$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/4b2e88af-7f81-348d-bb58-5ae1a543b386.roa File: 4b2e88af-7f81-348d-bb58-5ae1a543b386.roa (raw, json) Hash identifier: +mq0gJ31at0O3GjuRt3tHWdR4p6xdLXfCr3uRDkoKq4= Subject key identifier: E9:C4:B4:23:1C:EA:D1:08:76:98:09:1F:72:5D:29:A6:FE:32:60:9E Certificate issuer: /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Certificate serial: 010D0C9F4328584957F40B695EF9B440C42C5880 Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/4b2e88af-7f81-348d-bb58-5ae1a543b386.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 9009 IP address blocks: 2607:6b80:58::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:0b:69:5e:f9:b4:40:c4:2c:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=af009e5d-c5fc-43c3-a787-fd88deffd686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:27:31:be:2d:73:bf:0b:a0:ba:ca:49:9b:3a: 66:bd:05:c4:72:19:4e:2a:74:ab:75:64:a1:2a:95: 77:38:07:55:9a:f9:e7:2e:72:06:71:ab:78:af:ad: 81:27:20:e4:dd:fb:50:fc:e6:66:8e:8c:66:a2:ca: dd:b9:d1:f4:14:b3:e5:f7:2c:d4:04:32:ff:9e:92: ff:35:1a:8b:94:70:13:e5:32:e8:15:6a:98:e9:ec: 7c:bf:7c:6a:0e:c7:78:3d:ae:fd:1c:91:7a:1e:d3: fd:2e:8d:98:82:99:72:32:3c:9a:f1:5e:ff:23:6a: ba:2b:47:4e:f9:b8:5e:18:2b:7b:be:23:6a:64:b8: b8:48:12:6a:7d:61:f4:2f:34:41:8a:b2:83:23:7a: b6:b5:e4:02:f0:db:44:2f:20:f4:44:bd:30:b1:32: c4:a0:af:e0:66:50:d5:69:1b:eb:fb:21:ae:41:c2: c2:b2:47:00:c3:4d:fa:2a:b3:51:88:02:a2:ff:aa: 07:b2:d7:2e:79:26:2e:fb:07:b0:47:80:80:c3:48: 6a:8d:e5:54:2d:eb:16:04:9d:0b:53:20:91:99:ef: cb:98:bb:82:15:27:08:10:f7:cf:28:3a:0d:b3:d1: 01:bc:9d:1f:4c:4f:fd:31:5d:12:f0:58:02:cf:ea: 88:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C4:B4:23:1C:EA:D1:08:76:98:09:1F:72:5D:29:A6:FE:32:60:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/4b2e88af-7f81-348d-bb58-5ae1a543b386.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl X509v3 Authority Key Identifier: keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer sbgp-ipAddrBlock: critical IPv6: 2607:6b80:58::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:6c:ac:e9:c0:1d:1e:e4:b3:3e:fa:85:2e:4e:82:16:2c:94: fc:05:38:94:e6:ab:35:e8:52:33:5d:70:fd:ba:fc:72:a0:78: b9:20:d7:d6:07:85:24:4b:10:b2:ee:e4:57:52:ab:bc:30:8f: 1e:6f:03:f1:cf:e4:72:10:81:62:5a:47:76:dd:e0:f8:69:75: 59:8e:32:74:80:5a:fd:82:7a:a8:69:e3:6b:2c:ce:74:de:70: 60:ed:64:64:32:d7:e0:8e:5f:50:a9:d1:55:05:9d:a3:80:27: 15:80:56:0a:e2:55:f9:22:e4:3a:7c:bc:7b:0c:3c:5b:f1:f4: e7:af:99:5d:6a:47:3d:a6:cd:9e:7f:34:3c:53:44:00:ef:a9: e8:a3:4c:3a:f4:11:0e:51:bb:97:52:38:6d:15:72:f6:94:8c: 69:64:04:84:12:17:75:81:61:b2:3d:0a:01:31:67:1c:ee:4e: 61:5c:76:3c:98:ba:ec:d4:cb:6f:06:85:7d:48:6f:93:ba:18: 04:ba:54:d3:9d:03:68:2c:ea:7d:7c:03:ac:ed:cd:18:0b:39: a9:bf:a9:ea:f5:e4:de:59:ad:36:fd:6a:d6:98:a5:d5:f5:09: b7:f9:73:45:50:8b:ba:57:24:84:56:f2:ec:73:f1:2e:ae:92: fd:df:36:23 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElX9AtpXvm0QMQsWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3 ZTFhMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk YWYwMDllNWQtYzVmYy00M2MzLWE3ODctZmQ4OGRlZmZkNjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCcxvi1zvwuguspJmzpmvQXEchlOKnSrdWSh KpV3OAdVmvnnLnIGcat4r62BJyDk3ftQ/OZmjoxmosrdudH0FLPl9yzUBDL/npL/ NRqLlHAT5TLoFWqY6ex8v3xqDsd4Pa79HJF6HtP9Lo2YgplyMjya8V7/I2q6K0dO +bheGCt7viNqZLi4SBJqfWH0LzRBirKDI3q2teQC8NtELyD0RL0wsTLEoK/gZlDV aRvr+yGuQcLCskcAw036KrNRiAKi/6oHstcueSYu+wewR4CAw0hqjeVULesWBJ0L UyCRme/LmLuCFScIEPfPKDoNs9EBvJ0fTE/9MV0S8FgCz+qIGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOnEtCMc6tEIdpgJH3JdKab+MmCeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvNGIyZTg4YWYtN2Y4MS0z NDhkLWJiNTgtNWFlMWE1NDNiMzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi MDYwMDdlMWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgdrgABY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEVsrOnAHR7ksz76hS5OghYslPwFOJTmqzXoUjNdcP26/HKgeLkg 19YHhSRLELLu5FdSq7wwjx5vA/HP5HIQgWJaR3bd4PhpdVmOMnSAWv2Ceqhp42ss znTecGDtZGQy1+COX1Cp0VUFnaOAJxWAVgriVfki5Dp8vHsMPFvx9OevmV1qRz2m zZ5/NDxTRADvqeijTDr0EQ5Ru5dSOG0VcvaUjGlkBIQSF3WBYbI9CgExZxzuTmFc djyYuuzUy28GhX1Ib5O6GAS6VNOdA2gs6n18A6ztzRgLOam/qer15N5ZrTb9ataY pdX1Cbf5c0VQi7pXJIRW8uxz8S6ukv3fNiM= -----END CERTIFICATE-----Generated at Sat Apr 5 06:32:14 2025 by rpki-client