$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/bf431732-9b31-372e-9197-04e13d9230ef.roa File: bf431732-9b31-372e-9197-04e13d9230ef.roa (raw, json) Hash identifier: A6GI8MYIfcXaiHMdPtPD8b+8onNcZITgCdRpwSnb74o= Subject key identifier: AC:92:F5:58:4F:AE:0F:FA:34:2A:6E:EB:56:51:62:9B:7F:73:D5:FD Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F432858491D71874B6EBFD94C5177B610 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/bf431732-9b31-372e-9197-04e13d9230ef.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 11404 IP address blocks: 2607:fa40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:87:4b:6e:bf:d9:4c:51:77:b6:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=3314dfce-a708-4d02-8713-2aa7b5fdc819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b3:a5:f2:1f:a6:dc:83:a5:0d:1a:21:a5:34: 78:5b:29:c1:fb:ee:32:27:95:41:a1:3a:4f:b7:66: 2d:ab:4f:1d:15:34:f8:a1:72:4e:09:bc:8f:6e:85: eb:f3:62:91:3b:ea:8d:91:f5:77:1c:27:ce:b3:4b: 1c:1a:f6:88:4d:3c:df:76:24:14:55:01:cd:9c:91: be:0a:ff:43:63:f7:f2:f2:c4:47:12:09:02:84:23: 5a:07:4c:b8:ec:fb:37:2b:63:6a:39:1f:e6:78:3e: 8e:a9:9a:71:cb:d7:ba:05:1e:ab:a4:dc:de:da:d5: 31:de:d2:06:76:16:c3:7e:ce:bf:78:44:2a:7b:78: 83:81:83:82:58:48:9a:8a:2d:2d:06:1a:df:3e:a7: 49:5a:ae:19:6c:76:65:f3:7f:a9:b7:f5:ee:07:c6: 33:1a:82:86:53:4d:12:a7:ca:9b:89:73:6c:c0:b0: a8:8f:b2:25:10:25:96:1e:e0:cf:23:7b:63:c9:12: 48:3f:6d:a0:69:31:3d:84:07:9c:84:85:27:c5:b7: 00:8f:56:57:d5:da:59:de:db:18:13:f7:42:6f:e3: 57:3a:63:ac:96:e9:37:c0:9f:db:b5:69:54:f8:b8: e9:19:31:20:e4:69:47:75:a2:d9:ec:1e:a5:12:1c: 71:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:92:F5:58:4F:AE:0F:FA:34:2A:6E:EB:56:51:62:9B:7F:73:D5:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/bf431732-9b31-372e-9197-04e13d9230ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv6: 2607:fa40:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:4b:dc:c6:fd:3b:7f:fa:a6:10:12:6e:26:1d:6e:a4:db:10: d0:0f:45:d9:25:6d:53:4c:e9:74:21:ae:b3:a1:b6:53:0c:49: c7:e1:22:0f:78:f2:6f:72:b4:38:c0:48:b8:33:b0:cf:f8:e9: bc:e0:15:c8:0a:a1:49:1e:2a:b3:c2:42:9e:8a:38:d9:b5:37: c3:41:dc:f1:48:98:27:d9:5d:dd:a1:5b:af:29:f5:93:96:2b: 04:da:24:a6:3b:eb:b0:79:b5:a0:69:0a:63:fc:37:8c:70:96: db:d4:aa:e3:99:86:f2:24:c3:3c:4e:28:43:3f:3f:c3:b4:3a: fb:a7:1f:34:80:8e:b9:af:00:20:4d:dd:db:b0:ed:47:ba:4e: 44:0b:c8:c0:8e:26:57:c5:bb:7e:53:e8:89:72:ab:08:27:a6: cb:55:0c:8e:c2:07:e3:e6:ab:da:7b:78:07:0f:c3:d9:76:6e: ab:98:5b:53:71:e1:7b:ca:c7:c1:70:dd:e3:5c:da:f7:36:19: ac:58:ff:3c:3e:49:0f:71:f1:b8:a4:8f:5a:31:88:47:ee:68: 4e:13:38:1d:cd:54:16:af:a4:15:41:33:67:7b:fa:b1:6e:97: 7f:aa:62:3d:82:2e:af:f8:7e:96:3d:d5:d6:e9:c4:a1:f5:37: da:2c:36:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkdcYdLbr/ZTFF3thAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk MzMxNGRmY2UtYTcwOC00ZDAyLTg3MTMtMmFhN2I1ZmRjODE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbOl8h+m3IOlDRohpTR4WynB++4yJ5VBoTpP t2Ytq08dFTT4oXJOCbyPboXr82KRO+qNkfV3HCfOs0scGvaITTzfdiQUVQHNnJG+ Cv9DY/fy8sRHEgkChCNaB0y47Ps3K2NqOR/meD6OqZpxy9e6BR6rpNze2tUx3tIG dhbDfs6/eEQqe3iDgYOCWEiaii0tBhrfPqdJWq4ZbHZl83+pt/XuB8YzGoKGU00S p8qbiXNswLCoj7IlECWWHuDPI3tjyRJIP22gaTE9hAechIUnxbcAj1ZX1dpZ3tsY E/dCb+NXOmOsluk3wJ/btWlU+LjpGTEg5GlHdaLZ7B6lEhxxQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKyS9VhPrg/6NCpu61ZRYpt/c9X9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYmY0MzE3MzItOWIzMS0z NzJlLTkxOTctMDRlMTNkOTIzMGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf6QAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAItL3Mb9O3/6phASbiYdbqTbENAPRdklbVNM6XQhrrOhtlMMScfh Ig948m9ytDjASLgzsM/46bzgFcgKoUkeKrPCQp6KONm1N8NB3PFImCfZXd2hW68p 9ZOWKwTaJKY767B5taBpCmP8N4xwltvUquOZhvIkwzxOKEM/P8O0OvunHzSAjrmv ACBN3duw7Ue6TkQLyMCOJlfFu35T6IlyqwgnpstVDI7CB+Pmq9p7eAcPw9l2bquY W1Nx4XvKx8Fw3eNc2vc2GaxY/zw+SQ9x8bikj1oxiEfuaE4TOB3NVBavpBVBM2d7 +rFul3+qYj2CLq/4fpY91dbpxKH1N9osNoM= -----END CERTIFICATE-----Generated at Sat Apr 5 19:08:59 2025 by rpki-client