$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/fffd3b1d-7e00-3ebd-8580-8c9bf4876472.roa File: fffd3b1d-7e00-3ebd-8580-8c9bf4876472.roa (raw, json) Hash identifier: V5EbB8j7lD1GyAQ7I+ih3dWehlCWJbNjRX1hXe+UZPM= Subject key identifier: F7:E7:9C:0F:56:E9:FB:F0:05:04:66:13:3E:4B:46:36:87:BF:49:B8 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F432858491ED6EDC8BF9FFD53401D2900 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/fffd3b1d-7e00-3ebd-8580-8c9bf4876472.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 16839 IP address blocks: 2606:3600:1110::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:ed:c8:bf:9f:fd:53:40:1d:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=5efc8999-8d1f-4cbe-bd2e-0a08e4e913c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:71:bb:5f:7d:d1:03:fe:76:ab:c4:28:ad:30: 7c:a3:20:ce:39:d9:fe:fb:71:71:b4:b0:bb:b1:d4: 1f:86:f3:61:47:31:84:d5:7a:25:0d:fa:bc:90:b5: a6:5b:1f:ab:f5:15:15:16:c2:42:14:ac:64:1e:e6: 50:9b:79:9d:ac:54:59:50:c9:6d:70:dd:33:3c:be: 9d:d1:97:4e:79:4b:e9:ad:3e:be:99:df:77:7a:8c: 84:1c:20:af:b5:1a:50:b6:ce:09:d5:0c:04:98:e3: 04:44:3d:79:20:a1:40:0d:78:6c:dd:bc:2c:dc:14: bd:9c:7f:2c:0f:26:d3:97:f8:33:79:01:f9:85:fe: 54:1b:89:6b:b1:00:5c:de:57:97:4d:76:e1:dd:7c: 5a:80:97:0c:83:e6:4e:6e:85:f2:a2:0a:4f:36:9c: a5:a2:ac:86:32:dd:ff:5b:8f:59:21:59:fd:7a:2c: 1d:85:80:d4:77:ca:de:dd:00:33:c1:01:e1:fd:7e: 1e:7c:95:cc:ef:2c:a6:20:58:2b:5b:30:3a:95:4e: 08:c3:46:59:df:3b:8f:8d:40:55:e5:ab:d3:74:b9: 83:c2:b4:f4:44:09:65:98:b0:90:aa:ef:60:42:fb: d2:a8:73:07:6a:81:fd:6b:51:a5:2d:9a:24:27:d3: 92:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E7:9C:0F:56:E9:FB:F0:05:04:66:13:3E:4B:46:36:87:BF:49:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/fffd3b1d-7e00-3ebd-8580-8c9bf4876472.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:3600:1110::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:ab:b9:7b:46:1a:33:07:1f:04:15:de:a8:34:89:48:f6:9c: ff:ca:58:ff:62:21:41:c0:5e:e1:65:36:c9:15:60:31:49:01: c0:1d:21:b2:c8:1f:26:70:a0:96:99:15:9a:be:84:07:0b:a5: 56:44:dd:0a:c8:11:db:89:1e:34:fb:ee:ce:27:38:70:fd:76: ae:89:2a:98:78:2f:10:67:df:f5:a8:cf:a5:32:9c:8c:55:1b: bc:4c:48:79:40:28:36:d8:50:2b:05:15:92:69:64:82:e7:33: 4c:4a:7c:de:aa:6b:31:7c:60:cc:0c:6e:fa:51:ef:af:03:e0: f5:1c:e4:0e:09:03:9f:34:e1:51:33:e1:d6:c7:8f:b3:d5:ed: 4c:05:de:05:c0:5f:41:d6:e7:c7:0e:41:9d:05:9e:47:e7:8d: 04:e2:d0:c7:d2:e1:2b:58:80:42:dd:fa:76:36:ea:bb:bb:d5: e5:64:47:29:f1:e7:03:2b:4e:9f:fd:e1:a5:98:2e:d2:b2:d2: a6:50:b5:00:bb:0c:db:18:1a:b7:18:e1:24:37:a6:b9:81:f3: a9:55:14:fa:0c:21:2a:93:b7:01:bb:0a:07:ce:d4:df:d4:aa: 0e:3f:3b:3e:ed:e0:c3:9b:74:40:7c:3d:75:ac:e6:03:44:11: 80:5f:cd:1a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEke1u3Iv5/9U0AdKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk NWVmYzg5OTktOGQxZi00Y2JlLWJkMmUtMGEwOGU0ZTkxM2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHG7X33RA/52q8QorTB8oyDOOdn++3FxtLC7 sdQfhvNhRzGE1XolDfq8kLWmWx+r9RUVFsJCFKxkHuZQm3mdrFRZUMltcN0zPL6d 0ZdOeUvprT6+md93eoyEHCCvtRpQts4J1QwEmOMERD15IKFADXhs3bws3BS9nH8s DybTl/gzeQH5hf5UG4lrsQBc3leXTXbh3XxagJcMg+ZOboXyogpPNpyloqyGMt3/ W49ZIVn9eiwdhYDUd8re3QAzwQHh/X4efJXM7yymIFgrWzA6lU4Iw0ZZ3zuPjUBV 5avTdLmDwrT0RAllmLCQqu9gQvvSqHMHaoH9a1GlLZokJ9OSrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPfnnA9W6fvwBQRmEz5LRjaHv0m4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZmZmZDNiMWQtN2UwMC0z ZWJkLTg1ODAtOGM5YmY0ODc2NDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY2ABEQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK2ruXtGGjMHHwQV3qg0iUj2nP/KWP9iIUHAXuFlNskVYDFJAcAd IbLIHyZwoJaZFZq+hAcLpVZE3QrIEduJHjT77s4nOHD9dq6JKph4LxBn3/Woz6Uy nIxVG7xMSHlAKDbYUCsFFZJpZILnM0xKfN6qazF8YMwMbvpR768D4PUc5A4JA580 4VEz4dbHj7PV7UwF3gXAX0HW58cOQZ0FnkfnjQTi0MfS4StYgELd+nY26ru71eVk Rynx5wMrTp/94aWYLtKy0qZQtQC7DNsYGrcY4SQ3prmB86lVFPoMISqTtwG7CgfO 1N/Uqg4/Oz7t4MObdEB8PXWs5gNEEYBfzRo= -----END CERTIFICATE-----Generated at Mon Apr 7 14:21:14 2025 by rpki-client