$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/e65c3998-530f-3931-8b1b-cb7955a18248.roa File: e65c3998-530f-3931-8b1b-cb7955a18248.roa (raw, json) Hash identifier: +rIpwqrrZevRmAvKKQ1jMpxsQTTvzRIhF/ZNlMqovVE= Subject key identifier: 77:3C:03:30:33:DF:97:23:2E:DE:9B:FC:A3:52:4F:D7:68:91:DD:1E Certificate issuer: /CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Certificate serial: 010D0C9F43285849806F21C7A3420195BB0FB700 Authority key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/e65c3998-530f-3931-8b1b-cb7955a18248.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 29909 IP address blocks: 2607:2a00::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:21:c7:a3:42:01:95:bb:0f:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=fb44e65d-419e-447a-bf7f-da774c40d6ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3c:f2:2f:d0:98:21:f2:a5:30:6f:8a:56:67: f3:7a:4c:eb:66:34:a4:3a:9c:33:83:f8:ac:40:0d: f2:bf:63:ce:a4:70:6f:6b:4c:e5:89:0c:2a:6e:8b: 9e:c7:f6:25:46:6f:ba:a6:4f:80:f3:c1:ae:78:24: 21:1e:d0:13:5c:06:86:4e:70:d0:66:0e:cd:07:8d: 9d:e8:dc:68:42:57:2b:93:b2:0e:ba:fa:0b:7a:30: 43:8a:7f:df:00:ca:a0:97:d8:43:c1:72:79:00:ce: 9f:af:f3:78:5c:ea:15:f2:d1:3d:0f:39:35:75:c2: ea:5a:3b:55:57:48:27:26:df:54:4f:30:04:dd:7a: 88:15:20:40:9f:e9:5e:db:ba:15:7d:4f:d2:79:3f: ab:33:80:09:96:2c:09:65:a9:95:a0:5d:b6:00:3b: 47:eb:59:b1:fa:88:7d:0d:0c:f3:7a:23:79:94:aa: fe:0b:7c:b5:90:4d:c2:b0:01:bb:6d:bb:dc:0f:75: f8:bd:05:27:25:4e:84:3e:2e:10:d1:0e:1e:6e:26: 29:64:d6:b1:d3:aa:0a:d4:90:1b:75:45:70:47:2d: cc:7d:3d:02:2f:02:f9:61:b2:f3:96:98:fa:3e:0c: a7:c5:e2:3c:85:95:27:90:d4:92:6d:ce:6a:ea:81: 3d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3C:03:30:33:DF:97:23:2E:DE:9B:FC:A3:52:4F:D7:68:91:DD:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/e65c3998-530f-3931-8b1b-cb7955a18248.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl X509v3 Authority Key Identifier: keyid:BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer sbgp-ipAddrBlock: critical IPv6: 2607:2a00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:4b:51:78:72:a6:f9:c8:66:47:36:38:23:b1:06:f4:48:3b: 1a:6b:82:21:82:69:41:cb:0f:10:5d:b6:0e:d2:30:a3:cc:4a: 3d:91:08:27:17:7e:7d:43:82:1e:dc:c4:f0:7c:b5:1e:fa:83: c4:c0:22:55:05:2c:22:f0:31:44:93:2b:4c:31:a7:13:a6:98: 00:98:bf:06:0d:78:5c:17:9e:fa:4a:3d:43:7d:45:81:41:12: ea:c9:9e:1b:68:e3:2e:81:39:70:be:32:66:6d:ec:5d:26:71: 1a:7b:a3:bd:a0:b7:a2:e9:dd:aa:b8:aa:60:71:88:97:9d:d1: 76:bd:c3:e3:76:f6:51:0d:19:28:53:0d:68:7c:8a:78:c9:11: ce:ab:58:12:af:4d:7e:e5:2a:94:15:e4:ce:d9:78:e5:1b:d8: 89:c7:f6:e5:63:1f:a2:91:b5:48:d3:5e:be:24:45:4c:d6:e0: 0d:13:3f:6e:56:cf:69:5d:a0:03:19:80:83:ec:8a:bc:ca:ab: 21:63:56:8c:8b:5b:f0:68:fe:d3:19:2d:cf:68:33:a4:a7:c0: 62:13:ea:58:c4:4f:29:ab:09:b5:25:8f:e3:41:d9:60:68:6f: 59:46:9c:0c:9d:6a:ee:16:a9:29:bb:7a:22:49:b4:88:07:60: 41:54:b8:73 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmAbyHHo0IBlbsPtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBjNDNiNzUtMTA2Zi00OWU3LWJmM2EtNGFlYjk0NTY2 ZTkwMB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk ZmI0NGU2NWQtNDE5ZS00NDdhLWJmN2YtZGE3NzRjNDBkNmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTzyL9CYIfKlMG+KVmfzekzrZjSkOpwzg/is QA3yv2POpHBva0zliQwqbouex/YlRm+6pk+A88GueCQhHtATXAaGTnDQZg7NB42d 6NxoQlcrk7IOuvoLejBDin/fAMqgl9hDwXJ5AM6fr/N4XOoV8tE9Dzk1dcLqWjtV V0gnJt9UTzAE3XqIFSBAn+le27oVfU/SeT+rM4AJliwJZamVoF22ADtH61mx+oh9 DQzzeiN5lKr+C3y1kE3CsAG7bbvcD3X4vQUnJU6EPi4Q0Q4ebiYpZNax06oK1JAb dUVwRy3MfT0CLwL5YbLzlpj6PgynxeI8hZUnkNSSbc5q6oE9gwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHc8AzAz35cjLt6b/KNST9dokd0eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0 M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWViOTQ1NjZlOTAvZTY1YzM5OTgtNTMwZi0z OTMxLThiMWItY2I3OTU1YTE4MjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBjNDNiNzUtMTA2Zi00OWU3LWJm M2EtNGFlYjk0NTY2ZTkwL2IwYzQzYjc1LTEwNmYtNDllNy1iZjNhLTRhZWI5NDU2 NmU5MC5jcmwwHwYDVR0jBBgwFoAUu0SUXwFyTe65Irjq0C6iB25OIzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGM0M2I3NS0xMDZmLTQ5ZTctYmYzYS00YWVi OTQ1NjZlOTAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcqADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQACS1F4cqb5yGZHNjgjsQb0SDsaa4IhgmlByw8QXbYO0jCjzEo9kQgn F359Q4Ie3MTwfLUe+oPEwCJVBSwi8DFEkytMMacTppgAmL8GDXhcF576Sj1DfUWB QRLqyZ4baOMugTlwvjJmbexdJnEae6O9oLei6d2quKpgcYiXndF2vcPjdvZRDRko Uw1ofIp4yRHOq1gSr01+5SqUFeTO2XjlG9iJx/blYx+ikbVI016+JEVM1uANEz9u Vs9pXaADGYCD7Iq8yqshY1aMi1vwaP7TGS3PaDOkp8BiE+pYxE8pqwm1JY/jQdlg aG9ZRpwMnWruFqkpu3oiSbSIB2BBVLhz -----END CERTIFICATE-----Generated at Sat Apr 19 15:24:37 2025 by rpki-client