$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/ff9d6984-04fe-33bd-9dc7-515b58b4f763.roa File: ff9d6984-04fe-33bd-9dc7-515b58b4f763.roa (raw, json) Hash identifier: ZVpsVDYSDNOmdL85XTyp8i19TK0ljt98V4OkawsZXS4= Subject key identifier: B3:CC:6D:6F:05:0F:D5:6F:33:E2:6F:6E:52:C2:A8:7C:CF:60:CA:43 Certificate issuer: /CN=f375140c-52cc-401f-b3a0-476ffa367076 Certificate serial: 010D0C9F43285849350E9F01E828A164790A7E70 Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/ff9d6984-04fe-33bd-9dc7-515b58b4f763.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 399976 IP address blocks: 2602:80c:205b::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:9f:01:e8:28:a1:64:79:0a:7e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=a04cc9a4-df98-4baa-9d0c-d646a8a9fe28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1f:0e:06:79:31:83:38:df:55:72:91:3f:9e: cb:0a:0f:7e:8a:ef:8f:26:e9:d0:b0:d5:a3:61:ba: aa:2a:e0:75:28:90:b1:d4:03:96:23:72:af:df:9a: 7a:51:b6:99:11:e2:59:3d:92:16:12:9c:f9:03:5f: 1e:67:95:9f:7f:c5:e2:8c:37:03:19:2d:b7:0a:84: e9:15:ac:7a:f7:d6:bb:f1:05:f6:c6:bc:ca:84:ea: ae:be:02:dd:bc:79:e2:1e:17:e0:a7:26:21:ba:dc: 29:16:6a:d7:11:54:a8:45:b5:c5:00:45:ad:34:67: a4:18:9a:3f:08:37:c3:84:83:15:02:be:8f:b4:aa: 52:09:bb:1d:58:59:c3:28:f6:12:35:47:fe:9c:85: da:c2:70:70:76:2d:e2:28:c7:54:08:8a:13:cc:7f: f6:4c:a0:85:55:5c:78:1b:93:d2:5f:af:37:07:2d: 6c:e8:c0:d5:5a:3d:9d:7d:2d:ce:64:39:27:11:36: 12:ce:cc:34:3b:63:0f:62:d3:ee:10:56:e0:8e:bc: be:bf:df:6d:68:c4:07:28:49:2a:ef:ed:a4:a1:4d: 93:26:64:dc:8f:d8:b0:ee:44:54:0e:a2:89:40:53: 95:2f:35:99:e1:5f:39:e1:e3:05:76:db:b8:aa:eb: bc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:CC:6D:6F:05:0F:D5:6F:33:E2:6F:6E:52:C2:A8:7C:CF:60:CA:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/ff9d6984-04fe-33bd-9dc7-515b58b4f763.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl X509v3 Authority Key Identifier: keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer sbgp-ipAddrBlock: critical IPv6: 2602:80c:205b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:38:8c:b5:f4:82:11:e6:42:36:b3:d8:b0:f5:ec:05:a8:1d: 18:1d:3d:df:d1:e7:a8:ad:7e:0c:b6:fc:8f:81:52:a2:83:28: d2:b3:1c:ff:93:7a:80:f3:d8:19:d0:66:1d:8f:07:97:f1:db: 5a:d6:e8:8d:87:e6:57:5c:6c:28:1a:5d:39:a3:b5:01:5f:22: c4:eb:3e:db:13:5a:19:59:8e:c7:2f:15:f2:32:83:14:57:3d: 7c:3b:01:33:2e:69:e6:a7:a2:2b:39:bd:d1:06:be:e6:e6:64: a4:dc:ce:fe:77:6c:d2:cb:8a:8a:33:4f:a9:93:73:10:a6:d8: d9:17:9f:91:da:8a:c4:55:89:f3:e3:7b:e9:21:61:3b:2c:f1: 1f:12:07:38:74:15:e4:e9:01:c5:b5:d0:15:ed:05:e8:39:ca: 8c:c0:88:a1:3c:65:22:86:21:f6:7e:c9:13:f2:2f:79:39:7e: 8b:12:eb:0b:5e:db:51:d5:f1:c0:99:5f:a8:b9:87:8b:e0:30: 24:c1:df:f8:c4:cd:e7:e0:f7:d8:d4:81:5c:88:02:a6:3b:74: a4:90:17:b8:2e:0e:02:23:24:5b:ec:1e:d2:5d:ea:91:b1:6d: 9f:67:cb:19:75:41:68:22:01:6e:38:fd:2f:aa:85:df:ed:2e: bc:27:82:63 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk1Dp8B6CihZHkKfnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3 MDc2MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk YTA0Y2M5YTQtZGY5OC00YmFhLTlkMGMtZDY0NmE4YTlmZTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR8OBnkxgzjfVXKRP57LCg9+iu+PJunQsNWj YbqqKuB1KJCx1AOWI3Kv35p6UbaZEeJZPZIWEpz5A18eZ5Wff8XijDcDGS23CoTp Fax699a78QX2xrzKhOquvgLdvHniHhfgpyYhutwpFmrXEVSoRbXFAEWtNGekGJo/ CDfDhIMVAr6PtKpSCbsdWFnDKPYSNUf+nIXawnBwdi3iKMdUCIoTzH/2TKCFVVx4 G5PSX683By1s6MDVWj2dfS3OZDknETYSzsw0O2MPYtPuEFbgjry+v99taMQHKEkq 7+2koU2TJmTcj9iw7kRUDqKJQFOVLzWZ4V854eMFdtu4quu8hwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLPMbW8FD9VvM+JvblLCqHzPYMpDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1 MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvZmY5ZDY5ODQtMDRmZS0z M2JkLTlkYzctNTE1YjU4YjRmNzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2 NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIDCBb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADk4jLX0ghHmQjaz2LD17AWoHRgdPd/R56itfgy2/I+BUqKDKNKz HP+TeoDz2BnQZh2PB5fx21rW6I2H5ldcbCgaXTmjtQFfIsTrPtsTWhlZjscvFfIy gxRXPXw7ATMuaeanois5vdEGvubmZKTczv53bNLLioozT6mTcxCm2NkXn5HaisRV ifPje+khYTss8R8SBzh0FeTpAcW10BXtBeg5yozAiKE8ZSKGIfZ+yRPyL3k5fosS 6wte21HV8cCZX6i5h4vgMCTB3/jEzefg99jUgVyIAqY7dKSQF7guDgIjJFvsHtJd 6pGxbZ9nyxl1QWgiAW44/S+qhd/tLrwngmM= -----END CERTIFICATE-----Generated at Sat Apr 12 16:08:08 2025 by rpki-client