$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/c322bcb2-1ed8-3132-999a-b219e9f6f9a7.roa File: c322bcb2-1ed8-3132-999a-b219e9f6f9a7.roa (raw, json) Hash identifier: juiaHWRP0WsyW6KqrxM6FjVCMa+XDv69UpXozC9wtMo= Subject key identifier: EB:D2:83:18:ED:E3:05:C2:F0:96:44:7D:F6:0A:FF:7C:81:F8:30:59 Certificate issuer: /CN=3278e708-d128-4790-a8e3-1e0f4a1a6f4a Certificate serial: 010D0C9F432858493B45CF8E2F56FF92B75313C0 Authority key identifier: 11:84:F2:33:1D:BB:25:29:F5:31:3A:68:B9:8F:19:FF:02:0A:EF:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/c322bcb2-1ed8-3132-999a-b219e9f6f9a7.roa Signing time: Tue 18 Mar 2025 18:27:11 +0000 ROA not before: Tue 18 Mar 2025 18:27:11 +0000 ROA not after: Mon 16 Jun 2025 18:27:11 +0000 asID: 25968 IP address blocks: 2620:7b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3b:45:cf:8e:2f:56:ff:92:b7:53:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3278e708-d128-4790-a8e3-1e0f4a1a6f4a Validity Not Before: Mar 18 18:27:11 2025 GMT Not After : Jun 16 18:27:11 2025 GMT Subject: CN=ee06049b-b0be-491c-9f3a-e91a9dca037c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:39:50:ec:82:fb:26:c2:71:2e:fb:24:a7:e4: 4a:37:55:ab:fb:07:7b:d3:5e:e8:80:60:e1:6b:e4: 68:c2:c6:5c:4e:29:db:e5:24:e8:e1:cd:ce:e5:14: 9d:0d:67:d1:ef:8c:cd:53:e2:ba:66:77:e3:5c:46: b6:13:05:7a:b1:35:1b:b5:af:12:bd:c1:01:16:47: b5:de:ea:c0:8a:50:11:f7:e4:28:f7:3c:2e:59:35: 9b:c1:48:df:c8:bc:68:8c:79:48:26:51:cb:6b:43: 4d:1b:d4:a7:2d:4d:d1:01:fb:95:aa:e4:d4:73:84: f9:4f:38:20:90:12:54:29:74:56:9d:cc:b1:5e:95: 9b:d6:09:d5:db:e7:b7:4b:7b:04:89:73:e9:78:8f: 54:8e:55:b3:04:b9:00:56:e3:0e:75:4d:44:e3:9d: 29:63:0b:22:99:18:90:af:86:e2:f7:af:f9:fe:0d: 3e:24:48:9c:d6:e0:f3:7d:64:06:f9:84:fd:14:a3: a7:3e:dd:c7:98:3d:e7:02:b7:5a:1f:49:63:d3:4b: 47:2f:a5:5b:12:da:41:33:32:38:7d:1d:b7:03:21: 5f:96:40:38:d7:0c:5a:29:e5:c7:22:3a:05:a8:18: 3d:fd:34:7d:8f:ee:2f:2f:7e:56:0b:51:b9:3c:66: a2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D2:83:18:ED:E3:05:C2:F0:96:44:7D:F6:0A:FF:7C:81:F8:30:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/c322bcb2-1ed8-3132-999a-b219e9f6f9a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.crl X509v3 Authority Key Identifier: keyid:11:84:F2:33:1D:BB:25:29:F5:31:3A:68:B9:8F:19:FF:02:0A:EF:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer sbgp-ipAddrBlock: critical IPv6: 2620:7b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:88:98:60:42:43:a9:32:a8:39:f3:1d:1f:ab:b0:94:80:3d: e4:74:c7:d3:d5:ef:5b:8f:04:f6:8c:c2:c1:75:70:1a:ea:42: 3f:7c:03:a1:3f:d5:aa:59:a3:9d:40:c9:f2:c0:3b:28:60:22: 54:e3:b8:c5:39:a0:19:64:36:e1:0b:e3:4d:f6:bd:8e:fc:7c: f0:b9:1d:5d:2c:72:2e:d6:d6:36:04:5f:da:ef:7e:c2:04:ce: d9:7d:20:01:21:85:cb:3f:04:7a:31:3c:2d:da:36:e6:de:d1: 3d:21:4c:5c:f6:6c:53:40:44:c7:4d:2e:91:97:9a:1f:08:c3: b4:e5:f8:30:4e:ce:0d:66:28:5a:9b:e9:ea:32:5a:b2:9d:ee: 01:f2:5c:17:23:d9:14:8c:18:4d:16:b2:4b:9f:3b:b7:25:12: 02:8e:5f:d6:bc:9c:6b:3a:b9:71:56:53:5f:72:4c:be:59:95: ad:78:9e:bf:b4:a5:f5:52:0a:8e:4e:1f:33:b2:6e:6e:06:a7: 35:8f:32:1f:4d:39:e5:60:60:f8:0d:7f:69:75:5b:f1:9c:ac: c5:01:44:d6:33:b6:8d:73:b6:bd:17:01:cc:a2:7e:62:6f:d9: df:90:13:22:0e:47:0e:c9:f5:9d:85:86:00:33:47:ef:1e:1d: 16:49:13:cc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk7Rc+OL1b/krdTE8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI3OGU3MDgtZDEyOC00NzkwLWE4ZTMtMWUwZjRhMWE2 ZjRhMB4XDTI1MDMxODE4MjcxMVoXDTI1MDYxNjE4MjcxMVowLzEtMCsGA1UEAxMk ZWUwNjA0OWItYjBiZS00OTFjLTlmM2EtZTkxYTlkY2EwMzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TlQ7IL7JsJxLvskp+RKN1Wr+wd7017ogGDh a+RowsZcTinb5STo4c3O5RSdDWfR74zNU+K6ZnfjXEa2EwV6sTUbta8SvcEBFke1 3urAilAR9+Qo9zwuWTWbwUjfyLxojHlIJlHLa0NNG9SnLU3RAfuVquTUc4T5Tzgg kBJUKXRWncyxXpWb1gnV2+e3S3sEiXPpeI9UjlWzBLkAVuMOdU1E450pYwsimRiQ r4bi96/5/g0+JEic1uDzfWQG+YT9FKOnPt3HmD3nArdaH0lj00tHL6VbEtpBMzI4 fR23AyFflkA41wxaKeXHIjoFqBg9/TR9j+4vL35WC1G5PGai0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOvSgxjt4wXC8JZEffYK/3yB+DBZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMjc4 ZTcwOC1kMTI4LTQ3OTAtYThlMy0xZTBmNGExYTZmNGEvYzMyMmJjYjItMWVkOC0z MTMyLTk5OWEtYjIxOWU5ZjZmOWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzI3OGU3MDgtZDEyOC00NzkwLWE4 ZTMtMWUwZjRhMWE2ZjRhLzMyNzhlNzA4LWQxMjgtNDc5MC1hOGUzLTFlMGY0YTFh NmY0YS5jcmwwHwYDVR0jBBgwFoAUEYTyMx27JSn1MTpouY8Z/wIK71YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMjc4ZTcwOC1kMTI4LTQ3OTAtYThlMy0xZTBm NGExYTZmNGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAewAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALeImGBCQ6kyqDnzHR+rsJSAPeR0x9PV71uPBPaMwsF1cBrqQj98 A6E/1apZo51AyfLAOyhgIlTjuMU5oBlkNuEL4032vY78fPC5HV0sci7W1jYEX9rv fsIEztl9IAEhhcs/BHoxPC3aNube0T0hTFz2bFNARMdNLpGXmh8Iw7Tl+DBOzg1m KFqb6eoyWrKd7gHyXBcj2RSMGE0WskufO7clEgKOX9a8nGs6uXFWU19yTL5Zla14 nr+0pfVSCo5OHzOybm4GpzWPMh9NOeVgYPgNf2l1W/GcrMUBRNYzto1ztr0XAcyi fmJv2d+QEyIORw7J9Z2FhgAzR+8eHRZJE8w= -----END CERTIFICATE-----Generated at Fri Apr 11 23:52:50 2025 by rpki-client