$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20c957da-b39f-3683-b18d-b1e770173af5.roa File: 20c957da-b39f-3683-b18d-b1e770173af5.roa (raw, json) Hash identifier: VeC1Es4CboqLXYkgfG2cUulHncQgkQ/pKnMCe0Z4qZw= Subject key identifier: 0C:BE:76:FB:AF:D3:56:D0:D8:31:47:7A:6C:18:21:9D:B0:D7:CE:C3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849A4BAD8784CDA649703BA7220 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20c957da-b39f-3683-b18d-b1e770173af5.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 2600:1900:4140::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d8:78:4c:da:64:97:03:ba:72:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=bdd39109-5c11-477a-b81d-958ed6ffec71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:dd:b4:b1:1a:bd:ef:4d:93:2e:16:64:69:b2: ba:57:0c:d1:ec:e1:2c:37:9b:4a:80:87:b4:a9:75: e4:5b:63:6f:ea:e4:c2:79:00:a6:52:e6:33:ef:aa: 54:60:c1:96:91:4b:d4:1e:e2:25:63:3b:fb:73:a3: 20:fb:26:8b:08:de:49:67:24:07:54:24:6a:6b:0a: 5a:01:84:bc:19:0e:61:32:5d:02:6e:72:c1:81:38: dc:fa:a9:56:4a:65:d8:c8:bb:19:cd:e9:7e:15:8c: 02:a7:40:42:f3:5f:5f:db:cb:40:80:17:74:b2:70: c3:ef:3a:5f:b9:4c:f2:91:31:95:e8:75:a7:37:84: 17:ea:37:13:32:c6:c2:2f:2f:a4:ca:7f:d6:e8:2f: 30:e5:cc:fa:68:08:e8:f2:ba:43:dc:0d:7d:cd:21: bf:41:73:40:e9:c8:3f:98:b4:67:c5:42:96:36:7d: 7a:40:74:5d:5f:e6:c6:08:03:96:e9:c7:cd:97:fe: c5:ea:3e:d4:60:e6:68:db:18:1a:67:aa:e6:06:92: fb:65:2e:77:37:eb:38:0d:31:43:66:04:6d:5e:af: 0c:92:1f:dc:b3:e3:79:34:1b:e5:bf:5c:e1:5d:79: 74:c0:8f:ea:28:7f:39:79:d8:b1:1c:0f:62:bf:5a: 7e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:BE:76:FB:AF:D3:56:D0:D8:31:47:7A:6C:18:21:9D:B0:D7:CE:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/20c957da-b39f-3683-b18d-b1e770173af5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv6: 2600:1900:4140::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:d3:06:d6:41:88:90:f3:5d:4a:97:37:c0:f5:56:f1:b2:d1: 3b:bf:a2:ff:43:2a:11:b3:06:cd:7c:1d:f6:02:47:c4:e8:1a: 58:6d:90:f6:44:24:07:f2:e6:5b:44:b3:4c:d2:54:6b:4f:f8: 19:3b:57:0b:19:4f:79:43:85:d0:ee:2f:dc:00:db:9a:dc:06: 9b:35:b8:02:f5:fc:1c:77:56:ca:87:aa:25:45:07:98:75:82: 8d:6e:cd:ae:c2:2b:17:b4:50:ba:57:ec:f6:98:00:48:22:bc: ec:9a:cf:28:2c:8d:2d:0d:08:3f:56:b4:a4:36:84:68:7c:7d: 7b:bc:9d:d4:05:63:6a:cc:db:4b:32:fe:b4:ce:b2:70:4e:8d: 87:bb:85:a8:52:17:a7:3f:45:b7:56:31:65:76:23:ef:61:2d: 72:21:84:cb:c3:d0:29:8b:c2:ff:d4:31:ed:08:93:01:2f:d8: 17:ee:f6:cb:90:b4:4e:da:08:58:ea:0b:a7:79:1c:4f:31:69: 73:d2:06:e6:81:08:17:a3:8e:79:cb:33:25:f3:25:2c:92:b2: aa:63:af:6a:8e:52:69:a6:fe:e2:b3:06:44:a5:0b:1d:35:30: 14:9a:ad:c0:99:7f:cc:70:a1:c5:6a:2e:89:bc:43:33:55:94: 0b:a0:5e:f3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmkuth4TNpklwO6ciAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YmRkMzkxMDktNWMxMS00NzdhLWI4MWQtOTU4ZWQ2ZmZlYzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjd20sRq9702TLhZkabK6VwzR7OEsN5tKgIe0 qXXkW2Nv6uTCeQCmUuYz76pUYMGWkUvUHuIlYzv7c6Mg+yaLCN5JZyQHVCRqawpa AYS8GQ5hMl0CbnLBgTjc+qlWSmXYyLsZzel+FYwCp0BC819f28tAgBd0snDD7zpf uUzykTGV6HWnN4QX6jcTMsbCLy+kyn/W6C8w5cz6aAjo8rpD3A19zSG/QXNA6cg/ mLRnxUKWNn16QHRdX+bGCAOW6cfNl/7F6j7UYOZo2xgaZ6rmBpL7ZS53N+s4DTFD ZgRtXq8Mkh/cs+N5NBvlv1zhXXl0wI/qKH85edixHA9iv1p+bQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAy+dvuv01bQ2DFHemwYIZ2w187DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMjBjOTU3ZGEtYjM5Zi0z NjgzLWIxOGQtYjFlNzcwMTczYWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAEFA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACjTBtZBiJDzXUqXN8D1VvGy0Tu/ov9DKhGzBs18HfYCR8ToGlht kPZEJAfy5ltEs0zSVGtP+Bk7VwsZT3lDhdDuL9wA25rcBps1uAL1/Bx3VsqHqiVF B5h1go1uza7CKxe0ULpX7PaYAEgivOyazygsjS0NCD9WtKQ2hGh8fXu8ndQFY2rM 20sy/rTOsnBOjYe7hahSF6c/RbdWMWV2I+9hLXIhhMvD0CmLwv/UMe0IkwEv2Bfu 9suQtE7aCFjqC6d5HE8xaXPSBuaBCBejjnnLMyXzJSySsqpjr2qOUmmm/uKzBkSl Cx01MBSarcCZf8xwocVqLom8QzNVlAugXvM= -----END CERTIFICATE-----Generated at Mon May 5 12:25:49 2025 by rpki-client