$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/922fa9c7-bd18-3321-a549-97584b01d98d.roa File: 922fa9c7-bd18-3321-a549-97584b01d98d.roa (raw, json) Hash identifier: u+mqACCZZPRyiBYSIxdPTiHzIq+7yWb+thDSiUxy4KY= Subject key identifier: 7F:3A:D8:0F:A3:85:AF:8F:1E:9C:77:BC:D5:F8:94:AF:85:8D:62:18 Certificate issuer: /CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88 Certificate serial: 010D0C9F43285849DDF4DBE5940AD9DA499FEEC0 Authority key identifier: 7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/922fa9c7-bd18-3321-a549-97584b01d98d.roa Signing time: Fri 16 May 2025 01:00:46 +0000 ROA not before: Fri 16 May 2025 01:00:46 +0000 ROA not after: Thu 14 Aug 2025 01:00:46 +0000 asID: 396982 IP address blocks: 2607:1c0:1320::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dd:f4:db:e5:94:0a:d9:da:49:9f:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c17db7-204c-41e2-85ca-6a5a448a8b88 Validity Not Before: May 16 01:00:46 2025 GMT Not After : Aug 14 01:00:46 2025 GMT Subject: CN=022a91ea-62e0-4b71-9b31-d4863a11feb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:35:9b:94:25:56:fe:1b:b9:1e:c2:70:b7:3c: 76:9c:d5:08:15:e3:b2:5c:ed:3f:c2:23:0d:af:ad: d2:76:e2:49:80:03:3c:ca:12:71:d0:e0:35:ea:a2: 87:d5:40:2f:5e:cb:53:d8:a4:d8:80:59:41:f9:34: 89:75:8e:de:d1:87:4c:3e:b1:f2:46:36:b2:73:aa: 96:a5:e3:23:e2:ed:8e:f2:4e:0c:a6:cb:b9:46:f1: c8:66:d6:26:f8:35:d8:c1:aa:50:33:c6:59:c6:14: d6:b6:21:57:95:f1:d1:a9:77:43:b7:70:58:cb:18: cc:53:43:63:79:e4:c4:2b:c6:3a:43:20:12:b0:f8: 96:54:6c:96:bc:f1:97:93:f3:34:7b:38:3f:fc:74: af:5c:36:54:1b:e2:e4:5c:39:d3:51:c2:77:14:67: 50:fd:b9:7b:94:5c:c4:cc:31:15:27:ce:80:88:bb: fb:2a:74:41:bd:51:08:0f:35:d5:4a:58:bd:eb:81: 08:5a:00:cf:d1:d4:4e:2f:87:84:32:63:3a:02:6b: 33:e9:96:80:14:0e:21:31:91:e8:da:bd:a6:63:e1: e4:a4:bd:ea:8d:31:11:fb:68:ec:73:35:51:9e:f1: 9d:2a:3d:a5:5f:90:64:fd:84:c7:2e:38:78:a3:ca: 7a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:3A:D8:0F:A3:85:AF:8F:1E:9C:77:BC:D5:F8:94:AF:85:8D:62:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/922fa9c7-bd18-3321-a549-97584b01d98d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88/c3c17db7-204c-41e2-85ca-6a5a448a8b88.crl X509v3 Authority Key Identifier: keyid:7D:2D:BA:FF:43:DB:E9:72:96:E9:45:87:95:5C:45:72:54:D4:6B:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3c17db7-204c-41e2-85ca-6a5a448a8b88.cer sbgp-ipAddrBlock: critical IPv6: 2607:1c0:1320::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:55:48:b0:94:4b:e1:5f:7a:4f:e2:18:70:03:9b:5b:79:28: 24:f5:76:58:5b:a9:15:45:8f:b6:6d:eb:36:7b:7e:c5:c1:3e: 7a:03:b0:46:dc:fd:9b:47:5b:86:76:22:5b:cf:23:9b:f9:4e: 59:f5:9c:c8:c0:d0:17:19:6e:a2:fb:5b:07:31:39:c0:ac:4f: 37:b6:0e:ce:e2:87:2e:d5:a5:16:dd:04:9b:d5:27:51:bc:8d: 97:bf:f3:23:3d:ba:47:33:76:9a:91:ad:d4:6c:f2:07:df:ed: b8:79:24:52:6a:65:76:82:21:1e:e4:52:88:6d:a4:cb:35:64: f7:4d:d8:c8:d6:3f:af:66:67:47:5a:19:0d:e8:21:dd:d7:e9: 98:78:7c:c8:ad:d1:d6:3f:db:94:78:40:15:90:2e:4f:e0:0f: 1b:06:26:52:f0:96:dd:68:f0:b3:85:dc:73:06:00:66:11:0d: 1b:00:0d:12:c8:47:81:3e:49:84:08:c0:62:97:48:71:77:ba: be:b5:0c:0a:29:5a:c2:b4:e0:76:26:74:9a:bc:bc:9b:51:86: 7c:db:3d:8a:ab:68:dd:f7:4e:ac:55:c5:22:64:8c:1c:e4:77: db:be:f8:ed:49:18:a0:2c:c0:46:b3:51:64:f1:81:08:56:c7: aa:0c:8c:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnd9NvllArZ2kmf7sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNjMTdkYjctMjA0Yy00MWUyLTg1Y2EtNmE1YTQ0OGE4 Yjg4MB4XDTI1MDUxNjAxMDA0NloXDTI1MDgxNDAxMDA0NlowLzEtMCsGA1UEAxMk MDIyYTkxZWEtNjJlMC00YjcxLTliMzEtZDQ4NjNhMTFmZWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTWblCVW/hu5HsJwtzx2nNUIFeOyXO0/wiMN r63SduJJgAM8yhJx0OA16qKH1UAvXstT2KTYgFlB+TSJdY7e0YdMPrHyRjayc6qW peMj4u2O8k4Mpsu5RvHIZtYm+DXYwapQM8ZZxhTWtiFXlfHRqXdDt3BYyxjMU0Nj eeTEK8Y6QyASsPiWVGyWvPGXk/M0ezg//HSvXDZUG+LkXDnTUcJ3FGdQ/bl7lFzE zDEVJ86AiLv7KnRBvVEIDzXVSli964EIWgDP0dROL4eEMmM6Amsz6ZaAFA4hMZHo 2r2mY+HkpL3qjTER+2jsczVRnvGdKj2lX5Bk/YTHLjh4o8p6/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH862A+jha+PHpx3vNX4lK+FjWIYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2Mx N2RiNy0yMDRjLTQxZTItODVjYS02YTVhNDQ4YThiODgvOTIyZmE5YzctYmQxOC0z MzIxLWE1NDktOTc1ODRiMDFkOThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNjMTdkYjctMjA0Yy00MWUyLTg1 Y2EtNmE1YTQ0OGE4Yjg4L2MzYzE3ZGI3LTIwNGMtNDFlMi04NWNhLTZhNWE0NDhh OGI4OC5jcmwwHwYDVR0jBBgwFoAUfS26/0Pb6XKW6UWHlVxFclTUa4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2MxN2RiNy0yMDRjLTQxZTItODVjYS02YTVh NDQ4YThiODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgcBwBMg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF1VSLCUS+Ffek/iGHADm1t5KCT1dlhbqRVFj7Zt6zZ7fsXBPnoD sEbc/ZtHW4Z2IlvPI5v5Tln1nMjA0BcZbqL7WwcxOcCsTze2Ds7ihy7VpRbdBJvV J1G8jZe/8yM9ukczdpqRrdRs8gff7bh5JFJqZXaCIR7kUohtpMs1ZPdN2MjWP69m Z0daGQ3oId3X6Zh4fMit0dY/25R4QBWQLk/gDxsGJlLwlt1o8LOF3HMGAGYRDRsA DRLIR4E+SYQIwGKXSHF3ur61DAopWsK04HYmdJq8vJtRhnzbPYqraN33TqxVxSJk jBzkd9u++O1JGKAswEazUWTxgQhWx6oMjII= -----END CERTIFICATE-----Generated at Thu Jun 5 18:41:08 2025 by rpki-client