$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/da5f8206-7dcf-3eff-a2f6-f349a17ee556.roa File: da5f8206-7dcf-3eff-a2f6-f349a17ee556.roa (raw, json) Hash identifier: ZG9qBL60jsisJMbixxLIMDduSWA1Yp/w64wgosIm+8k= Subject key identifier: 00:2B:0A:79:7A:AD:C2:59:19:98:6A:60:09:F9:21:48:3C:8A:A4:9C Certificate issuer: /CN=d87bb806-e83b-438e-bf0b-6c487902c669 Certificate serial: 010D0C9F4328584917DC2D54106FBB74E0C256E0 Authority key identifier: B6:9D:15:21:E2:67:F3:38:89:29:E3:83:55:12:E1:CD:1A:4C:9F:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/da5f8206-7dcf-3eff-a2f6-f349a17ee556.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 53361 IP address blocks: 2620:d3:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/d87bb806-e83b-438e-bf0b-6c487902c669.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/d87bb806-e83b-438e-bf0b-6c487902c669.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:2d:54:10:6f:bb:74:e0:c2:56:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d87bb806-e83b-438e-bf0b-6c487902c669 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=c0a813d2-e914-43e1-862d-b965a81de2a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:12:0f:13:44:78:85:30:13:3b:c7:fb:ac:06: f8:f8:ea:94:5b:43:ed:9e:b0:0c:a1:e4:d9:e5:9b: 45:9e:bc:3a:cc:e6:6f:a0:6a:6a:05:18:a3:f9:5b: b4:c1:e1:eb:4a:5e:89:af:2a:b2:fb:1b:94:b9:4e: 0c:d5:13:8e:0e:d1:f7:e1:01:b8:89:b9:28:6f:fc: e4:c9:b5:56:68:1c:09:a1:62:d7:89:4e:40:34:c5: 35:1a:36:75:c8:be:d8:73:85:fc:01:29:7a:59:b1: f6:35:e1:4d:f4:09:98:6d:03:d1:d3:39:b7:bb:d8: 71:6f:1b:f7:d7:a5:e9:a5:7a:f0:c8:a9:4f:28:d8: d3:49:32:c5:cd:af:74:1a:62:83:a8:8b:42:9f:00: cc:37:97:62:ec:d5:da:84:0c:a9:fc:12:38:78:5b: 03:90:dd:e0:d0:0c:d2:10:2a:f6:a9:5a:04:1d:de: 29:55:42:92:14:6b:0a:4e:6f:4f:53:f1:76:61:3e: f7:54:af:a2:fb:13:16:53:91:aa:68:10:fa:a3:86: 42:1f:06:3c:11:3e:57:fb:fb:51:71:3b:7a:a4:7c: 22:0b:40:7d:01:09:20:2b:7a:f8:5c:60:0b:eb:5b: 5b:1b:69:f5:61:d4:fe:1f:d3:e8:10:92:f0:bd:b1: 0e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2B:0A:79:7A:AD:C2:59:19:98:6A:60:09:F9:21:48:3C:8A:A4:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/da5f8206-7dcf-3eff-a2f6-f349a17ee556.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/d87bb806-e83b-438e-bf0b-6c487902c669.crl X509v3 Authority Key Identifier: keyid:B6:9D:15:21:E2:67:F3:38:89:29:E3:83:55:12:E1:CD:1A:4C:9F:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669.cer sbgp-ipAddrBlock: critical IPv6: 2620:d3:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:a9:9c:02:5a:cc:93:01:a2:64:1c:a7:76:91:ea:63:df:d7: 21:ee:4b:77:b8:68:69:e6:9a:70:0b:ab:30:87:d0:16:e9:a7: a2:2e:b3:24:63:8b:39:b9:ae:a7:bc:5c:f5:ec:a7:9a:ae:e4: af:dd:3f:96:da:2c:ab:cb:88:51:56:08:03:35:92:d8:1b:4c: 00:7c:b6:76:1e:f6:7a:55:f1:57:39:74:25:f9:d4:88:cb:93: b7:f2:ea:94:09:80:71:5e:74:cc:01:18:b7:2d:a7:a7:2e:c6: 58:17:48:71:9c:84:fe:e3:be:82:b3:f7:cc:36:85:61:ff:45: 9d:74:bb:80:fc:68:0e:4a:0b:98:49:0a:59:15:ba:a9:f0:d7: a5:83:38:4d:7b:bf:c4:6d:5c:3e:50:13:b0:0b:44:ef:cf:0c: c3:1c:fe:0f:60:6e:4d:ac:6d:99:9d:ad:07:89:4e:2c:63:a9: 1a:00:65:65:52:02:44:99:98:fa:f9:2b:e0:88:6f:70:1a:fc: ee:a4:c1:24:20:e9:f2:71:56:d6:b6:3a:7f:65:ce:b3:17:9d: 36:2c:6b:45:5a:fe:22:25:85:1c:81:bd:d2:43:cc:a6:12:5d: 41:99:8e:41:d0:de:75:50:7a:4c:60:03:51:64:c5:b0:74:ea: a7:41:b6:2e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkX3C1UEG+7dODCVuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg3YmI4MDYtZTgzYi00MzhlLWJmMGItNmM0ODc5MDJj NjY5MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk YzBhODEzZDItZTkxNC00M2UxLTg2MmQtYjk2NWE4MWRlMmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBIPE0R4hTATO8f7rAb4+OqUW0PtnrAMoeTZ 5ZtFnrw6zOZvoGpqBRij+Vu0weHrSl6Jryqy+xuUuU4M1ROODtH34QG4ibkob/zk ybVWaBwJoWLXiU5ANMU1GjZ1yL7Yc4X8ASl6WbH2NeFN9AmYbQPR0zm3u9hxbxv3 16XppXrwyKlPKNjTSTLFza90GmKDqItCnwDMN5di7NXahAyp/BI4eFsDkN3g0AzS ECr2qVoEHd4pVUKSFGsKTm9PU/F2YT73VK+i+xMWU5GqaBD6o4ZCHwY8ET5X+/tR cTt6pHwiC0B9AQkgK3r4XGAL61tbG2n1YdT+H9PoEJLwvbEO+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAArCnl6rcJZGZhqYAn5IUg8iqScMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kODdi YjgwNi1lODNiLTQzOGUtYmYwYi02YzQ4NzkwMmM2NjkvZGE1ZjgyMDYtN2RjZi0z ZWZmLWEyZjYtZjM0OWExN2VlNTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDg3YmI4MDYtZTgzYi00MzhlLWJm MGItNmM0ODc5MDJjNjY5L2Q4N2JiODA2LWU4M2ItNDM4ZS1iZjBiLTZjNDg3OTAy YzY2OS5jcmwwHwYDVR0jBBgwFoAUtp0VIeJn8ziJKeODVRLhzRpMn1YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kODdiYjgwNi1lODNiLTQzOGUtYmYwYi02YzQ4 NzkwMmM2NjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA00AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAmpnAJazJMBomQcp3aR6mPf1yHuS3e4aGnmmnALqzCH0Bbpp6Iu syRjizm5rqe8XPXsp5qu5K/dP5baLKvLiFFWCAM1ktgbTAB8tnYe9npV8Vc5dCX5 1IjLk7fy6pQJgHFedMwBGLctp6cuxlgXSHGchP7jvoKz98w2hWH/RZ10u4D8aA5K C5hJClkVuqnw16WDOE17v8RtXD5QE7ALRO/PDMMc/g9gbk2sbZmdrQeJTixjqRoA ZWVSAkSZmPr5K+CIb3Aa/O6kwSQg6fJxVta2On9lzrMXnTYsa0Va/iIlhRyBvdJD zKYSXUGZjkHQ3nVQekxgA1FkxbB06qdBti4= -----END CERTIFICATE-----Generated at Sat Apr 12 17:31:26 2025 by rpki-client