$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/bde8a3df-323c-3223-afd6-816666bc84c2.roa File: bde8a3df-323c-3223-afd6-816666bc84c2.roa (raw, json) Hash identifier: hzKDIjIU53UIQAoXJCq8IDIkN9i4LibC8V+B3ge5UVE= Subject key identifier: 5C:6B:6C:56:B2:7A:E0:C1:D0:64:5A:9C:C9:17:61:CE:ED:B0:5C:B4 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F432858492D7DC0FF59BE6E76626D8E00 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/bde8a3df-323c-3223-afd6-816666bc84c2.roa Signing time: Thu 13 Mar 2025 19:58:35 +0000 ROA not before: Thu 13 Mar 2025 19:58:35 +0000 ROA not after: Wed 11 Jun 2025 19:58:35 +0000 asID: 62651 IP address blocks: 2604:c980:3800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2d:7d:c0:ff:59:be:6e:76:62:6d:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Mar 13 19:58:35 2025 GMT Not After : Jun 11 19:58:35 2025 GMT Subject: CN=d533e5a8-e4d2-4b85-9b3e-b19b7368edcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:08:bd:d4:be:34:e7:87:d1:5b:51:d1:86:d8: 3a:a6:f7:56:ca:37:29:d5:98:0d:d8:22:9e:d4:13: 1e:90:96:5b:47:39:ab:93:54:c6:c1:0f:c0:42:db: cf:f2:22:19:9b:dc:e3:bf:8c:ee:d3:31:59:96:2e: 43:e5:c5:43:26:23:97:be:54:08:a0:57:02:4f:d5: 06:4d:c8:52:95:b5:22:27:91:da:51:49:e8:86:e2: e9:9a:47:62:1e:72:07:f0:97:54:9e:0a:7c:7d:1a: 0e:10:ee:95:93:4f:9e:45:39:2e:b0:42:a0:31:c9: a6:6d:00:c1:e7:45:37:a1:5a:04:b9:34:5a:09:e6: 2b:5f:a2:f8:96:07:ef:51:11:e2:f6:2f:c0:ab:e2: 05:64:3e:ca:af:db:8a:c3:51:a1:76:14:29:46:b4: 24:70:1e:42:82:db:94:12:6e:8b:3a:0c:b8:23:84: 14:f6:17:33:15:01:39:17:17:a1:82:59:f8:3f:02: 83:80:5c:0b:d7:79:3b:a9:29:87:48:52:7b:c1:de: c8:d8:2e:bc:a2:7f:33:dc:ef:ab:6e:3d:8a:f4:b0: c0:37:7e:47:b1:25:b7:ce:97:8d:c8:0c:3a:bb:34: 72:90:95:27:0c:b1:d3:f7:2b:8d:cd:7b:c3:26:62: 17:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:6B:6C:56:B2:7A:E0:C1:D0:64:5A:9C:C9:17:61:CE:ED:B0:5C:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/bde8a3df-323c-3223-afd6-816666bc84c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv6: 2604:c980:3800::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:16:e1:97:11:a4:f1:74:df:31:33:7d:8d:7e:94:48:d1:73: cb:31:90:59:f0:df:da:b7:0a:c2:96:e1:b5:28:97:2e:c3:89: 94:30:09:48:06:e6:ec:c3:53:0d:f8:cc:f5:07:33:7f:02:7e: 03:8d:89:0a:f5:06:1e:1b:3d:a9:e5:c6:1e:c8:bd:94:c0:f2: 81:88:33:41:07:d9:28:d7:39:f5:32:00:a1:93:86:0e:44:8f: d6:72:72:e3:9b:70:7d:2f:4d:f1:d0:e3:2e:0f:0f:30:af:b2: d7:6e:47:a5:2a:cc:33:e8:ba:34:07:58:b8:b0:25:8b:ec:0a: 2e:d5:5d:39:38:4f:85:c8:4a:55:47:0b:aa:88:36:a3:01:94: 90:a5:11:b6:65:4d:4e:c8:c1:b9:ad:5c:01:73:96:70:a0:b1: bb:c1:50:34:a4:3f:65:ce:cc:94:45:91:91:61:d9:fe:1a:fa: e7:89:b3:16:f3:74:94:d0:60:7a:5a:5f:0b:e0:36:39:4c:24: c3:04:35:6f:65:e3:d0:5f:18:cf:ba:a0:a3:24:08:d5:98:13: 62:42:93:4a:62:c0:f8:0c:2c:e3:4e:95:0f:31:d6:f2:61:c2: fe:2f:4e:39:4e:a2:c0:90:b6:57:73:f7:ec:0c:f6:00:40:27: 97:79:55:70 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEktfcD/Wb5udmJtjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDMxMzE5NTgzNVoXDTI1MDYxMTE5NTgzNVowLzEtMCsGA1UEAxMk ZDUzM2U1YTgtZTRkMi00Yjg1LTliM2UtYjE5YjczNjhlZGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgi91L4054fRW1HRhtg6pvdWyjcp1ZgN2CKe 1BMekJZbRzmrk1TGwQ/AQtvP8iIZm9zjv4zu0zFZli5D5cVDJiOXvlQIoFcCT9UG TchSlbUiJ5HaUUnohuLpmkdiHnIH8JdUngp8fRoOEO6Vk0+eRTkusEKgMcmmbQDB 50U3oVoEuTRaCeYrX6L4lgfvURHi9i/Aq+IFZD7Kr9uKw1GhdhQpRrQkcB5CgtuU Em6LOgy4I4QU9hczFQE5Fxehgln4PwKDgFwL13k7qSmHSFJ7wd7I2C68on8z3O+r bj2K9LDAN35HsSW3zpeNyAw6uzRykJUnDLHT9yuNzXvDJmIXNQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFxrbFayeuDB0GRanMkXYc7tsFy0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvYmRlOGEzZGYtMzIzYy0z MjIzLWFmZDYtODE2NjY2YmM4NGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTJgDgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAThbhlxGk8XTfMTN9jX6USNFzyzGQWfDf2rcKwpbhtSiXLsOJlDAJ SAbm7MNTDfjM9QczfwJ+A42JCvUGHhs9qeXGHsi9lMDygYgzQQfZKNc59TIAoZOG DkSP1nJy45twfS9N8dDjLg8PMK+y125HpSrMM+i6NAdYuLAli+wKLtVdOThPhchK VUcLqog2owGUkKURtmVNTsjBua1cAXOWcKCxu8FQNKQ/Zc7MlEWRkWHZ/hr654mz FvN0lNBgelpfC+A2OUwkwwQ1b2Xj0F8Yz7qgoyQI1ZgTYkKTSmLA+Aws406VDzHW 8mHC/i9OOU6iwJC2V3P37Az2AEAnl3lVcA== -----END CERTIFICATE-----Generated at Sat Apr 5 16:47:04 2025 by rpki-client