$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/85bba22a-31d7-3277-9d23-3f253e7d429a.roa File: 85bba22a-31d7-3277-9d23-3f253e7d429a.roa (raw, json) Hash identifier: 4R4QOdgN+UffrMRVCvUay5UiwVkTUXTODBEgRfN4ZMM= Subject key identifier: 49:4B:16:14:85:3B:B0:AE:6E:02:45:D3:99:37:29:35:4F:5C:FC:AE Certificate issuer: /CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c Certificate serial: 010D0C9F43285849C0A4D2C2758A3BEE7C59FB80 Authority key identifier: 45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/85bba22a-31d7-3277-9d23-3f253e7d429a.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 6653 IP address blocks: 2604:280::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:d2:c2:75:8a:3b:ee:7c:59:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=75e198a3-4ad2-4dd7-af02-79fca0121ca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:65:37:c3:b0:2a:65:43:0b:96:e4:f0:e9:0e: a7:66:10:28:6e:ed:6f:ca:79:72:be:6c:79:18:b8: ec:c0:15:83:96:bb:f3:8b:8b:52:01:d0:a0:4c:7b: 17:85:16:16:2a:9f:a5:68:76:9f:31:4f:8e:e0:79: eb:93:eb:de:51:28:07:9d:95:2d:2e:f8:ef:39:43: f1:dd:23:52:59:31:0d:8e:b0:85:bc:e2:26:9f:5c: 93:a8:4c:d9:a0:62:e2:84:0d:10:d8:d5:89:e2:ac: 3c:d3:49:91:f3:dc:7b:2e:59:2c:bb:63:6e:bd:1f: 7b:41:13:da:c9:1b:d4:90:d6:ff:b6:3d:ee:21:54: 91:33:54:3c:5f:ac:57:1e:06:a5:34:b1:b3:b2:4e: 48:b1:b2:7b:71:32:6f:fc:3e:76:72:1e:3e:57:3d: 43:01:d9:4f:82:32:b4:11:43:91:fe:d6:28:d9:85: 5a:bb:3b:1f:89:03:32:91:f2:6d:50:a8:2f:e5:7d: 6d:62:b4:46:31:2d:d3:75:a4:37:d1:2c:5f:0a:ab: b9:e6:71:ed:c6:db:f8:e9:18:be:65:4c:37:55:16: 85:54:a0:f5:e5:60:5d:4d:97:f0:bc:fd:6a:54:5f: ca:d4:9f:fa:a8:e5:31:56:f7:8a:2e:26:83:64:74: 88:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4B:16:14:85:3B:B0:AE:6E:02:45:D3:99:37:29:35:4F:5C:FC:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/85bba22a-31d7-3277-9d23-3f253e7d429a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl X509v3 Authority Key Identifier: keyid:45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer sbgp-ipAddrBlock: critical IPv6: 2604:280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:0b:63:54:4c:dc:5f:32:bd:76:e7:2c:4a:b1:28:83:b0:6e: 23:13:5d:39:ae:a6:b8:a1:00:e7:69:9a:67:ba:37:ab:a6:0d: a5:b2:7a:d0:1d:bf:a3:f0:41:dc:aa:a1:1c:84:13:92:75:60: 55:c8:f6:f3:9b:94:09:48:77:0a:26:e7:f5:19:5c:57:45:f1: e3:bb:78:67:73:92:ff:d0:98:f4:90:56:b3:3e:46:16:1a:6d: 8c:e1:b8:07:ed:6c:29:de:bc:ad:14:e7:f0:7b:ba:12:3e:1f: a7:ef:b2:0c:7f:47:8b:f3:db:fd:c5:ea:8a:47:6b:3b:03:71: 96:96:59:52:1b:04:2a:b1:77:98:81:e6:2c:16:92:0b:1a:45: 01:17:29:4f:2f:92:a7:20:91:2d:25:ac:11:d5:68:06:42:68: 36:93:4a:bb:09:3a:66:ee:9c:f3:fc:06:23:92:2c:97:3d:f4: 08:88:8d:1f:ed:6e:0c:59:d5:3e:43:4d:8a:55:65:a2:d0:f9: f8:3b:b5:d3:e0:64:e1:f9:8f:dd:6c:98:b7:a9:f7:49:f2:2f: 89:db:50:d2:8d:d2:12:ce:1b:4a:30:2a:08:7c:1b:68:60:d2: 72:84:4a:c7:57:ba:82:67:02:6a:1b:ad:70:59:58:f2:1c:4b: c3:32:ae:d9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnApNLCdYo77nxZ+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFjY2ZjOGUtOTY4MC00MDgwLWEzZjQtZWYxYTllMGRj MzZjMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk NzVlMTk4YTMtNGFkMi00ZGQ3LWFmMDItNzlmY2EwMTIxY2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WU3w7AqZUMLluTw6Q6nZhAobu1vynlyvmx5 GLjswBWDlrvzi4tSAdCgTHsXhRYWKp+laHafMU+O4Hnrk+veUSgHnZUtLvjvOUPx 3SNSWTENjrCFvOImn1yTqEzZoGLihA0Q2NWJ4qw800mR89x7Llksu2NuvR97QRPa yRvUkNb/tj3uIVSRM1Q8X6xXHgalNLGzsk5IsbJ7cTJv/D52ch4+Vz1DAdlPgjK0 EUOR/tYo2YVauzsfiQMykfJtUKgv5X1tYrRGMS3TdaQ30SxfCqu55nHtxtv46Ri+ ZUw3VRaFVKD15WBdTZfwvP1qVF/K1J/6qOUxVveKLiaDZHSI+wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFElLFhSFO7CubgJF05k3KTVPXPyuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hMWNj ZmM4ZS05NjgwLTQwODAtYTNmNC1lZjFhOWUwZGMzNmMvODViYmEyMmEtMzFkNy0z Mjc3LTlkMjMtM2YyNTNlN2Q0MjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTFjY2ZjOGUtOTY4MC00MDgwLWEz ZjQtZWYxYTllMGRjMzZjL2ExY2NmYzhlLTk2ODAtNDA4MC1hM2Y0LWVmMWE5ZTBk YzM2Yy5jcmwwHwYDVR0jBBgwFoAURcVOV0j2ImhwS/VuMNIMT3qkLGMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hMWNjZmM4ZS05NjgwLTQwODAtYTNmNC1lZjFh OWUwZGMzNmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQCgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA4C2NUTNxfMr125yxKsSiDsG4jE105rqa4oQDnaZpnujerpg2lsnrQ Hb+j8EHcqqEchBOSdWBVyPbzm5QJSHcKJuf1GVxXRfHju3hnc5L/0Jj0kFazPkYW Gm2M4bgH7Wwp3rytFOfwe7oSPh+n77IMf0eL89v9xeqKR2s7A3GWlllSGwQqsXeY geYsFpILGkUBFylPL5KnIJEtJawR1WgGQmg2k0q7CTpm7pzz/AYjkiyXPfQIiI0f 7W4MWdU+Q02KVWWi0Pn4O7XT4GTh+Y/dbJi3qfdJ8i+J21DSjdISzhtKMCoIfBto YNJyhErHV7qCZwJqG61wWVjyHEvDMq7Z -----END CERTIFICATE-----Generated at Wed May 7 13:11:03 2025 by rpki-client