$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa File: da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa (raw, json) Hash identifier: c7kDl+Hft4SIuIeEfKIpRia5qXK6OFK+BZ8I94n4Yxo= Subject key identifier: C8:27:9B:C7:A1:B7:FA:8D:A4:C8:7E:E4:1D:66:AF:A6:CC:01:BD:07 Certificate issuer: /CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6 Certificate serial: 010D0C9F43285849A61F446E2EF516C897348880 Authority key identifier: F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 0 IP address blocks: 2001:504:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:44:6e:2e:f5:16:c8:97:34:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=5e09b6e9-74c1-4cbd-a8d2-8101d24c3a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9f:62:34:58:fc:84:f6:06:fb:06:3b:f2:c1: a4:f4:99:d1:49:2b:b5:3a:f6:b3:11:ef:60:92:93: ad:f8:36:f9:51:7d:e3:cb:7d:e7:db:db:55:3a:02: 65:1f:ce:20:1b:0b:d4:1a:2c:03:e4:86:fe:a7:9d: 11:92:06:06:8f:08:df:90:f4:16:bd:8c:27:2e:67: 74:d9:20:bf:b1:16:6d:91:20:27:ff:bc:89:cc:69: 3f:5b:01:a2:72:59:e5:45:2e:d4:5b:5c:f7:9f:bb: 79:4b:bf:9d:b0:48:69:5e:ab:40:ba:a6:39:a3:ba: 34:cb:58:3e:04:08:03:a4:89:9c:5e:12:18:e8:a9: fa:07:ef:02:5a:e1:c3:6b:f7:94:d8:c2:0d:9b:b6: 11:49:dc:29:e7:73:4e:21:c6:24:e1:99:11:21:22: 67:f3:09:4b:61:19:d4:d9:b0:29:9a:35:06:0a:2c: 5e:7b:26:57:f0:85:6e:e7:d8:95:05:8f:85:6f:3f: 56:6f:42:f4:ac:28:5a:cf:65:b9:81:81:63:8e:54: b0:63:bb:65:6a:ac:80:9a:02:4d:02:3c:ef:5f:30: 27:af:55:4f:1b:31:29:65:5e:a1:d9:6e:82:bd:ac: 16:57:c7:77:82:f2:20:41:90:17:75:74:32:9d:35: d7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:27:9B:C7:A1:B7:FA:8D:A4:C8:7E:E4:1D:66:AF:A6:CC:01:BD:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/da961be0-5ca6-3f34-bfd8-fd807fa8d53e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl X509v3 Authority Key Identifier: keyid:F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:b6:9a:b1:7f:46:19:b2:a0:47:ad:38:a1:9b:27:f8:a0:d8: 26:a2:40:63:b8:8b:54:c5:39:10:c6:60:a8:bf:0d:c5:cb:b6: 40:05:d6:57:81:ff:af:47:d7:e8:7f:8c:e0:8a:0a:43:1e:f3: 99:75:24:ce:f9:7a:cd:8a:64:a6:03:14:30:d4:d9:72:b2:57: d1:3a:44:29:77:83:cc:4f:68:22:ab:1d:e3:86:2a:c3:2d:f1: 40:87:ee:80:28:37:53:cc:78:4d:31:a0:bc:c8:f5:d5:53:9f: 4d:15:da:1b:88:1c:2c:ff:06:e4:24:89:18:ac:6d:a9:a6:74: db:5b:0a:e4:2e:4c:4f:65:2b:cb:46:74:b8:79:41:ee:ae:2b: 3e:82:ff:e7:31:f5:e0:d5:d7:d3:07:24:63:1f:8e:c3:58:db: 8a:68:e5:c4:74:4f:71:45:4e:2c:da:f8:02:3e:50:13:51:84: 26:83:42:79:1c:31:fa:ac:8a:bb:4f:7a:b3:13:88:f3:a1:03: 1d:38:a2:5a:66:e9:e9:a6:d0:0c:22:99:a3:56:0b:4b:69:5e: 35:71:20:a9:f6:09:93:91:59:d5:7d:e9:a3:35:70:d2:5d:e7: 8c:6b:82:60:4b:25:86:0b:17:b1:46:dc:86:c6:05:d3:06:7c: 85:d9:26:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmmH0RuLvUWyJc0iIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJmNjVmNWEtNmRkMy00YzVkLTlhOTQtMzMwNTBkOTAy MmQ2MB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk NWUwOWI2ZTktNzRjMS00Y2JkLWE4ZDItODEwMWQyNGMzYTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp9iNFj8hPYG+wY78sGk9JnRSSu1OvazEe9g kpOt+Db5UX3jy33n29tVOgJlH84gGwvUGiwD5Ib+p50RkgYGjwjfkPQWvYwnLmd0 2SC/sRZtkSAn/7yJzGk/WwGiclnlRS7UW1z3n7t5S7+dsEhpXqtAuqY5o7o0y1g+ BAgDpImcXhIY6Kn6B+8CWuHDa/eU2MINm7YRSdwp53NOIcYk4ZkRISJn8wlLYRnU 2bApmjUGCixeeyZX8IVu59iVBY+Fbz9Wb0L0rChaz2W5gYFjjlSwY7tlaqyAmgJN AjzvXzAnr1VPGzEpZV6h2W6CvawWV8d3gvIgQZAXdXQynTXXVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMgnm8eht/qNpMh+5B1mr6bMAb0HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2 NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1MGQ5MDIyZDYvZGE5NjFiZTAtNWNhNi0z ZjM0LWJmZDgtZmQ4MDdmYThkNTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmJmNjVmNWEtNmRkMy00YzVkLTlh OTQtMzMwNTBkOTAyMmQ2LzZiZjY1ZjVhLTZkZDMtNGM1ZC05YTk0LTMzMDUwZDkw MjJkNi5jcmwwHwYDVR0jBBgwFoAU8qQr3vr+d5NOFK+c7Rbs3QGf5MQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1 MGQ5MDIyZDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAq2mrF/RhmyoEetOKGbJ/ig2CaiQGO4i1TFORDGYKi/DcXLtkAF 1leB/69H1+h/jOCKCkMe85l1JM75es2KZKYDFDDU2XKyV9E6RCl3g8xPaCKrHeOG KsMt8UCH7oAoN1PMeE0xoLzI9dVTn00V2huIHCz/BuQkiRisbammdNtbCuQuTE9l K8tGdLh5Qe6uKz6C/+cx9eDV19MHJGMfjsNY24po5cR0T3FFTiza+AI+UBNRhCaD QnkcMfqsirtPerMTiPOhAx04olpm6emm0AwimaNWC0tpXjVxIKn2CZORWdV96aM1 cNJd54xrgmBLJYYLF7FG3IbGBdMGfIXZJss= -----END CERTIFICATE-----Generated at Tue May 6 01:29:38 2025 by rpki-client