$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df6816a7-143c-392b-bc92-0828868a384a.roa File: df6816a7-143c-392b-bc92-0828868a384a.roa (raw, json) Hash identifier: XHv8UJ1/iDdEKk3DJhCpOl9aNYPVlOkold/jl24NWA4= Subject key identifier: D4:E9:C0:37:77:C8:07:76:00:91:E9:B0:B3:23:6C:53:82:00:BC:FA Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584953C44C2CEA051418B36CB700 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df6816a7-143c-392b-bc92-0828868a384a.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 11290 IP address blocks: 2001:18c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:4c:2c:ea:05:14:18:b3:6c:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=8db0544b-c7ef-4cab-8dcc-1f57be202d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f5:33:cc:91:19:dc:d3:c2:fb:e0:23:d5:df: fe:1b:21:23:53:36:bd:1b:91:08:73:99:5e:e0:43: 58:e5:92:8e:4f:67:14:38:6f:b3:e0:e5:30:c1:9f: 04:03:95:6c:af:5e:9f:b8:ff:be:c1:c1:da:86:f9: 7f:46:da:c3:e4:4b:26:03:2d:b6:39:6a:a5:7e:8c: cf:94:18:ca:86:cf:7d:01:7f:c3:9f:b1:6f:1a:1d: 1d:35:9f:62:f3:c4:6d:84:07:a0:f4:65:d6:98:f4: 1d:6b:0e:43:71:15:11:c1:f1:d3:b9:3f:b7:ec:13: 51:d5:01:03:83:4e:b7:eb:e5:53:da:89:9a:92:bb: 5b:08:1e:f7:28:5a:03:9d:b1:cd:e9:97:50:ce:f8: dc:25:f1:ff:8a:cd:bc:3c:30:99:14:5f:52:49:23: 9f:91:e0:cb:0a:7f:c3:b1:4a:64:4a:0b:31:da:3d: 0b:10:90:4d:fc:d3:fe:91:d5:67:4b:4a:ce:52:95: 8d:6c:c6:bd:5d:7d:5b:f2:85:6c:ea:e3:c0:db:a9: a8:8a:d9:3c:13:d7:51:74:27:b2:b5:1b:7b:a0:b3: de:9d:30:bd:da:fd:44:34:9b:90:db:91:a4:5c:89: 52:30:0c:46:51:2b:a1:5f:7f:4e:1e:d2:36:5f:69: ad:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E9:C0:37:77:C8:07:76:00:91:E9:B0:B3:23:6C:53:82:00:BC:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/df6816a7-143c-392b-bc92-0828868a384a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv6: 2001:18c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:73:fc:bc:84:ec:86:cd:4f:8d:1c:22:02:ef:9d:e0:a2:f0: 6e:00:3c:44:69:b7:01:5c:06:27:31:c3:51:e9:2d:f6:28:9f: 22:3b:c7:eb:af:33:98:8f:64:51:17:10:1e:21:00:6a:8c:a8: f4:33:70:de:04:e4:16:76:74:92:8c:7b:61:a5:ea:1a:53:68: b9:45:72:18:b0:03:97:a3:cc:3e:0d:97:2f:2e:90:2d:8a:5e: c7:04:f8:f2:b5:28:c6:7e:d8:52:ad:80:e6:f4:50:a7:0d:db: 6d:e8:a4:06:97:46:ed:16:6e:1b:db:b0:3a:87:98:bc:17:af: 0c:a2:99:44:9e:c6:92:29:3a:3d:e4:09:65:2d:03:77:31:4a: c0:7c:57:8a:5f:af:62:1a:06:d2:24:87:91:01:29:4a:5f:62: 1e:be:7b:e3:ba:a1:dc:4d:e8:fd:d3:5f:85:1e:0a:cc:fd:e2: 97:ba:89:c3:14:f5:49:40:89:a3:c9:f3:dd:94:5f:dc:58:93: ed:f0:ee:33:5f:b8:f8:4a:5a:42:73:a5:47:ae:b3:6b:a0:b5: e5:da:38:7d:1e:5d:ee:35:23:01:47:74:b7:ea:0d:a3:fe:6d: bb:fd:d0:53:6b:61:8d:96:ab:46:0a:46:e2:06:ba:65:a8:12: fa:ae:72:0f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElTxEws6gUUGLNstwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk OGRiMDU0NGItYzdlZi00Y2FiLThkY2MtMWY1N2JlMjAyZDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/UzzJEZ3NPC++Aj1d/+GyEjUza9G5EIc5le 4ENY5ZKOT2cUOG+z4OUwwZ8EA5Vsr16fuP++wcHahvl/RtrD5EsmAy22OWqlfozP lBjKhs99AX/Dn7FvGh0dNZ9i88RthAeg9GXWmPQdaw5DcRURwfHTuT+37BNR1QED g0636+VT2omakrtbCB73KFoDnbHN6ZdQzvjcJfH/is28PDCZFF9SSSOfkeDLCn/D sUpkSgsx2j0LEJBN/NP+kdVnS0rOUpWNbMa9XX1b8oVs6uPA26moitk8E9dRdCey tRt7oLPenTC92v1ENJuQ25GkXIlSMAxGUSuhX39OHtI2X2mtVwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNTpwDd3yAd2AJHpsLMjbFOCALz6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZGY2ODE2YTctMTQzYy0z OTJiLWJjOTItMDgyODg2OGEzODRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEYwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA8c/y8hOyGzU+NHCIC753govBuADxEabcBXAYnMcNR6S32KJ8iO8fr rzOYj2RRFxAeIQBqjKj0M3DeBOQWdnSSjHthpeoaU2i5RXIYsAOXo8w+DZcvLpAt il7HBPjytSjGfthSrYDm9FCnDdtt6KQGl0btFm4b27A6h5i8F68MoplEnsaSKTo9 5AllLQN3MUrAfFeKX69iGgbSJIeRASlKX2IevnvjuqHcTej901+FHgrM/eKXuonD FPVJQImjyfPdlF/cWJPt8O4zX7j4SlpCc6VHrrNroLXl2jh9Hl3uNSMBR3S36g2j /m27/dBTa2GNlqtGCkbiBrplqBL6rnIP -----END CERTIFICATE-----Generated at Tue May 6 12:02:15 2025 by rpki-client