$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/37dcc827-500d-3f5b-b386-f2f53f92ae66.roa File: 37dcc827-500d-3f5b-b386-f2f53f92ae66.roa (raw, json) Hash identifier: vKtNV8zat5tk7+RzHPIERy7UuYRoAn+zbz0KPxMzr5g= Subject key identifier: 64:89:E9:5F:63:B9:F9:4E:7B:4B:84:31:77:66:E3:E4:9B:5F:27:2E Certificate issuer: /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Certificate serial: 010D0C9F432858491ED6D8E349662DD9B4EF1880 Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/37dcc827-500d-3f5b-b386-f2f53f92ae66.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 54225 IP address blocks: 2604:ebc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:d8:e3:49:66:2d:d9:b4:ef:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=8080ad0c-5394-47bc-82a3-044cefceafba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:dc:34:ce:5a:83:ff:79:58:3d:9f:e1:db:a3: 76:86:dc:6c:3f:9c:fc:df:00:bc:90:4f:07:6d:ff: 14:ad:f9:02:b9:02:28:76:6d:4d:3f:7e:65:62:6b: 42:a2:e9:58:5b:8d:2d:b3:6a:14:ac:84:1c:c7:b2: 7f:6e:20:44:e3:50:53:ae:e8:19:f0:1d:0d:1d:ef: 3e:df:f3:9d:df:91:37:fe:55:bd:90:cc:19:8b:c7: 0c:a8:e7:07:47:a3:23:19:bc:ae:53:e2:ec:b4:f5: 00:1d:9a:48:d7:1c:8a:50:2e:37:f5:73:40:af:a7: aa:0b:b1:36:b7:ee:b3:e5:2a:c0:7d:4f:86:4c:6e: e8:02:8a:c9:77:d9:2b:f8:5e:1e:2a:00:4f:4b:d7: 62:9a:c6:2a:b7:11:c6:6b:ff:a6:a3:8b:89:86:ce: b8:d9:dc:f4:f8:1b:eb:46:c3:ad:6b:ea:96:81:86: 83:c6:a7:fe:07:89:a3:ee:85:b7:f5:b8:f7:a0:12: fa:4e:22:69:24:6b:42:8e:70:4c:2b:f4:5f:25:6c: e2:2c:1a:33:3d:c5:e4:6b:71:92:9f:2f:73:33:47: 2e:a5:ac:6a:a4:51:8c:c6:98:72:73:67:c8:51:dc: ec:15:73:75:49:a3:71:59:e1:8f:ac:98:60:4c:17: 9c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:89:E9:5F:63:B9:F9:4E:7B:4B:84:31:77:66:E3:E4:9B:5F:27:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/37dcc827-500d-3f5b-b386-f2f53f92ae66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl X509v3 Authority Key Identifier: keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer sbgp-ipAddrBlock: critical IPv6: 2604:ebc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:a6:4d:88:9f:aa:8c:f9:fd:cf:31:6d:27:b2:d4:bb:eb:17: 10:9b:2e:17:d3:40:a8:55:52:dd:63:39:13:bb:55:58:28:1f: bd:b1:cb:ac:1b:94:b3:6d:60:5f:1d:be:1e:84:f3:f9:90:7e: 78:95:6a:1b:37:4f:c7:b9:e1:11:39:83:4e:af:1f:55:c1:89: e4:91:8e:3b:eb:db:e9:a6:82:5b:e2:86:75:11:c1:9b:15:95: be:a6:24:18:2e:da:20:4b:09:d7:d7:6f:04:7b:c4:81:17:a3: 49:a9:0f:27:4e:39:ec:46:a2:53:fa:b8:68:48:c3:a2:79:d3: d9:da:0f:6d:3e:8c:95:97:f9:3c:6a:0a:2a:ae:0a:0e:ca:d8: 58:0a:4a:df:7b:c5:67:38:e8:84:f1:18:10:9e:fa:2c:df:35: e7:4f:d6:04:c8:1c:de:ae:b5:bb:cb:e2:c7:cb:b4:4b:bc:98: 7e:b1:a3:9b:76:ac:94:b1:4e:19:ce:22:70:7b:6e:d8:88:29: da:1c:db:a9:b1:ef:13:d9:fc:9c:96:88:d4:d8:6d:60:17:90: 31:da:c1:52:49:ef:3f:81:0a:37:e0:23:5f:5c:ee:ee:a9:d6: f6:b3:ae:77:69:d3:56:1d:bd:dd:54:5b:2c:4a:c6:cb:7b:46: 26:b2:df:34 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEke1tjjSWYt2bTvGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzExZjE5Y2MtMzQ0ZS00OGM1LWExZjEtNDc1OTNhYTU2 YjBkMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk ODA4MGFkMGMtNTM5NC00N2JjLTgyYTMtMDQ0Y2VmY2VhZmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNw0zlqD/3lYPZ/h26N2htxsP5z83wC8kE8H bf8UrfkCuQIodm1NP35lYmtCoulYW40ts2oUrIQcx7J/biBE41BTrugZ8B0NHe8+ 3/Od35E3/lW9kMwZi8cMqOcHR6MjGbyuU+LstPUAHZpI1xyKUC439XNAr6eqC7E2 t+6z5SrAfU+GTG7oAorJd9kr+F4eKgBPS9dimsYqtxHGa/+mo4uJhs642dz0+Bvr RsOta+qWgYaDxqf+B4mj7oW39bj3oBL6TiJpJGtCjnBMK/RfJWziLBozPcXka3GS ny9zM0cupaxqpFGMxphyc2fIUdzsFXN1SaNxWeGPrJhgTBecFwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGSJ6V9juflOe0uEMXdm4+SbXycuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFm MTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5M2FhNTZiMGQvMzdkY2M4MjctNTAwZC0z ZjViLWIzODYtZjJmNTNmOTJhZTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzExZjE5Y2MtMzQ0ZS00OGM1LWEx ZjEtNDc1OTNhYTU2YjBkLzMxMWYxOWNjLTM0NGUtNDhjNS1hMWYxLTQ3NTkzYWE1 NmIwZC5jcmwwHwYDVR0jBBgwFoAUTdZg5uF1ESmUCvKCwba2rQLZYH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFmMTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5 M2FhNTZiMGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTrwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAZpk2In6qM+f3PMW0nstS76xcQmy4X00CoVVLdYzkTu1VYKB+9scus G5SzbWBfHb4ehPP5kH54lWobN0/HueEROYNOrx9VwYnkkY4769vppoJb4oZ1EcGb FZW+piQYLtogSwnX128Ee8SBF6NJqQ8nTjnsRqJT+rhoSMOiedPZ2g9tPoyVl/k8 agoqrgoOythYCkrfe8VnOOiE8RgQnvos3zXnT9YEyBzerrW7y+LHy7RLvJh+saOb dqyUsU4ZziJwe27YiCnaHNupse8T2fyclojU2G1gF5Ax2sFSSe8/gQo34CNfXO7u qdb2s653adNWHb3dVFssSsbLe0Ymst80 -----END CERTIFICATE-----Generated at Tue Apr 8 10:01:08 2025 by rpki-client