$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f677d1e4-4926-3aa9-a7ab-5afd490e050d.roa File: f677d1e4-4926-3aa9-a7ab-5afd490e050d.roa (raw, json) Hash identifier: dTAmYkJvB2vwJSjWt7NKxaMCvA8I++bmQHImZ2EOxEE= Subject key identifier: E9:67:3D:AA:C5:3B:B7:B8:67:7C:37:87:B6:5F:73:61:B3:FD:40:E6 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584905B6B812F517AD2F0D6A5F70 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f677d1e4-4926-3aa9-a7ab-5afd490e050d.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13445 IP address blocks: 2607:fcf0:10a0::/44 maxlen: 48 2607:fcf0:20a0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:b8:12:f5:17:ad:2f:0d:6a:5f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=5b10bc7e-2093-47f6-a0d9-1ddc2d26b8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:74:7f:af:33:20:aa:5f:15:41:ca:63:fb:25: 40:21:dd:34:79:e3:33:ba:c2:13:67:f4:6e:45:eb: 33:f7:8f:7e:80:66:9f:81:82:4b:32:cc:40:c0:d2: bc:6e:f2:8c:59:4f:e7:c2:f3:50:15:6e:74:e4:14: 4f:c4:8c:1e:aa:33:97:1a:2c:14:86:a3:8b:d7:6a: 69:75:0a:5f:a7:32:93:cb:53:73:9a:f6:e7:14:5c: 4e:9a:f2:66:6c:cd:6b:3a:d8:1f:e0:7e:5a:13:2b: 06:1a:e4:eb:00:cb:6c:8f:aa:3f:d7:8d:cc:26:db: 18:5d:eb:18:f4:7f:da:a8:bf:46:e9:0a:a9:b8:f6: 8e:6f:30:50:3f:c0:01:9a:76:8b:8e:eb:2f:70:f7: d8:f8:4f:d9:a9:6a:65:21:b7:14:e7:e6:bb:54:63: a9:d0:b1:59:0a:f8:e1:af:44:4c:00:cf:1b:f2:3c: f9:eb:25:5f:d4:fd:5e:26:5b:5a:c0:80:9b:41:fe: fb:b0:74:35:f9:5e:99:0d:c0:17:89:fd:ee:ae:6e: 7d:a6:33:5b:88:22:77:01:a9:1a:8d:f4:2e:9d:77: d8:19:af:38:84:5e:0e:58:ab:7d:1a:4f:7c:2d:f2: 0d:e3:c6:77:92:4d:d4:ef:e3:6d:55:90:a3:d6:0e: 9a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:67:3D:AA:C5:3B:B7:B8:67:7C:37:87:B6:5F:73:61:B3:FD:40:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/f677d1e4-4926-3aa9-a7ab-5afd490e050d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv6: 2607:fcf0:10a0::/44 2607:fcf0:20a0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:58:3e:f6:9d:f1:c0:2a:4c:8c:df:2e:74:a4:db:cb:d2:1f: eb:1e:74:0f:fb:77:f2:ae:59:38:9d:1f:e5:97:e6:63:94:82: d7:71:ea:62:35:66:55:b2:eb:66:3c:39:71:62:5e:5a:e0:55: 4f:c5:35:56:33:8d:20:39:4b:d3:fd:9b:ff:a9:ba:31:54:46: 74:e2:29:4e:5b:d7:d3:00:f7:ca:43:2b:d3:20:a4:b8:76:dd: fc:72:1d:59:35:3b:fb:a2:b4:12:5b:6e:f9:b5:f7:cb:45:48: e4:ff:9f:b5:a3:0e:51:44:c4:7b:f6:0e:62:ce:8f:ac:1f:7d: 4a:5b:df:7f:ea:ba:cc:1c:e6:2d:23:8a:9e:2c:85:2e:6a:6e: 14:96:18:73:1b:cb:82:12:61:34:53:be:10:49:84:9f:98:c6: 9b:e1:dc:cb:14:de:c1:30:f6:cf:f2:0c:7b:45:f2:92:eb:fa: 60:72:c5:79:28:ea:ad:e3:c6:1d:4d:f3:a7:b1:31:e6:2a:6f: 5f:c2:23:6c:ad:d5:16:1f:12:94:e0:99:d4:59:8d:64:07:86: a0:d5:b3:a5:5a:9a:ce:09:4d:05:c8:5d:3c:30:9f:7b:77:3b: 7a:da:51:e2:0b:74:75:28:1d:20:f2:f0:4e:e7:76:5a:a2:ab: 7b:56:56:c3 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEkFtrgS9RetLw1qX3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk NWIxMGJjN2UtMjA5My00N2Y2LWEwZDktMWRkYzJkMjZiOGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnR/rzMgql8VQcpj+yVAId00eeMzusITZ/Ru Resz949+gGafgYJLMsxAwNK8bvKMWU/nwvNQFW505BRPxIweqjOXGiwUhqOL12pp dQpfpzKTy1NzmvbnFFxOmvJmbM1rOtgf4H5aEysGGuTrAMtsj6o/143MJtsYXesY 9H/aqL9G6QqpuPaObzBQP8ABmnaLjusvcPfY+E/ZqWplIbcU5+a7VGOp0LFZCvjh r0RMAM8b8jz56yVf1P1eJltawICbQf77sHQ1+V6ZDcAXif3urm59pjNbiCJ3Aaka jfQunXfYGa84hF4OWKt9Gk98LfIN48Z3kk3U7+NtVZCj1g6aXQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFOlnParFO7e4Z3w3h7Zfc2Gz/UDmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvZjY3N2QxZTQtNDkyNi0z YWE5LWE3YWItNWFmZDQ5MGUwNTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEJgf88BCg AwcEJgf88CCgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAMZYPvad8cAqTIzfLnSk28vSH+sedA/7d/KuWTid H+WX5mOUgtdx6mI1ZlWy62Y8OXFiXlrgVU/FNVYzjSA5S9P9m/+pujFURnTiKU5b 19MA98pDK9MgpLh23fxyHVk1O/uitBJbbvm198tFSOT/n7WjDlFExHv2DmLOj6wf fUpb33/quswc5i0jip4shS5qbhSWGHMby4ISYTRTvhBJhJ+Yxpvh3MsU3sEw9s/y DHtF8pLr+mByxXko6q3jxh1N86exMeYqb1/CI2yt1RYfEpTgmdRZjWQHhqDVs6Va ms4JTQXIXTwwn3t3O3raUeILdHUoHSDy8E7ndlqiq3tWVsM= -----END CERTIFICATE-----Generated at Sat Apr 5 19:08:59 2025 by rpki-client