$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/4b8dc84a-2b50-3661-a858-cd3c92400224.roa File: 4b8dc84a-2b50-3661-a858-cd3c92400224.roa (raw, json) Hash identifier: lmlr/Di5vmfykO0nXkaiaerqBHUnP20Y+c6dATaiRh8= Subject key identifier: 02:BE:CE:A6:34:E5:05:AB:34:13:54:F7:C3:C0:E5:92:BB:F6:F8:03 Certificate issuer: /CN=7f6bc06a-0a42-4758-8629-8c90ecf2f82e Certificate serial: 010D0C9F432858492CB20E424216BECAF04C5490 Authority key identifier: 22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/4b8dc84a-2b50-3661-a858-cd3c92400224.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 26223 IP address blocks: 2605:c900::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:0e:42:42:16:be:ca:f0:4c:54:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bc06a-0a42-4758-8629-8c90ecf2f82e Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=2e9471d6-09b6-40df-9bc2-72e2dcacbec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2d:4b:fa:53:b5:42:5e:de:00:0d:ef:6b:73: d5:f8:01:d8:2e:80:a3:f7:90:21:ec:6f:a7:94:92: 6c:98:0c:5c:db:08:cc:da:a6:ea:44:12:cc:5e:c8: 48:9e:47:f0:9f:8e:a4:9b:c5:d0:10:e8:07:43:63: 88:f4:7e:20:90:b9:0e:6c:29:83:c3:84:32:3a:a2: f5:81:6b:9c:45:d6:83:12:aa:a3:d1:ca:85:5c:1f: 36:a1:d9:34:6f:72:6f:72:7f:99:fe:ed:29:51:66: 26:c9:f0:0f:67:9d:8a:f9:cf:7a:cb:a4:d0:30:d9: 3b:fd:38:09:2c:01:9e:d0:ec:c5:a3:c7:9f:ee:06: 3a:c7:ec:32:90:d0:c9:9b:05:c6:bd:84:32:20:33: ad:bd:ab:65:e1:a4:cf:fa:d7:0d:7d:b4:ab:d5:82: cf:eb:0b:9d:b2:a5:77:0a:cd:1b:8d:15:06:66:a1: 00:8e:65:fe:b9:81:b5:23:8b:f9:ec:bd:7c:ab:1b: ec:b5:78:ed:0c:3e:ca:a1:86:8e:da:d2:1c:3a:27: 24:e9:66:df:23:60:ab:6e:b4:56:10:04:41:83:b8: 26:b5:05:6b:84:ba:6b:93:46:91:17:a4:b6:cf:e0: 85:d7:01:26:b3:cd:06:cf:c6:2a:d5:ce:32:20:ab: 33:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BE:CE:A6:34:E5:05:AB:34:13:54:F7:C3:C0:E5:92:BB:F6:F8:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/4b8dc84a-2b50-3661-a858-cd3c92400224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.crl X509v3 Authority Key Identifier: keyid:22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer sbgp-ipAddrBlock: critical IPv6: 2605:c900::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:61:5b:ad:a5:29:08:00:4c:14:74:39:e8:89:d2:75:07:47: f5:9a:9f:7a:c4:42:99:fa:85:11:19:8d:31:d3:f8:e5:4b:7c: 07:46:15:c6:59:9f:cc:65:0d:0e:cc:3a:08:8a:2e:69:f0:98: f9:c7:f8:db:6f:f7:23:13:af:ff:50:82:86:90:38:27:ee:a1: e1:2a:9d:a9:ca:a2:21:9c:4d:cb:d9:98:3a:0c:1d:e4:e8:73: 45:32:2a:42:40:b9:37:74:3e:34:34:a3:f0:82:0e:f2:de:a1: 33:a4:39:e2:96:45:ef:46:0b:df:55:03:30:60:8e:9a:ec:b0: f8:5b:09:19:ca:6c:57:aa:df:39:f3:cc:0f:80:5b:c8:71:3c: 71:0e:53:d3:c0:d9:32:96:f5:aa:a2:97:f5:5d:8b:5f:fc:e6: a3:d8:eb:e8:03:4e:46:45:c8:1f:33:62:a5:e5:d0:e6:99:4c: 96:ed:a2:4b:11:36:9f:6e:00:5f:c4:45:37:55:11:b6:81:c4: a3:1a:4a:da:1b:f2:6e:f5:11:45:58:74:2a:63:b4:19:df:c9: c0:67:f6:a8:da:17:02:eb:7c:48:0c:be:97:e9:ab:62:d1:0b: 3e:d2:40:06:fb:7a:f8:47:9e:b0:76:52:a9:bf:76:03:d2:e8: e1:09:a1:91 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkssg5CQha+yvBMVJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y2YmMwNmEtMGE0Mi00NzU4LTg2MjktOGM5MGVjZjJm ODJlMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MmU5NDcxZDYtMDliNi00MGRmLTliYzItNzJlMmRjYWNiZWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAli1L+lO1Ql7eAA3va3PV+AHYLoCj95Ah7G+n lJJsmAxc2wjM2qbqRBLMXshInkfwn46km8XQEOgHQ2OI9H4gkLkObCmDw4QyOqL1 gWucRdaDEqqj0cqFXB82odk0b3Jvcn+Z/u0pUWYmyfAPZ52K+c96y6TQMNk7/TgJ LAGe0OzFo8ef7gY6x+wykNDJmwXGvYQyIDOtvatl4aTP+tcNfbSr1YLP6wudsqV3 Cs0bjRUGZqEAjmX+uYG1I4v57L18qxvstXjtDD7KoYaO2tIcOick6WbfI2CrbrRW EARBg7gmtQVrhLprk0aRF6S2z+CF1wEms80Gz8Yq1c4yIKszyQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAK+zqY05QWrNBNU98PA5ZK79vgDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZjZi YzA2YS0wYTQyLTQ3NTgtODYyOS04YzkwZWNmMmY4MmUvNGI4ZGM4NGEtMmI1MC0z NjYxLWE4NTgtY2QzYzkyNDAwMjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y2YmMwNmEtMGE0Mi00NzU4LTg2 MjktOGM5MGVjZjJmODJlLzdmNmJjMDZhLTBhNDItNDc1OC04NjI5LThjOTBlY2Yy ZjgyZS5jcmwwHwYDVR0jBBgwFoAUIo7n+g4AQMW6PyBnd/o8Bb1vWs8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjZiYzA2YS0wYTQyLTQ3NTgtODYyOS04Yzkw ZWNmMmY4MmUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXJADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB3YVutpSkIAEwUdDnoidJ1B0f1mp96xEKZ+oURGY0x0/jlS3wHRhXG WZ/MZQ0OzDoIii5p8Jj5x/jbb/cjE6//UIKGkDgn7qHhKp2pyqIhnE3L2Zg6DB3k 6HNFMipCQLk3dD40NKPwgg7y3qEzpDnilkXvRgvfVQMwYI6a7LD4WwkZymxXqt85 88wPgFvIcTxxDlPTwNkylvWqopf1XYtf/Oaj2OvoA05GRcgfM2Kl5dDmmUyW7aJL ETafbgBfxEU3VRG2gcSjGkraG/Ju9RFFWHQqY7QZ38nAZ/ao2hcC63xIDL6X6ati 0Qs+0kAG+3r4R56wdlKpv3YD0ujhCaGR -----END CERTIFICATE-----Generated at Fri Mar 14 07:47:30 2025 by rpki-client