$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/f61e2318-b560-3ef5-9e74-a61671a8a365.roa File: f61e2318-b560-3ef5-9e74-a61671a8a365.roa (raw, json) Hash identifier: LykfGn2YBfop760BWmeq7KgjuPNzqAmufQdb0nJZ6+s= Subject key identifier: 16:90:93:80:E5:46:6F:B0:64:0B:CA:E3:A2:F6:2E:7A:44:B0:2C:19 Certificate issuer: /CN=caf392a1-07e9-49f4-9a03-df5005333708 Certificate serial: 010D0C9F43285848A99618B60E43B318BD613B80 Authority key identifier: 44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/f61e2318-b560-3ef5-9e74-a61671a8a365.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 46962 IP address blocks: 2606:2ac0:8101::/48 maxlen: 48 2606:2ac0:8102::/48 maxlen: 48 2606:2ac0:8103::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:18:b6:0e:43:b3:18:bd:61:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf392a1-07e9-49f4-9a03-df5005333708 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=cdf4c09e-c4f6-4ca7-9822-b8519c8e179e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ba:1b:6c:59:85:80:9a:fe:b4:25:0f:8c:b5: 43:ed:02:9b:92:27:6e:6b:67:30:14:c0:98:43:b7: 7f:3b:dd:9c:f6:99:d7:dd:a9:2c:02:43:8c:1e:bd: eb:9b:74:df:22:69:08:73:e3:f9:c2:5b:e0:e6:27: de:5f:23:da:74:1c:81:4c:39:c6:29:0f:85:57:52: 14:4e:4f:ea:ed:8f:80:29:4e:e1:39:2c:51:2d:67: 16:47:eb:19:78:b3:1c:3b:b0:da:1e:46:b1:cc:3e: 0d:96:dc:61:14:dc:ce:e1:49:f7:fe:c6:88:87:0a: 9b:0f:88:99:cf:f3:3f:3b:58:c7:1c:34:a8:8b:6b: c7:32:2b:ad:44:f2:73:0b:ad:30:4d:93:6f:69:a0: af:8e:58:63:b7:6d:19:2b:da:90:ba:10:f9:2a:a7: 07:b3:96:dd:aa:43:47:c5:72:d2:81:2c:d5:a9:95: eb:4c:cb:7d:51:79:f9:7a:ea:ef:68:00:13:4c:26: a1:7b:08:2d:ae:6e:d6:9a:57:c3:b0:62:74:ab:47: 12:c6:1a:6d:2d:bb:42:51:2c:6f:17:bc:9c:98:29: cc:4a:7e:99:03:c8:ef:fc:03:9b:df:80:0c:18:7c: c6:1b:b0:79:65:09:c2:90:4f:1f:35:64:12:01:9a: 08:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:90:93:80:E5:46:6F:B0:64:0B:CA:E3:A2:F6:2E:7A:44:B0:2C:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/f61e2318-b560-3ef5-9e74-a61671a8a365.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl X509v3 Authority Key Identifier: keyid:44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer sbgp-ipAddrBlock: critical IPv6: 2606:2ac0:8101::-2606:2ac0:8103:ffff:ffff:ffff:ffff:ffff X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:f9:ec:95:a6:f4:66:70:31:07:0b:bc:11:05:25:08:48:57: 12:63:36:3d:77:e8:fb:48:20:09:f1:68:e9:81:27:35:ce:50: 78:30:fe:9c:c9:47:79:fe:07:d0:63:7c:16:13:61:6b:ee:6f: 2e:80:ff:25:24:11:17:59:af:ac:ea:fc:a7:ed:11:23:ee:a0: a5:d0:55:dd:e1:73:e8:51:9e:5d:cb:25:bc:14:1a:03:c9:11: dd:a9:3c:94:ec:d7:84:b4:68:a1:93:58:41:9c:27:68:fa:11: a4:97:cc:78:ed:0d:23:34:9a:04:78:ef:10:1d:f1:f9:a7:23: dd:b2:c8:4f:50:09:a9:26:9f:7b:36:f2:ef:13:94:36:4a:13: 13:3b:17:d9:0b:2c:25:f9:b3:56:c3:2b:b4:30:1d:d1:4a:ce: ea:d8:ba:d1:de:1e:07:78:83:cf:2e:74:7e:62:84:15:4b:b9: c3:a6:6b:f3:10:77:63:be:06:a6:77:2e:58:9d:68:aa:74:d7: 42:c0:32:2f:8b:ed:c1:ac:97:cf:b1:d5:4e:ad:72:ed:91:f8: 77:a3:5d:a4:31:10:50:be:61:43:68:97:04:82:16:f9:92:f2: a7:12:a5:22:aa:d8:b1:83:75:35:0a:c8:0c:a8:d1:14:65:35: f7:8d:8b:71 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEiplhi2DkOzGL1hO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmMzkyYTEtMDdlOS00OWY0LTlhMDMtZGY1MDA1MzMz NzA4MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2RmNGMwOWUtYzRmNi00Y2E3LTk4MjItYjg1MTljOGUxNzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobobbFmFgJr+tCUPjLVD7QKbkidua2cwFMCY Q7d/O92c9pnX3aksAkOMHr3rm3TfImkIc+P5wlvg5ifeXyPadByBTDnGKQ+FV1IU Tk/q7Y+AKU7hOSxRLWcWR+sZeLMcO7DaHkaxzD4NltxhFNzO4Un3/saIhwqbD4iZ z/M/O1jHHDSoi2vHMiutRPJzC60wTZNvaaCvjlhjt20ZK9qQuhD5KqcHs5bdqkNH xXLSgSzVqZXrTMt9UXn5eurvaAATTCahewgtrm7WmlfDsGJ0q0cSxhptLbtCUSxv F7ycmCnMSn6ZA8jv/AOb34AMGHzGG7B5ZQnCkE8fNWQSAZoI0QIDAQABo4IDYzCC A18wHQYDVR0OBBYEFBaQk4DlRm+wZAvK46L2LnpEsCwZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYWYz OTJhMS0wN2U5LTQ5ZjQtOWEwMy1kZjUwMDUzMzM3MDgvZjYxZTIzMTgtYjU2MC0z ZWY1LTllNzQtYTYxNjcxYThhMzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2FmMzkyYTEtMDdlOS00OWY0LTlh MDMtZGY1MDA1MzMzNzA4L2NhZjM5MmExLTA3ZTktNDlmNC05YTAzLWRmNTAwNTMz MzcwOC5jcmwwHwYDVR0jBBgwFoAURC8Ry3nbTZVcRvWNkst9EsMqGU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYWYzOTJhMS0wN2U5LTQ5ZjQtOWEwMy1kZjUw MDUzMzM3MDguY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAmBirA gQEDBwImBirAgQAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAPfnslab0ZnAxBwu8EQUlCEhXEmM2PXfo+0gg CfFo6YEnNc5QeDD+nMlHef4H0GN8FhNha+5vLoD/JSQRF1mvrOr8p+0RI+6gpdBV 3eFz6FGeXcslvBQaA8kR3ak8lOzXhLRooZNYQZwnaPoRpJfMeO0NIzSaBHjvEB3x +acj3bLIT1AJqSafezby7xOUNkoTEzsX2QssJfmzVsMrtDAd0UrO6ti60d4eB3iD zy50fmKEFUu5w6Zr8xB3Y74GpncuWJ1oqnTXQsAyL4vtwayXz7HVTq1y7ZH4d6Nd pDEQUL5hQ2iXBIIW+ZLypxKlIqrYsYN1NQrIDKjRFGU1942LcQ== -----END CERTIFICATE-----Generated at Sat Apr 12 16:19:57 2025 by rpki-client