$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/d20775c3-e8c6-3670-bcaa-7f7e68cebf51.roa File: d20775c3-e8c6-3670-bcaa-7f7e68cebf51.roa (raw, json) Hash identifier: nZ6LQEupsHBgfkPLEHKbh13fU9IxU/k0qFyk1qnVaPA= Subject key identifier: 8E:81:2F:9D:9A:18:7D:AC:F6:25:98:C5:F0:06:C6:63:44:E0:A0:0F Certificate issuer: /CN=f1fa0620-c80f-4a94-9e95-ead44fb79978 Certificate serial: 010D0C9F43285849ABB4A7530255D1EFE3B8CE20 Authority key identifier: A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/d20775c3-e8c6-3670-bcaa-7f7e68cebf51.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 399358 IP address blocks: 2607:6bc0::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:a7:53:02:55:d1:ef:e3:b8:ce:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1fa0620-c80f-4a94-9e95-ead44fb79978 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=75d08de0-4c6a-4a00-8d81-c0dc1dd3b209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:69:eb:21:9b:c6:f6:65:06:a4:7f:9c:30:1d: 32:9d:dd:7e:ff:ee:79:76:78:d9:18:cc:2d:31:95: 0c:63:e7:4a:8b:3e:e4:b1:21:09:cc:81:89:d7:a9: d2:e1:ad:e5:a5:37:c0:70:9e:4a:2c:8d:51:2b:10: f1:1c:af:ff:39:7e:10:bc:d6:db:30:68:0d:2c:a9: d0:8f:15:6c:aa:99:39:f3:b1:aa:6a:46:8c:ef:fe: 87:9b:b8:30:f7:43:29:21:36:8a:03:84:c9:70:62: 53:1d:e9:00:f6:af:f4:2c:d4:bd:bd:14:50:63:8c: f7:20:fe:80:b6:85:fb:f6:50:b9:96:d3:5a:3f:77: 91:48:a7:24:89:42:b3:73:e6:61:cd:90:3b:50:4c: 68:f4:1d:6d:24:9b:62:3e:a4:58:3f:c6:b7:5e:bd: 57:11:e5:87:88:58:85:76:a9:c9:3e:a2:9d:a3:c7: 6e:58:1a:1a:70:7b:28:c3:f5:11:d8:1f:9b:b3:a8: 68:f9:cb:6e:08:c6:74:2e:e6:a2:68:c8:8e:be:7c: 15:05:99:3c:c0:26:17:4e:ba:d3:36:ca:72:99:76: ce:61:1f:4b:3a:cb:e5:71:57:c2:46:29:7f:53:8b: 1c:ed:95:47:b5:ee:c3:cb:57:ef:92:6f:ef:0e:d9: 2e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:81:2F:9D:9A:18:7D:AC:F6:25:98:C5:F0:06:C6:63:44:E0:A0:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/d20775c3-e8c6-3670-bcaa-7f7e68cebf51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl X509v3 Authority Key Identifier: keyid:A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer sbgp-ipAddrBlock: critical IPv6: 2607:6bc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:82:1c:f7:99:c4:15:13:5f:60:f7:3a:bb:d1:07:57:0a:bc: b6:cc:ee:76:45:7e:79:3e:55:fa:d0:61:e5:09:f3:e0:c5:b7: 8e:fd:7b:50:16:4b:d1:17:90:e1:73:89:b3:29:fe:d6:78:fd: 1c:42:4f:d5:0a:c2:66:76:e5:5f:08:6a:63:3e:c8:3b:d4:62: 90:b3:ec:5d:9d:16:17:a3:49:e4:63:68:6f:ef:a8:9a:a9:00: 08:dd:a9:80:ab:3c:ab:6a:f2:4e:a0:94:bf:9e:c7:52:49:43: 6f:ab:85:9a:bb:71:7e:26:ee:bf:1a:a2:7a:80:53:c9:d6:70: b7:b2:d0:de:e8:5b:aa:a4:85:e1:3f:78:0f:59:06:e4:02:5b: b4:b6:73:07:15:e1:67:c8:82:b2:54:8f:04:67:c8:5b:a0:68: f5:4b:2e:6e:62:b5:a6:4c:ba:cc:d5:1e:05:a5:79:34:ed:ff: 61:f8:67:e6:c8:dd:55:74:c7:cf:8f:2d:11:a3:e4:90:0e:3a: 2b:1d:ad:da:fd:76:45:e6:8e:f3:b3:c3:19:62:87:b8:6a:4a: 0d:6c:2f:24:fe:46:b1:54:66:74:ea:bf:7f:80:5f:93:92:01: 7f:6e:be:63:e2:35:14:a4:61:65:4c:af:92:45:8c:1d:53:79: 6d:9b:f6:33 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmrtKdTAlXR7+O4ziAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjFmYTA2MjAtYzgwZi00YTk0LTllOTUtZWFkNDRmYjc5 OTc4MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk NzVkMDhkZTAtNGM2YS00YTAwLThkODEtYzBkYzFkZDNiMjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmnrIZvG9mUGpH+cMB0ynd1+/+55dnjZGMwt MZUMY+dKiz7ksSEJzIGJ16nS4a3lpTfAcJ5KLI1RKxDxHK//OX4QvNbbMGgNLKnQ jxVsqpk587GqakaM7/6Hm7gw90MpITaKA4TJcGJTHekA9q/0LNS9vRRQY4z3IP6A toX79lC5ltNaP3eRSKckiUKzc+ZhzZA7UExo9B1tJJtiPqRYP8a3Xr1XEeWHiFiF dqnJPqKdo8duWBoacHsow/UR2B+bs6ho+ctuCMZ0LuaiaMiOvnwVBZk8wCYXTrrT NspymXbOYR9LOsvlcVfCRil/U4sc7ZVHte7Dy1fvkm/vDtkuTwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI6BL52aGH2s9iWYxfAGxmNE4KAPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mMWZh MDYyMC1jODBmLTRhOTQtOWU5NS1lYWQ0NGZiNzk5NzgvZDIwNzc1YzMtZThjNi0z NjcwLWJjYWEtN2Y3ZTY4Y2ViZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjFmYTA2MjAtYzgwZi00YTk0LTll OTUtZWFkNDRmYjc5OTc4L2YxZmEwNjIwLWM4MGYtNGE5NC05ZTk1LWVhZDQ0ZmI3 OTk3OC5jcmwwHwYDVR0jBBgwFoAUphG/cQGHxBw5AaKqJrnTgQz+K3QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mMWZhMDYyMC1jODBmLTRhOTQtOWU5NS1lYWQ0 NGZiNzk5NzguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdrwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCJghz3mcQVE19g9zq70QdXCry2zO52RX55PlX60GHlCfPgxbeO/XtQ FkvRF5Dhc4mzKf7WeP0cQk/VCsJmduVfCGpjPsg71GKQs+xdnRYXo0nkY2hv76ia qQAI3amAqzyravJOoJS/nsdSSUNvq4Wau3F+Ju6/GqJ6gFPJ1nC3stDe6FuqpIXh P3gPWQbkAlu0tnMHFeFnyIKyVI8EZ8hboGj1Sy5uYrWmTLrM1R4FpXk07f9h+Gfm yN1VdMfPjy0Ro+SQDjorHa3a/XZF5o7zs8MZYoe4akoNbC8k/kaxVGZ06r9/gF+T kgF/br5j4jUUpGFlTK+SRYwdU3ltm/Yz -----END CERTIFICATE-----Generated at Sat May 10 11:18:58 2025 by rpki-client