$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/2123b838-49c4-3858-b38c-bc8e324cca24.roa File: 2123b838-49c4-3858-b38c-bc8e324cca24.roa (raw, json) Hash identifier: 4//yyi/8viWdtHpFat9UXIso91cBzfaseYVM8ZLHx3E= Subject key identifier: 49:F9:D5:B9:E5:1F:33:A7:9C:5B:73:D8:DF:AB:DC:E2:1D:A9:9B:85 Certificate issuer: /CN=15b30dd1-216d-4b82-87ee-44becb2d20c7 Certificate serial: 010D0C9F43285848B1F62ECC51B195020E1199C0 Authority key identifier: 4E:38:50:30:3F:AF:AD:89:2F:B5:EE:88:B0:DB:01:3C:20:C3:57:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/2123b838-49c4-3858-b38c-bc8e324cca24.roa Signing time: Tue 28 Jan 2025 14:00:52 +0000 ROA not before: Tue 28 Jan 2025 14:00:52 +0000 ROA not after: Mon 28 Apr 2025 13:00:52 +0000 asID: 32852 IP address blocks: 2607:5540::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/15b30dd1-216d-4b82-87ee-44becb2d20c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/15b30dd1-216d-4b82-87ee-44becb2d20c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b1:f6:2e:cc:51:b1:95:02:0e:11:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15b30dd1-216d-4b82-87ee-44becb2d20c7 Validity Not Before: Jan 28 14:00:52 2025 GMT Not After : Apr 28 13:00:52 2025 GMT Subject: CN=4821d125-b34d-433c-9cd8-011375d184b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d3:30:0b:b5:7e:24:d4:f4:31:51:81:b6:fb: 37:2d:53:ca:04:7e:ca:6f:23:76:1c:8a:4c:2e:46: 40:a2:50:0b:2f:31:a5:f7:5d:40:67:16:39:16:ee: b4:a0:91:e7:80:49:7f:f1:e6:92:20:d0:09:83:46: 33:c2:06:73:a4:d0:2a:be:b9:56:0d:7e:0f:34:58: 3b:8d:46:a9:f3:4b:d1:b0:4b:61:65:e4:ec:e9:6a: bf:10:45:32:91:fc:08:32:05:41:2e:d0:6c:9f:b8: 80:55:6d:2e:ff:c3:b6:dc:0e:6e:e1:5c:66:f1:ce: 8f:2c:13:c6:2e:be:e9:de:a7:75:cf:2f:58:25:26: 3d:d9:b8:9d:ad:9e:ef:d4:29:66:2d:bf:0e:03:a4: 74:f3:8f:c4:3f:8a:63:7b:b0:1b:fb:5f:70:98:d0: e1:98:8c:78:74:41:ef:7a:b7:7c:84:a7:9e:b1:9d: d0:a6:bf:23:64:9c:38:47:4b:3f:98:11:35:cc:d0: 1e:4e:7e:3f:28:69:42:4c:25:b7:c9:cd:09:3b:ee: bd:f8:2c:49:28:c4:6b:7c:fe:6e:5f:69:ee:71:cd: bd:a5:6c:b6:95:ed:b2:18:e8:b6:9f:19:08:c1:f4: 50:7b:65:b7:90:7d:ce:fd:60:36:39:50:f3:89:da: 81:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F9:D5:B9:E5:1F:33:A7:9C:5B:73:D8:DF:AB:DC:E2:1D:A9:9B:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/2123b838-49c4-3858-b38c-bc8e324cca24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/15b30dd1-216d-4b82-87ee-44becb2d20c7.crl X509v3 Authority Key Identifier: keyid:4E:38:50:30:3F:AF:AD:89:2F:B5:EE:88:B0:DB:01:3C:20:C3:57:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7.cer sbgp-ipAddrBlock: critical IPv6: 2607:5540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:27:57:1e:87:96:59:b3:fe:b0:96:41:b6:31:a8:df:89:72: a2:ed:37:3f:6b:46:1f:75:24:20:0e:31:c2:7e:40:73:3b:dc: 5d:b6:39:69:f5:0a:06:57:cb:ca:f1:51:fe:6b:40:2e:c1:7a: f5:0e:ab:02:57:7a:de:72:8d:3e:ea:25:4f:08:38:09:3f:48: 2b:b6:8e:ae:22:08:45:51:3e:de:be:c1:5b:ea:5d:24:83:f5: 01:1a:53:a3:0c:0e:b1:39:8c:b5:77:61:16:74:fd:46:38:f4: 1a:b4:61:08:41:19:c8:8c:6e:29:4b:43:9f:89:11:24:30:03: b6:95:58:3a:b4:11:89:a6:c0:63:18:0b:a0:e0:72:4a:f5:06: da:28:49:69:b3:fe:e6:0b:3b:2b:9e:d4:db:a4:5d:64:dd:18: f6:b2:06:cc:88:e4:a0:4d:78:f4:ff:80:a0:39:f3:77:81:30: 05:7d:76:2a:1c:e4:3a:59:ed:fb:71:95:1b:cb:a8:c8:9c:37: ec:7f:39:fb:f6:91:93:ff:dd:2d:a5:fc:a7:6c:ab:99:f6:7f: d8:a5:22:ef:2d:e1:a6:dc:bf:16:9a:35:b2:5e:be:7a:56:1b: 0d:93:85:f7:f0:3a:77:e5:f0:51:6d:d1:85:1d:b3:db:e9:25: 96:32:64:12 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEix9i7MUbGVAg4RmcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTViMzBkZDEtMjE2ZC00YjgyLTg3ZWUtNDRiZWNiMmQy MGM3MB4XDTI1MDEyODE0MDA1MloXDTI1MDQyODEzMDA1MlowLzEtMCsGA1UEAxMk NDgyMWQxMjUtYjM0ZC00MzNjLTljZDgtMDExMzc1ZDE4NGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9MwC7V+JNT0MVGBtvs3LVPKBH7KbyN2HIpM LkZAolALLzGl911AZxY5Fu60oJHngEl/8eaSINAJg0YzwgZzpNAqvrlWDX4PNFg7 jUap80vRsEthZeTs6Wq/EEUykfwIMgVBLtBsn7iAVW0u/8O23A5u4Vxm8c6PLBPG Lr7p3qd1zy9YJSY92bidrZ7v1ClmLb8OA6R084/EP4pje7Ab+19wmNDhmIx4dEHv erd8hKeesZ3Qpr8jZJw4R0s/mBE1zNAeTn4/KGlCTCW3yc0JO+69+CxJKMRrfP5u X2nucc29pWy2le2yGOi2nxkIwfRQe2W3kH3O/WA2OVDzidqBZwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEn51bnlHzOnnFtz2N+r3OIdqZuFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNWIz MGRkMS0yMTZkLTRiODItODdlZS00NGJlY2IyZDIwYzcvMjEyM2I4MzgtNDljNC0z ODU4LWIzOGMtYmM4ZTMyNGNjYTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTViMzBkZDEtMjE2ZC00YjgyLTg3 ZWUtNDRiZWNiMmQyMGM3LzE1YjMwZGQxLTIxNmQtNGI4Mi04N2VlLTQ0YmVjYjJk MjBjNy5jcmwwHwYDVR0jBBgwFoAUTjhQMD+vrYkvte6IsNsBPCDDV/YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xNWIzMGRkMS0yMTZkLTRiODItODdlZS00NGJl Y2IyZDIwYzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdVQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB0J1ceh5ZZs/6wlkG2MajfiXKi7Tc/a0YfdSQgDjHCfkBzO9xdtjlp 9QoGV8vK8VH+a0AuwXr1DqsCV3reco0+6iVPCDgJP0grto6uIghFUT7evsFb6l0k g/UBGlOjDA6xOYy1d2EWdP1GOPQatGEIQRnIjG4pS0OfiREkMAO2lVg6tBGJpsBj GAug4HJK9QbaKElps/7mCzsrntTbpF1k3Rj2sgbMiOSgTXj0/4CgOfN3gTAFfXYq HOQ6We37cZUby6jInDfsfzn79pGT/90tpfynbKuZ9n/YpSLvLeGm3L8WmjWyXr56 VhsNk4X38Dp35fBRbdGFHbPb6SWWMmQS -----END CERTIFICATE-----Generated at Fri Apr 4 19:12:22 2025 by rpki-client