$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/c173112d-6d57-32b2-bb71-b30e11554b91.roa File: c173112d-6d57-32b2-bb71-b30e11554b91.roa (raw, json) Hash identifier: cIeZ/TSuFJsuMgrqq9BcgB9v946xgBiq8vwxvL+tSU4= Subject key identifier: 32:C1:22:ED:19:4A:81:03:59:EE:5A:10:4B:6F:79:63:B5:5D:76:2D Certificate issuer: /CN=8cb29b44-8f5c-4462-bb13-d72b4e15e20d Certificate serial: 010D0C9F43285849B14A03A6D4CBBBD9ACE0E640 Authority key identifier: 92:DD:F4:0B:DD:98:98:64:EC:5A:DC:E0:F4:C0:20:1B:B0:64:7B:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/c173112d-6d57-32b2-bb71-b30e11554b91.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 1299 IP address blocks: 2607:41c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:03:a6:d4:cb:bb:d9:ac:e0:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cb29b44-8f5c-4462-bb13-d72b4e15e20d Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=b04227fe-2a67-4aca-9287-f7ec33658f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2b:e2:73:ef:6e:cc:19:c8:61:52:9d:a6:af: 0b:69:45:96:e6:f0:c2:bb:3a:d9:b1:25:ed:e4:d2: 4f:04:77:2f:13:35:67:a3:47:f2:40:61:ce:fc:75: 07:35:2f:b6:49:f9:66:f7:c0:08:91:28:66:c6:d9: 20:68:7e:d0:19:8f:0c:48:c4:f3:fe:da:12:4b:70: c6:7a:5c:ea:7b:b7:69:07:02:71:1f:58:40:93:9f: c0:3d:d0:04:ea:33:69:2d:5e:c0:80:dd:00:32:62: 86:41:e8:14:06:3a:d4:43:d1:7b:7f:8c:22:e9:04: bd:c9:26:ee:69:5b:d2:3c:e6:ea:b0:2a:70:b8:3a: d0:70:04:15:63:7c:ce:77:97:9d:13:c3:21:b1:d0: fa:42:f1:ca:7e:64:4c:bd:6d:2c:cc:7d:c6:38:8f: 0e:9e:d6:55:13:2c:b7:63:83:ce:11:45:b0:40:f3: 05:92:33:0c:e5:ce:a8:36:12:3d:c0:0a:4f:37:36: 2f:96:85:64:2d:a8:72:12:ca:e9:f9:85:42:49:46: 29:bb:60:83:8f:b3:be:de:69:d5:00:45:f0:86:80: 86:9b:37:2c:e3:ea:61:de:20:d5:f1:b8:a1:55:86: 78:61:0d:e2:e9:41:ee:7a:97:b5:3e:b6:63:04:95: 98:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C1:22:ED:19:4A:81:03:59:EE:5A:10:4B:6F:79:63:B5:5D:76:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/c173112d-6d57-32b2-bb71-b30e11554b91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.crl X509v3 Authority Key Identifier: keyid:92:DD:F4:0B:DD:98:98:64:EC:5A:DC:E0:F4:C0:20:1B:B0:64:7B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.cer sbgp-ipAddrBlock: critical IPv6: 2607:41c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:23:95:8e:d9:c8:be:ae:e1:1a:2a:83:e4:11:52:d8:77:a2: 12:84:81:8e:46:5e:ad:d7:44:91:ed:62:e7:4f:04:d1:45:f0: 49:ed:5c:00:a8:01:3c:26:a4:62:82:90:72:01:4c:1f:4c:97: 56:f7:f8:47:1a:66:24:2e:f0:0c:cd:30:58:56:d9:19:d9:af: c4:af:11:ee:59:4a:be:38:4f:80:7e:eb:e0:77:35:9f:92:94: cb:34:ea:1d:7d:75:64:d5:de:42:bd:03:45:a7:64:3c:43:7d: 7e:e4:b8:97:3c:3d:5d:5a:f5:86:04:3d:25:3b:b9:af:3d:fd: 37:6f:3d:bc:3f:7a:c2:5f:ed:d2:6e:f5:6d:98:ec:e8:dc:55: ba:d9:df:4e:7e:25:d6:13:c7:14:7b:de:73:c0:5a:34:1d:9d: 81:ee:d0:34:37:cb:b9:12:b8:a8:3e:39:2c:a1:33:be:90:49: 76:7f:61:4b:19:0f:e4:d3:6e:42:18:d8:75:ca:ee:93:f4:a4: 82:1f:a9:ec:17:09:d4:aa:79:63:81:e1:a6:bd:1a:d9:d4:64: fc:53:a2:7b:fa:26:e3:e8:8d:51:fc:6f:8a:71:37:71:c2:71: 82:7f:8d:55:70:6b:a0:11:0a:4b:65:38:8b:f3:46:18:76:53: 55:cb:4f:b6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmxSgOm1Mu72azg5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNiMjliNDQtOGY1Yy00NDYyLWJiMTMtZDcyYjRlMTVl MjBkMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YjA0MjI3ZmUtMmE2Ny00YWNhLTkyODctZjdlYzMzNjU4ZjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCvic+9uzBnIYVKdpq8LaUWW5vDCuzrZsSXt 5NJPBHcvEzVno0fyQGHO/HUHNS+2Sflm98AIkShmxtkgaH7QGY8MSMTz/toSS3DG elzqe7dpBwJxH1hAk5/APdAE6jNpLV7AgN0AMmKGQegUBjrUQ9F7f4wi6QS9ySbu aVvSPObqsCpwuDrQcAQVY3zOd5edE8MhsdD6QvHKfmRMvW0szH3GOI8OntZVEyy3 Y4POEUWwQPMFkjMM5c6oNhI9wApPNzYvloVkLahyEsrp+YVCSUYpu2CDj7O+3mnV AEXwhoCGmzcs4+ph3iDV8bihVYZ4YQ3i6UHuepe1PrZjBJWYAQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDLBIu0ZSoEDWe5aEEtveWO1XXYtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84Y2Iy OWI0NC04ZjVjLTQ0NjItYmIxMy1kNzJiNGUxNWUyMGQvYzE3MzExMmQtNmQ1Ny0z MmIyLWJiNzEtYjMwZTExNTU0YjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGNiMjliNDQtOGY1Yy00NDYyLWJi MTMtZDcyYjRlMTVlMjBkLzhjYjI5YjQ0LThmNWMtNDQ2Mi1iYjEzLWQ3MmI0ZTE1 ZTIwZC5jcmwwHwYDVR0jBBgwFoAUkt30C92YmGTsWtzg9MAgG7Bke3UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84Y2IyOWI0NC04ZjVjLTQ0NjItYmIxMy1kNzJi NGUxNWUyMGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdBwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAII5WO2ci+ruEaKoPkEVLYd6IShIGORl6t10SR7WLnTwTRRfBJ7VwA qAE8JqRigpByAUwfTJdW9/hHGmYkLvAMzTBYVtkZ2a/ErxHuWUq+OE+AfuvgdzWf kpTLNOodfXVk1d5CvQNFp2Q8Q31+5LiXPD1dWvWGBD0lO7mvPf03bz28P3rCX+3S bvVtmOzo3FW62d9OfiXWE8cUe95zwFo0HZ2B7tA0N8u5ErioPjksoTO+kEl2f2FL GQ/k025CGNh1yu6T9KSCH6nsFwnUqnljgeGmvRrZ1GT8U6J7+ibj6I1R/G+KcTdx wnGCf41VcGugEQpLZTiL80YYdlNVy0+2 -----END CERTIFICATE-----Generated at Tue May 6 18:33:56 2025 by rpki-client