$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa File: b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa (raw, json) Hash identifier: ESkVLv+15uASV1MEGWPH+naNF/HiK9Y95VGzEdsN3YE= Subject key identifier: 3F:52:C8:7F:67:0B:2C:D9:C9:F9:6D:50:F4:71:35:FD:1F:F1:A9:61 Certificate issuer: /CN=7e4fb68f-edad-45a2-98d4-e937526bfa31 Certificate serial: 010D0C9F43285849B9AA043FDECDC6E356D9A000 Authority key identifier: 43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 958 IP address blocks: 2605:ac40:20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:04:3f:de:cd:c6:e3:56:d9:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e4fb68f-edad-45a2-98d4-e937526bfa31 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=aff15299-8b19-4eee-9275-acbb146fb480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6e:3d:57:11:21:2c:08:de:15:38:5e:23:1c: ab:38:61:08:fc:ac:0b:cd:bc:06:5e:14:77:48:d5: fc:6e:cb:78:14:47:ef:80:5f:43:28:bd:87:fb:dc: fa:48:27:48:ea:7c:88:70:d2:1e:95:59:32:79:ad: 88:19:4b:68:23:5d:b7:f8:ef:10:87:7a:64:3b:3e: ee:5d:47:e6:a6:98:4b:d0:3e:d1:63:15:8f:f7:c0: 83:9f:63:7d:21:dc:b7:f6:cb:7b:48:1e:a2:7d:4f: 37:89:a7:f9:fa:37:4a:0b:03:3e:6b:e7:d3:9e:d9: 10:bf:7a:94:e9:bd:84:bf:6e:78:9a:88:55:e8:f2: e6:e8:14:cb:a2:c3:f9:01:b7:14:ce:a1:6d:bf:20: ff:fd:15:9c:a6:b0:07:6e:12:7d:0d:23:4a:f4:9b: b7:81:4b:89:df:78:fa:b6:24:b7:8b:3a:75:da:5c: 52:c7:98:fc:35:cf:5e:47:18:ce:82:29:23:a7:fd: 31:90:5f:f9:13:58:2b:9c:d2:60:94:96:52:29:5d: c6:93:50:fd:7e:59:44:b2:60:64:c4:50:ef:52:62: a9:aa:70:c2:c5:af:3f:d3:1b:0b:e7:8a:94:70:5d: b1:f3:c0:ff:ee:32:ae:76:09:63:63:bd:35:33:ba: fe:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:52:C8:7F:67:0B:2C:D9:C9:F9:6D:50:F4:71:35:FD:1F:F1:A9:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/b09245bf-b3ad-356b-81f0-f0f8bf033b0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31/7e4fb68f-edad-45a2-98d4-e937526bfa31.crl X509v3 Authority Key Identifier: keyid:43:79:8E:C3:30:41:09:01:3D:81:6A:0F:39:2B:8F:AB:7E:9B:B8:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e4fb68f-edad-45a2-98d4-e937526bfa31.cer sbgp-ipAddrBlock: critical IPv6: 2605:ac40:20::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:55:fe:63:38:77:1d:21:a8:8b:57:23:d2:f6:ce:ee:b5:d1: e6:77:a8:54:9d:04:7a:5f:f4:70:49:c0:78:58:ca:4e:17:a1: 60:cc:24:9b:93:b8:a4:0c:85:67:fa:38:ad:6d:1a:7f:7f:93: 2a:aa:f6:43:b1:a5:a0:b2:10:9c:98:f9:f3:97:7e:8e:63:0a: b2:8a:af:fc:b2:1f:bd:21:b4:1b:e6:b9:e2:d6:57:2b:07:62: ef:a7:2f:92:c5:38:71:08:c0:ee:77:d0:ec:20:74:86:02:94: d8:93:4c:90:3d:1e:3a:71:ec:17:c6:53:8d:dc:d2:33:d7:43: 7b:55:c2:fc:c8:ec:01:07:32:39:62:49:8a:35:0b:d1:b8:22: c3:90:f1:75:73:47:15:3d:a3:f6:a2:9a:32:95:0a:54:b6:07: 39:44:d6:6b:fe:23:fe:bd:09:5a:09:55:17:67:33:08:60:01: d3:01:20:1f:1e:e9:8d:4b:4d:2c:84:fd:8b:8d:f6:c7:87:fd: 3e:e0:45:07:e7:af:61:97:7c:b5:cc:9d:3c:93:81:8f:37:5e: 2d:00:62:2c:3d:29:b1:35:1e:bd:2e:c8:ba:9f:81:99:8e:3d: fb:80:aa:c5:cd:ea:19:74:e7:12:da:73:e6:62:14:4d:3b:d9: db:c7:79:c2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm5qgQ/3s3G41bZoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0ZmI2OGYtZWRhZC00NWEyLTk4ZDQtZTkzNzUyNmJm YTMxMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk YWZmMTUyOTktOGIxOS00ZWVlLTkyNzUtYWNiYjE0NmZiNDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgG49VxEhLAjeFTheIxyrOGEI/KwLzbwGXhR3 SNX8bst4FEfvgF9DKL2H+9z6SCdI6nyIcNIelVkyea2IGUtoI123+O8Qh3pkOz7u XUfmpphL0D7RYxWP98CDn2N9Idy39st7SB6ifU83iaf5+jdKCwM+a+fTntkQv3qU 6b2Ev254mohV6PLm6BTLosP5AbcUzqFtvyD//RWcprAHbhJ9DSNK9Ju3gUuJ33j6 tiS3izp12lxSx5j8Nc9eRxjOgikjp/0xkF/5E1grnNJglJZSKV3Gk1D9fllEsmBk xFDvUmKpqnDCxa8/0xsL54qUcF2x88D/7jKudgljY701M7r+1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD9SyH9nCyzZyfltUPRxNf0f8alhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTRm YjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3NTI2YmZhMzEvYjA5MjQ1YmYtYjNhZC0z NTZiLTgxZjAtZjBmOGJmMDMzYjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0ZmI2OGYtZWRhZC00NWEyLTk4 ZDQtZTkzNzUyNmJmYTMxLzdlNGZiNjhmLWVkYWQtNDVhMi05OGQ0LWU5Mzc1MjZi ZmEzMS5jcmwwHwYDVR0jBBgwFoAUQ3mOwzBBCQE9gWoPOSuPq36buDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTRmYjY4Zi1lZGFkLTQ1YTItOThkNC1lOTM3 NTI2YmZhMzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgWsQAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKhV/mM4dx0hqItXI9L2zu610eZ3qFSdBHpf9HBJwHhYyk4XoWDM JJuTuKQMhWf6OK1tGn9/kyqq9kOxpaCyEJyY+fOXfo5jCrKKr/yyH70htBvmueLW VysHYu+nL5LFOHEIwO530OwgdIYClNiTTJA9Hjpx7BfGU43c0jPXQ3tVwvzI7AEH MjliSYo1C9G4IsOQ8XVzRxU9o/aimjKVClS2BzlE1mv+I/69CVoJVRdnMwhgAdMB IB8e6Y1LTSyE/YuN9seH/T7gRQfnr2GXfLXMnTyTgY83Xi0AYiw9KbE1Hr0uyLqf gZmOPfuAqsXN6hl05xLac+ZiFE072dvHecI= -----END CERTIFICATE-----Generated at Fri May 9 19:32:53 2025 by rpki-client