$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/da2e9540-f106-3fef-a518-3a2aa9b1fed1.roa File: da2e9540-f106-3fef-a518-3a2aa9b1fed1.roa (raw, json) Hash identifier: ipY7QdB9OgVl/WW34ydGIEmRkgoeNef7IepTCuyc98k= Subject key identifier: E9:B4:34:81:48:0C:B9:5D:9A:BC:BA:CC:ED:DB:2B:64:A1:02:F5:DD Certificate issuer: /CN=d7937b76-1401-4a19-86ef-2351fd0198a6 Certificate serial: 010D0C9F4328584930DE6A48A47AF62502268400 Authority key identifier: CC:29:98:03:99:C6:45:C4:E0:A5:4F:46:59:49:0C:A5:8F:E7:CF:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/da2e9540-f106-3fef-a518-3a2aa9b1fed1.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 14263 IP address blocks: 2607:f578::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:6a:48:a4:7a:f6:25:02:26:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7937b76-1401-4a19-86ef-2351fd0198a6 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=c8f7ad76-a222-4ccb-9ff4-323771ce13d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:20:97:05:43:be:f9:1e:79:77:0a:89:94:23: 68:7f:73:42:f7:a5:d9:43:19:84:5f:bb:06:78:e6: d2:f1:20:81:0d:7b:60:7d:a4:c2:45:9b:c6:8b:b8: a8:05:c0:af:ce:3e:76:ee:05:91:50:82:fb:c4:dc: 53:ab:9f:52:ea:a7:9e:d3:57:ec:e2:f2:a9:be:0f: 08:b5:65:1c:ef:c9:32:a8:02:27:06:0b:5f:8d:81: 0a:4e:18:70:5c:cf:66:2a:0b:65:3e:d0:cd:2f:0a: 28:db:99:c9:2d:0e:25:ea:de:45:68:d3:fa:4b:b7: 7f:ed:23:9e:8a:53:35:6d:1b:e1:4e:00:94:28:8b: 2b:ed:e4:eb:99:b2:c2:22:83:48:5f:e3:57:63:ae: bb:64:6a:ee:d9:89:57:9f:94:25:f0:f9:65:e7:31: 9a:1f:69:4a:ec:b6:db:85:44:87:75:67:88:e5:01: 39:d4:f5:31:84:1b:d5:a1:64:e4:d7:2a:b8:4a:eb: 8d:31:d0:c1:16:4d:ee:7b:00:c4:4d:0a:1e:eb:51: 03:31:da:0e:e8:67:6c:50:e8:0e:d1:d2:3c:05:fe: 0d:4d:35:fa:e9:e6:df:66:8b:b2:20:48:a0:d4:05: 3a:6d:9f:60:7e:d7:48:c4:67:0e:10:e4:13:15:34: 48:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B4:34:81:48:0C:B9:5D:9A:BC:BA:CC:ED:DB:2B:64:A1:02:F5:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/da2e9540-f106-3fef-a518-3a2aa9b1fed1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.crl X509v3 Authority Key Identifier: keyid:CC:29:98:03:99:C6:45:C4:E0:A5:4F:46:59:49:0C:A5:8F:E7:CF:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer sbgp-ipAddrBlock: critical IPv6: 2607:f578::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:30:b8:d2:29:a5:0c:41:e4:5f:5e:f0:e0:a0:ea:e6:94:3e: 95:0b:8c:f4:68:91:0d:ee:f9:cc:ee:21:7d:c4:14:66:a5:c1: 12:f8:65:59:c6:37:f2:0c:38:84:4b:15:21:4c:2f:3d:07:23: fa:9a:14:ab:14:16:42:a1:f3:a0:35:31:05:20:31:7d:f4:aa: 37:51:34:e7:51:36:a7:82:39:cc:5c:17:d0:2b:16:39:75:37: d0:e8:51:af:34:8f:be:08:61:1e:a0:b2:7a:4b:f1:93:ab:f6: db:38:7e:4d:89:5e:c6:23:6a:9b:1b:b8:26:dd:4b:6f:3b:46: fc:6d:12:8f:0a:ea:7f:7e:a2:32:a7:3d:f0:c8:6e:a1:f9:04: 45:6a:ee:1f:be:90:c0:a3:de:3f:5e:fc:73:d4:6f:25:82:7b: 3a:e1:c4:33:0d:b3:35:88:9b:12:20:45:b8:80:b7:5d:8b:16: 68:d1:40:3b:25:3a:52:80:d3:7c:cb:73:64:27:45:f5:de:e7: 95:f6:c7:9d:c9:31:2c:5f:64:39:e7:53:0e:fc:2c:de:99:d9: f1:3a:e5:b2:c6:2b:2b:96:0d:f3:20:b9:57:21:fc:84:e5:d4: 11:01:7d:5a:00:8d:2a:52:81:01:9f:79:e0:61:bb:10:80:aa: 2b:42:54:d8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkw3mpIpHr2JQImhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDc5MzdiNzYtMTQwMS00YTE5LTg2ZWYtMjM1MWZkMDE5 OGE2MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk YzhmN2FkNzYtYTIyMi00Y2NiLTlmZjQtMzIzNzcxY2UxM2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyCXBUO++R55dwqJlCNof3NC96XZQxmEX7sG eObS8SCBDXtgfaTCRZvGi7ioBcCvzj527gWRUIL7xNxTq59S6qee01fs4vKpvg8I tWUc78kyqAInBgtfjYEKThhwXM9mKgtlPtDNLwoo25nJLQ4l6t5FaNP6S7d/7SOe ilM1bRvhTgCUKIsr7eTrmbLCIoNIX+NXY667ZGru2YlXn5Ql8Pll5zGaH2lK7Lbb hUSHdWeI5QE51PUxhBvVoWTk1yq4SuuNMdDBFk3uewDETQoe61EDMdoO6GdsUOgO 0dI8Bf4NTTX66ebfZouyIEig1AU6bZ9gftdIxGcOEOQTFTRIzQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOm0NIFIDLldmry6zO3bK2ShAvXdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNzkz N2I3Ni0xNDAxLTRhMTktODZlZi0yMzUxZmQwMTk4YTYvZGEyZTk1NDAtZjEwNi0z ZmVmLWE1MTgtM2EyYWE5YjFmZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDc5MzdiNzYtMTQwMS00YTE5LTg2 ZWYtMjM1MWZkMDE5OGE2L2Q3OTM3Yjc2LTE0MDEtNGExOS04NmVmLTIzNTFmZDAx OThhNi5jcmwwHwYDVR0jBBgwFoAUzCmYA5nGRcTgpU9GWUkMpY/nz8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNzkzN2I3Ni0xNDAxLTRhMTktODZlZi0yMzUx ZmQwMTk4YTYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf1eDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAmMLjSKaUMQeRfXvDgoOrmlD6VC4z0aJEN7vnM7iF9xBRmpcES+GVZ xjfyDDiESxUhTC89ByP6mhSrFBZCofOgNTEFIDF99Ko3UTTnUTangjnMXBfQKxY5 dTfQ6FGvNI++CGEeoLJ6S/GTq/bbOH5NiV7GI2qbG7gm3UtvO0b8bRKPCup/fqIy pz3wyG6h+QRFau4fvpDAo94/Xvxz1G8lgns64cQzDbM1iJsSIEW4gLddixZo0UA7 JTpSgNN8y3NkJ0X13ueV9sedyTEsX2Q551MO/CzemdnxOuWyxisrlg3zILlXIfyE 5dQRAX1aAI0qUoEBn3ngYbsQgKorQlTY -----END CERTIFICATE-----Generated at Sat Apr 12 16:29:16 2025 by rpki-client