$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/3616c078-9508-3138-ba84-837c4213bf7c.roa File: 3616c078-9508-3138-ba84-837c4213bf7c.roa (raw, json) Hash identifier: WUCXpJKUdNj5DFS3k4WrLf1n5G1Zjyk9QRrdOB7WnVs= Subject key identifier: CB:EC:76:B5:5F:A3:8A:76:E8:98:95:8C:A9:D9:2B:09:85:58:26:22 Certificate issuer: /CN=1e780065-6b4a-42e5-ba6a-2cc340001aa7 Certificate serial: 010D0C9F4328584949FE9003B47668FB81784E00 Authority key identifier: EA:AC:32:BC:04:72:09:79:83:73:10:B1:70:78:31:B0:9D:CF:46:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/3616c078-9508-3138-ba84-837c4213bf7c.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 33189 IP address blocks: 2607:f558::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/1e780065-6b4a-42e5-ba6a-2cc340001aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/1e780065-6b4a-42e5-ba6a-2cc340001aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:90:03:b4:76:68:fb:81:78:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e780065-6b4a-42e5-ba6a-2cc340001aa7 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=905bc26f-4020-475f-89b7-5958008d2eda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1e:1d:3f:27:8c:5f:1b:0b:4d:c4:04:17:42: de:b3:aa:75:ac:f9:77:81:86:17:b0:57:6b:8b:a9: 16:44:20:c5:39:d6:9a:2f:cd:3f:b5:0b:a5:42:d1: 8f:34:ee:73:c4:e9:75:0f:d8:c5:49:6c:49:8c:9c: 6e:00:17:73:d5:ed:7e:15:cd:86:0d:d5:68:eb:22: 25:49:21:40:7b:63:25:bf:19:2f:9e:ab:fe:f6:db: 33:85:b2:e8:de:11:11:0c:08:8e:fe:56:b9:c1:1b: 06:2f:ab:4c:dd:f1:9d:2a:01:76:de:2a:ac:f6:7b: 2e:1f:4c:9c:93:26:a7:55:06:2b:b9:20:86:4a:aa: fc:92:76:61:6d:e9:43:dc:6b:eb:eb:64:90:cd:84: 94:b3:7c:50:29:a2:30:6f:f6:df:08:8d:99:e1:8e: 99:b6:eb:ab:89:50:44:d6:28:e7:7c:0e:9f:8e:fb: cf:90:1d:cc:89:fe:06:77:9e:e2:1d:77:fe:2f:8f: 76:f1:99:9f:11:4d:f2:3e:ab:bb:9c:aa:57:8c:18: 5d:b4:d4:a9:e6:51:c1:dc:91:e3:be:0f:97:07:83: 65:ec:92:ed:0e:ae:d5:d0:36:62:04:9a:96:06:0e: f1:90:82:99:da:d4:00:cb:45:cf:7a:c4:cf:29:dd: 92:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:EC:76:B5:5F:A3:8A:76:E8:98:95:8C:A9:D9:2B:09:85:58:26:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/3616c078-9508-3138-ba84-837c4213bf7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7/1e780065-6b4a-42e5-ba6a-2cc340001aa7.crl X509v3 Authority Key Identifier: keyid:EA:AC:32:BC:04:72:09:79:83:73:10:B1:70:78:31:B0:9D:CF:46:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e780065-6b4a-42e5-ba6a-2cc340001aa7.cer sbgp-ipAddrBlock: critical IPv6: 2607:f558::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:ff:dc:5d:8b:3e:90:e7:8a:9c:5a:13:eb:91:1f:ff:65:da: ca:64:32:f1:9e:8c:03:2e:8e:81:6b:0e:cc:83:af:ff:ff:ce: 3f:30:8d:89:67:09:e7:e2:36:06:a8:1c:9c:e0:93:4c:27:c2: 13:71:eb:ee:e7:b4:b2:63:ce:29:39:4d:0c:eb:8c:bd:71:45: f6:e9:20:22:37:e8:83:f0:0e:4c:81:a7:33:e1:1c:f3:c6:61: a2:ad:40:aa:6e:51:55:f4:b0:08:6e:b4:2c:80:48:7e:f9:fe: fb:ae:9d:be:3c:5e:39:2b:2a:c7:08:0d:cc:8d:a1:65:65:c5: 17:92:25:b1:de:4f:13:d7:85:52:35:17:70:15:34:f2:c8:22: 7e:1e:41:78:a9:e9:9d:51:c8:c6:8a:c8:0c:66:20:75:48:18: 42:d8:d5:77:55:ba:15:a0:f8:13:03:0b:58:69:0f:ec:ae:b5: 58:37:d2:dd:f4:1d:29:e8:c1:e5:06:b5:e0:b0:8b:9a:f8:a8: 9e:28:d6:98:c7:84:72:7f:11:ce:a2:25:f2:13:29:db:6c:10: c6:bf:bd:6a:37:a3:e1:9d:e2:92:c2:9e:49:ae:65:4f:57:31: f7:0b:88:4a:94:f5:44:b0:82:90:49:26:c0:31:28:7a:53:56: dc:d7:a2:d5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElJ/pADtHZo+4F4TgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU3ODAwNjUtNmI0YS00MmU1LWJhNmEtMmNjMzQwMDAx YWE3MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk OTA1YmMyNmYtNDAyMC00NzVmLTg5YjctNTk1ODAwOGQyZWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix4dPyeMXxsLTcQEF0Les6p1rPl3gYYXsFdr i6kWRCDFOdaaL80/tQulQtGPNO5zxOl1D9jFSWxJjJxuABdz1e1+Fc2GDdVo6yIl SSFAe2Mlvxkvnqv+9tszhbLo3hERDAiO/la5wRsGL6tM3fGdKgF23iqs9nsuH0yc kyanVQYruSCGSqr8knZhbelD3Gvr62SQzYSUs3xQKaIwb/bfCI2Z4Y6ZtuuriVBE 1ijnfA6fjvvPkB3Mif4Gd57iHXf+L4928ZmfEU3yPqu7nKpXjBhdtNSp5lHB3JHj vg+XB4Nl7JLtDq7V0DZiBJqWBg7xkIKZ2tQAy0XPesTPKd2S/wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMvsdrVfo4p26JiVjKnZKwmFWCYiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZTc4 MDA2NS02YjRhLTQyZTUtYmE2YS0yY2MzNDAwMDFhYTcvMzYxNmMwNzgtOTUwOC0z MTM4LWJhODQtODM3YzQyMTNiZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWU3ODAwNjUtNmI0YS00MmU1LWJh NmEtMmNjMzQwMDAxYWE3LzFlNzgwMDY1LTZiNGEtNDJlNS1iYTZhLTJjYzM0MDAw MWFhNy5jcmwwHwYDVR0jBBgwFoAU6qwyvARyCXmDcxCxcHgxsJ3PRkMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZTc4MDA2NS02YjRhLTQyZTUtYmE2YS0yY2Mz NDAwMDFhYTcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf1WDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBX/9xdiz6Q54qcWhPrkR//ZdrKZDLxnowDLo6Baw7Mg6///84/MI2J Zwnn4jYGqByc4JNMJ8ITcevu57SyY84pOU0M64y9cUX26SAiN+iD8A5Mgacz4Rzz xmGirUCqblFV9LAIbrQsgEh++f77rp2+PF45KyrHCA3MjaFlZcUXkiWx3k8T14VS NRdwFTTyyCJ+HkF4qemdUcjGisgMZiB1SBhC2NV3VboVoPgTAwtYaQ/srrVYN9Ld 9B0p6MHlBrXgsIua+KieKNaYx4RyfxHOoiXyEynbbBDGv71qN6PhneKSwp5JrmVP VzH3C4hKlPVEsIKQSSbAMSh6U1bc16LV -----END CERTIFICATE-----Generated at Tue Jun 10 12:52:00 2025 by rpki-client