$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa File: 53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa (raw, json) Hash identifier: 359OGMx7As2jp+AsHR3B3o8O4t5zNLqnyR6Pj3V5gKg= Subject key identifier: B5:BD:BF:5D:8E:5E:BE:E1:0E:B0:89:DC:AF:C2:E4:E4:74:F3:98:0D Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584902EC156E14D528AE2EAC4E80 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 32181 IP address blocks: 2001:1850::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:15:6e:14:d5:28:ae:2e:ac:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=124c5469-4582-4764-881d-5b6afacc3ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e6:40:d7:d5:fe:16:e0:0d:b9:06:b0:4b:be: 6b:d9:dc:77:a7:9f:41:ff:27:cd:11:09:30:b4:9e: 50:39:4d:8b:70:71:03:0b:87:88:bb:3e:df:cf:dd: 0e:27:a9:32:71:83:d7:66:29:58:dc:15:e6:4c:bc: 6a:f0:ef:b8:b4:b5:24:80:ec:fe:e6:bf:43:cd:8a: b2:2e:d0:b3:77:ae:66:04:7f:bd:6b:20:6b:94:cc: e0:e1:95:bb:7d:d6:12:92:eb:36:e1:28:de:9d:9c: 2a:28:3e:66:00:67:bb:fa:eb:ab:00:f3:61:6b:53: e2:a8:b6:79:a9:2f:ac:29:83:37:57:dd:c7:6c:98: 22:4b:bd:d4:12:35:1b:a5:05:7b:11:bf:01:28:89: b4:f5:8a:f5:0b:cb:2c:71:a4:3b:95:b0:b8:19:59: 6d:e1:96:d6:ee:a6:14:77:16:6e:0b:23:82:c4:d7: 73:e9:52:ab:21:88:3c:d1:64:6d:1d:bd:a4:c6:ac: 5d:90:a8:ad:cf:5b:fb:12:dc:c3:ac:41:e1:99:3f: ec:1e:9e:4e:a0:37:1e:7a:a5:7f:58:d6:58:7c:65: 38:f2:8f:51:38:1a:39:29:44:53:95:7d:ca:6b:f6: b9:bd:ad:33:c3:cf:a2:87:8e:54:f0:ce:08:e3:54: b8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BD:BF:5D:8E:5E:BE:E1:0E:B0:89:DC:AF:C2:E4:E4:74:F3:98:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv6: 2001:1850::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ae:8f:89:c8:56:5c:96:7b:cb:0e:f7:ac:b8:a9:92:5d:79: 39:5e:99:98:96:85:d1:ed:4c:44:fb:55:ca:15:6b:34:d3:91: 1b:67:57:06:65:d5:76:51:62:63:d6:c0:92:57:97:00:69:32: a2:db:d5:8e:5d:af:62:61:e6:c7:c8:23:67:f7:f5:e6:82:0a: 9b:d0:9d:c2:0d:7d:db:c1:b4:cb:11:d8:7d:aa:60:32:78:23: 02:61:5d:c9:1b:1f:96:0c:a9:c4:89:bd:94:00:25:aa:49:1c: 4e:5f:8f:3c:4d:dc:3a:b9:a0:e5:40:d1:e7:27:4e:5f:c0:37: 53:99:96:2f:75:39:dc:d4:1f:a4:8f:0c:aa:49:7a:a5:35:4e: dd:05:7b:cf:d1:cb:ac:09:42:e5:11:29:46:6e:9a:a9:d6:4a: dc:84:fc:75:b5:80:28:cf:f7:ad:96:93:ca:2c:45:82:58:b4: 51:ec:07:63:1b:f1:95:79:af:1d:2b:a7:9e:8e:2e:22:f8:aa: dd:a6:99:d5:4f:5e:b8:23:d3:62:35:c5:c9:c9:a9:f9:62:9e: 2a:83:86:f7:f3:52:ac:11:75:42:bc:d0:2a:c0:e1:17:ad:34: 80:8f:85:c0:e0:b8:c8:d7:32:9e:e3:5b:45:27:36:94:7d:55: be:05:b2:b7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkC7BVuFNUori6sToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk MTI0YzU0NjktNDU4Mi00NzY0LTg4MWQtNWI2YWZhY2MzZWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquZA19X+FuANuQawS75r2dx3p59B/yfNEQkw tJ5QOU2LcHEDC4eIuz7fz90OJ6kycYPXZilY3BXmTLxq8O+4tLUkgOz+5r9DzYqy LtCzd65mBH+9ayBrlMzg4ZW7fdYSkus24SjenZwqKD5mAGe7+uurAPNha1PiqLZ5 qS+sKYM3V93HbJgiS73UEjUbpQV7Eb8BKIm09Yr1C8sscaQ7lbC4GVlt4ZbW7qYU dxZuCyOCxNdz6VKrIYg80WRtHb2kxqxdkKitz1v7EtzDrEHhmT/sHp5OoDceeqV/ WNZYfGU48o9ROBo5KURTlX3Ka/a5va0zw8+ih45U8M4I41S4YwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLW9v12OXr7hDrCJ3K/C5OR085gNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvNTNkN2VhNjgtMzUxZS0z OGMzLTkzN2UtOGYyZTQ4ZTcwYWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEYUDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQByro+JyFZclnvLDvesuKmSXXk5XpmYloXR7UxE+1XKFWs005EbZ1cG ZdV2UWJj1sCSV5cAaTKi29WOXa9iYebHyCNn9/Xmggqb0J3CDX3bwbTLEdh9qmAy eCMCYV3JGx+WDKnEib2UACWqSRxOX488Tdw6uaDlQNHnJ05fwDdTmZYvdTnc1B+k jwyqSXqlNU7dBXvP0cusCULlESlGbpqp1krchPx1tYAoz/etlpPKLEWCWLRR7Adj G/GVea8dK6eeji4i+KrdppnVT164I9NiNcXJyan5Yp4qg4b381KsEXVCvNAqwOEX rTSAj4XA4LjI1zKe41tFJzaUfVW+BbK3 -----END CERTIFICATE-----Generated at Sat Apr 5 12:08:01 2025 by rpki-client