$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/902609b8-209b-370d-a483-6d893db0882b.roa File: 902609b8-209b-370d-a483-6d893db0882b.roa (raw, json) Hash identifier: HRtOfmK50xr2w6wGTjFpWDwwOf1pLqDi2V18fwIrAz0= Subject key identifier: 55:89:88:0C:1E:42:49:AC:D3:BA:23:FD:53:34:B0:A7:A5:C1:52:3D Certificate issuer: /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d Certificate serial: 010D0C9F432858494CC9508209D31078EE387080 Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/902609b8-209b-370d-a483-6d893db0882b.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 20473 IP address blocks: 2001:19f0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:50:82:09:d3:10:78:ee:38:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=9be25fbd-0f4f-49b6-a04f-9a5da68f323f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:54:fc:49:78:af:fd:34:19:4d:1e:e4:12:f7: 1d:25:8e:f8:55:7f:24:16:43:f2:2a:93:e8:54:13: 79:3c:9d:ec:77:8f:6d:a3:e9:dc:e8:c9:42:ee:04: 00:0b:e7:53:8b:47:88:c4:c6:32:2d:ce:cc:95:5f: b0:b7:ea:d7:b5:7b:8f:e9:f1:44:f3:de:3f:2b:49: df:d5:c3:5f:44:5a:4d:73:4b:aa:ff:54:30:aa:69: 1c:c0:a3:97:2a:f8:f5:cf:86:22:b0:32:42:15:1f: e8:1f:58:b7:e7:00:9f:81:bc:e0:77:af:a9:a5:81: 12:9a:e8:6e:86:fb:66:70:da:52:d7:7a:f0:03:f4: f1:3f:73:62:70:ad:d7:66:7f:15:82:3d:55:6b:99: ba:69:f1:56:13:75:45:0a:4e:ad:6c:7b:4a:b8:16: 84:56:12:04:86:f5:1f:f7:27:e3:60:97:90:73:8e: fb:b4:2e:9d:ec:26:e8:9d:43:1c:97:3e:76:42:f3: 14:d0:3f:9b:b8:45:dc:5c:26:80:1b:99:97:1c:e4: 87:8b:35:fc:22:75:4c:4c:ab:f8:71:9e:bd:56:b7: 71:80:b0:e8:04:c9:18:fe:66:28:ed:c6:e8:02:2b: e0:20:b3:19:5a:18:ac:63:42:37:05:cf:17:a1:e7: fb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:89:88:0C:1E:42:49:AC:D3:BA:23:FD:53:34:B0:A7:A5:C1:52:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/902609b8-209b-370d-a483-6d893db0882b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl X509v3 Authority Key Identifier: keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer sbgp-ipAddrBlock: critical IPv6: 2001:19f0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:70:0b:38:b9:29:b7:84:c6:71:db:ea:d9:9a:71:30:b3:e5: 0c:91:10:1b:9c:64:31:be:be:45:01:48:b4:78:80:b8:84:d5: a3:ac:7c:08:75:a3:d7:61:89:7a:9f:a8:40:4c:24:0e:65:e7: c2:6d:c7:05:d9:8b:ac:a8:9b:ab:5d:80:d4:58:7b:8f:6e:9b: 0c:91:0d:fe:c6:5d:54:d3:8b:d0:80:7e:a4:33:a2:e6:b2:36: 4d:2b:52:ba:c9:41:98:cb:d5:39:ee:e9:70:e4:28:77:2c:75: f0:fa:97:ca:95:5e:31:77:14:c9:da:23:36:db:6f:34:da:91: c5:30:71:23:c0:77:89:54:c9:47:4c:f9:4f:e6:dc:fb:af:bd: 73:09:01:04:41:1d:32:cd:cb:1e:cb:64:4a:c9:f4:d9:e9:52: 7f:96:5a:19:fe:23:07:cd:3f:ec:61:c5:d9:01:ef:86:ef:3d: ee:91:46:c4:d3:ac:5d:d1:f9:87:0e:b6:7d:5d:b5:fd:ce:10: c9:55:2d:f0:0e:5c:62:33:6a:d3:c7:a5:20:3a:63:1e:df:1f: f4:54:d7:17:71:ce:21:39:3e:11:00:71:a4:e1:da:45:a5:b5: f4:5a:4c:0b:0b:72:8c:c8:a2:03:3f:5c:4c:ac:22:42:97:2c: 05:a2:86:44 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElMyVCCCdMQeO44cIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjM4MTc3MzYtN2U1ZS00NzQwLThlZTEtYWM2ZjIzMTdm MDhkMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk OWJlMjVmYmQtMGY0Zi00OWI2LWEwNGYtOWE1ZGE2OGYzMjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFT8SXiv/TQZTR7kEvcdJY74VX8kFkPyKpPo VBN5PJ3sd49to+nc6MlC7gQAC+dTi0eIxMYyLc7MlV+wt+rXtXuP6fFE894/K0nf 1cNfRFpNc0uq/1QwqmkcwKOXKvj1z4YisDJCFR/oH1i35wCfgbzgd6+ppYESmuhu hvtmcNpS13rwA/TxP3NicK3XZn8Vgj1Va5m6afFWE3VFCk6tbHtKuBaEVhIEhvUf 9yfjYJeQc477tC6d7CbonUMclz52QvMU0D+buEXcXCaAG5mXHOSHizX8InVMTKv4 cZ69VrdxgLDoBMkY/mYo7cboAivgILMZWhisY0I3Bc8Xoef7GQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFWJiAweQkms07oj/VM0sKelwVI9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82Mzgx NzczNi03ZTVlLTQ3NDAtOGVlMS1hYzZmMjMxN2YwOGQvOTAyNjA5YjgtMjA5Yi0z NzBkLWE0ODMtNmQ4OTNkYjA4ODJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjM4MTc3MzYtN2U1ZS00NzQwLThl ZTEtYWM2ZjIzMTdmMDhkLzYzODE3NzM2LTdlNWUtNDc0MC04ZWUxLWFjNmYyMzE3 ZjA4ZC5jcmwwHwYDVR0jBBgwFoAUtfT/gcvgoCb1EjWns0Rz0IlP/HcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82MzgxNzczNi03ZTVlLTQ3NDAtOGVlMS1hYzZm MjMxN2YwOGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEZ8DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBTcAs4uSm3hMZx2+rZmnEws+UMkRAbnGQxvr5FAUi0eIC4hNWjrHwI daPXYYl6n6hATCQOZefCbccF2YusqJurXYDUWHuPbpsMkQ3+xl1U04vQgH6kM6Lm sjZNK1K6yUGYy9U57ulw5Ch3LHXw+pfKlV4xdxTJ2iM222802pHFMHEjwHeJVMlH TPlP5tz7r71zCQEEQR0yzcsey2RKyfTZ6VJ/lloZ/iMHzT/sYcXZAe+G7z3ukUbE 06xd0fmHDrZ9XbX9zhDJVS3wDlxiM2rTx6UgOmMe3x/0VNcXcc4hOT4RAHGk4dpF pbX0WkwLC3KMyKIDP1xMrCJClywFooZE -----END CERTIFICATE-----Generated at Sat Apr 19 11:39:20 2025 by rpki-client