$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/8a6f100c-d409-3356-8b58-4ce0198b8b7d.roa File: 8a6f100c-d409-3356-8b58-4ce0198b8b7d.roa (raw, json) Hash identifier: iBUNB7RdWA8jU3enSsFXTgQIYKwjowszE5RjSLleEKE= Subject key identifier: 0A:95:AD:20:44:80:F4:F5:09:DC:03:86:C0:5F:71:66:DA:F0:72:EA Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069 Certificate serial: 010D0C9F432858491AA6CA0A8652A16791125460 Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/8a6f100c-d409-3356-8b58-4ce0198b8b7d.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 15290 IP address blocks: 2001:4c8:1080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:ca:0a:86:52:a1:67:91:12:54:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=b59a27bd-6d6d-4658-a2a7-fd24a2879c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8a:fc:55:87:4a:de:c5:17:a1:6b:6c:5d:2a: 78:9d:29:de:b1:71:2c:72:84:a2:9e:44:60:b4:98: 15:09:74:fe:87:73:f7:d3:bc:0f:89:49:e2:17:ac: 70:59:5e:27:9e:9a:f2:43:28:a3:a4:e8:16:10:19: 0f:f8:a0:d4:d5:1c:65:da:e6:3d:3d:66:68:41:00: 79:b2:5c:0b:04:69:4a:27:1f:10:35:85:02:ef:12: a0:19:2e:ae:aa:c3:fb:51:01:8d:b7:45:96:b9:b2: 60:a0:5c:21:73:b1:5d:84:6b:30:4d:0f:3b:82:b0: ae:d4:d5:94:e5:3e:90:96:2e:41:36:9d:43:44:9d: 4d:ad:94:ce:66:d1:f9:28:02:35:1e:1f:84:19:73: f8:06:05:b2:96:fb:ae:1c:50:a1:af:2f:dd:80:fd: f2:bf:c4:83:78:1b:42:f2:66:38:b2:d4:2a:67:dc: d2:43:b8:47:a7:82:9c:b6:8b:19:76:4f:02:db:39: c2:33:e6:09:60:e9:6f:77:f3:e8:0e:3d:ca:ac:e3: 74:d0:a0:17:c9:aa:1a:fc:4e:95:c2:62:cb:b5:f0: 8e:b5:23:09:64:a6:9c:e7:48:fd:c4:9c:68:0c:6c: 13:7d:71:7f:ce:9a:7a:0c:45:f3:59:36:72:8e:39: 3a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:95:AD:20:44:80:F4:F5:09:DC:03:86:C0:5F:71:66:DA:F0:72:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/8a6f100c-d409-3356-8b58-4ce0198b8b7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl X509v3 Authority Key Identifier: keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer sbgp-ipAddrBlock: critical IPv6: 2001:4c8:1080::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:c5:a7:b1:8d:b5:c3:e1:ec:1d:2f:3b:37:74:8e:6f:f8:ca: 98:ff:88:0b:fb:d6:8e:16:13:e4:89:bf:8f:9f:22:1b:13:41: 50:21:e9:ec:63:fe:17:d3:5e:ff:64:74:a4:6a:5c:19:90:cb: 94:25:27:5c:8c:41:a9:1c:d3:9f:48:bb:ff:d8:3c:d1:c8:8c: cf:a2:63:ed:c1:e0:a4:df:a9:6f:69:14:2e:c8:ee:83:57:c4: 48:5f:72:95:29:30:dd:4b:3c:cc:54:bc:02:ee:a0:d6:19:27: 81:46:8d:1c:ed:b9:51:89:11:45:25:a4:91:27:d7:ec:a7:4c: b0:dc:cb:6c:9b:e7:e1:51:66:bf:1b:10:76:90:dc:50:21:69: 0e:72:ea:11:76:56:5c:5a:17:77:cd:9a:53:e2:ca:74:7f:1d: 6d:f1:3f:5e:d2:43:0f:38:3c:e7:4d:39:29:67:39:82:a2:df: 90:3f:2f:ac:56:32:15:64:4c:bb:40:cf:2d:a1:be:83:63:35: a5:96:ec:c9:20:64:2c:cc:41:f2:c8:df:78:f4:8d:9d:d4:c6: 1a:d6:16:b3:64:3f:db:a1:c8:54:e5:32:ed:de:6c:5f:10:1c: 4d:e3:69:82:d7:a1:7e:b8:d3:00:4a:28:c8:f2:07:b5:6e:03: 6d:49:ab:22 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkapsoKhlKhZ5ESVGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz MDY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk YjU5YTI3YmQtNmQ2ZC00NjU4LWEyYTctZmQyNGEyODc5YzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYr8VYdK3sUXoWtsXSp4nSnesXEscoSinkRg tJgVCXT+h3P307wPiUniF6xwWV4nnpryQyijpOgWEBkP+KDU1Rxl2uY9PWZoQQB5 slwLBGlKJx8QNYUC7xKgGS6uqsP7UQGNt0WWubJgoFwhc7FdhGswTQ87grCu1NWU 5T6Qli5BNp1DRJ1NrZTOZtH5KAI1Hh+EGXP4BgWylvuuHFChry/dgP3yv8SDeBtC 8mY4stQqZ9zSQ7hHp4KctosZdk8C2znCM+YJYOlvd/PoDj3KrON00KAXyaoa/E6V wmLLtfCOtSMJZKac50j9xJxoDGwTfXF/zpp6DEXzWTZyjjk67QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAqVrSBEgPT1CdwDhsBfcWba8HLqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvOGE2ZjEwMGMtZDQwOS0z MzU2LThiNTgtNGNlMDE5OGI4YjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3 NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4 MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw NTg5ODMwNjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEyBCA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADXFp7GNtcPh7B0vOzd0jm/4ypj/iAv71o4WE+SJv4+fIhsTQVAh 6exj/hfTXv9kdKRqXBmQy5QlJ1yMQakc059Iu//YPNHIjM+iY+3B4KTfqW9pFC7I 7oNXxEhfcpUpMN1LPMxUvALuoNYZJ4FGjRztuVGJEUUlpJEn1+ynTLDcy2yb5+FR Zr8bEHaQ3FAhaQ5y6hF2VlxaF3fNmlPiynR/HW3xP17SQw84POdNOSlnOYKi35A/ L6xWMhVkTLtAzy2hvoNjNaWW7MkgZCzMQfLI33j0jZ3UxhrWFrNkP9uhyFTlMu3e bF8QHE3jaYLXoX640wBKKMjyB7VuA21JqyI= -----END CERTIFICATE-----Generated at Sun Apr 6 20:34:31 2025 by rpki-client