$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/7e8917db-fb5e-33a3-9add-8c1dc42f27d8.roa File: 7e8917db-fb5e-33a3-9add-8c1dc42f27d8.roa (raw, json) Hash identifier: Kou9DZJ8eTcCSsvEklEC9JO4TeaPklo/cztvqMwal9A= Subject key identifier: 41:9D:4E:CF:95:FF:66:58:1D:32:14:12:50:4E:32:3A:C3:44:B1:D7 Certificate issuer: /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Certificate serial: 010D0C9F432858499294A0E0FE18E916387F7380 Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/7e8917db-fb5e-33a3-9add-8c1dc42f27d8.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 395403 IP address blocks: 2620:4d:400a::/48 maxlen: 48 2620:4d:4021::/48 maxlen: 48 2620:4d:402f::/48 maxlen: 48 2620:4d:4030::/48 maxlen: 48 2620:4d:4031::/48 maxlen: 48 2620:4d:4032::/48 maxlen: 48 2620:4d:4033::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:a0:e0:fe:18:e9:16:38:7f:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=4801846a-071f-4a76-9044-d643d555704f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:eb:5c:14:a5:35:6d:3c:09:f5:7f:90:6b:f6: 2a:90:c8:19:02:91:42:e5:7e:43:09:47:c3:4b:20: 74:c1:84:b1:56:63:c5:58:81:72:25:91:3d:2d:ab: 83:f8:04:04:b0:12:b1:6f:cd:8a:1f:13:d5:ba:c9: d3:a9:84:12:ae:31:db:ac:25:32:06:09:b3:c3:db: 0f:8a:32:0a:15:64:c7:03:ec:d0:2c:aa:9a:61:9d: 38:b6:02:f6:67:db:d9:dd:56:c5:85:bb:68:a3:3d: 46:dc:d5:9a:3e:6e:45:2b:3a:67:ed:14:74:11:45: 47:65:38:1f:70:a5:0d:fb:19:85:ad:80:50:76:4d: 04:79:45:93:a2:b9:04:ec:01:11:4a:88:16:44:f6: 07:c0:e1:72:79:b3:a0:d9:22:1e:32:c0:da:54:f9: a3:a1:bb:40:0a:55:20:a3:20:a9:03:75:d9:58:cd: fc:77:b9:8b:53:56:fb:6b:14:46:14:ab:55:d4:4c: e9:c5:54:c5:31:8e:1d:6c:f2:fb:3d:8e:bc:e2:44: 21:55:a5:ea:f4:6c:41:c6:dd:7c:f2:c5:a4:e5:4a: 4d:f9:51:8e:9b:2b:ce:44:04:8a:54:4d:c0:70:d6: f8:6a:2c:dc:18:39:cc:08:6e:d9:0a:b2:f4:79:91: 0f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9D:4E:CF:95:FF:66:58:1D:32:14:12:50:4E:32:3A:C3:44:B1:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/7e8917db-fb5e-33a3-9add-8c1dc42f27d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl X509v3 Authority Key Identifier: keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer sbgp-ipAddrBlock: critical IPv6: 2620:4d:400a::/48 2620:4d:4021::/48 2620:4d:402f::-2620:4d:4033:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:69:3d:81:49:a9:14:97:c6:b8:71:0d:bb:ad:ad:42:cd:f9: 70:24:1b:7b:92:57:0f:16:dc:1b:72:d3:b6:87:5d:78:26:37: ab:3e:e5:de:d1:3f:69:d3:01:6f:f5:67:ad:dc:e0:0e:41:16: 4f:e2:69:b5:a8:10:be:fe:ed:f8:5e:41:f6:6a:32:d9:d2:c1: fc:03:3d:a3:cc:fe:e2:f7:aa:40:a3:9a:91:88:de:60:a6:d6: 37:49:bb:98:09:a3:a6:f7:40:d9:b5:f8:a5:b7:69:ea:7c:77: 2c:4b:cf:07:12:4f:51:78:60:2a:47:eb:be:08:82:d5:8e:1e: a9:a5:da:60:fa:dc:1c:00:85:ed:75:f7:dc:62:e0:aa:06:83: 29:22:22:55:e4:4d:ef:8b:0d:8e:c0:8a:12:61:07:86:35:ca: 9e:dd:e1:35:e8:36:88:92:60:cb:93:78:b4:3f:0a:e8:e2:4e: 77:90:9d:97:6a:64:3c:d0:c7:d5:df:21:93:36:8f:85:6a:89: 39:ae:59:ed:1f:9e:f9:fa:72:bd:b4:34:1d:7a:a8:72:96:a4: 77:68:ce:3b:16:a2:7c:5b:04:26:68:a5:f2:92:67:7c:f1:34: be:41:b1:16:48:5d:d8:d7:49:c9:5e:c1:08:ef:c6:37:78:91: 77:fb:49:98 -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEmSlKDg/hjpFjh/c4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEwYjU0ZDQtOTIxYS00MDVhLThjN2EtNmFhMWRjYjI2 M2VhMB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk NDgwMTg0NmEtMDcxZi00YTc2LTkwNDQtZDY0M2Q1NTU3MDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtetcFKU1bTwJ9X+Qa/YqkMgZApFC5X5DCUfD SyB0wYSxVmPFWIFyJZE9LauD+AQEsBKxb82KHxPVusnTqYQSrjHbrCUyBgmzw9sP ijIKFWTHA+zQLKqaYZ04tgL2Z9vZ3VbFhbtooz1G3NWaPm5FKzpn7RR0EUVHZTgf cKUN+xmFrYBQdk0EeUWTorkE7AERSogWRPYHwOFyebOg2SIeMsDaVPmjobtAClUg oyCpA3XZWM38d7mLU1b7axRGFKtV1EzpxVTFMY4dbPL7PY684kQhVaXq9GxBxt18 8sWk5UpN+VGOmyvORASKVE3AcNb4aizcGDnMCG7ZCrL0eZEPswIDAQABo4IDdTCC A3EwHQYDVR0OBBYEFEGdTs+V/2ZYHTIUElBOMjrDRLHXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBi NTRkNC05MjFhLTQwNWEtOGM3YS02YWExZGNiMjYzZWEvN2U4OTE3ZGItZmI1ZS0z M2EzLTlhZGQtOGMxZGM0MmYyN2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEwYjU0ZDQtOTIxYS00MDVhLThj N2EtNmFhMWRjYjI2M2VhL2RhMGI1NGQ0LTkyMWEtNDA1YS04YzdhLTZhYTFkY2Iy NjNlYS5jcmwwHwYDVR0jBBgwFoAUBL87a95hwed1KW8LcOgjFNgbvA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBiNTRkNC05MjFhLTQwNWEtOGM3YS02YWEx ZGNiMjYzZWEuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAwcAJiAATUAK AwcAJiAATUAhMBIDBwAmIABNQC8DBwImIABNQDAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAmWk9gUmpFJfG uHENu62tQs35cCQbe5JXDxbcG3LTtoddeCY3qz7l3tE/adMBb/VnrdzgDkEWT+Jp tagQvv7t+F5B9moy2dLB/AM9o8z+4veqQKOakYjeYKbWN0m7mAmjpvdA2bX4pbdp 6nx3LEvPBxJPUXhgKkfrvgiC1Y4eqaXaYPrcHACF7XX33GLgqgaDKSIiVeRN74sN jsCKEmEHhjXKnt3hNeg2iJJgy5N4tD8K6OJOd5Cdl2pkPNDH1d8hkzaPhWqJOa5Z 7R+e+fpyvbQ0HXqocpakd2jOOxaifFsEJmil8pJnfPE0vkGxFkhd2NdJyV7BCO/G N3iRd/tJmA== -----END CERTIFICATE-----Generated at Sat May 10 09:00:29 2025 by rpki-client