$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2909e0dc-bd8d-38dc-bae9-335626f3845e.roa File: 2909e0dc-bd8d-38dc-bae9-335626f3845e.roa (raw, json) Hash identifier: zsAXDwM5hRHp6jeeFVqtzRx8vt8y2q1iSDdJI7NQL10= Subject key identifier: 67:E7:CE:16:51:D8:7F:B1:1A:65:9D:B9:C3:EE:48:0C:94:44:97:86 Certificate issuer: /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Certificate serial: 010D0C9F43285848BA562FEAB614CA8B4E0EDF80 Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2909e0dc-bd8d-38dc-bae9-335626f3845e.roa Signing time: Fri 31 Jan 2025 14:00:51 +0000 ROA not before: Fri 31 Jan 2025 14:00:51 +0000 ROA not after: Thu 01 May 2025 13:00:51 +0000 asID: 36007 IP address blocks: 2604:bc0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ba:56:2f:ea:b6:14:ca:8b:4e:0e:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Validity Not Before: Jan 31 14:00:51 2025 GMT Not After : May 1 13:00:51 2025 GMT Subject: CN=94f3e230-b638-4391-8f02-fa8aff67c071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b5:55:46:95:fc:c1:89:f0:71:13:8c:17:e5: 94:88:73:36:0e:61:a9:ed:30:11:1a:b9:99:7f:e7: b8:60:e1:c8:c2:f2:6c:36:a0:94:59:82:45:09:71: 15:df:f2:05:38:62:5c:e7:26:fb:61:2e:3f:0b:92: 91:a4:0e:f7:78:c0:ef:13:d3:5a:5a:2e:5f:d5:69: ef:f6:88:7e:e5:66:d9:bc:7b:32:2a:ab:cb:be:bf: b4:7e:ab:8e:dc:c9:a9:64:42:fe:e2:2d:89:e4:3c: ff:40:62:0c:ad:ac:44:55:4f:20:27:63:0e:c3:b1: 1e:76:fe:4c:a6:af:d6:4c:22:36:d7:e6:8e:64:55: ff:d5:8e:9a:ae:1c:6c:45:65:60:9e:31:72:b5:9c: 64:04:08:dd:9e:1d:da:b5:4b:84:dd:ff:50:2d:86: cc:11:e8:ba:21:26:6a:bb:d4:ab:4f:4d:03:fa:81: 50:c3:d1:38:04:32:ae:e9:a0:f4:1e:3a:90:35:57: ee:9f:7f:15:e1:59:52:68:4f:17:48:cc:62:94:d9: d7:a9:28:cd:08:7e:15:61:c9:10:fe:9a:36:e5:8b: b2:31:ba:aa:c9:1d:35:54:e6:9e:e1:9e:fd:26:fc: 33:08:37:99:31:04:0b:e0:2b:57:1b:27:cc:c5:2d: 84:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E7:CE:16:51:D8:7F:B1:1A:65:9D:B9:C3:EE:48:0C:94:44:97:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2909e0dc-bd8d-38dc-bae9-335626f3845e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl X509v3 Authority Key Identifier: keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer sbgp-ipAddrBlock: critical IPv6: 2604:bc0:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:67:62:40:90:a7:0e:ea:79:3b:fc:bf:d6:cb:9a:40:5a:6d: b9:43:a6:f8:65:d2:07:cd:35:d0:70:e8:a5:9e:27:c3:c6:85: c0:73:62:a4:15:7e:fe:17:e9:36:8c:72:d4:cc:d6:f0:30:06: 54:26:c5:51:1d:d8:22:8e:df:d6:3a:4d:82:d7:b9:43:44:fb: c7:78:e2:69:f6:96:be:a9:c5:85:a8:a5:4f:63:4d:50:5f:97: 46:69:dc:c0:b8:f5:93:06:d5:65:65:59:02:17:85:c2:a1:a6: 82:bb:e1:ac:8c:a8:58:46:83:92:cb:4d:b0:49:ea:46:65:d0: c5:3c:ef:08:15:2f:34:eb:25:23:a1:0c:30:60:47:a0:9a:c9: 06:72:9c:d1:0a:d9:54:7d:8b:8b:b6:b7:07:03:ad:65:37:a9: 4f:b6:1d:da:d0:d7:ca:d1:71:6f:67:d1:c2:1f:7c:da:f4:2c: fb:ab:f4:dc:12:52:21:0d:7a:5d:75:96:c4:bc:45:42:34:b0: 1c:07:f8:21:b9:29:20:7d:1f:81:9a:f4:3c:29:06:97:53:d1: 2b:1a:4b:73:e9:a7:aa:ea:cd:a8:73:ea:34:39:0a:68:25:a4: 2c:2f:50:d0:bc:a9:1d:65:4f:a1:e5:0a:19:bb:44:f1:73:0d: 6e:80:2b:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEi6Vi/qthTKi04O34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVkYzk3NDEtNTU5ZC00ZDliLTlmOGQtYmUzNTYwNzU0 ZmZkMB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk OTRmM2UyMzAtYjYzOC00MzkxLThmMDItZmE4YWZmNjdjMDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbVVRpX8wYnwcROMF+WUiHM2DmGp7TARGrmZ f+e4YOHIwvJsNqCUWYJFCXEV3/IFOGJc5yb7YS4/C5KRpA73eMDvE9NaWi5f1Wnv 9oh+5WbZvHsyKqvLvr+0fquO3MmpZEL+4i2J5Dz/QGIMraxEVU8gJ2MOw7Eedv5M pq/WTCI21+aOZFX/1Y6arhxsRWVgnjFytZxkBAjdnh3atUuE3f9QLYbMEei6ISZq u9SrT00D+oFQw9E4BDKu6aD0HjqQNVfun38V4VlSaE8XSMxilNnXqSjNCH4VYckQ /po25YuyMbqqyR01VOae4Z79JvwzCDeZMQQL4CtXGyfMxS2EJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGfnzhZR2H+xGmWducPuSAyURJeGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NWRj OTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1NjA3NTRmZmQvMjkwOWUwZGMtYmQ4ZC0z OGRjLWJhZTktMzM1NjI2ZjM4NDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTVkYzk3NDEtNTU5ZC00ZDliLTlm OGQtYmUzNTYwNzU0ZmZkLzk1ZGM5NzQxLTU1OWQtNGQ5Yi05ZjhkLWJlMzU2MDc1 NGZmZC5jcmwwHwYDVR0jBBgwFoAU6PV/ieoECgMeYW7fmRTMWxY4sJQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85NWRjOTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1 NjA3NTRmZmQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQLwAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAABnYkCQpw7qeTv8v9bLmkBabblDpvhl0gfNNdBw6KWeJ8PGhcBz YqQVfv4X6TaMctTM1vAwBlQmxVEd2CKO39Y6TYLXuUNE+8d44mn2lr6pxYWopU9j TVBfl0Zp3MC49ZMG1WVlWQIXhcKhpoK74ayMqFhGg5LLTbBJ6kZl0MU87wgVLzTr JSOhDDBgR6CayQZynNEK2VR9i4u2twcDrWU3qU+2HdrQ18rRcW9n0cIffNr0LPur 9NwSUiENel11lsS8RUI0sBwH+CG5KSB9H4Ga9DwpBpdT0SsaS3Ppp6rqzahz6jQ5 CmglpCwvUNC8qR1lT6HlChm7RPFzDW6AK5k= -----END CERTIFICATE-----Generated at Wed Apr 16 17:14:27 2025 by rpki-client