$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/42d33922-a2d6-35b6-90d9-8850b49b4f6c.roa File: 42d33922-a2d6-35b6-90d9-8850b49b4f6c.roa (raw, json) Hash identifier: ZbCJAEeKD//8mLHPaqYBVgMFIFRFWMsrxS3+NP8GKls= Subject key identifier: C6:35:DA:D0:C5:2D:15:15:03:F9:E7:A8:FC:05:E6:A9:3D:59:E2:19 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584953C425C7805EF2277C99B020 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/42d33922-a2d6-35b6-90d9-8850b49b4f6c.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 54113 IP address blocks: 2620:11a:c045::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:25:c7:80:5e:f2:27:7c:99:b0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=f776595e-4f3e-4516-9948-f3ef4cc970dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:88:88:79:08:fe:65:ea:cf:48:ea:5c:56:04: f4:0a:00:0d:9d:5d:4f:f5:c1:ee:0c:6f:82:39:55: 2b:79:65:57:89:b2:45:28:7b:2b:0d:97:fc:63:19: ee:28:67:e2:56:8d:07:9d:a8:15:f9:23:ce:44:f7: 81:9d:0e:bb:47:3d:09:5f:82:72:ec:72:cc:0d:df: ba:83:ca:92:e1:57:9d:23:a6:5d:61:b4:92:ee:b4: b2:5c:60:91:e6:e9:0b:e4:ee:f7:cd:f6:bd:59:6e: b0:92:94:09:f2:5c:74:87:f4:55:dc:dc:04:2d:5a: 4a:c9:e1:ba:fb:c8:ae:bc:9b:09:1d:76:44:b0:63: c7:92:fa:46:51:3d:5e:cc:c9:7b:c1:05:cb:e8:26: 99:ca:50:d0:57:96:95:00:3b:84:47:a0:cc:ac:c7: 79:34:44:12:19:af:6b:7e:62:e3:43:ad:57:2b:0b: 78:03:53:f0:05:73:53:41:e5:f5:25:45:70:59:37: de:8a:1e:00:da:d0:58:8d:bb:7e:42:cd:b4:a4:bd: 1f:27:dc:0a:df:e1:b7:23:27:58:ab:d1:13:9d:b3: c5:6a:a7:01:d1:a4:6f:18:59:2a:74:f1:fe:f3:d4: 17:f7:af:2d:d9:fb:70:ba:7f:fb:6d:41:25:ad:0b: 51:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:35:DA:D0:C5:2D:15:15:03:F9:E7:A8:FC:05:E6:A9:3D:59:E2:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/42d33922-a2d6-35b6-90d9-8850b49b4f6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv6: 2620:11a:c045::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:85:cf:d2:15:62:f4:3e:45:a6:19:6f:f8:dd:82:5f:5a:80: 71:0f:bc:62:0c:40:c9:c2:15:16:c1:05:05:a6:33:4b:4a:4c: 1f:8f:cf:b9:2d:6d:93:73:47:e6:f0:cc:79:ac:02:be:d0:64: 1d:63:bb:a0:d0:68:92:60:c9:08:d1:4d:36:e2:23:38:29:e5: 08:a3:c8:ac:79:34:42:e4:bb:12:27:7e:7e:c9:2a:86:de:f4: de:64:7d:ce:0b:c2:61:59:87:2a:e9:d9:82:f8:f5:64:e7:c4: 8e:ff:db:87:82:a0:18:9c:58:70:f4:9e:f7:53:5b:aa:1c:15: 26:2e:24:8f:a3:9a:19:14:e0:c1:da:b6:98:34:a9:9c:3b:a9: 37:41:c4:f4:cb:7a:78:75:ef:43:df:de:f4:db:67:2a:5e:27: 4c:33:b6:bc:24:d6:11:62:5e:b6:69:e5:2a:1a:fc:ff:c3:76: bf:cc:1d:28:c0:a0:87:50:25:00:85:54:d5:54:31:24:d3:61: a3:b7:41:ad:e2:79:df:29:e5:70:3d:61:50:d9:d9:d5:b2:38: 50:ec:cd:aa:de:b7:7e:22:cc:d2:8c:43:d0:c7:81:61:de:e4: 74:56:67:e0:cb:3a:97:af:92:11:16:0c:6a:f8:f1:c1:cb:5b: 59:0c:32:de -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElTxCXHgF7yJ3yZsCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk Zjc3NjU5NWUtNGYzZS00NTE2LTk5NDgtZjNlZjRjYzk3MGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4iIeQj+ZerPSOpcVgT0CgANnV1P9cHuDG+C OVUreWVXibJFKHsrDZf8YxnuKGfiVo0HnagV+SPORPeBnQ67Rz0JX4Jy7HLMDd+6 g8qS4VedI6ZdYbSS7rSyXGCR5ukL5O73zfa9WW6wkpQJ8lx0h/RV3NwELVpKyeG6 +8iuvJsJHXZEsGPHkvpGUT1ezMl7wQXL6CaZylDQV5aVADuER6DMrMd5NEQSGa9r fmLjQ61XKwt4A1PwBXNTQeX1JUVwWTfeih4A2tBYjbt+Qs20pL0fJ9wK3+G3IydY q9ETnbPFaqcB0aRvGFkqdPH+89QX968t2ftwun/7bUElrQtRdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMY12tDFLRUVA/nnqPwF5qk9WeIZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNDJkMzM5MjItYTJkNi0z NWI2LTkwZDktODg1MGI0OWI0ZjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABGsBF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALmFz9IVYvQ+RaYZb/jdgl9agHEPvGIMQMnCFRbBBQWmM0tKTB+P z7ktbZNzR+bwzHmsAr7QZB1ju6DQaJJgyQjRTTbiIzgp5QijyKx5NELkuxInfn7J Kobe9N5kfc4LwmFZhyrp2YL49WTnxI7/24eCoBicWHD0nvdTW6ocFSYuJI+jmhkU 4MHatpg0qZw7qTdBxPTLenh170Pf3vTbZypeJ0wztrwk1hFiXrZp5Soa/P/Ddr/M HSjAoIdQJQCFVNVUMSTTYaO3Qa3ied8p5XA9YVDZ2dWyOFDszaret34izNKMQ9DH gWHe5HRWZ+DLOpevkhEWDGr48cHLW1kMMt4= -----END CERTIFICATE-----Generated at Thu Apr 3 02:46:41 2025 by rpki-client