$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/47731c14-7007-3efe-8b97-b32fd08f625e.roa File: 47731c14-7007-3efe-8b97-b32fd08f625e.roa (raw, json) Hash identifier: moHswNO3FfcFJ2YOHChlNFpmdOPCbuu5QtbGPcXCYtU= Subject key identifier: 17:7F:B5:B7:A1:07:AA:34:A7:1F:19:33:2F:E8:85:40:BC:6F:23:A1 Certificate issuer: /CN=a7840f46-b135-4a45-8c47-daede4b0b707 Certificate serial: 010D0C9F43285849301E9C03B6F4322F6098D080 Authority key identifier: 91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/47731c14-7007-3efe-8b97-b32fd08f625e.roa Signing time: Fri 14 Mar 2025 18:34:18 +0000 ROA not before: Fri 14 Mar 2025 18:34:18 +0000 ROA not after: Thu 12 Jun 2025 18:34:18 +0000 asID: 12213 IP address blocks: 2604:7ac0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:1e:9c:03:b6:f4:32:2f:60:98:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7840f46-b135-4a45-8c47-daede4b0b707 Validity Not Before: Mar 14 18:34:18 2025 GMT Not After : Jun 12 18:34:18 2025 GMT Subject: CN=aa7e604b-9d91-4213-a32e-efcc99fdc353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3b:37:86:eb:b7:33:31:ea:99:a0:4e:95:e6: 40:9b:d0:fe:21:19:06:43:2c:e3:a6:9a:5a:21:7e: 51:62:0b:75:bb:c3:4b:cb:a9:5d:95:aa:ab:8b:d2: e2:22:25:98:32:87:60:b0:27:5c:91:50:a3:b6:99: 86:a6:31:f5:50:32:d3:14:c9:34:c0:b8:70:ea:34: 94:75:ee:20:11:7b:0e:10:1a:28:e5:f4:93:08:02: ec:2f:fb:06:90:2b:75:f9:98:85:7f:4f:58:e8:89: f1:65:79:2f:2a:ed:fe:2a:60:e6:0e:c5:19:59:c7: f8:d6:5d:ed:ec:59:2a:9b:9d:4e:51:55:2a:a4:64: 3f:6f:b9:dd:a3:ea:23:d0:1d:6f:65:b8:b4:d5:a6: 28:09:d1:56:14:c7:ea:e1:36:ba:89:7a:46:d8:c4: 70:fa:50:82:a3:0d:a2:87:3b:69:59:a0:49:63:e7: 15:1d:70:b2:d5:3a:9e:0e:6c:dc:eb:b4:f0:b9:7c: 00:c9:7d:f7:84:84:0c:73:20:d7:3b:f0:2e:c7:28: 64:4f:d4:17:8e:c3:62:ab:cc:c9:5b:69:ac:96:15: 23:ad:ea:f0:64:86:17:55:96:a9:8c:23:62:96:ca: f1:86:de:16:61:72:11:08:b5:7e:48:59:f1:cb:c7: 30:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:7F:B5:B7:A1:07:AA:34:A7:1F:19:33:2F:E8:85:40:BC:6F:23:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/47731c14-7007-3efe-8b97-b32fd08f625e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.crl X509v3 Authority Key Identifier: keyid:91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer sbgp-ipAddrBlock: critical IPv6: 2604:7ac0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:43:12:50:e9:b1:b6:68:9f:e1:95:32:59:93:90:07:82:56: 61:66:5b:cb:c8:0a:05:92:b0:a8:79:92:b7:98:0d:f7:8b:b4: af:1c:c1:dd:ae:b6:fa:5d:f6:af:50:2c:89:be:c2:de:9d:e0: d9:63:e6:12:eb:a4:74:89:80:c0:5e:4c:65:a9:93:77:c8:00: 77:1e:81:fc:3e:df:61:a3:4c:5f:d6:64:12:98:bc:ef:7b:2d: 30:50:5e:73:a9:11:76:01:84:23:01:43:d1:a8:86:a0:6f:0d: d2:db:2b:d0:9b:53:c1:e8:21:8e:d8:3e:95:2e:73:cc:08:83: 26:98:a5:87:5e:ae:7c:fd:bb:16:a2:0b:54:8a:83:8b:d7:7f: 57:96:e9:cd:39:c5:d8:ef:77:23:ea:c0:f9:a2:01:e2:ae:7e: 1e:10:e7:7a:50:bb:af:02:75:10:41:1f:dc:81:08:70:7b:2d: 32:44:65:a5:ed:9f:1c:bb:7d:26:fe:b4:b2:3b:71:ab:02:74: 6c:69:d4:d2:6a:56:9c:f3:5a:c7:57:cc:0c:d7:64:cd:b7:23: eb:25:83:7d:82:6d:a6:ce:46:75:33:10:03:c5:d1:d2:63:61: 9f:b6:ad:1f:35:4b:b5:48:d4:26:95:f9:11:56:7a:62:7f:30: e3:90:4e:1f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkwHpwDtvQyL2CY0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc4NDBmNDYtYjEzNS00YTQ1LThjNDctZGFlZGU0YjBi NzA3MB4XDTI1MDMxNDE4MzQxOFoXDTI1MDYxMjE4MzQxOFowLzEtMCsGA1UEAxMk YWE3ZTYwNGItOWQ5MS00MjEzLWEzMmUtZWZjYzk5ZmRjMzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDs3huu3MzHqmaBOleZAm9D+IRkGQyzjpppa IX5RYgt1u8NLy6ldlaqri9LiIiWYModgsCdckVCjtpmGpjH1UDLTFMk0wLhw6jSU de4gEXsOEBoo5fSTCALsL/sGkCt1+ZiFf09Y6InxZXkvKu3+KmDmDsUZWcf41l3t 7Fkqm51OUVUqpGQ/b7ndo+oj0B1vZbi01aYoCdFWFMfq4Ta6iXpG2MRw+lCCow2i hztpWaBJY+cVHXCy1TqeDmzc67TwuXwAyX33hIQMcyDXO/AuxyhkT9QXjsNiq8zJ W2mslhUjrerwZIYXVZapjCNilsrxht4WYXIRCLV+SFnxy8cwCQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBd/tbehB6o0px8ZMy/ohUC8byOhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0 MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVkZTRiMGI3MDcvNDc3MzFjMTQtNzAwNy0z ZWZlLThiOTctYjMyZmQwOGY2MjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTc4NDBmNDYtYjEzNS00YTQ1LThj NDctZGFlZGU0YjBiNzA3L2E3ODQwZjQ2LWIxMzUtNGE0NS04YzQ3LWRhZWRlNGIw YjcwNy5jcmwwHwYDVR0jBBgwFoAUkXwZ6lZt7d6ge9kx5g0uw1oWE84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNzg0MGY0Ni1iMTM1LTRhNDUtOGM0Ny1kYWVk ZTRiMGI3MDcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgR6wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCpQxJQ6bG2aJ/hlTJZk5AHglZhZlvLyAoFkrCoeZK3mA33i7SvHMHd rrb6XfavUCyJvsLeneDZY+YS66R0iYDAXkxlqZN3yAB3HoH8Pt9ho0xf1mQSmLzv ey0wUF5zqRF2AYQjAUPRqIagbw3S2yvQm1PB6CGO2D6VLnPMCIMmmKWHXq58/bsW ogtUioOL139XlunNOcXY73cj6sD5ogHirn4eEOd6ULuvAnUQQR/cgQhwey0yRGWl 7Z8cu30m/rSyO3GrAnRsadTSalac81rHV8wM12TNtyPrJYN9gm2mzkZ1MxADxdHS Y2Gftq0fNUu1SNQmlfkRVnpifzDjkE4f -----END CERTIFICATE-----Generated at Sat Apr 12 00:16:32 2025 by rpki-client