$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d31b65c0-8994-3b0f-936c-c9090222ce98.roa File: d31b65c0-8994-3b0f-936c-c9090222ce98.roa (raw, json) Hash identifier: DZC+2ntjvUCzhJFmnSa1OKXStd7PoMfRq2tQcPSrkIQ= Subject key identifier: 4A:F7:96:EF:E4:B9:3D:29:EF:75:19:4C:67:66:0C:91:A0:D4:63:DB Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F432858494B64076BC7BB1F649910C614 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d31b65c0-8994-3b0f-936c-c9090222ce98.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 11232 IP address blocks: 2604:7a00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:07:6b:c7:bb:1f:64:99:10:c6:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=963786c4-db2e-4601-9205-6ef6f712156b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a9:20:e0:cd:cc:2e:a2:8a:66:51:8b:4a:14: 21:c5:16:19:f5:eb:27:84:5c:be:d3:74:79:7c:07: 67:76:3e:60:23:3e:d2:df:8e:bf:2c:a9:f8:86:b2: 10:a2:5c:2c:a9:e5:37:de:79:83:82:9c:06:57:09: 74:c6:ab:3b:07:88:75:bb:77:8f:d3:86:2b:60:07: 35:03:be:1c:1b:10:13:6a:61:d3:03:43:98:fd:96: e9:d0:f2:5b:1e:59:8e:86:c5:f1:a1:cb:b9:63:32: b9:7b:71:9b:8d:e9:0b:f2:77:9e:a3:fd:33:d7:61: 81:db:d6:67:08:f2:e8:8b:04:4e:91:14:e0:ea:25: 15:eb:f0:58:91:7e:a5:ad:2d:03:36:2a:01:9f:c8: ee:f0:5d:b2:76:50:c2:f5:56:a8:e6:92:76:a5:a8: 80:81:bf:6c:16:03:0a:44:b8:53:a0:bf:89:a1:24: e0:74:e3:df:d2:72:18:66:1d:50:cd:fd:b1:11:5a: dc:90:e7:45:bd:75:88:49:02:07:a2:e5:f5:e7:db: bc:42:24:ed:ba:2e:df:71:1f:92:27:85:ad:6d:01: 1d:06:23:ac:06:f3:54:14:1e:bb:ab:9d:b9:32:5c: e3:c0:63:97:3e:5e:11:62:46:09:d1:76:f6:54:00: 8d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F7:96:EF:E4:B9:3D:29:EF:75:19:4C:67:66:0C:91:A0:D4:63:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d31b65c0-8994-3b0f-936c-c9090222ce98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv6: 2604:7a00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:36:f7:f7:ae:14:9d:f2:88:88:5f:8e:b4:a2:46:c7:bb:ce: a9:07:ca:e1:2b:0b:54:77:bf:63:4d:7c:81:f6:e1:8f:51:14: 8c:d8:b8:c8:70:21:32:39:f2:39:cb:6f:f9:78:16:1e:ae:d6: c0:fe:08:cd:55:ac:62:cf:63:7b:26:80:dc:61:69:7b:5c:dd: 7b:bc:bb:04:b3:b8:c3:f3:32:a5:90:4a:22:e6:a9:b8:59:37: 02:e3:a6:28:b0:1d:8a:c7:dc:8c:e2:4a:15:0d:ab:55:ae:f0: 6a:2d:4a:da:a9:82:28:a4:67:7f:d0:fc:e1:8b:b4:06:39:0e: 7b:89:c4:a9:35:ab:b6:ab:d7:49:fd:4a:5d:6f:f6:94:94:c5: 3a:fc:09:5c:6e:b5:14:06:d9:5f:34:1b:ad:d7:53:88:91:6d: 06:f2:66:89:0d:da:71:6d:88:c6:f6:9f:52:68:2b:26:23:80: 07:d7:e0:a3:75:5b:d4:e4:ae:3b:6e:99:1f:88:f2:94:ce:8f: 72:18:a7:de:31:48:dd:ea:27:64:70:0b:eb:9a:f5:20:15:62: 22:ae:a9:ca:66:f8:47:0e:30:af:4c:7c:13:6b:79:7d:56:63: 81:9a:dc:33:d0:81:b4:83:13:39:29:bd:dd:05:2c:dd:60:87: 2f:59:ff:88 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElLZAdrx7sfZJkQxhQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk OTYzNzg2YzQtZGIyZS00NjAxLTkyMDUtNmVmNmY3MTIxNTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKkg4M3MLqKKZlGLShQhxRYZ9esnhFy+03R5 fAdndj5gIz7S346/LKn4hrIQolwsqeU33nmDgpwGVwl0xqs7B4h1u3eP04YrYAc1 A74cGxATamHTA0OY/Zbp0PJbHlmOhsXxocu5YzK5e3GbjekL8neeo/0z12GB29Zn CPLoiwROkRTg6iUV6/BYkX6lrS0DNioBn8ju8F2ydlDC9Vao5pJ2paiAgb9sFgMK RLhToL+JoSTgdOPf0nIYZh1Qzf2xEVrckOdFvXWISQIHouX159u8QiTtui7fcR+S J4WtbQEdBiOsBvNUFB67q525MlzjwGOXPl4RYkYJ0Xb2VACNYwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEr3lu/kuT0p73UZTGdmDJGg1GPbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvZDMxYjY1YzAtODk5NC0z YjBmLTkzNmMtYzkwOTAyMjJjZTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgR6ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBeNvf3rhSd8oiIX460okbHu86pB8rhKwtUd79jTXyB9uGPURSM2LjI cCEyOfI5y2/5eBYertbA/gjNVaxiz2N7JoDcYWl7XN17vLsEs7jD8zKlkEoi5qm4 WTcC46YosB2Kx9yM4koVDatVrvBqLUraqYIopGd/0Pzhi7QGOQ57icSpNau2q9dJ /Updb/aUlMU6/AlcbrUUBtlfNBut11OIkW0G8maJDdpxbYjG9p9SaCsmI4AH1+Cj dVvU5K47bpkfiPKUzo9yGKfeMUjd6idkcAvrmvUgFWIirqnKZvhHDjCvTHwTa3l9 VmOBmtwz0IG0gxM5Kb3dBSzdYIcvWf+I -----END CERTIFICATE-----Generated at Sat Apr 12 00:21:27 2025 by rpki-client