$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/ff4f066a-1678-34b5-9861-cccf7607e203.roa File: ff4f066a-1678-34b5-9861-cccf7607e203.roa (raw, json) Hash identifier: ReJ3+zDwqmvhy8TS8Z1US3t6qKYKCV4XyagyKKl7P2U= Subject key identifier: 64:88:AB:F4:C3:A6:34:C0:6A:E7:AB:9F:D6:C3:5B:A9:B6:A0:A9:80 Certificate issuer: /CN=0a684002-9100-46b0-8a9b-64ee2e7bda6a Certificate serial: 010D0C9F432858498339EE76DD4AF7A4A3EFA980 Authority key identifier: B9:83:6E:9B:8D:E6:6D:0F:B6:D3:03:46:0B:31:28:21:E3:FE:33:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/ff4f066a-1678-34b5-9861-cccf7607e203.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 40764 IP address blocks: 2604:edc0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/0a684002-9100-46b0-8a9b-64ee2e7bda6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/0a684002-9100-46b0-8a9b-64ee2e7bda6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:ee:76:dd:4a:f7:a4:a3:ef:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a684002-9100-46b0-8a9b-64ee2e7bda6a Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=1e4418ad-69e7-42aa-8db2-98ad46233b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4d:89:40:30:80:71:f5:71:49:c1:77:c2:aa: 11:46:02:0c:dc:b0:61:db:ea:14:26:18:e4:2e:c8: 7d:45:76:ef:23:16:24:be:94:6f:74:f9:0c:13:a5: ce:d5:d2:27:f8:5c:a6:ee:fb:66:88:9b:ff:39:e1: e8:82:d2:28:1a:34:f0:90:9c:b8:bb:1d:13:dd:40: 40:9d:eb:60:fe:99:ff:6e:6a:87:e3:27:7a:fd:62: 96:eb:17:ba:d5:21:70:0b:88:00:42:25:21:de:39: 5c:5b:23:40:c1:64:95:84:0c:15:d4:6a:ca:c0:3f: 04:ff:55:1c:f3:18:ae:a3:0e:97:54:74:9f:1a:8a: 2b:52:fe:30:c5:5b:da:5c:e4:6d:2b:6f:7f:23:8a: 19:06:ef:5e:83:eb:52:33:c4:28:b0:6e:50:46:76: 52:ac:5a:6d:b4:a3:22:8b:c8:8e:da:ed:62:a6:a4: 44:94:bd:dc:ec:15:8f:61:7d:09:8d:47:09:59:fb: 0d:3c:2d:f6:d4:3b:04:38:19:b0:e3:f9:b1:61:a8: da:d3:0e:7f:73:3e:99:04:96:9f:49:0b:59:4f:f2: 10:f7:e8:92:1c:67:71:77:07:57:f4:c2:85:5e:63: 08:6d:ef:a5:31:4d:a0:bd:49:e2:bc:4c:c4:bd:eb: 13:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:88:AB:F4:C3:A6:34:C0:6A:E7:AB:9F:D6:C3:5B:A9:B6:A0:A9:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/ff4f066a-1678-34b5-9861-cccf7607e203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/0a684002-9100-46b0-8a9b-64ee2e7bda6a.crl X509v3 Authority Key Identifier: keyid:B9:83:6E:9B:8D:E6:6D:0F:B6:D3:03:46:0B:31:28:21:E3:FE:33:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a.cer sbgp-ipAddrBlock: critical IPv6: 2604:edc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:b9:bb:4f:83:1c:26:15:93:c0:a4:1f:af:15:8b:48:91:b8: 48:a8:97:7a:66:e3:c4:de:8b:4b:05:6d:db:ce:db:3c:a0:72: 40:4a:e3:c1:94:0b:69:65:07:87:ed:30:55:53:e9:23:a5:d8: 7a:68:f9:38:45:2c:c3:8c:29:ab:34:8e:9a:9f:e2:2b:81:41: 3e:a4:e0:48:b9:53:c9:9a:92:63:a6:01:f3:18:c2:2a:27:d2: 7e:c4:be:6b:9d:e3:09:98:49:b2:f7:66:48:e4:c1:31:54:fe: 8f:30:83:84:f1:ca:df:1d:b6:49:e8:24:d1:96:dd:28:e2:8b: 66:f8:07:86:34:d0:4a:2c:31:af:f4:6b:36:66:f5:dc:d2:26: c6:b3:dc:a4:bf:0b:94:ec:b9:3f:be:9d:79:5a:f6:7a:99:c6: 9c:ad:12:a5:c9:85:e4:13:93:d9:fe:3b:eb:98:65:a7:4d:98: f1:e7:cf:73:3a:35:48:1a:92:a3:cd:d5:f5:22:18:c5:7f:eb: 6c:09:db:4f:1f:46:37:6f:05:a9:16:89:d9:e3:c5:1e:6f:87: fe:f3:ae:c5:12:55:4d:b2:a5:38:2c:96:d1:44:21:41:c6:c5: f2:0d:24:26:db:64:41:d3:57:06:9a:46:16:44:96:2b:37:6c: 25:12:3a:e1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmDOe523Ur3pKPvqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE2ODQwMDItOTEwMC00NmIwLThhOWItNjRlZTJlN2Jk YTZhMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk MWU0NDE4YWQtNjllNy00MmFhLThkYjItOThhZDQ2MjMzYjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA002JQDCAcfVxScF3wqoRRgIM3LBh2+oUJhjk Lsh9RXbvIxYkvpRvdPkME6XO1dIn+Fym7vtmiJv/OeHogtIoGjTwkJy4ux0T3UBA netg/pn/bmqH4yd6/WKW6xe61SFwC4gAQiUh3jlcWyNAwWSVhAwV1GrKwD8E/1Uc 8xiuow6XVHSfGoorUv4wxVvaXORtK29/I4oZBu9eg+tSM8QosG5QRnZSrFpttKMi i8iO2u1ipqRElL3c7BWPYX0JjUcJWfsNPC321DsEOBmw4/mxYaja0w5/cz6ZBJaf SQtZT/IQ9+iSHGdxdwdX9MKFXmMIbe+lMU2gvUnivEzEvesTbwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGSIq/TDpjTAauern9bDW6m2oKmAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wYTY4 NDAwMi05MTAwLTQ2YjAtOGE5Yi02NGVlMmU3YmRhNmEvZmY0ZjA2NmEtMTY3OC0z NGI1LTk4NjEtY2NjZjc2MDdlMjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGE2ODQwMDItOTEwMC00NmIwLThh OWItNjRlZTJlN2JkYTZhLzBhNjg0MDAyLTkxMDAtNDZiMC04YTliLTY0ZWUyZTdi ZGE2YS5jcmwwHwYDVR0jBBgwFoAUuYNum43mbQ+20wNGCzEoIeP+MxswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wYTY4NDAwMi05MTAwLTQ2YjAtOGE5Yi02NGVl MmU3YmRhNmEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTtwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCjubtPgxwmFZPApB+vFYtIkbhIqJd6ZuPE3otLBW3bzts8oHJASuPB lAtpZQeH7TBVU+kjpdh6aPk4RSzDjCmrNI6an+IrgUE+pOBIuVPJmpJjpgHzGMIq J9J+xL5rneMJmEmy92ZI5MExVP6PMIOE8crfHbZJ6CTRlt0o4otm+AeGNNBKLDGv 9Gs2ZvXc0ibGs9ykvwuU7Lk/vp15WvZ6mcacrRKlyYXkE5PZ/jvrmGWnTZjx589z OjVIGpKjzdX1IhjFf+tsCdtPH0Y3bwWpFonZ48Ueb4f+867FElVNsqU4LJbRRCFB xsXyDSQm22RB01cGmkYWRJYrN2wlEjrh -----END CERTIFICATE-----Generated at Sun Apr 20 13:07:54 2025 by rpki-client