$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7fb48c8b-35ea-37af-b9ff-75a6a59dbf0e.roa File: 7fb48c8b-35ea-37af-b9ff-75a6a59dbf0e.roa (raw, json) Hash identifier: ypGVfnVS1b/84Ja/HGofQnomX8yo4REussJReEdldV0= Subject key identifier: 47:FD:F4:B3:D6:40:97:EB:C2:E8:C9:2C:5A:30:A1:60:56:35:5E:9F Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F432858499829D5D0186A557E342ADD80 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7fb48c8b-35ea-37af-b9ff-75a6a59dbf0e.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 11090 IP address blocks: 2607:f398::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d5:d0:18:6a:55:7e:34:2a:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=dfdec9df-1dd2-4737-b395-9d0e18b09248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:0f:b3:02:ae:94:46:3d:bd:a9:82:48:52:a3: d9:0e:10:60:fe:28:e4:3e:6a:b3:04:39:fc:cb:1a: e1:26:0f:7f:a7:60:f3:54:9a:bf:d9:b5:ac:44:0d: ee:b4:f5:78:ff:a4:a7:a8:c8:ce:27:fa:4b:5a:1b: 7b:b3:d5:18:b9:3f:31:1c:da:2b:8b:f5:3f:10:83: 5e:f6:70:86:21:7e:06:ca:b2:11:ed:f8:ed:d0:4b: bf:3c:1b:99:b9:b9:2b:e2:13:49:d6:c1:d5:34:53: 68:2c:c7:90:03:91:4d:e8:3f:22:c4:c9:c3:76:f0: ca:39:26:be:95:e5:a4:94:cd:f0:34:85:c3:39:22: d2:fe:54:b1:78:ff:ea:87:9a:d7:ec:02:e4:e5:e4: c4:5f:25:63:54:fa:23:ba:66:1d:81:d0:4c:d9:e7: e2:4a:10:98:41:02:af:86:ed:a2:15:81:07:4c:cd: b1:17:ff:50:63:45:79:a7:72:1a:b9:85:a0:dc:b0: 85:b0:cc:0c:3d:dc:cf:c1:05:97:90:2e:1f:e2:af: 17:3a:de:93:18:e9:d7:2b:f8:c5:99:e7:5f:1b:3d: 42:e3:ff:3b:63:85:2f:24:44:9d:2b:fa:26:d3:ac: 9d:fc:02:cc:6e:ce:d6:07:63:1d:5f:5e:f2:e2:65: 17:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:FD:F4:B3:D6:40:97:EB:C2:E8:C9:2C:5A:30:A1:60:56:35:5E:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7fb48c8b-35ea-37af-b9ff-75a6a59dbf0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv6: 2607:f398::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:0e:7c:84:b9:b0:9a:3d:7e:86:b4:ae:2f:0b:8a:60:ec:2f: 98:d8:9f:81:dc:5f:63:22:a9:b1:d4:4b:47:1d:f5:da:28:c9: 43:a9:27:f5:c0:43:71:6f:fc:d7:22:f0:e3:0c:96:94:0c:22: 20:01:21:60:54:01:45:ac:a4:63:a2:97:68:d1:20:b6:4b:fc: 81:f6:ad:d6:47:9d:03:ee:37:47:f4:f1:b1:65:68:9c:81:24: 89:70:87:22:17:31:9f:4b:ef:49:ca:85:b3:b0:57:c0:76:5b: 55:b9:7b:7c:ef:a6:46:2a:76:9c:0f:24:ea:24:43:4c:ac:b5: 74:2b:39:b8:d7:25:bc:1f:22:bb:37:46:9f:96:10:46:42:24: 53:c4:f5:90:07:4a:ee:ea:27:e2:a0:19:4e:ae:9a:7a:bb:07: 96:2f:1e:a8:e8:94:6c:c3:f1:fa:5c:86:d9:b0:a8:bf:82:b5: 99:93:87:f7:27:a2:7f:43:3f:21:19:d4:35:42:25:c2:78:47: 13:44:4e:a2:e1:c8:3c:88:8f:e1:12:0b:e1:ae:c1:04:50:8e: 32:5a:18:d8:15:4b:b2:2f:32:65:f1:90:79:d6:7b:4b:3a:87: e3:8a:49:45:50:62:eb:a7:09:90:86:d9:54:cd:b6:3d:9d:3d: 49:b3:9f:e7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmYKdXQGGpVfjQq3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk ZGZkZWM5ZGYtMWRkMi00NzM3LWIzOTUtOWQwZTE4YjA5MjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8g+zAq6URj29qYJIUqPZDhBg/ijkPmqzBDn8 yxrhJg9/p2DzVJq/2bWsRA3utPV4/6SnqMjOJ/pLWht7s9UYuT8xHNori/U/EINe 9nCGIX4GyrIR7fjt0Eu/PBuZubkr4hNJ1sHVNFNoLMeQA5FN6D8ixMnDdvDKOSa+ leWklM3wNIXDOSLS/lSxeP/qh5rX7ALk5eTEXyVjVPojumYdgdBM2efiShCYQQKv hu2iFYEHTM2xF/9QY0V5p3IauYWg3LCFsMwMPdzPwQWXkC4f4q8XOt6TGOnXK/jF medfGz1C4/87Y4UvJESdK/om06yd/ALMbs7WB2MdX17y4mUXtwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEf99LPWQJfrwujJLFowoWBWNV6fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvN2ZiNDhjOGItMzVlYS0z N2FmLWI5ZmYtNzVhNmE1OWRiZjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfzmDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAGDnyEubCaPX6GtK4vC4pg7C+Y2J+B3F9jIqmx1EtHHfXaKMlDqSf1 wENxb/zXIvDjDJaUDCIgASFgVAFFrKRjopdo0SC2S/yB9q3WR50D7jdH9PGxZWic gSSJcIciFzGfS+9JyoWzsFfAdltVuXt876ZGKnacDyTqJENMrLV0Kzm41yW8HyK7 N0aflhBGQiRTxPWQB0ru6ifioBlOrpp6uweWLx6o6JRsw/H6XIbZsKi/grWZk4f3 J6J/Qz8hGdQ1QiXCeEcTRE6i4cg8iI/hEgvhrsEEUI4yWhjYFUuyLzJl8ZB51ntL OofjiklFUGLrpwmQhtlUzbY9nT1Js5/n -----END CERTIFICATE-----Generated at Mon May 5 15:41:18 2025 by rpki-client