$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5e3ae1c0-4e5c-3839-bcc7-85944741f6df.roa File: 5e3ae1c0-4e5c-3839-bcc7-85944741f6df.roa (raw, json) Hash identifier: 94BtISXWiPH+iaMp9Vr5GwyyZp2DF2el4axuYmJOlw4= Subject key identifier: FB:CF:37:C1:B1:F8:22:5B:A2:E6:60:63:56:5F:2E:BD:F2:80:56:38 Certificate issuer: /CN=4cef7db1-d0f7-4a95-8c36-d162a28a52c6 Certificate serial: 010D0C9F43285849ABB49B99F61F0B44E2C63080 Authority key identifier: 6C:4A:22:A1:E5:F2:F8:1B:6B:4B:F3:FA:34:57:8E:82:E1:17:BB:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5e3ae1c0-4e5c-3839-bcc7-85944741f6df.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 14618 IP address blocks: 2620:10b:b008::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:9b:99:f6:1f:0b:44:e2:c6:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cef7db1-d0f7-4a95-8c36-d162a28a52c6 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=1cc0e773-0a5e-4982-9460-55cf20b1ec2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d9:fa:dc:24:8b:19:c9:ab:7a:3c:48:f4:4c: cc:13:ab:25:e4:2b:95:96:7f:c5:8c:84:24:b4:c3: 66:87:65:f4:d5:23:e3:49:b4:44:c2:00:5f:dc:8c: 30:e3:18:a1:d8:c3:80:7d:6f:5b:1e:68:f0:67:84: 3f:49:1e:71:ad:2f:3c:98:d0:41:7f:a7:11:f0:af: 7e:02:fe:60:ce:cf:68:9d:b9:5f:e3:bc:a4:d3:47: f9:02:ae:76:f7:eb:79:fb:4e:85:27:71:6e:f5:9a: e2:df:75:c4:7c:12:7c:5d:c0:e8:f0:74:9b:2a:aa: 08:ae:bf:46:42:68:e2:88:73:a5:d3:01:1f:16:a5: cf:ca:1a:96:9d:c6:e5:ee:17:f9:fd:27:e4:7c:21: 02:dc:10:6a:54:a1:e6:f4:d3:3c:c2:3e:2d:72:ad: 0f:e0:94:98:01:4c:cf:92:fe:e5:52:e6:97:61:3a: 48:ed:b6:e1:64:27:0c:fe:53:77:f6:e8:0a:84:8e: 9a:ca:c3:8d:4c:34:c8:05:08:3d:3b:e3:34:77:d0: e7:bb:29:76:11:0c:01:01:82:8c:25:27:56:c8:0b: 1a:93:20:9f:ab:89:eb:77:b9:e6:5d:5a:d9:79:d5: 97:d7:14:53:03:2a:af:cd:c1:e5:a0:f9:6a:be:9f: 0e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CF:37:C1:B1:F8:22:5B:A2:E6:60:63:56:5F:2E:BD:F2:80:56:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/5e3ae1c0-4e5c-3839-bcc7-85944741f6df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.crl X509v3 Authority Key Identifier: keyid:6C:4A:22:A1:E5:F2:F8:1B:6B:4B:F3:FA:34:57:8E:82:E1:17:BB:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4cef7db1-d0f7-4a95-8c36-d162a28a52c6.cer sbgp-ipAddrBlock: critical IPv6: 2620:10b:b008::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:6c:3d:4e:33:fa:3f:83:2d:7b:6f:9f:98:4a:f1:3a:c2:8d: 56:47:c3:82:b3:27:d1:56:4b:58:eb:77:66:75:4c:e4:49:4a: 39:94:82:17:f6:21:3f:55:7f:43:46:05:78:39:f3:f0:b8:f3: 80:d1:8e:ea:88:7f:cf:b3:68:32:5e:f5:dd:d1:20:19:6d:42: c3:8b:16:14:4d:a1:e4:5c:f4:6b:6b:70:97:a3:2d:ab:43:6e: e3:f4:71:2c:7f:46:ce:e0:af:61:97:9d:91:f5:aa:0d:43:7b: 97:97:9f:4c:5d:4f:9b:96:56:e1:08:cf:0d:71:ec:53:a8:1d: 51:4e:cf:2e:36:44:09:30:0e:03:16:51:db:06:31:d9:7d:46: 1a:16:af:3e:c4:44:5c:58:63:58:0e:b7:4a:11:bb:c3:71:a6: 77:07:9a:ba:02:63:5e:dc:6d:f3:a6:6e:60:de:5c:4b:9a:f5: 42:c3:a4:82:ec:08:a3:5e:62:5b:74:e7:1c:53:14:a1:a8:99: c4:31:b4:2b:10:63:b6:df:19:36:f1:18:11:73:ca:a7:a0:b4: fb:ef:f5:56:bb:19:ce:f2:bc:f2:80:7b:6a:96:93:d0:e4:47: 40:9b:ad:c8:28:30:38:d3:11:62:5e:40:e1:b8:d2:01:11:92: 2e:b0:98:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmrtJuZ9h8LROLGMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNlZjdkYjEtZDBmNy00YTk1LThjMzYtZDE2MmEyOGE1 MmM2MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk MWNjMGU3NzMtMGE1ZS00OTgyLTk0NjAtNTVjZjIwYjFlYzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNn63CSLGcmrejxI9EzME6sl5CuVln/FjIQk tMNmh2X01SPjSbREwgBf3Iww4xih2MOAfW9bHmjwZ4Q/SR5xrS88mNBBf6cR8K9+ Av5gzs9onblf47yk00f5Aq529+t5+06FJ3Fu9Zri33XEfBJ8XcDo8HSbKqoIrr9G QmjiiHOl0wEfFqXPyhqWncbl7hf5/SfkfCEC3BBqVKHm9NM8wj4tcq0P4JSYAUzP kv7lUuaXYTpI7bbhZCcM/lN39ugKhI6aysONTDTIBQg9O+M0d9Dnuyl2EQwBAYKM JSdWyAsakyCfq4nrd7nmXVrZedWX1xRTAyqvzcHloPlqvp8O2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPvPN8Gx+CJbouZgY1ZfLr3ygFY4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80Y2Vm N2RiMS1kMGY3LTRhOTUtOGMzNi1kMTYyYTI4YTUyYzYvNWUzYWUxYzAtNGU1Yy0z ODM5LWJjYzctODU5NDQ3NDFmNmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGNlZjdkYjEtZDBmNy00YTk1LThj MzYtZDE2MmEyOGE1MmM2LzRjZWY3ZGIxLWQwZjctNGE5NS04YzM2LWQxNjJhMjhh NTJjNi5jcmwwHwYDVR0jBBgwFoAUbEoioeXy+BtrS/P6NFeOguEXuyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80Y2VmN2RiMS1kMGY3LTRhOTUtOGMzNi1kMTYy YTI4YTUyYzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiABC7AI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD9sPU4z+j+DLXtvn5hK8TrCjVZHw4KzJ9FWS1jrd2Z1TORJSjmU ghf2IT9Vf0NGBXg58/C484DRjuqIf8+zaDJe9d3RIBltQsOLFhRNoeRc9GtrcJej LatDbuP0cSx/Rs7gr2GXnZH1qg1De5eXn0xdT5uWVuEIzw1x7FOoHVFOzy42RAkw DgMWUdsGMdl9RhoWrz7ERFxYY1gOt0oRu8NxpncHmroCY17cbfOmbmDeXEua9ULD pILsCKNeYlt05xxTFKGomcQxtCsQY7bfGTbxGBFzyqegtPvv9Va7Gc7yvPKAe2qW k9DkR0CbrcgoMDjTEWJeQOG40gERki6wmOE= -----END CERTIFICATE-----Generated at Wed May 7 23:38:33 2025 by rpki-client