$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/824e6379-abbf-3ba1-8155-eeab702f1b96.roa File: 824e6379-abbf-3ba1-8155-eeab702f1b96.roa (raw, json) Hash identifier: HDKBKVIrlGamuj4Tddn3yi0yz/ZS1qNOSWxZft8RLLY= Subject key identifier: 8C:DA:50:7D:7C:4E:29:FC:FE:82:FB:F8:5F:F3:3A:2F:1C:33:68:D8 Certificate issuer: /CN=4bc701e5-cff5-4660-9102-08342e5ad35f Certificate serial: 010D0C9F43285848D0ABA82131E0EF8C32684C00 Authority key identifier: 62:64:53:7E:B9:56:B8:89:57:2C:44:D4:41:A2:1F:FA:5E:01:BB:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/824e6379-abbf-3ba1-8155-eeab702f1b96.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 26523 IP address blocks: 2620:0:f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/4bc701e5-cff5-4660-9102-08342e5ad35f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/4bc701e5-cff5-4660-9102-08342e5ad35f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:a8:21:31:e0:ef:8c:32:68:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc701e5-cff5-4660-9102-08342e5ad35f Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=fbe3583c-785f-4306-9b43-5abb0cca458e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:81:d3:97:d1:6e:51:32:60:f3:9f:16:74:db: f4:2e:57:eb:59:7f:a3:98:b5:40:ca:01:2c:82:30: 20:62:8e:9d:0c:d3:43:ea:3d:58:54:42:c3:d6:42: 27:7e:a9:63:20:40:64:f8:23:87:06:b2:8f:d3:2c: cd:07:60:65:e1:06:d2:9f:b0:99:33:28:e4:b1:d7: 78:b9:e0:cd:49:e6:b5:8f:ef:88:25:17:d8:37:3a: cb:5c:f6:a9:e9:16:cc:5b:01:16:cc:cb:2b:24:ef: c1:05:f7:ec:84:00:ed:2e:f0:80:24:37:8d:df:2d: 31:f1:a6:10:8c:40:9e:36:85:4a:9a:9d:1b:51:9f: 3e:0c:44:6b:31:b7:7d:4e:88:ec:6f:4e:be:0e:8f: ff:23:01:50:83:7c:96:3f:e2:d8:d1:9b:0d:83:ac: bb:5e:05:28:92:9d:55:91:2b:3e:58:c7:23:66:cb: 01:a5:9c:5c:79:20:d2:26:14:ee:89:cf:0b:1f:78: a1:c7:27:d4:4a:b3:47:47:2d:dd:39:e2:71:d7:29: 01:00:36:0a:23:a8:04:61:dc:1b:9d:64:e3:c2:c7: a5:ec:e1:c7:5e:ca:60:be:f0:e1:77:4f:52:04:fd: 40:15:e0:58:5b:d1:1f:67:99:f2:38:bc:8d:83:e4: c7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DA:50:7D:7C:4E:29:FC:FE:82:FB:F8:5F:F3:3A:2F:1C:33:68:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/824e6379-abbf-3ba1-8155-eeab702f1b96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/4bc701e5-cff5-4660-9102-08342e5ad35f.crl X509v3 Authority Key Identifier: keyid:62:64:53:7E:B9:56:B8:89:57:2C:44:D4:41:A2:1F:FA:5E:01:BB:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:f0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:05:0f:64:89:42:c1:18:42:64:4b:36:bb:97:3c:0e:21:28: df:cc:48:f8:9e:41:a6:75:7d:a6:9f:0d:68:34:ca:0b:e5:ad: 4e:ab:08:c0:54:29:2d:98:75:5d:bc:a2:5f:f8:0f:a9:4e:43: 35:7d:52:ca:d7:98:5b:fe:0c:75:48:43:d8:43:f9:b2:24:a6: a2:1b:4c:d6:60:99:f1:48:b9:53:f4:55:28:5f:cc:09:8c:47: f5:d5:40:3a:63:2f:0d:19:78:6e:64:b9:4f:8b:99:33:ae:b0: 85:ff:8c:b3:66:df:a9:4b:70:8a:ec:de:cb:f2:90:8f:64:2f: 4f:34:fc:db:a9:30:60:64:41:f7:83:86:e7:18:62:2f:09:49: 33:80:89:76:0e:04:0a:66:2e:b4:f0:a2:5e:cf:cc:c7:72:9a: b2:a7:b1:ef:2f:1c:c5:a5:f0:7f:9b:4e:54:8e:58:d3:74:17: 87:af:11:a2:5b:ab:4f:19:25:4d:7e:42:c3:d6:b0:2d:ad:e5: 24:44:fe:00:03:9b:07:45:d4:b7:0f:bc:ea:b7:4d:47:4c:d8: c3:38:f8:76:b7:5b:28:97:db:fb:71:9b:82:0e:36:64:42:9e: 9c:01:f2:0e:5d:cc:2b:b5:0b:37:ea:d9:22:b4:0f:a4:d9:84: 1d:50:48:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjQq6ghMeDvjDJoTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJjNzAxZTUtY2ZmNS00NjYwLTkxMDItMDgzNDJlNWFk MzVmMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk ZmJlMzU4M2MtNzg1Zi00MzA2LTliNDMtNWFiYjBjY2E0NThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIHTl9FuUTJg858WdNv0LlfrWX+jmLVAygEs gjAgYo6dDNND6j1YVELD1kInfqljIEBk+COHBrKP0yzNB2Bl4QbSn7CZMyjksdd4 ueDNSea1j++IJRfYNzrLXPap6RbMWwEWzMsrJO/BBffshADtLvCAJDeN3y0x8aYQ jECeNoVKmp0bUZ8+DERrMbd9Tojsb06+Do//IwFQg3yWP+LY0ZsNg6y7XgUokp1V kSs+WMcjZssBpZxceSDSJhTuic8LH3ihxyfUSrNHRy3dOeJx1ykBADYKI6gEYdwb nWTjwsel7OHHXspgvvDhd09SBP1AFeBYW9EfZ5nyOLyNg+THgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIzaUH18Tin8/oL7+F/zOi8cM2jYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80YmM3 MDFlNS1jZmY1LTQ2NjAtOTEwMi0wODM0MmU1YWQzNWYvODI0ZTYzNzktYWJiZi0z YmExLTgxNTUtZWVhYjcwMmYxYjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGJjNzAxZTUtY2ZmNS00NjYwLTkx MDItMDgzNDJlNWFkMzVmLzRiYzcwMWU1LWNmZjUtNDY2MC05MTAyLTA4MzQyZTVh ZDM1Zi5jcmwwHwYDVR0jBBgwFoAUYmRTfrlWuIlXLETUQaIf+l4Bu7YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80YmM3MDFlNS1jZmY1LTQ2NjAtOTEwMi0wODM0 MmU1YWQzNWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAADw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA0FD2SJQsEYQmRLNruXPA4hKN/MSPieQaZ1faafDWg0ygvlrU6r CMBUKS2YdV28ol/4D6lOQzV9UsrXmFv+DHVIQ9hD+bIkpqIbTNZgmfFIuVP0VShf zAmMR/XVQDpjLw0ZeG5kuU+LmTOusIX/jLNm36lLcIrs3svykI9kL080/NupMGBk QfeDhucYYi8JSTOAiXYOBApmLrTwol7PzMdymrKnse8vHMWl8H+bTlSOWNN0F4ev EaJbq08ZJU1+QsPWsC2t5SRE/gADmwdF1LcPvOq3TUdM2MM4+Ha3WyiX2/txm4IO NmRCnpwB8g5dzCu1Czfq2SK0D6TZhB1QSOg= -----END CERTIFICATE-----Generated at Fri Apr 18 05:27:39 2025 by rpki-client