC00MjU3LWExZjUtYWNhMjg3Nzk5MjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoQsqQqQ48Lb0uNI0fBvkkGzFelbPP+r+/PJ MDbxt5pVAxOKh2IWetO2X+RhaHbngfQ9xznoD4PctX+pwJHWyxRzXZd9JCIakio/ mcZmmSdSPhryqLIyZ5prWLtt8/tLZvR8zHIokOdwTqS4XdiBZg/Oi84J8Wnddhzc 8k50hgNifL3kxyhD5v+HCUW8k8Qeap8hEqrs8RTgGMalFal1LJiIQ5bHzl4y0ywC 9ODddjnYJhvfUbjY7ylQyiWpdr9iC2onVbgNGOt0o94FGjMbGU0HL8g+oHESY/nI vXJLNj61+WUpwCQ5W2bLpqHvntr6z8G9TFiKLO1LaGZ/gzbMjQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFN1O0BUEgDs6xToyu4RUPTXMZotMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNGFj MDhjNy1iNjRiLTQ3MDEtOTJlNi1lMTM2ZjUwMTY0YjkvY2ZjNjI1ZDItNTlmYy0z ZmNhLWE5NmMtZWMzNjYwMWFiZmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjRhYzA4YzctYjY0Yi00NzAxLTky ZTYtZTEzNmY1MDE2NGI5L2I0YWMwOGM3LWI2NGItNDcwMS05MmU2LWUxMzZmNTAx NjRiOS5jcmwwHwYDVR0jBBgwFoAUKS+MJ4rGqxQxkWK87MITFfU7i38wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNGFjMDhjNy1iNjRiLTQ3MDEtOTJlNi1lMTM2 ZjUwMTY0YjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbKwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBnE6gXdHgfinwYwji+jEivI+iWLJUzga+oC84cqgm6Xz9MAWvSzi5t 06NLtky8cC7ATi+YNrMp00jjtNsoMn71RrwZlctMGkqEnsEVEneVYh/e0oV4kiwp hvzt2hGfjhsNuWXsH3uEWb8Nz3CBFZJIFedM6v0fXzUfkiOyqkULL601CDmANcsT pK+BrFafV1XlSzgUrxtMvCt8wgq//Hvk+9PxD3XHmkyUPuWSH2cJezQL4hZRn6G3 E92lmNQS/jL4LAtIYq6fysjJ3VZTO6YlmRTMVK667+V6Hpbag+qV/6yd/1ATYoGz Y2niQCJ7G34kA4IyxJ9bkx7We5ZY8Opo -----END CERTIFICATE-----Generated at Sat Apr 12 13:47:27 2025 by rpki-client