$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/e234c5cf-6ad7-350b-9018-aeef40195ca6.roa File: e234c5cf-6ad7-350b-9018-aeef40195ca6.roa (raw, json) Hash identifier: F4HSD+IH3g9rU4h3VC0cwyDXu6485cOvUzzotfvWw9k= Subject key identifier: 03:01:B1:91:3F:AE:8E:99:1E:FA:60:59:41:D0:AA:07:03:59:2D:B4 Certificate issuer: /CN=89dfa952-929a-4c50-a372-96882b2b33e2 Certificate serial: 010D0C9F432858494B641C76A9EDEF862D071E80 Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/e234c5cf-6ad7-350b-9018-aeef40195ca6.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 17 IP address blocks: 2607:ac80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:1c:76:a9:ed:ef:86:2d:07:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=4baf0349-a5c9-4f4c-946a-69edba9dcd97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:80:8d:ae:a0:5d:0d:16:2f:25:a8:21:0f:dd: 56:6a:03:44:29:8a:f2:1b:c2:75:b4:7f:0b:9d:c0: ff:65:71:be:1a:7c:1e:94:be:42:5b:ae:f4:5c:cc: 9a:91:76:6e:27:cf:84:f3:fb:48:82:0d:25:fc:45: b2:44:a3:92:4e:d2:89:eb:0b:3d:ca:92:b4:e2:e7: 00:34:df:b3:2b:eb:82:1c:de:d6:d0:5d:7a:d0:ae: e0:50:d4:47:c6:67:c7:f8:d8:34:a7:14:65:d0:cb: 06:61:87:1a:8d:f4:a8:5a:cc:74:3f:38:6d:70:60: 2b:05:f0:30:41:76:03:ce:7c:89:d2:8d:fc:68:c2: 56:24:b3:9a:15:3e:1e:88:51:3b:43:fb:1e:9f:6b: 10:63:0c:57:4c:71:6e:66:fa:d0:20:e3:1d:44:86: 86:e9:a1:a8:f4:28:73:43:25:34:d3:fa:8c:e9:87: 73:5b:28:56:3e:e2:39:c4:71:93:6f:95:c1:89:0e: 0c:eb:89:e0:9c:48:c7:e2:99:df:0e:b0:12:6f:a9: c1:8e:f4:78:f5:14:a8:4d:b5:e4:96:89:66:70:c7: dc:39:2f:ee:e3:2d:b1:07:2a:11:69:f7:3f:ba:7f: ee:ae:0e:95:5f:4c:11:96:49:0f:ac:da:33:aa:71: d5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:01:B1:91:3F:AE:8E:99:1E:FA:60:59:41:D0:AA:07:03:59:2D:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/e234c5cf-6ad7-350b-9018-aeef40195ca6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl X509v3 Authority Key Identifier: keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer sbgp-ipAddrBlock: critical IPv6: 2607:ac80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:14:60:f9:2b:44:86:27:2b:62:3e:c2:e7:c8:58:12:b7:48: 75:b0:75:ec:21:92:09:75:32:04:94:96:0c:f4:f1:32:f4:46: 77:79:a7:81:42:2a:64:d6:79:c2:5c:45:04:5b:32:e1:0e:b5: e5:f6:bd:13:75:a0:ef:ea:37:16:fb:7c:ba:c9:f8:86:2c:5e: e1:13:f4:b0:c0:e4:66:ab:d4:ec:e1:82:3d:38:1a:69:1a:c5: 53:32:02:0f:ff:c6:d1:8e:54:45:d3:a9:ce:ff:6f:99:aa:5e: a9:92:65:9b:0d:9d:86:69:79:a8:f2:28:e5:30:ab:ec:57:53: 6e:39:4b:39:e4:0e:7b:4a:ef:ac:54:26:ba:b3:0b:64:1f:36: 52:66:71:8c:6a:a6:a9:9c:ac:bb:9c:16:66:58:19:1f:fd:d0: 5f:3d:06:04:bb:0f:24:ed:74:3c:e2:55:23:eb:43:60:9c:e4: 25:da:2b:eb:89:a9:29:f9:4b:1c:5f:d6:de:e6:29:22:2e:95: d1:db:58:ec:d2:5e:bc:2a:22:3a:71:07:e0:15:b3:09:b7:24: 90:9e:40:ac:68:eb:a1:77:32:20:d5:b1:3a:a5:72:66:f1:74: d1:09:1e:ac:34:f3:86:7e:08:f5:ed:d6:7c:9e:ac:30:21:eb: fa:09:7e:b4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElLZBx2qe3vhi0HHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlkZmE5NTItOTI5YS00YzUwLWEzNzItOTY4ODJiMmIz M2UyMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk NGJhZjAzNDktYTVjOS00ZjRjLTk0NmEtNjllZGJhOWRjZDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYCNrqBdDRYvJaghD91WagNEKYryG8J1tH8L ncD/ZXG+GnwelL5CW670XMyakXZuJ8+E8/tIgg0l/EWyRKOSTtKJ6ws9ypK04ucA NN+zK+uCHN7W0F160K7gUNRHxmfH+Ng0pxRl0MsGYYcajfSoWsx0PzhtcGArBfAw QXYDznyJ0o38aMJWJLOaFT4eiFE7Q/sen2sQYwxXTHFuZvrQIOMdRIaG6aGo9Chz QyU00/qM6YdzWyhWPuI5xHGTb5XBiQ4M64ngnEjH4pnfDrASb6nBjvR49RSoTbXk lolmcMfcOS/u4y2xByoRafc/un/urg6VX0wRlkkPrNozqnHVSwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAMBsZE/ro6ZHvpgWUHQqgcDWS20MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWRm YTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4MmIyYjMzZTIvZTIzNGM1Y2YtNmFkNy0z NTBiLTkwMTgtYWVlZjQwMTk1Y2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlkZmE5NTItOTI5YS00YzUwLWEz NzItOTY4ODJiMmIzM2UyLzg5ZGZhOTUyLTkyOWEtNGM1MC1hMzcyLTk2ODgyYjJi MzNlMi5jcmwwHwYDVR0jBBgwFoAUOasMnuRd+CUK34yFXdjssScnYpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWRmYTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4 MmIyYjMzZTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgesgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBIFGD5K0SGJytiPsLnyFgSt0h1sHXsIZIJdTIElJYM9PEy9EZ3eaeB Qipk1nnCXEUEWzLhDrXl9r0TdaDv6jcW+3y6yfiGLF7hE/SwwORmq9Ts4YI9OBpp GsVTMgIP/8bRjlRF06nO/2+Zql6pkmWbDZ2GaXmo8ijlMKvsV1NuOUs55A57Su+s VCa6swtkHzZSZnGMaqapnKy7nBZmWBkf/dBfPQYEuw8k7XQ84lUj60NgnOQl2ivr iakp+UscX9be5ikiLpXR21js0l68KiI6cQfgFbMJtySQnkCsaOuhdzIg1bE6pXJm 8XTRCR6sNPOGfgj17dZ8nqwwIev6CX60 -----END CERTIFICATE-----Generated at Tue Apr 8 14:52:13 2025 by rpki-client