$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/b45f01b4-a66e-36c4-bc0a-43fd338df2e9.roa File: b45f01b4-a66e-36c4-bc0a-43fd338df2e9.roa (raw, json) Hash identifier: P5jPufKewm+FoGk2TwtMVgbUM/DP7GePegBwdhTEZkw= Subject key identifier: 86:8A:01:E3:90:36:D0:B3:B3:77:6D:0A:4F:ED:5E:4F:E2:20:07:53 Certificate issuer: /CN=a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2 Certificate serial: 010D0C9F43285849605418A403861BBAB625BD00 Authority key identifier: 1A:89:A6:9F:26:2C:91:F9:BD:B8:AE:98:4F:91:01:4C:50:DA:FD:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/b45f01b4-a66e-36c4-bc0a-43fd338df2e9.roa Signing time: Tue 01 Apr 2025 01:00:47 +0000 ROA not before: Tue 01 Apr 2025 01:00:47 +0000 ROA not after: Mon 30 Jun 2025 01:00:47 +0000 asID: 3128 IP address blocks: 2600:1d00::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:54:18:a4:03:86:1b:ba:b6:25:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2 Validity Not Before: Apr 1 01:00:47 2025 GMT Not After : Jun 30 01:00:47 2025 GMT Subject: CN=6cbd1f6d-3382-49c4-947b-85ee76f052a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fb:9e:53:6e:d9:13:0c:a3:fb:d6:45:9b:e9: 1e:92:61:18:a0:f9:51:b4:b7:0d:71:9b:90:07:cb: 81:78:19:57:18:ea:92:c5:d3:59:8e:47:0c:26:c7: 49:77:87:73:04:4d:76:20:7c:0e:1b:7d:58:88:d4: de:88:32:90:6e:5b:17:44:ac:9c:66:0d:a8:28:40: 44:3b:26:77:08:b8:7a:d1:02:09:a8:7b:c2:79:73: de:f8:7c:c7:0c:81:9a:1f:3a:16:e5:1f:5c:e6:5d: 7b:e9:54:d6:29:62:48:69:03:5c:8c:df:4b:5b:ed: 08:7a:46:2e:32:cf:bb:dc:eb:81:7c:60:33:d9:96: a5:0c:da:2a:f5:be:f6:51:1a:3b:53:65:f7:d6:c6: 72:91:9e:c6:81:e7:29:f1:d0:11:9b:59:c4:95:b7: f6:69:4d:04:6f:05:35:a4:18:dc:59:85:80:16:c9: 40:44:b8:5c:9d:fc:09:ad:82:fa:3d:7f:00:ee:f7: 0b:3b:c1:95:69:a7:1f:ec:0f:51:91:05:22:e8:17: 64:72:d2:9d:00:5c:bc:3c:75:d7:28:3e:70:75:fd: a0:4f:ca:2f:58:58:52:53:bc:c2:b9:0d:99:4c:75: c1:aa:0d:1d:a4:0b:ea:3a:52:d0:d2:0d:bf:8e:6d: c2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8A:01:E3:90:36:D0:B3:B3:77:6D:0A:4F:ED:5E:4F:E2:20:07:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/b45f01b4-a66e-36c4-bc0a-43fd338df2e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.crl X509v3 Authority Key Identifier: keyid:1A:89:A6:9F:26:2C:91:F9:BD:B8:AE:98:4F:91:01:4C:50:DA:FD:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer sbgp-ipAddrBlock: critical IPv6: 2600:1d00::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:6c:59:26:9d:a4:df:d1:7b:04:94:7e:5e:5d:28:91:4d:d4: d3:0f:11:02:aa:9f:da:02:5f:db:ee:2d:7f:4a:19:60:d3:d0: 8e:b9:f0:b4:6b:75:26:9f:b9:13:d4:d3:e6:89:2f:5c:59:66: d6:01:38:f9:00:68:2d:ab:33:e3:70:cf:d9:15:76:29:74:42: 1b:5f:f0:68:e7:67:73:aa:ac:f4:99:28:4f:08:83:2a:ed:da: e2:4f:e7:d9:32:71:14:10:32:0f:cf:01:71:cf:0b:3e:36:a2: ed:6e:0b:2f:f2:99:b9:b3:e3:93:86:88:68:52:c8:0c:c5:05: f0:7a:6a:23:50:97:69:f9:cf:5b:a8:4d:9c:ef:89:a8:f3:e6: ef:f1:df:79:48:62:d5:14:3f:ce:cf:d3:5a:6d:0e:75:f4:0e: dd:f6:3a:3a:6b:24:fc:e0:0e:ad:f7:6f:65:b5:5b:a3:83:d8: 34:9e:fe:9d:e4:f8:9b:ca:73:59:ff:c9:c1:95:e5:2f:cf:54: 37:a4:fc:65:6a:e8:6f:1b:16:b3:28:4b:d4:c0:96:d3:34:73: 23:a9:81:62:51:74:a4:2f:2a:60:1d:db:bf:99:c4:26:fd:94: e0:1e:96:9d:8a:f3:c4:e0:a5:77:4e:d7:5a:2d:c4:24:62:7a: 86:a6:a6:14 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElgVBikA4YburYlvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJiMmU1MzktYzgxYS00OGNkLTk1YTUtN2UzZWFlOGFk MmQyMB4XDTI1MDQwMTAxMDA0N1oXDTI1MDYzMDAxMDA0N1owLzEtMCsGA1UEAxMk NmNiZDFmNmQtMzM4Mi00OWM0LTk0N2ItODVlZTc2ZjA1MmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/ueU27ZEwyj+9ZFm+kekmEYoPlRtLcNcZuQ B8uBeBlXGOqSxdNZjkcMJsdJd4dzBE12IHwOG31YiNTeiDKQblsXRKycZg2oKEBE OyZ3CLh60QIJqHvCeXPe+HzHDIGaHzoW5R9c5l176VTWKWJIaQNcjN9LW+0IekYu Ms+73OuBfGAz2ZalDNoq9b72URo7U2X31sZykZ7Ggecp8dARm1nElbf2aU0EbwU1 pBjcWYWAFslARLhcnfwJrYL6PX8A7vcLO8GVaacf7A9RkQUi6BdkctKdAFy8PHXX KD5wdf2gT8ovWFhSU7zCuQ2ZTHXBqg0dpAvqOlLQ0g2/jm3C8wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIaKAeOQNtCzs3dtCk/tXk/iIAdTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmIy ZTUzOS1jODFhLTQ4Y2QtOTVhNS03ZTNlYWU4YWQyZDIvYjQ1ZjAxYjQtYTY2ZS0z NmM0LWJjMGEtNDNmZDMzOGRmMmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTJiMmU1MzktYzgxYS00OGNkLTk1 YTUtN2UzZWFlOGFkMmQyL2EyYjJlNTM5LWM4MWEtNDhjZC05NWE1LTdlM2VhZThh ZDJkMi5jcmwwHwYDVR0jBBgwFoAUGommnyYskfm9uK6YT5EBTFDa/RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMmIyZTUzOS1jODFhLTQ4Y2QtOTVhNS03ZTNl YWU4YWQyZDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAdADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAqbFkmnaTf0XsElH5eXSiRTdTTDxECqp/aAl/b7i1/Shlg09COufC0 a3Umn7kT1NPmiS9cWWbWATj5AGgtqzPjcM/ZFXYpdEIbX/Bo52dzqqz0mShPCIMq 7driT+fZMnEUEDIPzwFxzws+NqLtbgsv8pm5s+OThohoUsgMxQXwemojUJdp+c9b qE2c74mo8+bv8d95SGLVFD/Oz9NabQ519A7d9jo6ayT84A6t929ltVujg9g0nv6d 5PibynNZ/8nBleUvz1Q3pPxlauhvGxazKEvUwJbTNHMjqYFiUXSkLypgHdu/mcQm /ZTgHpadivPE4KV3TtdaLcQkYnqGpqYU -----END CERTIFICATE-----Generated at Fri Apr 4 15:57:44 2025 by rpki-client