$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/a9e2de6d-26ab-3f2b-bede-33457e603032.roa File: a9e2de6d-26ab-3f2b-bede-33457e603032.roa (raw, json) Hash identifier: SrcyoQpWaQAmN2YwgcetudYTj/nDPYwTFA5S1JEMyFc= Subject key identifier: B2:C8:07:15:23:BA:63:AC:EE:1B:72:2E:F7:18:C9:14:96:F9:8F:8F Certificate issuer: /CN=ee796558-82d6-41a5-b8ec-5dfdbd89d5d7 Certificate serial: 010D0C9F432858492CAE7E7F6C0B5EDD15F06D80 Authority key identifier: 5C:A3:ED:89:EB:E7:96:FF:87:08:32:46:85:60:7A:6C:A1:46:1D:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/a9e2de6d-26ab-3f2b-bede-33457e603032.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 25222 IP address blocks: 2605:db00::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:7e:7f:6c:0b:5e:dd:15:f0:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee796558-82d6-41a5-b8ec-5dfdbd89d5d7 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=3fb01c45-dfcd-46cb-9bf7-c4565fdeed91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b3:44:52:06:5a:b3:7c:0c:22:54:15:4d:6b: cc:9b:f1:a0:66:f0:b2:a6:03:5f:46:55:f5:eb:04: 07:68:c3:91:d5:a0:8c:00:84:54:53:ee:c1:ba:53: 5a:22:75:78:e4:08:47:84:f8:86:e1:a1:64:a0:4f: 1d:2f:d6:69:fc:1e:bf:d5:4c:13:fe:64:d2:ef:cc: 71:35:67:c6:19:8a:2e:b0:14:5d:97:ff:69:7e:3e: e2:07:d9:0d:ff:b9:53:f9:ff:89:84:22:f5:aa:de: 6d:97:85:56:6d:bb:c5:56:a0:fd:f4:5b:98:32:c4: aa:2a:d9:a9:16:4f:c0:2b:47:f7:13:52:bd:9e:a9: 7a:3a:8d:ad:00:8f:2c:ac:c7:20:04:9e:e3:9e:6b: 2f:e7:9e:7d:9d:2a:74:3b:de:a2:3a:e8:5f:41:db: fa:0d:e0:81:01:ec:c6:f0:a2:5a:ca:d4:14:ae:12: 5d:17:44:e7:b9:06:3d:d8:c7:ff:60:ca:26:0c:4e: 9f:16:f0:90:f6:e4:70:56:02:62:69:36:25:80:0a: c6:6d:1f:15:d8:52:66:43:af:7d:1e:3c:5a:f1:a3: 95:d2:87:a4:2b:04:ea:c5:73:8d:b5:7b:68:d2:64: 1d:1d:96:be:49:b3:c6:ad:a9:c8:f7:f4:5e:e3:b9: ca:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C8:07:15:23:BA:63:AC:EE:1B:72:2E:F7:18:C9:14:96:F9:8F:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/a9e2de6d-26ab-3f2b-bede-33457e603032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.crl X509v3 Authority Key Identifier: keyid:5C:A3:ED:89:EB:E7:96:FF:87:08:32:46:85:60:7A:6C:A1:46:1D:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.cer sbgp-ipAddrBlock: critical IPv6: 2605:db00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:7a:89:51:4c:4d:b0:cf:f9:e6:3c:9a:b2:5d:31:9e:95:55: ce:a5:62:a6:42:9d:47:d5:13:6c:10:5d:2a:57:c2:a4:30:c5: 3a:52:d9:27:3c:c6:4d:cc:e2:b8:08:83:37:e4:f9:ec:a2:5b: 5c:45:20:49:0e:d6:7b:1f:80:4a:6c:99:87:94:3d:01:33:06: 85:2b:2b:b5:07:cc:f5:1e:33:f4:a2:c0:1c:54:18:ec:33:b0: fc:12:f4:f4:46:90:7c:f9:3d:71:26:71:5f:54:0a:e5:cc:d1: 26:a8:c3:c8:26:55:e9:91:51:de:5c:d2:cd:13:4e:98:69:11: c8:35:8f:80:5f:36:4b:37:91:f4:ec:5b:74:6b:6a:fb:e5:07: c3:db:ba:6d:42:ce:5a:8d:95:0c:e7:a4:18:0e:5a:24:c7:7b: d4:94:01:be:fa:8c:a8:99:61:ad:5b:f4:c2:c0:79:86:ea:76: f2:da:3e:80:37:a5:be:c7:c1:61:3e:29:22:0c:35:8f:6b:cb: ef:5d:bf:df:55:9d:67:1c:ac:67:74:80:02:6d:01:5d:ef:55: 0c:2c:51:f9:bd:da:07:91:c5:4e:f1:81:ba:02:6a:ce:75:da: fa:27:f8:c5:1a:b4:38:f7:ec:17:d6:83:00:ae:7e:a4:4d:5d: d9:1b:71:47 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEksrn5/bAte3RXwbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU3OTY1NTgtODJkNi00MWE1LWI4ZWMtNWRmZGJkODlk NWQ3MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk M2ZiMDFjNDUtZGZjZC00NmNiLTliZjctYzQ1NjVmZGVlZDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbNEUgZas3wMIlQVTWvMm/GgZvCypgNfRlX1 6wQHaMOR1aCMAIRUU+7BulNaInV45AhHhPiG4aFkoE8dL9Zp/B6/1UwT/mTS78xx NWfGGYousBRdl/9pfj7iB9kN/7lT+f+JhCL1qt5tl4VWbbvFVqD99FuYMsSqKtmp Fk/AK0f3E1K9nql6Oo2tAI8srMcgBJ7jnmsv5559nSp0O96iOuhfQdv6DeCBAezG 8KJaytQUrhJdF0TnuQY92Mf/YMomDE6fFvCQ9uRwVgJiaTYlgArGbR8V2FJmQ699 Hjxa8aOV0oekKwTqxXONtXto0mQdHZa+SbPGranI9/Re47nK7wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLLIBxUjumOs7htyLvcYyRSW+Y+PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lZTc5 NjU1OC04MmQ2LTQxYTUtYjhlYy01ZGZkYmQ4OWQ1ZDcvYTllMmRlNmQtMjZhYi0z ZjJiLWJlZGUtMzM0NTdlNjAzMDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWU3OTY1NTgtODJkNi00MWE1LWI4 ZWMtNWRmZGJkODlkNWQ3L2VlNzk2NTU4LTgyZDYtNDFhNS1iOGVjLTVkZmRiZDg5 ZDVkNy5jcmwwHwYDVR0jBBgwFoAUXKPtievnlv+HCDJGhWB6bKFGHdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lZTc5NjU1OC04MmQ2LTQxYTUtYjhlYy01ZGZk YmQ4OWQ1ZDcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXbADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAxeolRTE2wz/nmPJqyXTGelVXOpWKmQp1H1RNsEF0qV8KkMMU6Utkn PMZNzOK4CIM35PnsoltcRSBJDtZ7H4BKbJmHlD0BMwaFKyu1B8z1HjP0osAcVBjs M7D8EvT0RpB8+T1xJnFfVArlzNEmqMPIJlXpkVHeXNLNE06YaRHINY+AXzZLN5H0 7Ft0a2r75QfD27ptQs5ajZUM56QYDlokx3vUlAG++oyomWGtW/TCwHmG6nby2j6A N6W+x8FhPikiDDWPa8vvXb/fVZ1nHKxndIACbQFd71UMLFH5vdoHkcVO8YG6AmrO ddr6J/jFGrQ49+wX1oMArn6kTV3ZG3FH -----END CERTIFICATE-----Generated at Sat Apr 12 15:34:59 2025 by rpki-client