$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/8d32e85c-b042-3a2e-b416-c12385b69506.roa File: 8d32e85c-b042-3a2e-b416-c12385b69506.roa (raw, json) Hash identifier: +SY/Zms2VwFXNSV7hW6TX8DJ6RvYa+d9pQowUnh6WTE= Subject key identifier: 1B:46:25:3E:C8:A5:E3:E3:7C:0F:D0:22:2B:7A:FA:50:5A:4F:99:2D Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F432858492CAE9C6108BA8F1E78DA20C0 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/8d32e85c-b042-3a2e-b416-c12385b69506.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 198949 IP address blocks: 2620:147::/36 maxlen: 49 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:9c:61:08:ba:8f:1e:78:da:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=5f98e7d8-ed6f-4b12-8ebe-1f8ba025fb16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c5:ba:e3:03:fe:2b:0e:6d:2a:5f:50:53:79: f4:09:36:48:4d:e1:73:5f:80:b6:bd:d2:4f:1c:50: d9:55:63:39:2c:2e:fa:fd:de:96:27:81:4d:54:66: fb:26:96:02:0e:bb:3a:96:fa:54:a3:b8:c3:e2:9b: 04:a4:94:91:ce:cd:e7:9f:77:b4:af:4c:30:c3:12: d9:9d:10:ff:d8:a8:15:cd:74:a9:bb:94:63:52:46: d4:f3:ca:a4:35:6a:ba:d7:a5:8d:52:9a:dd:1a:ee: bc:cc:0c:13:e7:c3:1d:a6:d5:61:95:78:ba:ae:ff: 33:61:a9:d9:e3:69:28:97:43:5e:40:0d:7d:ff:49: f6:9d:89:a8:39:0f:2b:48:b4:7c:4a:d2:05:69:8b: 01:22:c8:e0:5f:d0:9b:67:c6:91:58:01:1a:98:f6: 09:e1:9a:3c:13:a9:b1:8f:29:82:d9:d6:b1:61:70: 68:2d:f0:c3:47:82:6f:c4:75:cc:86:ab:65:90:e3: d5:d9:50:b6:24:30:c3:6b:2b:63:59:16:29:b0:68: 02:ae:1d:8d:ea:80:7d:bc:fd:21:40:8a:d6:f9:37: 0a:6c:58:17:0b:42:52:e8:65:ae:28:16:cf:a2:8d: 4c:b7:61:f6:29:2d:94:8f:6f:f2:46:4e:80:93:bb: 1e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:46:25:3E:C8:A5:E3:E3:7C:0F:D0:22:2B:7A:FA:50:5A:4F:99:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/8d32e85c-b042-3a2e-b416-c12385b69506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2620:147::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:d1:83:38:4a:b1:81:32:e2:68:64:3c:ea:bb:66:59:dd:89: 2d:2b:07:5f:1a:2d:d5:a5:d7:f3:9e:c0:04:ac:19:d2:3c:15: 13:40:d8:26:38:c4:80:b1:ab:70:da:b7:a5:85:48:ce:37:46: ce:9a:a0:f2:10:9e:e9:95:01:ba:41:e7:b9:9d:44:5f:5b:03: 92:7f:70:05:e2:e3:a6:76:60:a7:b7:8e:d8:07:e1:df:d1:14: 5c:cd:32:73:4a:ca:e1:d7:60:a2:a3:84:7c:9e:28:54:a0:5f: f9:1a:b0:ba:36:60:a3:05:c6:b2:cf:48:f0:c8:a9:71:36:ff: 4a:de:6c:b6:b0:b8:e6:b9:77:8f:22:da:ff:8d:4f:17:42:bc: 80:75:92:90:66:2e:97:86:48:7c:3a:a0:78:3b:8a:77:01:5f: 88:a7:fc:2d:f2:88:1b:60:0a:7b:32:82:ea:1e:93:82:66:91: a3:cb:6d:a9:92:07:e2:4b:49:85:46:5c:f5:5c:79:89:5f:2b: 54:4a:85:73:6e:29:00:fd:20:c2:8e:01:4d:fd:27:ed:e2:7a: 35:d0:92:0b:28:06:b0:de:c0:fe:07:3a:83:47:6b:15:b3:5f: 69:e8:f6:9d:86:35:92:cd:03:ad:d5:71:0a:4a:93:1a:72:12: d8:29:ef:09 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEksrpxhCLqPHnjaIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NWY5OGU3ZDgtZWQ2Zi00YjEyLThlYmUtMWY4YmEwMjVmYjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMW64wP+Kw5tKl9QU3n0CTZITeFzX4C2vdJP HFDZVWM5LC76/d6WJ4FNVGb7JpYCDrs6lvpUo7jD4psEpJSRzs3nn3e0r0wwwxLZ nRD/2KgVzXSpu5RjUkbU88qkNWq616WNUprdGu68zAwT58MdptVhlXi6rv8zYanZ 42kol0NeQA19/0n2nYmoOQ8rSLR8StIFaYsBIsjgX9CbZ8aRWAEamPYJ4Zo8E6mx jymC2daxYXBoLfDDR4JvxHXMhqtlkOPV2VC2JDDDaytjWRYpsGgCrh2N6oB9vP0h QIrW+TcKbFgXC0JS6GWuKBbPoo1Mt2H2KS2Uj2/yRk6Ak7seJQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBtGJT7IpePjfA/QIit6+lBaT5ktMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvOGQzMmU4NWMtYjA0Mi0z YTJlLWI0MTYtYzEyMzg1YjY5NTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJiABRwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEATtGDOEqxgTLiaGQ86rtmWd2JLSsHXxot1aXX857ABKwZ0jwVE0DY JjjEgLGrcNq3pYVIzjdGzpqg8hCe6ZUBukHnuZ1EX1sDkn9wBeLjpnZgp7eO2Afh 39EUXM0yc0rK4ddgoqOEfJ4oVKBf+RqwujZgowXGss9I8MipcTb/St5strC45rl3 jyLa/41PF0K8gHWSkGYul4ZIfDqgeDuKdwFfiKf8LfKIG2AKezKC6h6TgmaRo8tt qZIH4ktJhUZc9Vx5iV8rVEqFc24pAP0gwo4BTf0n7eJ6NdCSCygGsN7A/gc6g0dr FbNfaej2nYY1ks0DrdVxCkqTGnIS2CnvCQ== -----END CERTIFICATE-----Generated at Sun May 11 01:41:58 2025 by rpki-client