$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3ee94904-40f3-3616-86ad-0521935c737f.roa File: 3ee94904-40f3-3616-86ad-0521935c737f.roa (raw, json) Hash identifier: G0xP4ouDxzB67HBxCdDHSMDmXG9x6k3hOA1sb5YjuMs= Subject key identifier: 28:04:B1:EB:A6:4F:0C:44:4B:3A:71:73:40:77:E1:5D:7D:1D:A0:E3 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584862658D110CF230566FD1A800 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3ee94904-40f3-3616-86ad-0521935c737f.roa Signing time: Tue 31 Dec 2024 02:00:40 +0000 ROA not before: Tue 31 Dec 2024 02:00:40 +0000 ROA not after: Mon 31 Mar 2025 01:00:40 +0000 asID: 14618 IP address blocks: 2605:4300:2c14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:62:65:8d:11:0c:f2:30:56:6f:d1:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Dec 31 02:00:40 2024 GMT Not After : Mar 31 01:00:40 2025 GMT Subject: CN=a97302a9-9bff-416b-a9ec-4b66250181c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:18:79:44:ac:e3:17:23:d5:a4:35:59:8a:eb: 78:f0:f6:87:fe:5e:fe:28:de:b5:78:52:e8:3b:8f: b4:21:55:58:3f:2d:32:b2:12:00:74:f8:4b:34:1a: d3:bd:f8:e9:b0:f5:58:fa:68:4b:36:f0:5f:c0:c8: 2d:5f:74:8a:55:39:33:70:ef:57:92:06:13:a4:34: a4:61:bc:cd:12:e5:e7:08:96:ca:7f:8f:e8:39:61: b7:3a:a9:27:54:dd:1c:fe:40:7f:c5:6a:85:6d:c0: a0:63:23:8f:07:b0:8f:39:6a:83:02:f7:47:c2:1f: 5d:20:6a:4e:94:b9:ee:28:60:0d:ea:f5:77:cc:d1: b7:79:d0:52:ac:43:94:fe:c4:03:f5:ce:e6:7e:71: cd:f7:3d:5f:53:1a:13:96:4f:a1:b9:07:d2:e9:4c: 63:56:54:9f:14:82:a4:0c:0c:4a:33:3e:c7:4a:7c: 56:c7:8c:34:dd:5e:04:0c:ef:4d:63:f4:b6:85:07: a1:93:f3:2d:1d:64:f3:e8:24:b8:cc:f9:e9:58:e5: 3c:7e:00:91:4f:b2:28:e0:e1:ce:c0:ca:fb:62:b2: 2d:5b:f2:89:22:b1:a9:34:62:21:43:00:27:66:b7: 3e:2b:88:c5:24:93:31:82:f6:d6:a9:98:ea:69:4b: 67:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:04:B1:EB:A6:4F:0C:44:4B:3A:71:73:40:77:E1:5D:7D:1D:A0:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3ee94904-40f3-3616-86ad-0521935c737f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv6: 2605:4300:2c14::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:1f:05:2a:f4:9f:0d:01:eb:4d:f7:7c:a3:a6:d4:66:28:67: 19:a9:e8:b4:be:d7:b9:cb:2e:3c:a8:03:67:c9:a3:99:ab:cc: 5b:d7:d2:9e:31:2b:05:47:bf:84:75:f1:c5:14:48:26:8c:98: e2:6e:10:40:9d:63:10:63:3b:6b:c8:49:42:79:9b:e1:b8:3e: 38:36:f4:c8:3d:a2:91:d7:61:4a:cb:db:5e:96:21:91:a5:fb: db:91:8f:18:b8:0f:15:33:a9:b0:74:58:e7:d4:82:df:27:e7: f1:48:a7:8c:7a:f3:5f:83:33:4d:fc:da:29:5a:65:b7:86:20: fc:c8:27:48:e2:29:e9:9d:a9:c6:c8:66:ce:2a:19:9d:eb:6b: 55:fa:f5:a5:0d:fd:9c:c0:2a:d0:02:72:fc:e2:36:fb:c3:cf: e8:0b:c1:fe:6a:de:48:28:39:ab:d5:52:c8:14:f8:18:84:4c: 10:21:ce:42:ba:3c:28:b0:a2:90:42:17:59:d9:47:41:f6:37: 6a:8a:89:44:b3:a1:8b:b7:89:66:32:56:0f:e7:67:8f:12:b3: f9:e9:2b:02:bd:df:1a:98:40:1a:08:1d:2e:ff:df:4b:18:61: 07:18:b6:7e:9d:b6:40:dd:6c:c5:6b:80:bf:2d:99:9b:c4:42: 36:30:aa:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhiZY0RDPIwVm/RqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI0MTIzMTAyMDA0MFoXDTI1MDMzMTAxMDA0MFowLzEtMCsGA1UEAxMk YTk3MzAyYTktOWJmZi00MTZiLWE5ZWMtNGI2NjI1MDE4MWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghh5RKzjFyPVpDVZiut48PaH/l7+KN61eFLo O4+0IVVYPy0yshIAdPhLNBrTvfjpsPVY+mhLNvBfwMgtX3SKVTkzcO9XkgYTpDSk YbzNEuXnCJbKf4/oOWG3OqknVN0c/kB/xWqFbcCgYyOPB7CPOWqDAvdHwh9dIGpO lLnuKGAN6vV3zNG3edBSrEOU/sQD9c7mfnHN9z1fUxoTlk+huQfS6UxjVlSfFIKk DAxKMz7HSnxWx4w03V4EDO9NY/S2hQehk/MtHWTz6CS4zPnpWOU8fgCRT7Io4OHO wMr7YrItW/KJIrGpNGIhQwAnZrc+K4jFJJMxgvbWqZjqaUtnTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCgEseumTwxESzpxc0B34V19HaDjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvM2VlOTQ5MDQtNDBmMy0z NjE2LTg2YWQtMDUyMTkzNWM3MzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVDACwU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMIfBSr0nw0B6033fKOm1GYoZxmp6LS+17nLLjyoA2fJo5mrzFvX 0p4xKwVHv4R18cUUSCaMmOJuEECdYxBjO2vISUJ5m+G4Pjg29Mg9opHXYUrL216W IZGl+9uRjxi4DxUzqbB0WOfUgt8n5/FIp4x681+DM0382ilaZbeGIPzIJ0jiKemd qcbIZs4qGZ3ra1X69aUN/ZzAKtACcvziNvvDz+gLwf5q3kgoOavVUsgU+BiETBAh zkK6PCiwopBCF1nZR0H2N2qKiUSzoYu3iWYyVg/nZ48Ss/npKwK93xqYQBoIHS7/ 30sYYQcYtn6dtkDdbMVrgL8tmZvEQjYwqoo= -----END CERTIFICATE-----Generated at Fri Mar 14 10:33:25 2025 by rpki-client