$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/65f885f6-a3ea-3813-a3a9-b7599adf130f.roa File: 65f885f6-a3ea-3813-a3a9-b7599adf130f.roa (raw, json) Hash identifier: F1XyzLX34NwFwPsx5IrSWc6Snyz2xR30d9IR7VlDJ1M= Subject key identifier: 4A:4F:6E:5B:47:42:0E:1D:BE:65:FE:43:A7:67:A5:CB:8D:25:19:02 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584988CF2BD6C0707A19AB7F8980 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/65f885f6-a3ea-3813-a3a9-b7599adf130f.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 8987 IP address blocks: 2605:4300:2c1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:2b:d6:c0:70:7a:19:ab:7f:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=c85eb4eb-394e-4eff-a163-c915cd1fdb89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9b:5e:04:73:f7:e4:55:cb:bf:e1:5d:e8:ec: dd:b0:bb:79:57:c4:f1:0a:3a:c2:06:f9:7e:8b:f7: d0:7c:c2:7b:d1:93:20:78:a5:ab:d1:32:93:78:bf: ce:4b:95:bf:1c:b9:13:b7:97:96:39:46:b9:41:a7: 46:fa:e2:cc:80:d1:4b:80:79:cb:e4:14:12:1c:87: e2:b5:85:ed:a1:ac:4b:e5:19:b3:3e:f9:19:61:a9: 77:34:4a:79:a0:54:7d:c5:79:14:3f:53:09:2d:89: 43:9b:2d:0d:be:2a:25:c1:24:c1:60:17:80:c9:c9: 1b:89:33:02:af:94:ab:65:53:52:bc:42:0a:92:6e: 4a:1d:20:03:7e:16:62:e8:c6:27:bf:a7:46:89:bb: a1:f4:ca:ce:12:e8:05:e3:5f:67:c6:04:fc:ac:d8: 7b:12:3b:40:93:9f:70:ee:42:14:9a:65:2b:89:22: 7f:ce:64:13:88:6c:43:42:8b:16:5c:38:94:01:27: 1c:20:af:fe:43:fe:cd:09:6c:18:9c:12:93:05:38: aa:7a:92:2d:85:20:8f:e1:be:4f:15:1c:4e:84:68: 17:7e:ec:07:b9:d6:0d:32:33:3b:c0:32:c4:cd:75: d4:c3:1d:56:88:1e:e3:5a:98:6c:0d:5b:ca:c6:da: 7e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4F:6E:5B:47:42:0E:1D:BE:65:FE:43:A7:67:A5:CB:8D:25:19:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/65f885f6-a3ea-3813-a3a9-b7599adf130f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv6: 2605:4300:2c1b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:8f:78:f7:65:e4:b9:b1:3f:0e:8b:37:c6:ee:fd:09:4e:ab: 59:8d:a0:0a:7e:9d:87:55:ff:ee:ca:f1:f1:57:4b:c1:72:21: 4d:af:53:a9:76:3e:2a:83:51:e7:b1:f7:64:25:9e:6e:bb:c5: fe:39:e6:b1:a6:76:7c:1d:eb:7f:a1:0e:ff:93:2e:ec:1b:d1: 50:15:66:e7:df:9d:34:28:aa:1f:cf:fa:75:6f:4d:b8:a3:9d: 79:0c:ad:71:b5:53:73:fb:36:d2:b5:92:ff:fd:cc:64:d9:3c: 44:25:5f:ef:7f:42:9d:02:fd:82:22:77:c9:a7:15:ee:20:6a: 03:2a:8d:8c:96:3f:09:4a:99:29:df:08:4d:9e:fb:fb:dc:54: 2a:61:af:ae:a2:c6:2c:15:0a:34:53:66:26:db:55:78:7f:0a: 53:17:e4:f2:ac:d4:79:80:bb:0c:80:4f:cb:e6:78:91:87:98: b8:91:57:91:9a:7a:ba:5b:ce:9c:f8:9a:bf:1a:31:1e:0c:2f: 7f:df:6e:2a:bd:48:1b:1d:a9:23:41:75:b9:ee:2b:1b:1e:2a: 48:ed:34:01:33:08:11:bf:de:67:ca:66:81:57:9c:89:5b:8d: 7a:b9:e0:1d:fd:5b:2a:99:a6:4e:e1:43:50:08:4a:a8:af:94: 71:c2:8d:eb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIzyvWwHB6Gat/iYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk Yzg1ZWI0ZWItMzk0ZS00ZWZmLWExNjMtYzkxNWNkMWZkYjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypteBHP35FXLv+Fd6OzdsLt5V8TxCjrCBvl+ i/fQfMJ70ZMgeKWr0TKTeL/OS5W/HLkTt5eWOUa5QadG+uLMgNFLgHnL5BQSHIfi tYXtoaxL5RmzPvkZYal3NEp5oFR9xXkUP1MJLYlDmy0NviolwSTBYBeAyckbiTMC r5SrZVNSvEIKkm5KHSADfhZi6MYnv6dGibuh9MrOEugF419nxgT8rNh7EjtAk59w 7kIUmmUriSJ/zmQTiGxDQosWXDiUASccIK/+Q/7NCWwYnBKTBTiqepIthSCP4b5P FRxOhGgXfuwHudYNMjM7wDLEzXXUwx1WiB7jWphsDVvKxtp+5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEpPbltHQg4dvmX+Q6dnpcuNJRkCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNjVmODg1ZjYtYTNlYS0z ODEzLWEzYTktYjc1OTlhZGYxMzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVDACwb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALKPePdl5LmxPw6LN8bu/QlOq1mNoAp+nYdV/+7K8fFXS8FyIU2v U6l2PiqDUeex92Qlnm67xf455rGmdnwd63+hDv+TLuwb0VAVZuffnTQoqh/P+nVv TbijnXkMrXG1U3P7NtK1kv/9zGTZPEQlX+9/Qp0C/YIid8mnFe4gagMqjYyWPwlK mSnfCE2e+/vcVCphr66ixiwVCjRTZibbVXh/ClMX5PKs1HmAuwyAT8vmeJGHmLiR V5Gaerpbzpz4mr8aMR4ML3/fbiq9SBsdqSNBdbnuKxseKkjtNAEzCBG/3mfKZoFX nIlbjXq54B39WyqZpk7hQ1AISqivlHHCjes= -----END CERTIFICATE-----Generated at Sat Apr 19 07:10:41 2025 by rpki-client