$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/8674162a-9330-33c7-b0e9-15290762bc3b.roa File: 8674162a-9330-33c7-b0e9-15290762bc3b.roa (raw, json) Hash identifier: cbWmXm9gkgVePbEW+3cmAIqGZB1MZQruc8LdAm9kgJs= Subject key identifier: 57:4D:B7:C8:11:0B:F8:EA:25:3E:D2:52:3F:AE:8D:CF:F6:B1:0A:BC Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F432858494469406AFBC963C15E4BD180 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/8674162a-9330-33c7-b0e9-15290762bc3b.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 2153 IP address blocks: 2607:f380:4:4004::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:40:6a:fb:c9:63:c1:5e:4b:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=d3a9c01d-65bb-45c0-af32-df900c33dc3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:88:c0:f3:ea:1e:39:c4:50:94:35:b1:5a:cd: c9:c7:0c:76:a4:57:77:1f:6b:57:90:a7:46:4a:48: ac:0e:bb:95:13:39:25:c0:17:d2:ba:b1:fd:ab:53: d5:b5:37:05:54:95:e4:60:0d:b5:9e:2a:5a:ce:db: 51:e8:7f:db:1b:4a:f3:02:d1:db:3f:1f:29:64:7b: cf:14:24:4c:f3:c0:23:fe:4f:f7:66:72:c3:f2:b3: 4f:4c:f5:d0:20:79:0d:d8:e5:e6:7a:22:e0:03:93: ba:5a:40:07:63:82:04:55:39:5b:19:93:c0:a4:45: 7f:51:3c:15:b6:71:37:2f:ad:65:af:42:79:39:2b: 19:58:c6:fa:71:55:d5:97:4d:05:3c:10:b8:80:ce: 3b:e4:cd:27:77:c6:31:38:4a:bb:27:68:7e:ca:92: 99:b1:1f:25:db:a0:aa:a0:95:76:5c:7c:49:08:3f: 80:71:e8:da:cb:70:7d:0a:34:bd:d2:c9:9e:fe:ca: 61:c1:0e:e4:3a:91:82:0a:c9:e5:36:52:73:0e:1f: ed:80:de:a0:49:13:e9:5b:82:03:cb:08:d3:da:b0: 96:91:a9:de:f2:13:b6:d7:2b:db:c1:d5:b3:35:0c: 14:23:ea:cb:f2:47:ce:16:78:d7:a9:03:d0:b0:e6: 07:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4D:B7:C8:11:0B:F8:EA:25:3E:D2:52:3F:AE:8D:CF:F6:B1:0A:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/8674162a-9330-33c7-b0e9-15290762bc3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv6: 2607:f380:4:4004::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:0f:d2:5d:ea:3f:15:35:41:87:88:f1:7b:6c:6b:89:de:09: 28:76:3d:23:f9:e4:cc:57:2d:06:b0:c2:9a:a1:4f:ed:f3:95: f6:d2:bd:27:be:2f:d3:30:48:0a:f1:cf:ca:c0:79:56:d4:57: 0e:aa:a4:5f:cb:54:a6:b1:c2:61:09:5b:35:1a:c7:5b:03:f4: bf:bc:aa:bb:57:7d:91:ed:87:23:7f:f1:1f:cc:43:b3:34:86: e9:78:8f:24:ef:4f:71:4d:f0:c2:4f:8e:7a:26:1b:c1:c7:e1: 52:17:9e:8b:bc:bb:bc:e8:35:6e:6e:6c:a6:4d:b2:7f:a3:01: e7:51:02:78:85:14:ec:4e:d8:67:b6:df:9f:b5:57:ae:62:42: 46:90:d2:1c:f4:33:41:78:29:32:6e:79:83:9a:ab:6c:22:5b: e2:99:db:8c:b1:56:34:7b:b9:58:05:90:4b:0a:37:5f:c3:10: 2c:85:c4:f5:f8:f1:76:be:52:6a:7d:44:07:82:e6:d0:62:8c: 0b:3c:45:71:9b:eb:5d:db:87:aa:7d:c4:fb:6f:3a:83:a1:d2: d0:55:1d:62:62:d5:b1:58:7b:6e:8a:27:c4:58:f7:12:0a:85: 53:7e:99:29:bd:3d:b8:10:2b:17:37:fc:18:a5:c1:21:73:37: ec:5e:8f:60 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWElEaUBq+8ljwV5L0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk ZDNhOWMwMWQtNjViYi00NWMwLWFmMzItZGY5MDBjMzNkYzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ojA8+oeOcRQlDWxWs3Jxwx2pFd3H2tXkKdG SkisDruVEzklwBfSurH9q1PVtTcFVJXkYA21nipazttR6H/bG0rzAtHbPx8pZHvP FCRM88Aj/k/3ZnLD8rNPTPXQIHkN2OXmeiLgA5O6WkAHY4IEVTlbGZPApEV/UTwV tnE3L61lr0J5OSsZWMb6cVXVl00FPBC4gM475M0nd8YxOEq7J2h+ypKZsR8l26Cq oJV2XHxJCD+Acejay3B9CjS90sme/sphwQ7kOpGCCsnlNlJzDh/tgN6gSRPpW4ID ywjT2rCWkane8hO21yvbwdWzNQwUI+rL8kfOFnjXqQPQsOYH1wIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFFdNt8gRC/jqJT7SUj+ujc/2sQq8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvODY3NDE2MmEtOTMzMC0z M2M3LWIwZTktMTUyOTA3NjJiYzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgfzgAAE QAQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEADQ/SXeo/FTVBh4jxe2xrid4JKHY9I/nkzFctBrDCmqFP7fOV 9tK9J74v0zBICvHPysB5VtRXDqqkX8tUprHCYQlbNRrHWwP0v7yqu1d9ke2HI3/x H8xDszSG6XiPJO9PcU3wwk+OeiYbwcfhUheei7y7vOg1bm5spk2yf6MB51ECeIUU 7E7YZ7bfn7VXrmJCRpDSHPQzQXgpMm55g5qrbCJb4pnbjLFWNHu5WAWQSwo3X8MQ LIXE9fjxdr5San1EB4Lm0GKMCzxFcZvrXduHqn3E+286g6HS0FUdYmLVsVh7boon xFj3EgqFU36ZKb09uBArFzf8GKXBIXM37F6PYA== -----END CERTIFICATE-----Generated at Sun May 11 04:39:37 2025 by rpki-client