$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/4acb54f0-442a-3620-b23f-cd1fd9630d0e.roa File: 4acb54f0-442a-3620-b23f-cd1fd9630d0e.roa (raw, json) Hash identifier: 5jp54Mt2lTBAoMRIleajWfv0BVSahBN7UmgtEFBWVGw= Subject key identifier: 87:3B:BF:F3:C0:0C:AA:EE:35:DC:76:63:44:A1:F9:6A:C7:2F:A9:E5 Certificate issuer: /CN=d4cafeea-cee5-442f-9f6c-530abebc6186 Certificate serial: 010D0C9F4328584905B6B7FD516497C7EABC8C80 Authority key identifier: 59:5F:57:F1:E4:CF:8F:31:36:A2:0B:43:76:7E:4A:AD:D7:8E:89:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/4acb54f0-442a-3620-b23f-cd1fd9630d0e.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 396328 IP address blocks: 2607:c0c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:b7:fd:51:64:97:c7:ea:bc:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4cafeea-cee5-442f-9f6c-530abebc6186 Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=20f31bd7-5876-49d1-bea4-978cd5e84bfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c7:01:00:5e:5c:91:94:99:39:97:0f:1a:af: 90:3d:cf:fe:8d:44:f5:e9:92:fd:00:5a:7d:d3:50: 9c:c0:89:72:2b:59:70:ff:0f:15:dc:2f:12:6b:ec: 8f:18:bb:39:a2:d5:7f:4f:d7:af:1d:ac:dc:71:64: 9b:15:e9:83:41:65:58:3b:ff:93:12:4b:b2:c8:c0: bb:5d:e6:76:69:22:b7:c4:4d:35:ec:90:bf:f4:b0: fe:1d:d0:ff:0a:0b:cc:f8:6c:a4:2c:43:69:93:ff: f9:2f:0e:27:4c:b4:ed:7e:2b:f6:85:ed:24:e3:1a: c8:36:e0:b4:9f:af:b7:bd:8e:75:01:c7:85:ff:28: 9b:04:9a:a2:3b:fe:e0:bd:a6:87:7d:2d:32:92:77: b7:f7:55:f4:c7:6b:34:fd:60:14:93:12:43:d9:73: 1a:51:33:ed:40:f6:1a:5e:ce:8a:91:af:16:89:31: 82:20:2e:ac:b9:39:84:4c:3a:5c:44:89:30:c8:bd: 30:fc:a2:ef:9b:9f:72:89:d4:fb:77:33:ae:1b:f6: 10:ed:1e:39:7d:c1:6a:c9:c9:44:c6:be:23:31:b8: b4:6c:5a:df:88:bc:57:20:ce:35:9a:18:db:a1:ce: 7c:ba:bd:fa:68:ac:c8:34:55:5e:de:3a:ec:cb:a2: 9f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:3B:BF:F3:C0:0C:AA:EE:35:DC:76:63:44:A1:F9:6A:C7:2F:A9:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/4acb54f0-442a-3620-b23f-cd1fd9630d0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.crl X509v3 Authority Key Identifier: keyid:59:5F:57:F1:E4:CF:8F:31:36:A2:0B:43:76:7E:4A:AD:D7:8E:89:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer sbgp-ipAddrBlock: critical IPv6: 2607:c0c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:e8:f6:66:dd:19:c9:f5:df:75:d6:f5:bf:0d:5c:e5:fc:e0: 3a:b4:89:b8:d3:08:d2:50:42:8d:3b:42:06:ba:ce:6b:15:e2: 95:7d:be:0f:50:e2:a2:32:ee:8f:d8:36:2b:5d:c2:46:2e:77: 3e:d2:96:9f:ca:0c:45:f8:25:81:92:45:c1:0e:26:ef:d6:d2: df:6e:98:88:8b:57:37:d1:e2:a7:49:58:30:08:d2:b9:11:65: a2:9d:3e:f4:7e:9d:33:76:4c:ed:11:b8:a9:4d:7c:48:7e:20: 37:9e:12:36:af:fd:93:57:85:2a:7b:b5:9c:35:62:2e:6b:87: 77:fc:4e:ad:6f:e8:b2:a7:3c:19:f2:86:4b:58:f7:a7:33:fb: 3e:d4:99:0a:a1:d4:a2:76:ee:82:c7:cd:8c:8a:12:c5:97:22: f9:87:93:03:60:2c:2e:c0:a4:39:dd:42:e4:5f:72:a6:67:d3: 03:9b:cb:60:23:00:20:9a:bf:26:45:c7:d0:55:e1:8d:6b:57: 0f:8b:a0:1d:9b:66:78:18:41:3a:f5:4d:b7:4a:e9:48:20:2f: dd:15:ea:68:2d:6f:a8:af:12:26:af:c0:77:a3:2f:0b:71:57: 2a:b6:d7:57:18:10:8a:76:b9:ac:29:c0:db:4a:a3:8d:02:2c: 02:86:09:68 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkFtrf9UWSXx+q8jIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDRjYWZlZWEtY2VlNS00NDJmLTlmNmMtNTMwYWJlYmM2 MTg2MB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk MjBmMzFiZDctNTg3Ni00OWQxLWJlYTQtOTc4Y2Q1ZTg0YmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8cBAF5ckZSZOZcPGq+QPc/+jUT16ZL9AFp9 01CcwIlyK1lw/w8V3C8Sa+yPGLs5otV/T9evHazccWSbFemDQWVYO/+TEkuyyMC7 XeZ2aSK3xE017JC/9LD+HdD/CgvM+GykLENpk//5Lw4nTLTtfiv2he0k4xrINuC0 n6+3vY51AceF/yibBJqiO/7gvaaHfS0ykne391X0x2s0/WAUkxJD2XMaUTPtQPYa Xs6Kka8WiTGCIC6suTmETDpcRIkwyL0w/KLvm59yidT7dzOuG/YQ7R45fcFqyclE xr4jMbi0bFrfiLxXIM41mhjboc58ur36aKzINFVe3jrsy6Kf7QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIc7v/PADKruNdx2Y0Sh+WrHL6nlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNGNh ZmVlYS1jZWU1LTQ0MmYtOWY2Yy01MzBhYmViYzYxODYvNGFjYjU0ZjAtNDQyYS0z NjIwLWIyM2YtY2QxZmQ5NjMwZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDRjYWZlZWEtY2VlNS00NDJmLTlm NmMtNTMwYWJlYmM2MTg2L2Q0Y2FmZWVhLWNlZTUtNDQyZi05ZjZjLTUzMGFiZWJj NjE4Ni5jcmwwHwYDVR0jBBgwFoAUWV9X8eTPjzE2ogtDdn5KrdeOieIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNGNhZmVlYS1jZWU1LTQ0MmYtOWY2Yy01MzBh YmViYzYxODYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfAwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCP6PZm3RnJ9d911vW/DVzl/OA6tIm40wjSUEKNO0IGus5rFeKVfb4P UOKiMu6P2DYrXcJGLnc+0pafygxF+CWBkkXBDibv1tLfbpiIi1c30eKnSVgwCNK5 EWWinT70fp0zdkztEbipTXxIfiA3nhI2r/2TV4Uqe7WcNWIua4d3/E6tb+iypzwZ 8oZLWPenM/s+1JkKodSidu6Cx82MihLFlyL5h5MDYCwuwKQ53ULkX3KmZ9MDm8tg IwAgmr8mRcfQVeGNa1cPi6Adm2Z4GEE69U23SulIIC/dFepoLW+orxImr8B3oy8L cVcqttdXGBCKdrmsKcDbSqONAiwChglo -----END CERTIFICATE-----Generated at Sun Apr 20 20:02:17 2025 by rpki-client