$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/ba02b064-978c-3a0b-a9a0-ffdbf7603852.roa File: ba02b064-978c-3a0b-a9a0-ffdbf7603852.roa (raw, json) Hash identifier: hOez5Gq+mR0f2xIRON5imWTD4qo/CvUSUb3xQK6jhsM= Subject key identifier: 67:21:C0:43:FB:9B:DA:2D:07:2D:E5:4A:82:91:C7:01:4B:28:FE:C2 Certificate issuer: /CN=8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0 Certificate serial: 010D0C9F43285849393E6B540B7C514D12CD9F00 Authority key identifier: 2C:66:3B:20:EF:D2:60:11:39:8D:9E:E6:C0:01:2B:3A:0B:A6:CD:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/ba02b064-978c-3a0b-a9a0-ffdbf7603852.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 25875 IP address blocks: 2607:9f00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:6b:54:0b:7c:51:4d:12:cd:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=e39d4c03-cb5a-4c1b-b536-fa931adf75a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ac:f6:49:ba:89:d3:c6:36:a9:ca:1e:91:84: fd:1d:a8:6d:1e:b1:90:df:e9:f5:2c:15:3a:78:77: 39:28:72:ea:d9:4f:16:27:2c:3a:05:0b:10:50:b2: 74:2b:71:c3:2e:24:c6:01:03:d9:a3:40:35:27:ae: 8e:0a:de:7a:3d:4f:46:7e:53:3b:7a:f0:86:3b:42: b3:82:b3:6e:27:c5:9a:24:89:93:a4:89:00:c3:f3: 64:5f:e1:13:3c:d0:6c:83:ab:98:02:ef:c2:23:b8: 9a:b5:da:3b:3d:6b:90:af:9f:7d:a1:10:59:de:85: 5e:9d:45:73:6f:6e:c6:06:fa:62:62:9b:a7:f5:88: 2a:97:d9:26:f9:27:6d:57:d6:64:59:7a:cc:43:63: dd:f7:d7:48:9f:bc:2f:97:4b:ea:cd:53:18:3d:9c: f4:0c:3a:ec:63:cc:4d:f5:fb:1d:ef:3a:07:06:9d: 3c:03:fe:39:2f:f6:56:58:50:08:49:95:8e:9d:95: a1:6f:74:df:77:92:6a:34:1f:1b:d4:f6:fb:4d:92: e8:5a:d8:27:8a:16:fa:97:d5:fd:49:a9:ac:b2:e8: 90:67:da:5a:23:70:5d:2b:37:e5:53:99:11:05:2e: b3:98:33:f0:08:10:7a:ec:56:08:e5:73:54:db:b4: 5e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:21:C0:43:FB:9B:DA:2D:07:2D:E5:4A:82:91:C7:01:4B:28:FE:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/ba02b064-978c-3a0b-a9a0-ffdbf7603852.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.crl X509v3 Authority Key Identifier: keyid:2C:66:3B:20:EF:D2:60:11:39:8D:9E:E6:C0:01:2B:3A:0B:A6:CD:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ed618f9-7e9e-436c-80d0-d87dd1c0b2b0.cer sbgp-ipAddrBlock: critical IPv6: 2607:9f00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:c4:8c:ab:ba:a9:51:e4:3e:4a:d8:0b:61:74:4c:23:cd:8a: 55:f0:aa:9a:bc:80:99:9f:25:1e:52:4e:29:7a:e5:bc:27:f4: 51:b8:6c:69:b1:c8:d5:b1:ea:bb:34:da:78:9b:2c:cc:b1:4b: f7:e2:90:f3:2d:a0:a8:df:2f:3f:a8:1a:b5:4c:70:8f:8c:af: 17:94:9b:04:af:71:ef:4f:3d:a1:60:e0:a1:f6:d3:41:37:d1: b4:8b:1a:4e:d2:da:9d:dd:1f:e2:b1:7f:c6:02:97:40:ed:ed: 70:af:0c:1b:c0:5f:09:3a:a7:bc:87:23:21:06:c5:76:44:d0: 01:c9:05:32:a8:ca:9a:42:01:91:a5:78:c1:52:05:87:c1:ff: b4:bd:d4:63:fb:b1:5b:81:4e:90:5f:22:de:20:49:e7:82:3d: b7:a4:dd:c3:44:72:4d:de:67:28:4c:37:e1:d4:63:82:91:5d: 00:53:ad:7a:59:8f:89:60:c6:1d:6f:da:98:c5:89:5e:5b:9f: 27:45:f6:8d:5e:be:e8:79:a1:33:04:67:86:2b:ad:d7:7d:34: db:56:39:03:ec:ca:9a:bc:b3:01:a1:41:24:eb:9e:ed:32:a7: 7d:e8:ee:42:1c:ed:22:c6:af:7f:f0:13:dd:02:bb:4c:b6:9f: 0b:4a:fd:66 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEk5PmtUC3xRTRLNnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkNjE4ZjktN2U5ZS00MzZjLTgwZDAtZDg3ZGQxYzBi MmIwMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk ZTM5ZDRjMDMtY2I1YS00YzFiLWI1MzYtZmE5MzFhZGY3NWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8az2SbqJ08Y2qcoekYT9HahtHrGQ3+n1LBU6 eHc5KHLq2U8WJyw6BQsQULJ0K3HDLiTGAQPZo0A1J66OCt56PU9GflM7evCGO0Kz grNuJ8WaJImTpIkAw/NkX+ETPNBsg6uYAu/CI7iatdo7PWuQr599oRBZ3oVenUVz b27GBvpiYpun9Ygql9km+SdtV9ZkWXrMQ2Pd99dIn7wvl0vqzVMYPZz0DDrsY8xN 9fsd7zoHBp08A/45L/ZWWFAISZWOnZWhb3Tfd5JqNB8b1Pb7TZLoWtgnihb6l9X9 SamssuiQZ9paI3BdKzflU5kRBS6zmDPwCBB67FYI5XNU27ReuwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGchwEP7m9otBy3lSoKRxwFLKP7CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZWQ2 MThmOS03ZTllLTQzNmMtODBkMC1kODdkZDFjMGIyYjAvYmEwMmIwNjQtOTc4Yy0z YTBiLWE5YTAtZmZkYmY3NjAzODUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGVkNjE4ZjktN2U5ZS00MzZjLTgw ZDAtZDg3ZGQxYzBiMmIwLzhlZDYxOGY5LTdlOWUtNDM2Yy04MGQwLWQ4N2RkMWMw YjJiMC5jcmwwHwYDVR0jBBgwFoAULGY7IO/SYBE5jZ7mwAErOgumzV8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZWQ2MThmOS03ZTllLTQzNmMtODBkMC1kODdk ZDFjMGIyYjAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgefADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAcxIyruqlR5D5K2AthdEwjzYpV8KqavICZnyUeUk4peuW8J/RRuGxp scjVseq7NNp4myzMsUv34pDzLaCo3y8/qBq1THCPjK8XlJsEr3HvTz2hYOCh9tNB N9G0ixpO0tqd3R/isX/GApdA7e1wrwwbwF8JOqe8hyMhBsV2RNAByQUyqMqaQgGR pXjBUgWHwf+0vdRj+7FbgU6QXyLeIEnngj23pN3DRHJN3mcoTDfh1GOCkV0AU616 WY+JYMYdb9qYxYleW58nRfaNXr7oeaEzBGeGK63XfTTbVjkD7MqavLMBoUEk657t Mqd96O5CHO0ixq9/8BPdArtMtp8LSv1m -----END CERTIFICATE-----Generated at Sat Apr 19 14:02:03 2025 by rpki-client