$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/ab502d81-e84c-393f-8f09-d07e38a28a00.roa File: ab502d81-e84c-393f-8f09-d07e38a28a00.roa (raw, json) Hash identifier: S1Ax6NRuOeimlbRHZFQLiJUkpzdUMrBY9QBMqzqq9mw= Subject key identifier: 5C:9A:69:A9:D2:2F:E9:A1:E0:63:D5:B9:AB:FF:E7:49:5D:01:51:5D Certificate issuer: /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Certificate serial: 010D0C9F43285848BA563004BB38CE45E8C5C880 Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/ab502d81-e84c-393f-8f09-d07e38a28a00.roa Signing time: Fri 31 Jan 2025 14:00:51 +0000 ROA not before: Fri 31 Jan 2025 14:00:51 +0000 ROA not after: Thu 01 May 2025 13:00:51 +0000 asID: 396948 IP address blocks: 2604:bc0:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ba:56:30:04:bb:38:ce:45:e8:c5:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Validity Not Before: Jan 31 14:00:51 2025 GMT Not After : May 1 13:00:51 2025 GMT Subject: CN=edcd1616-ea56-4b92-86a4-77321922cb79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b9:06:ec:e3:d5:14:92:35:95:a7:b1:9e:f8: 16:2a:9e:21:72:52:f8:47:48:cd:44:e1:f8:40:30: c8:3f:6f:3f:3c:e8:ae:91:c8:a5:0e:90:2d:77:75: b4:f1:c5:e3:05:6b:80:e2:e8:d6:b4:1f:11:56:35: 43:71:33:4e:b4:35:c0:08:b9:ba:4c:08:59:10:5e: 27:c1:c1:8c:6b:ad:f2:34:e5:97:84:36:cf:72:5f: e3:f3:2d:ed:cb:0e:42:b0:30:66:a0:7e:a0:a4:19: e9:df:60:5c:0a:13:94:82:d6:3b:55:5a:a7:83:d3: d4:38:bf:cb:28:f1:ab:9f:e5:b8:93:af:75:3a:c8: b0:ec:b2:5a:23:03:93:d5:01:9a:58:b6:41:7a:b0: 0d:0c:b7:27:00:50:32:17:79:b3:57:a7:62:3e:e8: db:10:26:b2:2d:a3:11:28:dc:9b:fd:73:50:ac:f0: 99:2b:dd:82:e2:70:73:80:8b:42:39:ff:21:42:af: 87:a6:ea:3d:c8:01:70:96:95:8f:02:9b:77:1d:16: e1:aa:16:ed:62:48:76:d9:83:bc:b7:dc:42:dd:aa: a8:c2:4f:d5:aa:94:83:6a:9e:07:40:e3:f2:ae:a9: 5b:cb:5d:04:4e:ad:1a:81:09:9c:85:c1:b5:92:6e: be:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:9A:69:A9:D2:2F:E9:A1:E0:63:D5:B9:AB:FF:E7:49:5D:01:51:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/ab502d81-e84c-393f-8f09-d07e38a28a00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl X509v3 Authority Key Identifier: keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer sbgp-ipAddrBlock: critical IPv6: 2604:bc0:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:1f:06:69:cf:b0:b6:6e:0a:72:dc:b7:e7:82:d5:61:11:29: b9:95:4f:25:c9:e5:72:b8:2f:d9:1d:0c:7a:c4:e0:eb:90:59: f5:fa:f1:67:3a:dd:2e:e4:b7:aa:59:03:62:9b:bb:4c:5e:e9: 47:8c:2d:d5:f3:94:c3:2e:1c:2f:f9:99:2d:13:b8:28:ad:2d: 56:f2:8c:1e:fb:01:3c:9d:a7:c5:cf:e9:cd:ef:39:6a:ee:a1: 1c:6a:06:da:70:b6:e7:ec:ea:70:f0:ec:9e:95:59:b8:35:66: c2:28:6a:58:8d:a2:e1:8d:50:b0:a3:2d:18:f9:28:a0:b9:ae: 89:30:6a:1b:89:b7:c9:b2:10:6f:52:1c:48:f6:a6:bb:bb:4e: d9:70:d2:44:af:53:5c:71:6c:3c:29:16:70:6c:8a:bd:4f:51: 21:e7:48:14:d6:11:b2:09:fb:ce:65:af:47:51:ff:5c:8e:b0: ce:09:82:b0:73:3f:48:18:91:3e:28:a9:6b:de:ac:71:45:27: 78:08:57:6b:05:06:0e:c1:04:89:91:2e:02:0a:a5:1e:25:45: 0f:ce:3a:c4:67:e2:4a:98:21:48:76:ad:dd:c6:ed:4f:51:72: 35:90:ad:bf:40:fd:a5:b3:a4:7d:0c:51:c1:90:93:62:88:0a: 12:00:fe:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEi6VjAEuzjORejFyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVkYzk3NDEtNTU5ZC00ZDliLTlmOGQtYmUzNTYwNzU0 ZmZkMB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk ZWRjZDE2MTYtZWE1Ni00YjkyLTg2YTQtNzczMjE5MjJjYjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bkG7OPVFJI1laexnvgWKp4hclL4R0jNROH4 QDDIP28/POiukcilDpAtd3W08cXjBWuA4ujWtB8RVjVDcTNOtDXACLm6TAhZEF4n wcGMa63yNOWXhDbPcl/j8y3tyw5CsDBmoH6gpBnp32BcChOUgtY7VVqng9PUOL/L KPGrn+W4k691Osiw7LJaIwOT1QGaWLZBerANDLcnAFAyF3mzV6diPujbECayLaMR KNyb/XNQrPCZK92C4nBzgItCOf8hQq+Hpuo9yAFwlpWPApt3HRbhqhbtYkh22YO8 t9xC3aqowk/VqpSDap4HQOPyrqlby10ETq0agQmchcG1km6+8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFyaaanSL+mh4GPVuav/50ldAVFdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NWRj OTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1NjA3NTRmZmQvYWI1MDJkODEtZTg0Yy0z OTNmLThmMDktZDA3ZTM4YTI4YTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTVkYzk3NDEtNTU5ZC00ZDliLTlm OGQtYmUzNTYwNzU0ZmZkLzk1ZGM5NzQxLTU1OWQtNGQ5Yi05ZjhkLWJlMzU2MDc1 NGZmZC5jcmwwHwYDVR0jBBgwFoAU6PV/ieoECgMeYW7fmRTMWxY4sJQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85NWRjOTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1 NjA3NTRmZmQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQLwAAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJAfBmnPsLZuCnLct+eC1WERKbmVTyXJ5XK4L9kdDHrE4OuQWfX6 8Wc63S7kt6pZA2Kbu0xe6UeMLdXzlMMuHC/5mS0TuCitLVbyjB77ATydp8XP6c3v OWruoRxqBtpwtufs6nDw7J6VWbg1ZsIoaliNouGNULCjLRj5KKC5rokwahuJt8my EG9SHEj2pru7Ttlw0kSvU1xxbDwpFnBsir1PUSHnSBTWEbIJ+85lr0dR/1yOsM4J grBzP0gYkT4oqWverHFFJ3gIV2sFBg7BBImRLgIKpR4lRQ/OOsRn4kqYIUh2rd3G 7U9RcjWQrb9A/aWzpH0MUcGQk2KIChIA/nE= -----END CERTIFICATE-----Generated at Wed Apr 16 16:46:57 2025 by rpki-client