$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/b640e40a-1d4d-3423-99a0-815a476ab16e.roa File: b640e40a-1d4d-3423-99a0-815a476ab16e.roa (raw, json) Hash identifier: 5AOD2PzKuABLYoZwabUeUhBjmi76IP97+gtLcjH9EkA= Subject key identifier: 3A:3D:79:AE:1E:9D:B0:B9:86:C2:84:9C:B3:1F:92:D9:E5:F8:66:6E Certificate issuer: /CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Certificate serial: 010D0C9F432858498339EF3E53DD3DD0DE916040 Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/b640e40a-1d4d-3423-99a0-815a476ab16e.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 14230 IP address blocks: 2604:9b00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:ef:3e:53:dd:3d:d0:de:91:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3 Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=6a3234ac-3193-4bd6-9d29-a10a0130efd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e7:ef:79:f3:7a:76:2e:52:ff:f2:30:a6:64: 83:9b:a6:91:0b:31:40:16:b1:ca:e0:b1:cf:49:d2: 43:5b:e6:c0:b9:0c:25:2f:36:e3:8e:5d:04:2b:c2: c8:db:d5:49:b5:f3:86:91:8a:e1:8c:20:97:de:56: 2a:c9:a0:13:45:44:13:8c:71:c2:ef:02:26:80:49: 87:7a:34:53:9a:5a:42:42:4b:60:50:85:3e:b4:6d: 95:60:c6:e4:47:f1:ee:08:12:84:ac:13:91:0e:fb: 0d:f4:96:1e:fe:6d:6a:b0:b1:d1:5f:df:da:4f:04: 1a:2d:fb:3c:d6:6d:ae:34:ad:39:65:c3:ed:c3:0c: 78:ef:ce:c7:63:73:33:aa:32:b4:e8:36:b1:70:d5: c8:e8:2b:c4:c8:88:49:18:2a:a0:e1:59:31:88:63: 41:31:97:55:e2:12:65:a0:ac:60:ae:5f:47:c8:4d: bc:82:63:b9:30:5a:bc:55:bf:2f:ca:f1:bb:78:65: 74:d8:89:cb:8a:e3:e3:41:75:67:f2:40:46:f0:3c: 93:1a:b0:d9:8d:ed:67:d2:75:37:19:9e:b7:93:be: b4:11:1a:b0:ea:7f:18:b8:6a:68:10:6b:d0:5b:00: 53:be:4d:1d:22:54:62:3d:8e:d6:c5:d7:59:69:7b: 0f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3D:79:AE:1E:9D:B0:B9:86:C2:84:9C:B3:1F:92:D9:E5:F8:66:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/b640e40a-1d4d-3423-99a0-815a476ab16e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl X509v3 Authority Key Identifier: keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer sbgp-ipAddrBlock: critical IPv6: 2604:9b00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:f7:2a:18:ab:38:d8:21:9b:9f:65:14:6d:ff:32:29:d2:92: ef:c8:05:f3:35:bc:60:42:c2:11:b4:a8:7b:a4:59:c1:ff:e8: 25:1b:df:d3:89:64:d6:57:ff:0c:2b:24:ba:18:27:a6:45:67: 76:45:98:31:af:f8:e5:3f:06:5c:66:9e:de:2c:05:5e:f4:d9: 60:4f:6f:f3:e2:50:04:b8:64:18:64:f6:04:68:18:76:ac:4f: 4d:01:13:bc:04:fa:62:a0:80:86:4b:44:a4:48:39:67:02:fd: bd:b0:fd:a9:d5:d3:c1:91:5c:ac:d8:7a:62:66:8d:94:a9:c3: e0:cb:6f:68:f2:f8:74:43:5f:7e:ef:71:fd:08:f6:7a:1b:51: 99:71:cd:a0:61:5b:f9:75:39:13:0e:5d:ea:5b:8d:68:02:c1: 01:ca:16:a5:5f:58:82:4d:de:a4:a2:39:e7:e1:93:77:bd:71: 63:9b:cf:4d:87:c9:77:24:72:50:c6:c4:5b:fc:0f:10:e1:00: c3:8b:9e:0a:a6:a0:46:48:b5:dc:b6:ce:03:a2:6f:05:4d:56: ed:eb:d5:a2:6b:6f:7b:22:eb:af:52:76:63:27:4b:36:f2:5d: 4b:ed:b6:67:76:4f:49:2e:05:4f:a1:5d:1b:58:16:ef:b6:62: d8:29:ca:cc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmDOe8+U9090N6RYEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhkZjM0NmQtM2Y2Ni00NTU1LWIyYWItNjdmNDUwZWZk Y2IzMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk NmEzMjM0YWMtMzE5My00YmQ2LTlkMjktYTEwYTAxMzBlZmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOfvefN6di5S//IwpmSDm6aRCzFAFrHK4LHP SdJDW+bAuQwlLzbjjl0EK8LI29VJtfOGkYrhjCCX3lYqyaATRUQTjHHC7wImgEmH ejRTmlpCQktgUIU+tG2VYMbkR/HuCBKErBORDvsN9JYe/m1qsLHRX9/aTwQaLfs8 1m2uNK05ZcPtwwx4787HY3MzqjK06DaxcNXI6CvEyIhJGCqg4VkxiGNBMZdV4hJl oKxgrl9HyE28gmO5MFq8Vb8vyvG7eGV02InLiuPjQXVn8kBG8DyTGrDZje1n0nU3 GZ63k760ERqw6n8YuGpoEGvQWwBTvk0dIlRiPY7WxddZaXsP+QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDo9ea4enbC5hsKEnLMfktnl+GZuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yOGRm MzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0NTBlZmRjYjMvYjY0MGU0MGEtMWQ0ZC0z NDIzLTk5YTAtODE1YTQ3NmFiMTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjhkZjM0NmQtM2Y2Ni00NTU1LWIy YWItNjdmNDUwZWZkY2IzLzI4ZGYzNDZkLTNmNjYtNDU1NS1iMmFiLTY3ZjQ1MGVm ZGNiMy5jcmwwHwYDVR0jBBgwFoAU0TE0tLR3LAyK//WCA1AodurlHZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yOGRmMzQ2ZC0zZjY2LTQ1NTUtYjJhYi02N2Y0 NTBlZmRjYjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSbADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAI9yoYqzjYIZufZRRt/zIp0pLvyAXzNbxgQsIRtKh7pFnB/+glG9/T iWTWV/8MKyS6GCemRWd2RZgxr/jlPwZcZp7eLAVe9NlgT2/z4lAEuGQYZPYEaBh2 rE9NARO8BPpioICGS0SkSDlnAv29sP2p1dPBkVys2HpiZo2UqcPgy29o8vh0Q19+ 73H9CPZ6G1GZcc2gYVv5dTkTDl3qW41oAsEByhalX1iCTd6kojnn4ZN3vXFjm89N h8l3JHJQxsRb/A8Q4QDDi54KpqBGSLXcts4Dom8FTVbt69Wia297IuuvUnZjJ0s2 8l1L7bZndk9JLgVPoV0bWBbvtmLYKcrM -----END CERTIFICATE-----Generated at Sat May 10 22:00:16 2025 by rpki-client