$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/86436d71-b41d-34e1-8919-0c89ddd24b27.roa File: 86436d71-b41d-34e1-8919-0c89ddd24b27.roa (raw, json) Hash identifier: yvCg/6IIpp/E4hDUApysKpPzdaGNrbs5/Kv/rbdHWMg= Subject key identifier: 9F:AB:19:52:B2:87:90:1D:1C:ED:67:27:E9:1E:C8:DF:0C:41:A9:85 Certificate issuer: /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Certificate serial: 010D0C9F432858494B6409A3EB59FDA7612870C0 Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/86436d71-b41d-34e1-8919-0c89ddd24b27.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 14618 IP address blocks: 2631:2000::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:09:a3:eb:59:fd:a7:61:28:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=36eb0818-5196-4409-a90b-e5de566217b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:19:12:75:3d:35:8e:e2:6b:40:f1:4d:d8:1e: f1:53:a1:aa:7f:8e:61:71:e0:bd:ea:97:c0:91:2e: a1:0a:d8:6e:7c:37:9f:54:ce:c8:cc:62:bf:a3:90: 94:25:02:1f:f3:11:5e:57:27:c6:c5:13:14:af:82: 9c:d5:63:06:e5:8d:aa:0b:ab:22:88:33:94:e7:a0: 1f:1e:97:ed:18:50:68:43:b1:88:f3:09:ca:a5:cf: ae:f2:a0:ed:f5:b9:2d:74:16:ee:44:50:f3:ea:f3: 5c:aa:83:e8:ea:c5:f3:10:05:b0:3e:89:d4:0c:ba: 4b:15:79:39:7f:c8:8f:79:b8:75:7a:29:4a:7a:39: 51:ba:7b:1c:23:0f:cb:08:5d:61:35:95:b1:8a:a4: 17:29:7a:cb:f8:0d:9e:23:46:52:c1:85:b4:31:f6: 64:ce:07:f1:c4:b7:2f:57:d6:e5:3d:b6:52:09:c3: 37:15:c1:c1:80:af:0c:1f:7a:a0:fd:c0:be:1a:91: 50:e8:65:a6:f1:2c:fd:58:49:7c:cd:b1:9f:da:0a: 35:97:e8:f2:45:da:d5:c3:98:b0:8e:1c:91:13:56: 94:f7:bd:51:10:1f:bf:91:ea:1c:d6:ab:5c:94:85: 5a:c2:01:2b:4d:2e:db:57:47:2c:d2:27:bb:44:4e: ad:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:AB:19:52:B2:87:90:1D:1C:ED:67:27:E9:1E:C8:DF:0C:41:A9:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/86436d71-b41d-34e1-8919-0c89ddd24b27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl X509v3 Authority Key Identifier: keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer sbgp-ipAddrBlock: critical IPv6: 2631:2000::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:0d:c4:27:2d:b0:9b:5f:88:35:24:36:15:12:1a:d2:34:99: 5c:97:91:71:1a:f4:4c:b1:34:f8:77:de:21:16:f7:85:f8:4c: dc:2e:8a:3a:5f:c4:3d:24:c0:b6:71:0e:d0:d5:6d:cd:b4:cf: ed:82:6c:69:2f:60:14:13:35:15:f5:41:ad:fc:70:a1:79:b1: 4e:f5:e9:f5:9b:76:c3:b3:51:7a:47:01:87:68:29:f7:d5:8b: 6d:49:25:a0:a3:52:0e:f4:b6:d9:a3:78:0e:ac:b1:0c:fb:1d: 8b:df:7a:a1:37:ac:6c:1b:3f:78:05:b8:24:46:0b:fe:c5:8c: 7c:e4:ae:3d:07:c8:47:c2:58:0d:a0:7a:2c:6f:d4:7a:64:e8: 33:b5:e7:cb:19:87:38:58:2f:a5:8a:3b:7e:13:e7:51:93:f3: 89:11:63:5d:32:fc:73:5b:41:be:6c:cf:43:5e:f4:c9:0c:87: 35:81:c3:2e:d5:73:a8:c9:b0:57:7b:a1:7f:9c:a5:bd:b7:3e: ec:81:f2:48:bd:6e:e5:db:30:2a:05:6d:4e:3c:0b:48:ae:95: 01:46:98:7a:a9:19:e8:a9:db:60:f8:58:99:97:53:f6:23:af: e7:e6:0f:82:1d:32:bc:a5:ef:a9:7d:4d:46:9f:a7:30:fd:a1: 39:2c:02:f7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElLZAmj61n9p2EocMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdmZDI1YTItMzA0MS00MzFkLWE2YTktYzQwOWI0Mjgz NWExMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MzZlYjA4MTgtNTE5Ni00NDA5LWE5MGItZTVkZTU2NjIxN2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRkSdT01juJrQPFN2B7xU6Gqf45hceC96pfA kS6hCthufDefVM7IzGK/o5CUJQIf8xFeVyfGxRMUr4Kc1WMG5Y2qC6siiDOU56Af HpftGFBoQ7GI8wnKpc+u8qDt9bktdBbuRFDz6vNcqoPo6sXzEAWwPonUDLpLFXk5 f8iPebh1eilKejlRunscIw/LCF1hNZWxiqQXKXrL+A2eI0ZSwYW0MfZkzgfxxLcv V9blPbZSCcM3FcHBgK8MH3qg/cC+GpFQ6GWm8Sz9WEl8zbGf2go1l+jyRdrVw5iw jhyRE1aU971REB+/keoc1qtclIVawgErTS7bV0cs0ie7RE6trwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ+rGVKyh5AdHO1nJ+keyN8MQamFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Zk MjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5YjQyODM1YTEvODY0MzZkNzEtYjQxZC0z NGUxLTg5MTktMGM4OWRkZDI0YjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmZDI1YTItMzA0MS00MzFkLWE2 YTktYzQwOWI0MjgzNWExL2M3ZmQyNWEyLTMwNDEtNDMxZC1hNmE5LWM0MDliNDI4 MzVhMS5jcmwwHwYDVR0jBBgwFoAUNXEKw9dxeaFzg95nCkio4CDv6IUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2ZkMjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5 YjQyODM1YTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJjEgADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBQDcQnLbCbX4g1JDYVEhrSNJlcl5FxGvRMsTT4d94hFveF+EzcLoo6 X8Q9JMC2cQ7Q1W3NtM/tgmxpL2AUEzUV9UGt/HChebFO9en1m3bDs1F6RwGHaCn3 1YttSSWgo1IO9LbZo3gOrLEM+x2L33qhN6xsGz94BbgkRgv+xYx85K49B8hHwlgN oHosb9R6ZOgztefLGYc4WC+lijt+E+dRk/OJEWNdMvxzW0G+bM9DXvTJDIc1gcMu 1XOoybBXe6F/nKW9tz7sgfJIvW7l2zAqBW1OPAtIrpUBRph6qRnoqdtg+FiZl1P2 I6/n5g+CHTK8pe+pfU1Gn6cw/aE5LAL3 -----END CERTIFICATE-----Generated at Fri Apr 4 23:31:20 2025 by rpki-client