$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/7251ede9-db40-315e-96d5-145116a009a0.roa File: 7251ede9-db40-315e-96d5-145116a009a0.roa (raw, json) Hash identifier: CeH4wj/1akKTz5QOSykoA/UZbSrv9dwHUVzybUOwUJM= Subject key identifier: 63:45:59:22:08:2E:5D:4C:F4:86:2F:1B:CC:3C:CE:10:B5:1C:91:DA Certificate issuer: /CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279 Certificate serial: 010D0C9F4328584908815CDFB089E149C1A70DE0 Authority key identifier: C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/7251ede9-db40-315e-96d5-145116a009a0.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 46562 IP address blocks: 2604:2880::/32 maxlen: 64 2607:f7a0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:5c:df:b0:89:e1:49:c1:a7:0d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=6e4068fd-5bb6-4215-a6e8-dc5b4972a5a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e8:1c:99:e0:5d:2c:46:85:12:06:62:33:cb: 67:c5:ef:55:ed:e0:5e:07:04:a9:b3:c9:9e:96:42: f0:91:c7:32:e6:e7:29:2c:31:92:13:8d:6e:97:31: 37:ed:c4:19:43:0c:0e:66:c2:7d:88:61:06:66:26: 39:26:0f:09:4c:f9:97:31:52:74:de:4d:af:a6:5f: 9c:b4:4f:01:e0:0f:0a:c8:1c:3b:63:33:c1:a0:e3: 09:53:f0:07:8e:f0:5f:37:9e:bf:74:82:17:40:7d: 56:1c:7a:27:e8:cb:27:ce:cb:03:56:54:96:65:17: e9:2a:51:34:a1:f8:21:b5:3f:4b:d3:9b:f1:02:f1: 7b:38:b7:90:03:92:4b:b9:88:0d:b4:57:d1:66:41: bf:92:55:23:30:81:5d:f7:cf:8b:af:0c:68:dc:73: e6:13:c4:5e:27:cd:f0:99:0c:55:e1:26:21:fc:50: 1d:69:9a:a9:96:32:97:a6:27:29:28:8c:fa:c9:8b: 23:54:6b:e9:fa:aa:77:84:97:17:a3:c2:ef:ca:14: 46:63:bb:79:c5:f1:8c:a8:21:26:66:95:90:8e:a1: 01:54:74:e5:fa:fa:f6:c4:f4:34:29:40:5b:57:5c: 63:2d:14:65:e2:cc:4c:38:7f:5c:a7:c0:7a:68:5c: 7e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:45:59:22:08:2E:5D:4C:F4:86:2F:1B:CC:3C:CE:10:B5:1C:91:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/7251ede9-db40-315e-96d5-145116a009a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl X509v3 Authority Key Identifier: keyid:C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer sbgp-ipAddrBlock: critical IPv6: 2604:2880::/32 2607:f7a0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:55:46:1b:6d:e9:42:72:d5:eb:5f:e5:3f:c1:34:75:62:a5: 3b:72:81:c6:af:b8:aa:85:34:8a:45:04:04:69:04:75:94:15: 5c:e0:52:e2:89:90:9a:2d:67:82:ec:bd:f2:c9:fc:73:12:63: 85:cd:ff:26:5a:4f:ae:aa:bd:54:e8:f0:58:d5:f9:a3:8a:b6: 47:c2:e8:0d:a8:84:ed:12:55:83:35:68:58:9e:da:95:cb:8e: 58:da:9f:73:1f:19:68:59:0b:0b:2e:b3:b9:0b:bb:f0:4e:7a: 87:89:06:9a:bb:c9:8c:f6:eb:b1:44:5b:1a:9e:e3:05:c1:69: 3a:c8:9c:10:c6:3d:43:4c:ba:6d:ab:7e:89:27:e6:7a:81:01: 2b:0a:16:b1:c1:06:19:69:53:ce:96:d7:08:49:e6:c2:56:88: 85:10:1c:02:56:4e:de:5d:e1:8e:c6:07:d5:21:cd:0b:e1:5a: 92:79:fd:6b:3b:a2:1f:e3:ae:93:8e:48:72:bf:4d:09:53:02: 49:5b:cd:d5:6c:e5:45:f7:15:7c:46:75:d9:6c:48:ed:17:4f: 60:ef:6a:ed:82:89:b3:50:da:31:ea:98:14:67:db:83:02:b8: b4:7a:4f:e4:10:ca:7d:17:f7:24:0e:13:02:01:2d:53:95:15: 41:1e:11:55 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEkIgVzfsInhScGnDeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDUzMjNkYWMtYTE1ZC00ZjgyLWE3MGItMzBlMWE0Y2Ex Mjc5MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NmU0MDY4ZmQtNWJiNi00MjE1LWE2ZTgtZGM1YjQ5NzJhNWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxugcmeBdLEaFEgZiM8tnxe9V7eBeBwSps8me lkLwkccy5ucpLDGSE41ulzE37cQZQwwOZsJ9iGEGZiY5Jg8JTPmXMVJ03k2vpl+c tE8B4A8KyBw7YzPBoOMJU/AHjvBfN56/dIIXQH1WHHon6MsnzssDVlSWZRfpKlE0 ofghtT9L05vxAvF7OLeQA5JLuYgNtFfRZkG/klUjMIFd98+Lrwxo3HPmE8ReJ83w mQxV4SYh/FAdaZqpljKXpicpKIz6yYsjVGvp+qp3hJcXo8LvyhRGY7t5xfGMqCEm ZpWQjqEBVHTl+vr2xPQ0KUBbV1xjLRRl4sxMOH9cp8B6aFx++QIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFGNFWSIILl1M9IYvG8w8zhC1HJHaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNTMy M2RhYy1hMTVkLTRmODItYTcwYi0zMGUxYTRjYTEyNzkvNzI1MWVkZTktZGI0MC0z MTVlLTk2ZDUtMTQ1MTE2YTAwOWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDUzMjNkYWMtYTE1ZC00ZjgyLWE3 MGItMzBlMWE0Y2ExMjc5L2Q1MzIzZGFjLWExNWQtNGY4Mi1hNzBiLTMwZTFhNGNh MTI3OS5jcmwwHwYDVR0jBBgwFoAUyDY3c/UqyujL65IZblyvIFXxGr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNTMyM2RhYy1hMTVkLTRmODItYTcwYi0zMGUx YTRjYTEyNzkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAJgQogAMF ACYH96AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAHlVGG23pQnLV61/lP8E0dWKlO3KBxq+4qoU0ikUEBGkE dZQVXOBS4omQmi1nguy98sn8cxJjhc3/JlpPrqq9VOjwWNX5o4q2R8LoDaiE7RJV gzVoWJ7alcuOWNqfcx8ZaFkLCy6zuQu78E56h4kGmrvJjPbrsURbGp7jBcFpOsic EMY9Q0y6bat+iSfmeoEBKwoWscEGGWlTzpbXCEnmwlaIhRAcAlZO3l3hjsYH1SHN C+Faknn9azuiH+Ouk45Icr9NCVMCSVvN1WzlRfcVfEZ12WxI7RdPYO9q7YKJs1Da MeqYFGfbgwK4tHpP5BDKfRf3JA4TAgEtU5UVQR4RVQ== -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:14 2025 by rpki-client