$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa File: 3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa (raw, json) Hash identifier: 0o8B1JOY77J+7TrmJaDMF9niHay1A2CT8A3JSZ1fnjg= Subject key identifier: B7:DB:C3:9B:AA:05:6B:68:31:79:50:CC:74:F3:08:47:2C:45:03:0B Certificate issuer: /CN=32e58881-6422-4e0d-9578-7c256d9f70bc Certificate serial: 010D0C9F43285848E006527A7E14F2EEA06E6200 Authority key identifier: F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 398191 IP address blocks: 2607:c7c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:52:7a:7e:14:f2:ee:a0:6e:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e58881-6422-4e0d-9578-7c256d9f70bc Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=dc072b37-e3f9-477e-aa69-b44c4781d4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:35:00:06:df:f3:bd:85:00:1d:a6:9c:d5:08: a1:ea:af:d2:d3:7d:e1:b7:06:9a:a0:d4:a4:82:e0: a5:f1:71:30:be:9b:56:64:6c:cc:23:f0:1f:be:90: 3a:cb:2b:f3:ae:de:80:b2:76:8b:70:fe:9e:34:67: 56:5a:68:c9:b8:3c:df:6e:fc:5c:9a:fe:10:c2:45: 68:75:89:ff:c1:5b:9c:11:24:77:86:d9:d6:4a:f1: eb:60:8c:88:ec:12:fe:39:ea:ce:6e:64:30:65:e3: 19:34:1b:c2:29:2f:fd:6d:6c:ad:21:20:53:9b:59: 4c:bf:29:85:7a:17:54:10:a8:b0:02:e2:3b:68:be: 57:54:d3:f5:97:14:27:ea:9e:fa:2b:4c:9a:2a:8c: d9:80:ce:c1:f4:c0:c1:5d:e3:cd:24:25:ac:e7:da: f5:c5:98:50:aa:bc:e4:12:a2:c8:ea:42:c0:70:44: be:b6:99:da:46:67:cc:d9:2c:12:1f:ec:9d:39:82: b1:ba:80:0f:f6:8f:35:4b:c7:28:db:bc:b8:3f:0f: bd:ae:87:61:f0:9c:35:30:2a:ef:98:ac:1d:a1:a3: b2:39:2a:ce:5b:25:c0:3e:28:bb:a1:52:10:7e:e4: d9:e8:a3:db:7e:e4:d4:6a:b2:12:29:84:0c:13:3c: 90:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:DB:C3:9B:AA:05:6B:68:31:79:50:CC:74:F3:08:47:2C:45:03:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl X509v3 Authority Key Identifier: keyid:F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer sbgp-ipAddrBlock: critical IPv6: 2607:c7c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:82:37:f6:b5:b2:96:e2:9a:e6:24:b1:c8:01:1b:78:c2:51: 12:79:14:e0:ce:4a:d7:79:b4:f9:c3:fb:e7:57:92:6f:75:eb: 1e:b1:3d:83:c9:62:20:33:cb:e7:7b:46:7f:ea:80:96:5f:16: 82:8b:2c:db:ab:f7:7e:d2:b3:19:4e:09:6d:6e:09:fd:47:76: 03:33:b1:d2:81:ba:2e:5a:ca:17:9c:06:43:8b:ff:17:cb:10: 0e:4c:4b:7f:3f:fb:6e:2a:05:c7:71:5d:00:ce:e5:f2:df:1f: 5a:1f:db:98:33:3a:17:20:0f:77:ec:64:c2:71:ee:74:25:0d: 0a:d3:78:f0:4d:2f:86:ac:4e:41:ea:d8:ac:83:29:22:2c:38: e2:c9:f3:c5:d1:48:e8:f7:a2:43:bb:b4:ce:e0:cc:b7:f0:b5: a0:3e:9b:d6:32:c0:0d:fb:a7:27:48:d4:95:e0:e6:fc:aa:1c: b1:12:89:fc:21:3d:64:ea:31:79:3a:1f:aa:6c:19:f4:8f:cd: 0a:30:b4:cd:36:37:a6:31:13:e4:cd:61:df:5e:a9:56:d2:b1: 2d:9c:e3:16:c1:de:93:a2:69:64:9e:26:e4:90:d2:9e:3c:1f: 22:33:4c:1c:51:ec:9c:e1:43:43:a8:1e:03:4e:36:eb:b9:9d: e4:e8:a8:30 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjgBlJ6fhTy7qBuYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlNTg4ODEtNjQyMi00ZTBkLTk1NzgtN2MyNTZkOWY3 MGJjMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk ZGMwNzJiMzctZTNmOS00NzdlLWFhNjktYjQ0YzQ3ODFkNGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTUABt/zvYUAHaac1Qih6q/S033htwaaoNSk guCl8XEwvptWZGzMI/AfvpA6yyvzrt6AsnaLcP6eNGdWWmjJuDzfbvxcmv4QwkVo dYn/wVucESR3htnWSvHrYIyI7BL+OerObmQwZeMZNBvCKS/9bWytISBTm1lMvymF ehdUEKiwAuI7aL5XVNP1lxQn6p76K0yaKozZgM7B9MDBXePNJCWs59r1xZhQqrzk EqLI6kLAcES+tpnaRmfM2SwSH+ydOYKxuoAP9o81S8co27y4Pw+9rodh8Jw1MCrv mKwdoaOyOSrOWyXAPii7oVIQfuTZ6KPbfuTUarISKYQMEzyQvQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLfbw5uqBWtoMXlQzHTzCEcsRQMLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMmU1 ODg4MS02NDIyLTRlMGQtOTU3OC03YzI1NmQ5ZjcwYmMvM2E2ZTc1YTEtYzljMS0z Y2U4LTg3MDktNjc1OGNmYTFlYWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzJlNTg4ODEtNjQyMi00ZTBkLTk1 NzgtN2MyNTZkOWY3MGJjLzMyZTU4ODgxLTY0MjItNGUwZC05NTc4LTdjMjU2ZDlm NzBiYy5jcmwwHwYDVR0jBBgwFoAU83rr+TDV35aceSJR1H1McDXM7c8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMmU1ODg4MS02NDIyLTRlMGQtOTU3OC03YzI1 NmQ5ZjcwYmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfHwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBSgjf2tbKW4prmJLHIARt4wlESeRTgzkrXebT5w/vnV5JvdesesT2D yWIgM8vne0Z/6oCWXxaCiyzbq/d+0rMZTgltbgn9R3YDM7HSgbouWsoXnAZDi/8X yxAOTEt/P/tuKgXHcV0AzuXy3x9aH9uYMzoXIA937GTCce50JQ0K03jwTS+GrE5B 6tisgykiLDjiyfPF0Ujo96JDu7TO4My38LWgPpvWMsAN+6cnSNSV4Ob8qhyxEon8 IT1k6jF5Oh+qbBn0j80KMLTNNjemMRPkzWHfXqlW0rEtnOMWwd6TomlknibkkNKe PB8iM0wcUeyc4UNDqB4DTjbruZ3k6Kgw -----END CERTIFICATE-----Generated at Sun Apr 6 07:17:47 2025 by rpki-client