$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/a8c15d43-6e2e-344c-b7ad-392debda69ad.roa File: a8c15d43-6e2e-344c-b7ad-392debda69ad.roa (raw, json) Hash identifier: Xnuhu9prAveTVTYRnaoEPz1W5U1DUTLe9oDFNHNUez8= Subject key identifier: 0F:94:38:48:9F:A6:22:A5:06:32:6A:F9:F8:71:68:0E:EA:A5:D3:87 Certificate issuer: /CN=cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2 Certificate serial: 010D0C9F432858497279A17965A8DE47DBE01300 Authority key identifier: 66:97:7D:A4:1F:C6:17:1B:0A:5F:EE:F7:7A:C7:DC:54:DE:B5:EE:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/a8c15d43-6e2e-344c-b7ad-392debda69ad.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 393562 IP address blocks: 2604:640:acdc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:a1:79:65:a8:de:47:db:e0:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2 Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=4f3ed005-0216-4768-b32c-80d5dfb6dd24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ed:bd:f1:32:2d:cc:df:59:77:c1:9f:a1:e0: b1:cd:66:f2:88:36:ce:4a:d9:d7:5a:97:16:c1:07: 99:49:73:6f:29:b2:c2:33:d1:eb:9b:25:44:26:af: 13:16:e9:10:10:2c:d3:01:5b:dc:4b:f1:ac:d3:42: 6d:39:0b:f6:37:e1:eb:b3:59:21:86:f8:9e:3d:87: 0a:ef:ba:31:53:11:12:e5:58:9c:43:cb:36:7d:58: 64:80:8f:7a:d8:cb:78:f7:e7:4a:88:db:a5:6f:c5: 75:a9:80:c7:18:fd:52:a0:8e:1f:fd:13:48:75:09: ca:6f:ae:56:94:f4:4e:ce:e7:81:58:06:39:66:f0: 99:a7:50:68:1b:d8:07:48:5d:16:b9:88:eb:3b:a2: 61:ed:e8:3b:b1:1a:17:4c:3a:bd:e0:63:eb:f3:ae: bc:17:eb:ca:28:0b:ce:77:6d:63:ed:a5:2d:bd:a6: b9:2e:af:8d:92:3e:ac:89:14:90:55:dd:6b:db:87: 95:62:ea:bc:27:8f:33:60:58:fe:a9:72:16:66:b9: 11:c7:d7:c0:a4:15:40:1d:a4:97:66:71:5d:bc:7f: 60:3f:1e:a9:1b:2f:e7:4a:22:f8:02:d7:6c:75:65: e1:0b:f6:89:6b:e8:10:3d:c3:c4:9d:16:35:ea:ac: 42:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:94:38:48:9F:A6:22:A5:06:32:6A:F9:F8:71:68:0E:EA:A5:D3:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/a8c15d43-6e2e-344c-b7ad-392debda69ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.crl X509v3 Authority Key Identifier: keyid:66:97:7D:A4:1F:C6:17:1B:0A:5F:EE:F7:7A:C7:DC:54:DE:B5:EE:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf9576e0-20e1-4c22-bfeb-f50ea8de2ce2.cer sbgp-ipAddrBlock: critical IPv6: 2604:640:acdc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:c5:db:8b:d4:97:85:c6:f5:cf:29:02:e5:8f:38:21:a8:fb: fc:a1:58:fd:d5:78:a9:bc:c7:e6:83:66:44:7f:d0:60:38:29: ee:46:7e:99:40:4f:28:04:a3:35:ca:5e:15:6e:6e:71:cd:ee: 29:8a:09:9b:02:d5:3e:c0:07:b0:82:5d:23:ff:8b:b3:fa:5a: 94:ee:ac:b0:c5:ab:84:89:c5:18:78:8d:9f:5f:0a:f5:20:59: 3c:4d:2c:7d:b1:61:05:14:e2:f8:f6:de:87:6f:44:6d:30:b9: cc:b1:60:9c:b4:3f:f2:7c:21:ff:c2:3c:c2:5f:23:4c:58:cf: 94:b0:17:14:34:b7:34:f6:a6:df:1a:27:8c:09:75:66:67:6d: 1c:bf:8d:01:2f:fc:8a:f2:84:fd:17:56:86:ee:e4:f8:cd:a6: a4:0d:41:c1:69:9f:75:75:c1:6b:68:01:9c:66:1a:a9:f1:e1: 6b:74:ec:67:2b:9a:7e:3c:31:65:66:b1:01:e8:e9:81:94:01: 42:46:92:eb:1d:07:e1:b5:d4:ed:03:fc:99:04:3e:f7:6a:67: b8:c2:c2:6a:52:5a:26:77:6f:5f:94:dd:5a:49:e7:55:78:62: d0:ae:fb:0b:63:e1:ee:56:f3:2c:95:32:9f:05:20:a3:e7:ff: 56:4e:06:47 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElyeaF5ZajeR9vgEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Y5NTc2ZTAtMjBlMS00YzIyLWJmZWItZjUwZWE4ZGUy Y2UyMB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk NGYzZWQwMDUtMDIxNi00NzY4LWIzMmMtODBkNWRmYjZkZDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+298TItzN9Zd8GfoeCxzWbyiDbOStnXWpcW wQeZSXNvKbLCM9HrmyVEJq8TFukQECzTAVvcS/Gs00JtOQv2N+Hrs1khhviePYcK 77oxUxES5VicQ8s2fVhkgI962Mt49+dKiNulb8V1qYDHGP1SoI4f/RNIdQnKb65W lPROzueBWAY5ZvCZp1BoG9gHSF0WuYjrO6Jh7eg7sRoXTDq94GPr8668F+vKKAvO d21j7aUtvaa5Lq+Nkj6siRSQVd1r24eVYuq8J48zYFj+qXIWZrkRx9fApBVAHaSX ZnFdvH9gPx6pGy/nSiL4AtdsdWXhC/aJa+gQPcPEnRY16qxCAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA+UOEifpiKlBjJq+fhxaA7qpdOHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZjk1 NzZlMC0yMGUxLTRjMjItYmZlYi1mNTBlYThkZTJjZTIvYThjMTVkNDMtNmUyZS0z NDRjLWI3YWQtMzkyZGViZGE2OWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2Y5NTc2ZTAtMjBlMS00YzIyLWJm ZWItZjUwZWE4ZGUyY2UyL2NmOTU3NmUwLTIwZTEtNGMyMi1iZmViLWY1MGVhOGRl MmNlMi5jcmwwHwYDVR0jBBgwFoAUZpd9pB/GFxsKX+73esfcVN617lQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZjk1NzZlMC0yMGUxLTRjMjItYmZlYi1mNTBl YThkZTJjZTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQGQKzc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIrF24vUl4XG9c8pAuWPOCGo+/yhWP3VeKm8x+aDZkR/0GA4Ke5G fplATygEozXKXhVubnHN7imKCZsC1T7AB7CCXSP/i7P6WpTurLDFq4SJxRh4jZ9f CvUgWTxNLH2xYQUU4vj23odvRG0wucyxYJy0P/J8If/CPMJfI0xYz5SwFxQ0tzT2 pt8aJ4wJdWZnbRy/jQEv/IryhP0XVobu5PjNpqQNQcFpn3V1wWtoAZxmGqnx4Wt0 7Gcrmn48MWVmsQHo6YGUAUJGkusdB+G11O0D/JkEPvdqZ7jCwmpSWiZ3b1+U3VpJ 51V4YtCu+wtj4e5W8yyVMp8FIKPn/1ZOBkc= -----END CERTIFICATE-----Generated at Sun Apr 13 19:00:19 2025 by rpki-client