$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5677ef8e-eb56-3461-82e2-aff84023202f.roa File: 5677ef8e-eb56-3461-82e2-aff84023202f.roa (raw, json) Hash identifier: emk+53yXP0YfpgnZ3sRosr+nn4tpHwdtIoNzu6QHYFI= Subject key identifier: 63:ED:25:F2:0C:EA:33:BD:C1:75:95:5B:7D:9E:01:3C:44:CD:72:15 Certificate issuer: /CN=208edf3a-73a5-4614-9c76-5702d5c88977 Certificate serial: 010D0C9F432858494B641ABBBF11BA5526FF59E0 Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5677ef8e-eb56-3461-82e2-aff84023202f.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 398549 IP address blocks: 2605:dd40:8e00::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:1a:bb:bf:11:ba:55:26:ff:59:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=974a4758-32e0-4c74-847d-f45532208bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c0:ce:81:25:43:03:18:18:50:5c:1a:96:64: 70:af:82:91:10:27:bf:a1:fa:10:6e:56:a0:51:46: 13:40:d9:a3:28:89:e6:79:73:e6:a8:ce:ee:ab:7b: 3e:f6:d6:67:5b:c2:c2:4d:47:40:40:e6:9b:cd:9c: 02:7e:92:2e:0b:55:78:15:cb:9d:48:72:b6:01:28: 40:da:d9:24:15:f4:44:48:ba:57:4f:cf:a4:31:a2: 13:d8:66:c1:eb:47:ce:48:45:a2:25:48:cc:d6:29: 27:77:1d:c6:f5:16:9c:03:3d:7b:f9:d6:00:94:dc: f4:95:f9:11:62:8e:9c:c5:c6:20:26:33:f1:e9:a8: ba:e0:ed:78:9c:ad:d1:8d:a9:bb:80:f4:39:19:b9: bc:43:b4:13:f7:de:40:65:70:56:df:45:30:3b:f7: 09:21:2f:88:c1:df:fd:a6:d4:2f:5c:92:23:c3:5b: 64:d3:50:a9:d7:87:ce:69:0b:9c:ca:51:8b:86:78: 4c:64:98:e2:ad:ce:41:5b:93:0f:1a:78:e0:5d:4a: 2f:c3:4b:be:19:23:49:08:14:a2:39:ab:01:75:e7: 6f:58:3d:0b:f9:56:22:14:e3:28:3e:ae:50:c8:79: e9:0c:49:aa:a9:c9:29:09:cd:b9:c3:18:94:13:ca: c5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:ED:25:F2:0C:EA:33:BD:C1:75:95:5B:7D:9E:01:3C:44:CD:72:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5677ef8e-eb56-3461-82e2-aff84023202f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl X509v3 Authority Key Identifier: keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer sbgp-ipAddrBlock: critical IPv6: 2605:dd40:8e00::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:c7:72:41:15:c3:f6:78:d9:fc:1b:4f:e9:c6:d9:d2:87:cd: 51:d1:b2:f2:20:d3:74:06:89:38:58:91:d1:eb:64:d4:59:94: 9a:e6:45:33:c8:4c:01:9f:a0:04:b1:e7:c5:70:12:68:5d:a9: 5b:2a:03:ee:b8:67:da:7e:4a:35:35:8e:57:06:17:e9:18:80: 58:6d:ad:c8:2d:58:63:5e:0a:e0:3c:5b:10:80:98:b3:30:6f: 0e:96:f0:0c:e6:49:0e:7f:41:a8:a1:03:e9:de:71:86:5c:80: 53:b4:ac:1b:d7:62:06:32:a4:78:5f:be:55:c0:ee:9a:9d:58: ed:6f:c2:5d:04:5f:c7:56:cc:9a:e7:e8:2d:7f:b2:73:3c:4c: 36:16:19:66:92:7e:fb:5d:13:c8:22:83:78:04:d8:92:b2:89: fa:30:3f:69:d4:33:26:09:56:c7:24:71:b8:b5:28:46:c6:5d: b9:83:1e:7d:8d:86:3d:ef:10:11:cb:47:ff:f0:16:e4:57:6b: 58:a3:bd:32:58:85:78:79:34:55:65:a6:18:de:b5:c5:c7:a8: 7f:18:86:06:0a:3d:15:eb:da:ed:23:20:9a:60:bf:ed:fc:ca: 64:93:43:55:17:8d:57:d9:7d:33:a4:fa:b6:34:e3:30:c5:8b: ce:60:f5:12 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElLZBq7vxG6VSb/WeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA4ZWRmM2EtNzNhNS00NjE0LTljNzYtNTcwMmQ1Yzg4 OTc3MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk OTc0YTQ3NTgtMzJlMC00Yzc0LTg0N2QtZjQ1NTMyMjA4YmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8DOgSVDAxgYUFwalmRwr4KRECe/ofoQblag UUYTQNmjKInmeXPmqM7uq3s+9tZnW8LCTUdAQOabzZwCfpIuC1V4FcudSHK2AShA 2tkkFfRESLpXT8+kMaIT2GbB60fOSEWiJUjM1ikndx3G9RacAz17+dYAlNz0lfkR Yo6cxcYgJjPx6ai64O14nK3Rjam7gPQ5Gbm8Q7QT995AZXBW30UwO/cJIS+Iwd/9 ptQvXJIjw1tk01Cp14fOaQucylGLhnhMZJjirc5BW5MPGnjgXUovw0u+GSNJCBSi OasBdedvWD0L+VYiFOMoPq5QyHnpDEmqqckpCc25wxiUE8rFNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGPtJfIM6jO9wXWVW32eATxEzXIVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhl ZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAyZDVjODg5NzcvNTY3N2VmOGUtZWI1Ni0z NDYxLTgyZTItYWZmODQwMjMyMDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjA4ZWRmM2EtNzNhNS00NjE0LTlj NzYtNTcwMmQ1Yzg4OTc3LzIwOGVkZjNhLTczYTUtNDYxNC05Yzc2LTU3MDJkNWM4 ODk3Ny5jcmwwHwYDVR0jBBgwFoAUjiG5m/w/KlKClNSwhb33vM87VUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhlZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAy ZDVjODg5NzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgXdQI4A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFTHckEVw/Z42fwbT+nG2dKHzVHRsvIg03QGiThYkdHrZNRZlJrm RTPITAGfoASx58VwEmhdqVsqA+64Z9p+SjU1jlcGF+kYgFhtrcgtWGNeCuA8WxCA mLMwbw6W8AzmSQ5/QaihA+necYZcgFO0rBvXYgYypHhfvlXA7pqdWO1vwl0EX8dW zJrn6C1/snM8TDYWGWaSfvtdE8gig3gE2JKyifowP2nUMyYJVsckcbi1KEbGXbmD Hn2Nhj3vEBHLR//wFuRXa1ijvTJYhXh5NFVlphjetcXHqH8YhgYKPRXr2u0jIJpg v+38ymSTQ1UXjVfZfTOk+rY04zDFi85g9RI= -----END CERTIFICATE-----Generated at Sat Apr 5 08:16:25 2025 by rpki-client