$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/a79a4d7a-b5b8-3b32-9c1d-7cc3fd2b297a.roa File: a79a4d7a-b5b8-3b32-9c1d-7cc3fd2b297a.roa (raw, json) Hash identifier: hm5a0O3+RzoRPKODyJn/95H7mtNHwscH5BE4nnS32Z4= Subject key identifier: 7B:D2:60:72:13:FE:F8:A8:56:BF:94:7B:51:F5:6C:BE:43:AA:C5:3A Certificate issuer: /CN=c88ddf4a-b762-40e0-ad58-c8b1a63f462f Certificate serial: 010D0C9F432858492184009DD47C1086851C1880 Authority key identifier: AE:33:3D:70:D3:C7:96:31:FD:81:5B:22:8D:DC:0E:31:0C:E9:14:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/a79a4d7a-b5b8-3b32-9c1d-7cc3fd2b297a.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 26457 IP address blocks: 2620:135:5000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:00:9d:d4:7c:10:86:85:1c:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c88ddf4a-b762-40e0-ad58-c8b1a63f462f Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=2ef6eef9-34cc-4df8-8302-b9ee209e3901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:de:7d:a4:c6:80:17:80:ee:73:35:ca:96:a6: ce:17:0b:ef:92:fd:08:f9:6b:25:8a:b4:79:4b:5e: a9:63:49:77:6e:f8:ea:57:bf:cd:66:53:3f:6a:93: 6f:b8:b6:c3:a5:bb:66:7b:44:a4:8c:61:bf:66:28: f8:40:32:3b:9a:10:42:7c:0d:72:3a:d3:32:f4:b7: 31:03:a5:fb:e8:95:40:f6:ed:af:cb:3c:73:3e:fd: a8:22:56:bc:dd:20:cb:c7:9e:ff:45:3a:c6:cc:bd: 08:b2:88:c2:db:f7:64:ca:10:1b:38:9f:0d:43:f1: f1:80:cf:5a:aa:be:e3:15:cd:02:59:ac:12:1b:8e: c2:b5:e6:c2:45:45:74:66:16:c0:af:04:05:3c:1a: 9e:b9:3a:0e:a8:c1:59:90:b9:26:66:6d:48:8d:62: 2e:86:a4:d1:78:2b:15:8f:6b:7b:42:c1:f0:19:f5: 68:88:f3:cc:be:2c:48:ba:96:67:4e:95:2b:06:c4: b7:6c:b1:44:e0:a6:59:0a:c7:e2:65:d4:bc:fd:cc: cc:69:73:ca:54:56:fa:95:ca:2c:81:2e:a0:0b:dd: f7:27:68:90:c4:b8:b1:35:0b:54:97:c1:05:4c:e2: 83:67:f5:ad:09:62:0f:d2:05:50:6f:3f:c5:92:f7: b0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D2:60:72:13:FE:F8:A8:56:BF:94:7B:51:F5:6C:BE:43:AA:C5:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/a79a4d7a-b5b8-3b32-9c1d-7cc3fd2b297a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.crl X509v3 Authority Key Identifier: keyid:AE:33:3D:70:D3:C7:96:31:FD:81:5B:22:8D:DC:0E:31:0C:E9:14:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer sbgp-ipAddrBlock: critical IPv6: 2620:135:5000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:46:88:87:1d:28:2b:65:93:8f:83:b9:53:fb:47:be:95:66: 32:4b:8b:58:21:eb:9b:3c:07:66:07:a7:b4:d9:01:c4:43:13: 48:13:28:02:a5:35:57:4d:2d:c7:c9:7b:4e:f9:2f:e2:b7:a6: 62:11:88:81:30:ac:62:fe:e9:05:f5:c8:d5:f6:96:e7:8a:0d: 8c:06:11:78:58:2c:0f:0e:26:ae:31:da:cb:db:51:59:3e:27: a4:ad:f1:f7:c5:62:19:78:fa:f0:b6:bb:cc:6b:3c:d6:42:b7: 56:4e:9c:fd:e1:24:37:84:2d:72:b3:61:e2:10:98:43:17:fc: ac:d9:84:c6:f0:1c:2c:3a:65:fe:a1:91:18:9e:8d:d9:d3:77: 8f:eb:1c:41:91:96:bc:af:02:c8:2d:d5:6e:3d:4a:76:14:00: 3b:94:78:fb:1c:a9:4b:57:88:e6:b3:09:a6:2e:ca:91:c2:26: d1:24:c0:79:d6:da:ac:06:47:40:21:ce:45:18:7e:da:09:0d: ab:c6:c0:a8:34:75:8a:27:c9:e8:2e:da:b3:c6:c0:48:2a:26: a4:b4:d9:28:94:3a:a3:b0:41:10:2c:24:bc:33:65:2f:93:ee: 34:d0:d0:b3:b3:78:0e:9f:b5:a6:90:37:de:d0:c4:d2:03:5f: 1d:33:2f:5b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkhhACd1HwQhoUcGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg4ZGRmNGEtYjc2Mi00MGUwLWFkNTgtYzhiMWE2M2Y0 NjJmMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk MmVmNmVlZjktMzRjYy00ZGY4LTgzMDItYjllZTIwOWUzOTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz959pMaAF4DuczXKlqbOFwvvkv0I+WslirR5 S16pY0l3bvjqV7/NZlM/apNvuLbDpbtme0SkjGG/Zij4QDI7mhBCfA1yOtMy9Lcx A6X76JVA9u2vyzxzPv2oIla83SDLx57/RTrGzL0IsojC2/dkyhAbOJ8NQ/HxgM9a qr7jFc0CWawSG47CtebCRUV0ZhbArwQFPBqeuToOqMFZkLkmZm1IjWIuhqTReCsV j2t7QsHwGfVoiPPMvixIupZnTpUrBsS3bLFE4KZZCsfiZdS8/czMaXPKVFb6lcos gS6gC933J2iQxLixNQtUl8EFTOKDZ/WtCWIP0gVQbz/FkvewkwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHvSYHIT/vioVr+Ue1H1bL5DqsU6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jODhk ZGY0YS1iNzYyLTQwZTAtYWQ1OC1jOGIxYTYzZjQ2MmYvYTc5YTRkN2EtYjViOC0z YjMyLTljMWQtN2NjM2ZkMmIyOTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzg4ZGRmNGEtYjc2Mi00MGUwLWFk NTgtYzhiMWE2M2Y0NjJmL2M4OGRkZjRhLWI3NjItNDBlMC1hZDU4LWM4YjFhNjNm NDYyZi5jcmwwHwYDVR0jBBgwFoAUrjM9cNPHljH9gVsijdwOMQzpFOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jODhkZGY0YS1iNzYyLTQwZTAtYWQ1OC1jOGIx YTYzZjQ2MmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABNVAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFBGiIcdKCtlk4+DuVP7R76VZjJLi1gh65s8B2YHp7TZAcRDE0gT KAKlNVdNLcfJe075L+K3pmIRiIEwrGL+6QX1yNX2lueKDYwGEXhYLA8OJq4x2svb UVk+J6St8ffFYhl4+vC2u8xrPNZCt1ZOnP3hJDeELXKzYeIQmEMX/KzZhMbwHCw6 Zf6hkRiejdnTd4/rHEGRlryvAsgt1W49SnYUADuUePscqUtXiOazCaYuypHCJtEk wHnW2qwGR0AhzkUYftoJDavGwKg0dYonyegu2rPGwEgqJqS02SiUOqOwQRAsJLwz ZS+T7jTQ0LOzeA6ftaaQN97QxNIDXx0zL1s= -----END CERTIFICATE-----Generated at Fri Apr 11 23:40:55 2025 by rpki-client