$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/d5585992-e680-3e2a-90c5-f5452de158cb.roa File: d5585992-e680-3e2a-90c5-f5452de158cb.roa (raw, json) Hash identifier: brzRTPRfm3YsS3ajHJbkcLfM76nl04iWCBMEPJ3Rjmc= Subject key identifier: D1:1A:43:B3:24:04:66:D7:AA:13:3D:BA:86:9F:DD:02:53:57:33:7C Certificate issuer: /CN=b76a56d7-e03c-4adc-a642-166acb54d72b Certificate serial: 010D0C9F43285849B149EFF66856BCDE8C722B80 Authority key identifier: 67:6B:3E:21:02:05:28:69:31:0F:D6:D0:1C:A6:E1:3E:BB:8F:E8:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/d5585992-e680-3e2a-90c5-f5452de158cb.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 32277 IP address blocks: 2605:ab00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/b76a56d7-e03c-4adc-a642-166acb54d72b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/b76a56d7-e03c-4adc-a642-166acb54d72b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:ef:f6:68:56:bc:de:8c:72:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76a56d7-e03c-4adc-a642-166acb54d72b Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=60dff4b6-4908-45d4-a20d-a746fa9e595f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e0:53:06:69:e5:b4:34:27:97:2e:1c:38:02: 45:a7:1d:f3:d1:97:e1:c9:3d:8e:3f:30:a7:54:94: e1:57:07:9f:92:17:f8:df:f6:9f:d7:97:4a:a9:f4: ce:87:11:e0:3f:1b:16:cf:11:39:a7:40:31:4e:25: eb:f8:8b:40:4f:72:f0:6e:9c:a7:a0:57:be:45:37: f7:02:44:67:c8:8f:c9:8c:51:85:5c:22:ca:93:48: 94:25:ec:1d:47:98:5d:9f:cb:e8:4b:c4:41:ce:4b: 7c:59:a0:33:98:e8:b3:3c:52:f7:2b:84:de:d0:6b: b1:47:99:9f:09:f3:b6:4f:c4:36:ec:1b:e3:8c:09: 2b:f2:4a:7d:b3:79:a4:45:8c:7b:db:b7:0c:66:8f: 13:55:30:e8:8f:6b:0e:72:40:2d:42:bd:61:8f:8b: 9f:af:97:17:cb:2f:5c:cf:d5:b7:ff:89:04:48:ff: 72:f3:be:33:bc:7f:c4:a4:e5:42:32:41:82:d9:81: ad:8f:df:18:5b:4e:5d:25:b0:d9:2e:75:3e:e6:22: e8:f1:8b:d4:60:a3:25:6b:77:0a:bb:45:3a:c1:b9: 20:5b:de:12:11:8a:53:ee:33:f6:5a:c4:a3:c4:ae: 03:75:1b:ca:31:00:8b:a1:49:04:6e:3d:bd:4a:09: 45:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1A:43:B3:24:04:66:D7:AA:13:3D:BA:86:9F:DD:02:53:57:33:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/d5585992-e680-3e2a-90c5-f5452de158cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/b76a56d7-e03c-4adc-a642-166acb54d72b.crl X509v3 Authority Key Identifier: keyid:67:6B:3E:21:02:05:28:69:31:0F:D6:D0:1C:A6:E1:3E:BB:8F:E8:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b.cer sbgp-ipAddrBlock: critical IPv6: 2605:ab00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:02:f6:a6:4b:cd:0b:2d:e8:cf:6e:1a:94:b8:f5:2b:1a:bf: 1c:31:4f:a2:32:13:e3:1b:44:3e:7b:99:7a:20:0b:08:e6:95: 4c:a7:0a:e7:d0:36:18:92:65:36:92:b2:d4:38:0a:a8:f2:bf: 8b:c5:f7:1c:2e:fc:d5:b6:27:8a:91:a6:f9:b5:ce:fe:cb:d7: ce:de:c8:d8:38:1c:a0:f9:74:c0:02:80:35:cc:8d:eb:ad:d6: 2e:71:25:c9:ef:f1:39:44:32:bb:3c:af:0c:14:84:68:3a:ab: ab:44:cd:e1:45:74:d6:11:c1:8a:da:33:b9:48:39:26:22:53: 75:ed:02:14:4b:b3:98:01:f2:19:9e:13:c4:ab:69:46:37:a5: 6e:74:2a:9f:db:b6:ee:47:5e:a8:e6:58:d8:ab:d2:7c:62:8b: c9:b1:aa:9d:11:33:50:f7:d4:ff:c9:18:14:d9:cb:2b:9b:87: 01:90:b5:46:0b:92:11:76:ff:49:44:ec:df:b4:c8:c0:d1:1a: 66:26:54:55:00:88:d0:f1:47:8b:81:0f:78:85:d2:e3:3d:fe: 68:30:62:1b:b4:d2:0a:dd:a2:75:ba:cf:4b:af:42:a8:ac:a9: bc:30:31:21:40:82:6a:0c:c6:61:b2:8d:cb:13:21:2c:fa:7b: fd:f5:70:2c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmxSe/2aFa83oxyK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2YTU2ZDctZTAzYy00YWRjLWE2NDItMTY2YWNiNTRk NzJiMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NjBkZmY0YjYtNDkwOC00NWQ0LWEyMGQtYTc0NmZhOWU1OTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuBTBmnltDQnly4cOAJFpx3z0ZfhyT2OPzCn VJThVwefkhf43/af15dKqfTOhxHgPxsWzxE5p0AxTiXr+ItAT3LwbpynoFe+RTf3 AkRnyI/JjFGFXCLKk0iUJewdR5hdn8voS8RBzkt8WaAzmOizPFL3K4Te0GuxR5mf CfO2T8Q27BvjjAkr8kp9s3mkRYx727cMZo8TVTDoj2sOckAtQr1hj4ufr5cXyy9c z9W3/4kESP9y874zvH/EpOVCMkGC2YGtj98YW05dJbDZLnU+5iLo8YvUYKMla3cK u0U6wbkgW94SEYpT7jP2WsSjxK4DdRvKMQCLoUkEbj29SglF9wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNEaQ7MkBGbXqhM9uoaf3QJTVzN8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzZh NTZkNy1lMDNjLTRhZGMtYTY0Mi0xNjZhY2I1NGQ3MmIvZDU1ODU5OTItZTY4MC0z ZTJhLTkwYzUtZjU0NTJkZTE1OGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjc2YTU2ZDctZTAzYy00YWRjLWE2 NDItMTY2YWNiNTRkNzJiL2I3NmE1NmQ3LWUwM2MtNGFkYy1hNjQyLTE2NmFjYjU0 ZDcyYi5jcmwwHwYDVR0jBBgwFoAUZ2s+IQIFKGkxD9bQHKbhPruP6MswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzZhNTZkNy1lMDNjLTRhZGMtYTY0Mi0xNjZh Y2I1NGQ3MmIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWrADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBEAvamS80LLejPbhqUuPUrGr8cMU+iMhPjG0Q+e5l6IAsI5pVMpwrn 0DYYkmU2krLUOAqo8r+LxfccLvzVtieKkab5tc7+y9fO3sjYOByg+XTAAoA1zI3r rdYucSXJ7/E5RDK7PK8MFIRoOqurRM3hRXTWEcGK2jO5SDkmIlN17QIUS7OYAfIZ nhPEq2lGN6VudCqf27buR16o5ljYq9J8YovJsaqdETNQ99T/yRgU2csrm4cBkLVG C5IRdv9JROzftMjA0RpmJlRVAIjQ8UeLgQ94hdLjPf5oMGIbtNIK3aJ1us9Lr0Ko rKm8MDEhQIJqDMZhso3LEyEs+nv99XAs -----END CERTIFICATE-----Generated at Wed May 7 13:12:48 2025 by rpki-client