$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/dd4384b9-7004-3141-991f-5c544be37016.roa File: dd4384b9-7004-3141-991f-5c544be37016.roa (raw, json) Hash identifier: SYFSvcIYa2gTLHYMZIUY2sR/t3KCcdI5SgcLQM11pA8= Subject key identifier: 13:FB:55:CB:65:90:93:1B:7C:E4:9E:04:0C:31:68:1F:8A:15:F6:B0 Certificate issuer: /CN=29196f81-c26e-4690-8bb8-bab4d6541632 Certificate serial: 010D0C9F43285849CBCF9EC44D9BA41D6B2991C0 Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/dd4384b9-7004-3141-991f-5c544be37016.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 62563 IP address blocks: 2607:a140:a00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:9e:c4:4d:9b:a4:1d:6b:29:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=a3e545c3-d745-49c9-a203-00f64adf634b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ef:8f:65:65:e4:ec:ad:78:ab:a8:f0:47:35: 19:33:3b:be:8b:48:e0:f0:7c:66:8d:c8:26:a4:a6: 0b:21:f8:85:18:7c:55:6e:97:33:4d:52:0e:ac:b6: 68:18:6b:3f:c2:2c:e7:82:83:43:d2:bb:7d:b6:3a: 59:69:3f:56:66:da:4d:9c:70:6c:e4:b8:0e:a1:3a: 7e:00:0a:59:56:c6:66:4e:d2:f9:68:9d:74:1e:0e: 77:d7:a5:43:3c:b1:f7:f6:85:7f:7c:72:e4:a5:68: e8:de:61:43:03:31:22:43:3f:2e:b1:14:ed:c1:ed: 25:9e:31:ee:f2:c9:60:59:67:f8:54:a3:49:61:b4: a2:30:9f:6a:4a:71:d2:4f:6b:19:cd:b3:83:39:b8: b4:65:29:f2:5e:93:a8:e7:76:61:d1:01:37:4f:04: b3:ff:b6:b2:a8:30:ad:1b:96:fd:06:10:22:19:f5: ee:fe:86:c1:08:a7:96:11:90:db:6a:ed:57:c7:66: 31:df:99:a7:3e:31:49:3f:3f:66:cd:0b:e5:8d:d0: d2:fa:83:eb:e0:d3:c0:43:9d:22:0b:53:f6:49:6d: e1:74:9e:aa:7a:88:90:0d:1f:a1:c2:a5:07:fd:74: db:35:74:84:f3:46:10:da:77:9f:6a:47:51:13:0a: 36:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FB:55:CB:65:90:93:1B:7C:E4:9E:04:0C:31:68:1F:8A:15:F6:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/dd4384b9-7004-3141-991f-5c544be37016.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl X509v3 Authority Key Identifier: keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer sbgp-ipAddrBlock: critical IPv6: 2607:a140:a00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:9f:3f:3d:34:86:ff:2d:3e:79:77:9a:a2:df:50:bb:e1:13: 4d:3b:fc:9d:c0:52:8d:d3:eb:68:10:4a:16:25:33:aa:18:0c: 34:b1:a0:f9:90:83:75:04:b6:af:29:3d:b2:24:26:db:70:63: 59:6c:c5:3e:eb:8a:0e:81:72:73:7e:97:e9:62:49:d9:27:e8: fd:47:9e:5c:03:38:0a:74:01:72:48:08:70:0a:d5:08:3a:f3: e3:c7:de:14:be:27:46:0d:54:ee:cc:e9:e2:f3:ac:07:9e:10: 71:e2:08:1d:d8:06:91:9f:31:f9:77:82:6b:1a:cf:04:53:9a: 46:63:52:3a:1b:85:47:73:42:49:f5:49:55:b7:0a:76:1c:78: 3a:2f:a7:1d:4a:d7:29:45:91:de:23:d6:30:e8:5e:b9:73:66: a6:7a:94:6b:10:c1:09:e8:b4:90:09:64:ed:36:8f:02:08:59: 2a:d5:29:42:57:14:ee:15:ea:8b:83:01:d4:b6:bd:d1:84:c6: c1:dd:96:30:41:65:36:ee:f3:89:45:4c:0a:03:1f:ec:e2:a0: c3:05:c5:93:0f:56:50:48:c9:cc:be:90:99:e3:5d:a3:fe:62: e1:8f:d7:55:ab:1a:7d:17:57:43:5b:07:80:9f:c1:e0:75:7a: 90:2e:e5:f4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEnLz57ETZukHWspkcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjkxOTZmODEtYzI2ZS00NjkwLThiYjgtYmFiNGQ2NTQx NjMyMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk YTNlNTQ1YzMtZDc0NS00OWM5LWEyMDMtMDBmNjRhZGY2MzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0++PZWXk7K14q6jwRzUZMzu+i0jg8Hxmjcgm pKYLIfiFGHxVbpczTVIOrLZoGGs/wizngoND0rt9tjpZaT9WZtpNnHBs5LgOoTp+ AApZVsZmTtL5aJ10Hg5316VDPLH39oV/fHLkpWjo3mFDAzEiQz8usRTtwe0lnjHu 8slgWWf4VKNJYbSiMJ9qSnHST2sZzbODObi0ZSnyXpOo53Zh0QE3TwSz/7ayqDCt G5b9BhAiGfXu/obBCKeWEZDbau1Xx2Yx35mnPjFJPz9mzQvljdDS+oPr4NPAQ50i C1P2SW3hdJ6qeoiQDR+hwqUH/XTbNXSE80YQ2nefakdREwo28wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBP7VctlkJMbfOSeBAwxaB+KFfawMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOTE5 NmY4MS1jMjZlLTQ2OTAtOGJiOC1iYWI0ZDY1NDE2MzIvZGQ0Mzg0YjktNzAwNC0z MTQxLTk5MWYtNWM1NDRiZTM3MDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjkxOTZmODEtYzI2ZS00NjkwLThi YjgtYmFiNGQ2NTQxNjMyLzI5MTk2ZjgxLWMyNmUtNDY5MC04YmI4LWJhYjRkNjU0 MTYzMi5jcmwwHwYDVR0jBBgwFoAU+813SzdHY5Dw69CRgJFkZaTuvgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yOTE5NmY4MS1jMjZlLTQ2OTAtOGJiOC1iYWI0 ZDY1NDE2MzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgehQAow VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEA258/PTSG/y0+eXeaot9Qu+ETTTv8ncBSjdPraBBKFiUzqhgMNLGg +ZCDdQS2ryk9siQm23BjWWzFPuuKDoFyc36X6WJJ2Sfo/UeeXAM4CnQBckgIcArV CDrz48feFL4nRg1U7szp4vOsB54QceIIHdgGkZ8x+XeCaxrPBFOaRmNSOhuFR3NC SfVJVbcKdhx4Oi+nHUrXKUWR3iPWMOheuXNmpnqUaxDBCei0kAlk7TaPAghZKtUp QlcU7hXqi4MB1La90YTGwd2WMEFlNu7ziUVMCgMf7OKgwwXFkw9WUEjJzL6QmeNd o/5i4Y/XVasafRdXQ1sHgJ/B4HV6kC7l9A== -----END CERTIFICATE-----Generated at Sun May 11 16:09:40 2025 by rpki-client