$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/3167000e-cb0e-3c02-8954-911a60c2a9da.roa File: 3167000e-cb0e-3c02-8954-911a60c2a9da.roa (raw, json) Hash identifier: 57dqQ18j0slV87O1OyY9vx0yN/eZJPHIEhpC2soKQIA= Subject key identifier: 96:69:CE:19:12:2B:4F:FF:0A:5F:6C:94:18:E3:B4:90:13:CD:05:76 Certificate issuer: /CN=ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f Certificate serial: 010D0C9F43285849AD45134773FAF0E8E7E9E300 Authority key identifier: 83:88:B3:BC:24:88:CC:99:8F:F1:E8:77:05:FB:2A:C3:E9:A0:B3:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/3167000e-cb0e-3c02-8954-911a60c2a9da.roa Signing time: Mon 28 Apr 2025 14:27:51 +0000 ROA not before: Mon 28 Apr 2025 14:27:51 +0000 ROA not after: Sun 27 Jul 2025 14:27:51 +0000 asID: 16698 IP address blocks: 2604:f500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:45:13:47:73:fa:f0:e8:e7:e9:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f Validity Not Before: Apr 28 14:27:51 2025 GMT Not After : Jul 27 14:27:51 2025 GMT Subject: CN=c7ff7255-5de9-425b-8292-b755c17c9ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:58:e3:d5:b3:79:21:61:37:fe:e0:1b:ce:f6: 26:87:14:5a:56:e7:6b:11:b2:07:84:e7:7f:1f:89: ba:be:aa:59:23:f8:21:30:41:ef:ab:4b:70:ba:eb: d7:3b:86:5d:34:fb:f5:19:69:ce:f2:48:77:24:25: 5e:c1:ca:cb:d9:a1:69:3a:66:b5:ab:d3:27:90:87: 4e:f7:1c:65:d6:2b:77:b2:7d:97:bb:ff:6b:1f:31: 38:ff:6e:b9:a6:a0:c4:67:2d:e9:f6:75:c7:5f:3d: 64:be:2d:f1:37:15:50:61:67:a6:e4:23:03:38:ed: ec:88:d6:b8:61:b0:ac:9b:6a:fd:56:dd:04:15:cb: 44:ae:8a:dc:1f:6d:2b:16:ba:fe:2e:40:b1:ad:b2: bf:51:72:5a:57:59:a7:9e:a3:e3:d3:e8:37:f5:1d: 1a:ce:bd:57:d4:bd:1a:a0:71:f3:2e:26:77:75:77: b5:0b:5c:79:fa:09:e1:1e:0a:59:38:5e:1a:b7:79: e3:c7:3c:3e:c2:40:ad:df:2e:fc:8a:59:2a:bb:3d: 28:b1:a5:d3:ea:20:8b:f1:a8:a0:60:5f:2a:0d:2b: ec:eb:bb:a8:5f:7d:e4:7d:22:cd:0f:bb:31:22:af: 20:cd:6b:5b:c7:95:35:39:9c:47:41:6a:38:c8:00: 91:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:69:CE:19:12:2B:4F:FF:0A:5F:6C:94:18:E3:B4:90:13:CD:05:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/3167000e-cb0e-3c02-8954-911a60c2a9da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.crl X509v3 Authority Key Identifier: keyid:83:88:B3:BC:24:88:CC:99:8F:F1:E8:77:05:FB:2A:C3:E9:A0:B3:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer sbgp-ipAddrBlock: critical IPv6: 2604:f500::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:53:85:66:75:53:a0:9b:81:c3:f8:6c:a4:ca:c7:6a:2e:1d: 8b:69:57:64:dc:73:14:02:f6:b8:21:d8:62:53:bb:e8:3f:92: 4c:49:5e:cf:c2:f7:40:ba:57:cd:b0:ed:b1:ca:15:8f:e4:1b: ec:6c:0d:b6:2e:cf:8d:aa:2f:3e:7d:a3:8b:98:fe:07:a9:97: 58:1d:29:71:f1:21:3a:56:81:f5:61:38:b1:ec:12:87:a3:a5: 5a:0a:3f:35:d5:d6:11:cf:60:e0:a2:53:ce:cb:18:ae:90:57: 78:f0:75:f0:76:f5:15:12:80:be:be:2c:23:8c:c3:1b:cd:9a: d0:52:fc:92:5a:23:1c:25:df:65:15:73:74:ee:a6:ea:7f:37: b5:44:ea:07:a6:e9:c6:f0:f9:19:fd:5e:4e:eb:98:c5:56:c6: d0:41:bc:75:be:f8:ea:d1:67:ca:ed:0a:1c:49:0f:1d:d5:39: d3:5f:82:ce:2d:17:ad:e0:3f:74:7a:24:87:ec:ae:e3:4f:53: 9c:a8:cf:e0:72:be:54:fb:48:53:7d:40:60:6e:a8:68:ed:03: f1:04:b9:61:c5:8d:ba:25:eb:98:cf:e7:03:64:56:5d:b0:d3: a8:9a:7f:b6:18:0a:0a:fc:97:a7:c2:da:4a:2a:63:23:e6:a7: c7:84:9e:26 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmtRRNHc/rw6Ofp4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE4YzFkNDEtMmM3Yy00OTA1LThkZWItYzZhNTBlMWQ3 ZTJmMB4XDTI1MDQyODE0Mjc1MVoXDTI1MDcyNzE0Mjc1MVowLzEtMCsGA1UEAxMk YzdmZjcyNTUtNWRlOS00MjViLTgyOTItYjc1NWMxN2M5YWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFjj1bN5IWE3/uAbzvYmhxRaVudrEbIHhOd/ H4m6vqpZI/ghMEHvq0twuuvXO4ZdNPv1GWnO8kh3JCVewcrL2aFpOma1q9MnkIdO 9xxl1it3sn2Xu/9rHzE4/265pqDEZy3p9nXHXz1kvi3xNxVQYWem5CMDOO3siNa4 YbCsm2r9Vt0EFctErorcH20rFrr+LkCxrbK/UXJaV1mnnqPj0+g39R0azr1X1L0a oHHzLiZ3dXe1C1x5+gnhHgpZOF4at3njxzw+wkCt3y78ilkquz0osaXT6iCL8aig YF8qDSvs67uoX33kfSLND7sxIq8gzWtbx5U1OZxHQWo4yACRSwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJZpzhkSK0//Cl9slBjjtJATzQV2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYThj MWQ0MS0yYzdjLTQ5MDUtOGRlYi1jNmE1MGUxZDdlMmYvMzE2NzAwMGUtY2IwZS0z YzAyLTg5NTQtOTExYTYwYzJhOWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmE4YzFkNDEtMmM3Yy00OTA1LThk ZWItYzZhNTBlMWQ3ZTJmL2JhOGMxZDQxLTJjN2MtNDkwNS04ZGViLWM2YTUwZTFk N2UyZi5jcmwwHwYDVR0jBBgwFoAUg4izvCSIzJmP8eh3Bfsqw+mgs84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYThjMWQ0MS0yYzdjLTQ5MDUtOGRlYi1jNmE1 MGUxZDdlMmYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT1ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAYU4VmdVOgm4HD+GykysdqLh2LaVdk3HMUAva4IdhiU7voP5JMSV7P wvdAulfNsO2xyhWP5BvsbA22Ls+Nqi8+faOLmP4HqZdYHSlx8SE6VoH1YTix7BKH o6VaCj811dYRz2DgolPOyxiukFd48HXwdvUVEoC+viwjjMMbzZrQUvySWiMcJd9l FXN07qbqfze1ROoHpunG8PkZ/V5O65jFVsbQQbx1vvjq0WfK7QocSQ8d1TnTX4LO LRet4D90eiSH7K7jT1OcqM/gcr5U+0hTfUBgbqho7QPxBLlhxY26JeuYz+cDZFZd sNOomn+2GAoK/JenwtpKKmMj5qfHhJ4m -----END CERTIFICATE-----Generated at Tue May 13 06:27:08 2025 by rpki-client