$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/67b4a9d0-55c3-32d0-a6d5-3dbd8343d1c0.roa File: 67b4a9d0-55c3-32d0-a6d5-3dbd8343d1c0.roa (raw, json) Hash identifier: JPQXcdtOrr4bZPXCD+iVtaQvBfCA1ZlpBHmdvP3jrlg= Subject key identifier: AA:6E:3E:4B:4C:F5:48:9F:01:CB:6C:49:4E:63:74:76:71:91:AD:5F Certificate issuer: /CN=e3fada49-b353-4a69-9b32-1b6ab3729db1 Certificate serial: 010D0C9F4328584925B3A3388FF8956B83865A80 Authority key identifier: 26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/67b4a9d0-55c3-32d0-a6d5-3dbd8343d1c0.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 3855 IP address blocks: 2606:b80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:a3:38:8f:f8:95:6b:83:86:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3fada49-b353-4a69-9b32-1b6ab3729db1 Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=27a7802e-3df8-4f9a-bfda-038111d3e369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4b:d0:19:ad:06:9b:a4:f6:4d:0a:8e:75:2b: 07:9a:d8:ab:1d:85:8b:3f:bc:8f:4e:bc:93:e3:da: ae:cd:43:93:c3:5a:86:5b:24:68:a1:48:46:21:05: 9d:11:62:23:ff:cb:84:de:05:37:a7:73:b2:3f:f2: 46:04:2b:cc:09:21:1e:6c:8b:57:1b:55:43:e4:2a: 12:95:cf:03:7b:a2:06:fe:55:36:77:89:44:08:8e: fc:d9:00:bf:08:40:0f:c7:8e:2c:5c:7e:bc:99:6b: b3:97:c9:b7:79:ad:ef:4d:f8:7d:0b:84:ef:f1:d7: a3:df:da:4b:f9:52:68:86:4a:ee:5a:43:02:64:72: e1:26:aa:b2:f7:05:c4:1e:74:3d:86:97:0f:dd:62: c8:33:06:30:4a:13:66:d6:f0:d0:a2:e6:5a:76:21: 3a:6c:7f:f9:f7:e3:c4:34:8c:34:52:2d:e6:74:d2: 00:8f:dd:ed:3c:7c:ad:9b:aa:cb:aa:d7:58:00:88: a6:f6:28:2f:80:c7:8d:c3:33:97:4d:b4:81:04:a9: 0a:e7:72:d7:5f:25:7b:fa:0e:26:a2:ce:88:e9:45: 11:b5:e9:15:a6:11:8e:9f:08:39:9f:1e:3d:8a:a4: 3c:0b:eb:90:ab:36:40:f1:0d:b9:58:d8:b3:60:71: 30:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6E:3E:4B:4C:F5:48:9F:01:CB:6C:49:4E:63:74:76:71:91:AD:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/67b4a9d0-55c3-32d0-a6d5-3dbd8343d1c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl X509v3 Authority Key Identifier: keyid:26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer sbgp-ipAddrBlock: critical IPv6: 2606:b80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:71:f7:25:eb:71:f1:45:c3:47:67:78:28:73:3c:51:25:38: 2e:f7:03:ea:40:25:56:2b:14:e8:5e:3f:8b:1f:da:ee:93:2c: 8e:0c:5b:da:b3:c5:5c:68:e5:f1:23:77:b1:8f:96:5d:9d:fe: b1:45:3a:3d:77:3e:7f:f0:f5:3e:da:c7:ec:f2:be:7a:ed:af: 15:ad:8a:09:3c:f0:60:46:6f:95:f4:f2:b7:bf:d3:3b:df:a4: dd:6d:95:7a:b9:d4:ca:0c:6e:7f:a3:e2:eb:72:a8:e8:2f:e0: b0:28:d2:24:91:67:85:b0:fa:50:6a:09:5a:dc:92:bc:c6:49: b0:3d:99:26:b1:3f:21:4c:77:06:db:88:11:3f:8d:60:61:51: 5c:e0:48:9f:0b:70:34:ed:99:13:c7:52:e3:c4:e7:53:57:1c: 40:b8:92:47:28:26:b5:f5:ec:dd:c5:25:ab:fe:dd:c4:4f:6c: 2e:49:89:45:db:44:1c:28:dc:42:34:6c:c9:74:0b:9b:f9:0f: a1:9f:93:d7:0e:dc:59:3f:e9:62:62:41:dd:52:8c:4e:a8:9e: aa:79:e9:9e:05:eb:b4:24:5b:8b:42:b5:98:32:17:55:e8:62: b8:b0:02:db:31:c3:54:92:c6:0f:8e:03:fb:e1:5e:88:3b:f8: 57:9f:38:68 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkls6M4j/iVa4OGWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNmYWRhNDktYjM1My00YTY5LTliMzItMWI2YWIzNzI5 ZGIxMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk MjdhNzgwMmUtM2RmOC00ZjlhLWJmZGEtMDM4MTExZDNlMzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0vQGa0Gm6T2TQqOdSsHmtirHYWLP7yPTryT 49quzUOTw1qGWyRooUhGIQWdEWIj/8uE3gU3p3OyP/JGBCvMCSEebItXG1VD5CoS lc8De6IG/lU2d4lECI782QC/CEAPx44sXH68mWuzl8m3ea3vTfh9C4Tv8dej39pL +VJohkruWkMCZHLhJqqy9wXEHnQ9hpcP3WLIMwYwShNm1vDQouZadiE6bH/59+PE NIw0Ui3mdNIAj93tPHytm6rLqtdYAIim9igvgMeNwzOXTbSBBKkK53LXXyV7+g4m os6I6UURtekVphGOnwg5nx49iqQ8C+uQqzZA8Q25WNizYHEwVwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKpuPktM9UifActsSU5jdHZxka1fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lM2Zh ZGE0OS1iMzUzLTRhNjktOWIzMi0xYjZhYjM3MjlkYjEvNjdiNGE5ZDAtNTVjMy0z MmQwLWE2ZDUtM2RiZDgzNDNkMWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTNmYWRhNDktYjM1My00YTY5LTli MzItMWI2YWIzNzI5ZGIxL2UzZmFkYTQ5LWIzNTMtNGE2OS05YjMyLTFiNmFiMzcy OWRiMS5jcmwwHwYDVR0jBBgwFoAUJuly3fKragsPZSkTRy/Y3+UGPZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lM2ZhZGE0OS1iMzUzLTRhNjktOWIzMi0xYjZh YjM3MjlkYjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYLgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBDcfcl63HxRcNHZ3goczxRJTgu9wPqQCVWKxToXj+LH9rukyyODFva s8VcaOXxI3exj5Zdnf6xRTo9dz5/8PU+2sfs8r567a8VrYoJPPBgRm+V9PK3v9M7 36TdbZV6udTKDG5/o+LrcqjoL+CwKNIkkWeFsPpQagla3JK8xkmwPZkmsT8hTHcG 24gRP41gYVFc4EifC3A07ZkTx1LjxOdTVxxAuJJHKCa19ezdxSWr/t3ET2wuSYlF 20QcKNxCNGzJdAub+Q+hn5PXDtxZP+liYkHdUoxOqJ6qeemeBeu0JFuLQrWYMhdV 6GK4sALbMcNUksYPjgP74V6IO/hXnzho -----END CERTIFICATE-----Generated at Sat Apr 12 15:04:46 2025 by rpki-client