$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/1a7b2f39-05ef-347b-a065-102d00f21699.roa File: 1a7b2f39-05ef-347b-a065-102d00f21699.roa (raw, json) Hash identifier: zoKP7eFY8qyB5o3hFW7xUd+1gr8bfppLTokPR8iHbyw= Subject key identifier: 36:F0:14:91:28:49:63:BE:CA:D8:62:19:CD:E7:0B:FD:F1:96:92:20 Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Certificate serial: 010D0C9F4328584910E17F194D5FED4CB2D2F740 Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/1a7b2f39-05ef-347b-a065-102d00f21699.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 54994 IP address blocks: 2607:3f40:ff1d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:7f:19:4d:5f:ed:4c:b2:d2:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=44bab1ed-f230-40d6-a9e5-cf62a081d91a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:02:fc:cc:da:19:eb:b3:37:37:1d:5e:60:73: d1:c4:ca:50:fc:70:a0:4f:eb:75:1c:50:a9:07:c3: 8c:ae:18:d7:6c:95:62:e3:cb:af:fc:f7:62:39:ca: 54:3c:9d:ac:3c:2b:71:4f:7f:73:26:74:20:f7:19: 10:73:27:4b:c5:1d:7a:b8:9a:34:30:a4:c7:be:9c: b2:e4:6e:33:af:e8:80:f0:12:85:0e:3e:58:3c:97: 8e:a0:ba:6f:98:1a:7a:1b:48:02:e7:d5:52:f8:ca: 2e:c0:a9:8b:d1:8f:47:a1:6b:cb:9a:f0:a3:1e:32: 35:60:eb:b9:be:28:4b:f0:4b:44:76:c1:9a:20:cc: b1:c8:26:58:c6:93:73:e2:10:d9:ca:d3:48:72:cd: 84:10:b6:e6:c1:41:d5:3d:c9:f6:00:ee:67:f1:0b: 32:d9:3d:94:9c:d4:14:b0:42:53:9f:ef:67:f3:e7: d5:94:60:a2:75:d2:9c:d8:d3:0c:88:45:57:d8:ec: 61:71:dd:c0:91:4d:4f:65:d1:64:66:ab:9e:f6:ff: 15:92:53:b6:e7:ff:b9:ac:cf:46:79:9f:1d:4d:e6: da:51:b8:6d:9a:bd:2a:f3:ed:ff:46:57:06:16:e9: 9f:f5:68:76:04:21:29:ed:d0:34:3f:98:13:12:70: 5e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F0:14:91:28:49:63:BE:CA:D8:62:19:CD:E7:0B:FD:F1:96:92:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/1a7b2f39-05ef-347b-a065-102d00f21699.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl X509v3 Authority Key Identifier: keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer sbgp-ipAddrBlock: critical IPv6: 2607:3f40:ff1d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:67:fc:30:c6:bd:45:ef:4a:4d:e3:fa:60:0b:a5:77:25:75: b9:44:87:f3:c1:1d:5b:ce:75:c0:86:ab:46:db:18:39:52:83: c3:5f:af:33:bd:c5:d4:cf:85:8d:8d:eb:c2:ac:bf:92:d3:79: 83:1e:d0:3d:c9:d2:f3:83:6f:85:c4:fb:64:9a:b2:a5:02:c8: 57:91:40:f3:b8:f4:35:d1:f3:c9:e5:d2:be:ab:c5:76:55:5d: d2:39:d1:52:a4:32:02:12:a0:f3:27:af:39:1e:63:79:a6:17: 23:52:44:2f:8f:c4:89:b0:6e:e2:1f:32:0e:71:0f:e9:02:2a: 63:c2:c3:da:eb:ec:7e:7b:70:49:9f:31:48:2f:69:06:f3:2c: 12:cf:d4:87:d6:c0:e3:90:23:00:9e:40:ba:31:55:d9:81:49: 50:03:bf:61:57:81:4f:8c:1c:7c:09:bd:42:3b:80:2d:cf:54: f5:94:cd:7a:1e:c0:ad:37:cb:05:0f:04:95:5a:98:77:d8:d4: c5:ce:9f:f7:59:8e:90:e4:c4:1c:40:c9:f5:dd:dc:fe:d6:49: ca:78:37:14:2d:cb:85:57:0c:8e:f8:9f:ce:99:a9:a1:72:e3: 41:68:22:e6:96:6e:3e:d9:5a:1b:64:77:db:06:49:08:5e:5e: f5:86:bd:e2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkQ4X8ZTV/tTLLS90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy ZDFiMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk NDRiYWIxZWQtZjIzMC00MGQ2LWE5ZTUtY2Y2MmEwODFkOTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgL8zNoZ67M3Nx1eYHPRxMpQ/HCgT+t1HFCp B8OMrhjXbJVi48uv/PdiOcpUPJ2sPCtxT39zJnQg9xkQcydLxR16uJo0MKTHvpyy 5G4zr+iA8BKFDj5YPJeOoLpvmBp6G0gC59VS+MouwKmL0Y9HoWvLmvCjHjI1YOu5 vihL8EtEdsGaIMyxyCZYxpNz4hDZytNIcs2EELbmwUHVPcn2AO5n8Qsy2T2UnNQU sEJTn+9n8+fVlGCiddKc2NMMiEVX2Oxhcd3AkU1PZdFkZque9v8VklO25/+5rM9G eZ8dTebaUbhtmr0q8+3/RlcGFumf9Wh2BCEp7dA0P5gTEnBeNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDbwFJEoSWO+ythiGc3nC/3xlpIgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMWE3YjJmMzktMDVlZi0z NDdiLWEwNjUtMTAyZDAwZjIxNjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw YWY5MDJkMWIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgc/QP8d MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIRn/DDGvUXvSk3j+mALpXcldblEh/PBHVvOdcCGq0bbGDlSg8Nf rzO9xdTPhY2N68Ksv5LTeYMe0D3J0vODb4XE+2SasqUCyFeRQPO49DXR88nl0r6r xXZVXdI50VKkMgISoPMnrzkeY3mmFyNSRC+PxImwbuIfMg5xD+kCKmPCw9rr7H57 cEmfMUgvaQbzLBLP1IfWwOOQIwCeQLoxVdmBSVADv2FXgU+MHHwJvUI7gC3PVPWU zXoewK03ywUPBJVamHfY1MXOn/dZjpDkxBxAyfXd3P7WScp4NxQty4VXDI74n86Z qaFy40FoIuaWbj7ZWhtkd9sGSQheXvWGveI= -----END CERTIFICATE-----Generated at Sat Apr 5 06:31:34 2025 by rpki-client