$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa File: 3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa (raw, json) Hash identifier: GPOK2M6Dxj7IKb3nyJw/RnorB/EfWgRDeEFLQos/agQ= Subject key identifier: 85:42:D2:71:55:E8:D5:08:87:25:2D:63:1E:C6:7C:41:F3:59:5A:FB Certificate issuer: /CN=32e58881-6422-4e0d-9578-7c256d9f70bc Certificate serial: 010D0C9F43285849BF3F66DC9D8AC1E404479B20 Authority key identifier: F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 398191 IP address blocks: 2607:c7c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:66:dc:9d:8a:c1:e4:04:47:9b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e58881-6422-4e0d-9578-7c256d9f70bc Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=cc964e02-5b47-4f10-873f-537974faf802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2d:ea:a7:8d:d5:f0:44:62:a3:b0:60:f8:11: e5:ad:e5:f8:1f:49:ad:66:dd:a4:ff:72:02:33:51: 8f:bc:4a:97:c9:af:37:2a:73:e4:6c:e0:19:e7:70: d1:81:ca:ed:a8:01:9a:a0:97:01:32:3d:77:78:2e: 71:98:13:4b:78:75:56:15:54:15:7b:fb:f4:05:98: f2:e0:ee:a2:57:74:d9:60:ae:95:67:0f:e8:b6:61: 2d:e0:c2:97:ab:a3:52:2a:29:63:ab:d3:40:ec:1f: 78:72:06:a4:dd:c4:29:e2:75:90:d9:84:b4:1c:c2: 2d:0e:7c:8b:1e:2a:58:b5:83:9f:d6:67:52:d7:1b: 17:08:27:84:75:51:ed:68:2a:98:f5:a8:d0:35:54: 34:0d:8f:d4:d3:f8:d0:44:78:90:bc:11:96:2e:7e: f4:79:08:52:10:23:8b:e6:cb:25:ab:b0:90:5a:50: a7:7b:4c:81:0f:0c:1f:bd:d9:45:e4:43:49:6f:e0: e9:ca:2e:df:dc:35:7b:f3:74:8b:3c:0f:ff:34:63: 3e:c3:2b:79:2a:04:2d:95:0f:a3:d6:01:cc:e8:64: 8f:b5:f8:e3:a9:0c:21:81:9b:1c:a8:ed:09:22:6e: 11:eb:7d:0f:b4:96:0e:e8:fe:a1:03:1b:bf:f3:80: 1e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:42:D2:71:55:E8:D5:08:87:25:2D:63:1E:C6:7C:41:F3:59:5A:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl X509v3 Authority Key Identifier: keyid:F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer sbgp-ipAddrBlock: critical IPv6: 2607:c7c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:74:fc:bc:61:40:8b:2c:6c:bf:b8:0d:34:42:12:ae:30:63: 69:f7:b6:9a:ca:e9:33:20:08:e6:a9:cc:42:38:20:55:18:55: 88:68:dd:f8:44:99:86:9d:f9:45:6e:2e:1a:74:a5:e6:f5:ff: da:25:b2:5c:09:e9:7e:65:b3:9b:4b:4c:62:1b:19:d3:79:7e: 67:8f:7b:3e:3e:e9:4e:25:b5:62:0d:0a:23:42:8d:24:62:e6: 00:6f:08:97:d0:20:c4:fe:8d:66:39:b2:e7:0d:78:6f:e6:90: 18:b3:08:83:6b:7a:87:18:4c:d2:a6:c3:07:15:89:df:50:c0: 94:a4:4b:b9:c8:51:26:76:ee:56:52:91:60:e6:8a:66:70:87: a1:f9:86:40:ba:e1:43:32:f2:4f:91:28:91:9f:39:0a:3d:f6: 75:5c:a9:fb:0f:33:ea:0d:5d:a8:c4:33:10:13:19:11:a1:5f: 5b:4e:6f:cc:12:e4:23:2b:c6:5c:61:22:90:0d:5f:f4:e2:89: 6e:51:bc:4c:56:b3:cb:c5:2b:52:fe:2d:2c:54:e3:80:df:d2: c8:78:02:25:f6:7b:8e:7d:e2:18:c9:10:57:c6:d9:08:61:74: 72:8b:f4:e1:c2:bf:c9:79:e5:1e:56:91:2a:71:d3:01:3f:e3: dc:8e:85:b7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P2bcnYrB5ARHmyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlNTg4ODEtNjQyMi00ZTBkLTk1NzgtN2MyNTZkOWY3 MGJjMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk Y2M5NjRlMDItNWI0Ny00ZjEwLTg3M2YtNTM3OTc0ZmFmODAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3S3qp43V8ERio7Bg+BHlreX4H0mtZt2k/3IC M1GPvEqXya83KnPkbOAZ53DRgcrtqAGaoJcBMj13eC5xmBNLeHVWFVQVe/v0BZjy 4O6iV3TZYK6VZw/otmEt4MKXq6NSKiljq9NA7B94cgak3cQp4nWQ2YS0HMItDnyL HipYtYOf1mdS1xsXCCeEdVHtaCqY9ajQNVQ0DY/U0/jQRHiQvBGWLn70eQhSECOL 5sslq7CQWlCne0yBDwwfvdlF5ENJb+Dpyi7f3DV783SLPA//NGM+wyt5KgQtlQ+j 1gHM6GSPtfjjqQwhgZscqO0JIm4R630PtJYO6P6hAxu/84AekQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIVC0nFV6NUIhyUtYx7GfEHzWVr7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMmU1 ODg4MS02NDIyLTRlMGQtOTU3OC03YzI1NmQ5ZjcwYmMvM2E2ZTc1YTEtYzljMS0z Y2U4LTg3MDktNjc1OGNmYTFlYWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzJlNTg4ODEtNjQyMi00ZTBkLTk1 NzgtN2MyNTZkOWY3MGJjLzMyZTU4ODgxLTY0MjItNGUwZC05NTc4LTdjMjU2ZDlm NzBiYy5jcmwwHwYDVR0jBBgwFoAU83rr+TDV35aceSJR1H1McDXM7c8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMmU1ODg4MS02NDIyLTRlMGQtOTU3OC03YzI1 NmQ5ZjcwYmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfHwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQANdPy8YUCLLGy/uA00QhKuMGNp97aayukzIAjmqcxCOCBVGFWIaN34 RJmGnflFbi4adKXm9f/aJbJcCel+ZbObS0xiGxnTeX5nj3s+PulOJbViDQojQo0k YuYAbwiX0CDE/o1mObLnDXhv5pAYswiDa3qHGEzSpsMHFYnfUMCUpEu5yFEmdu5W UpFg5opmcIeh+YZAuuFDMvJPkSiRnzkKPfZ1XKn7DzPqDV2oxDMQExkRoV9bTm/M EuQjK8ZcYSKQDV/04oluUbxMVrPLxStS/i0sVOOA39LIeAIl9nuOfeIYyRBXxtkI YXRyi/Thwr/JeeUeVpEqcdMBP+PcjoW3 -----END CERTIFICATE-----Generated at Sat May 10 17:35:51 2025 by rpki-client