$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e1dddc1c-9b84-3914-861a-ce4ab64ece04.roa File: e1dddc1c-9b84-3914-861a-ce4ab64ece04.roa (raw, json) Hash identifier: aeEoOpj79n73344/VhhQ0+7HBDcsIUuxiINerj8jy8s= Subject key identifier: FB:85:A8:D3:72:95:94:D5:61:11:86:78:EA:D1:F5:44:E4:FD:75:B0 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F43285848CC58FD9293A6AA14CC1FE900 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e1dddc1c-9b84-3914-861a-ce4ab64ece04.roa Signing time: Fri 07 Feb 2025 00:51:06 +0000 ROA not before: Fri 07 Feb 2025 00:51:06 +0000 ROA not after: Wed 07 May 2025 23:51:06 +0000 asID: 8070 IP address blocks: 2605:4300:3601::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:58:fd:92:93:a6:aa:14:cc:1f:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Feb 7 00:51:06 2025 GMT Not After : May 7 23:51:06 2025 GMT Subject: CN=3bc90d9b-fa12-444c-bae3-ea22f629935d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6d:13:20:8b:b6:89:38:9a:39:66:ca:c4:3e: 3b:38:ec:d9:9f:90:d7:20:74:79:a7:b4:5a:ea:c9: 45:86:d0:4b:47:20:28:c7:ba:57:78:31:e9:71:4b: b5:13:5a:33:39:ce:3d:3c:78:54:30:3d:08:f3:9d: 7e:d0:d0:a4:a1:7a:a8:97:7e:fd:f7:11:55:81:f7: 0c:db:a4:f8:53:7d:68:d2:42:66:c0:54:fa:76:8e: 6a:c3:c6:55:ae:50:93:ad:8f:8f:72:cb:dc:2a:97: e2:4a:ed:d9:35:7c:7c:f9:ad:04:c0:e8:5e:c1:93: f6:83:25:5a:0b:4d:05:7c:cc:eb:d3:a8:a9:5c:fb: 6f:ed:24:5f:a4:dc:5c:66:e5:23:f6:f9:60:37:eb: e5:4b:6b:b3:19:b0:29:ad:90:b2:a5:56:ee:97:14: c9:92:39:9a:0a:bd:ea:49:76:47:55:4c:c6:2b:47: 21:df:7d:c1:1e:3e:bf:b0:19:ec:ae:8a:32:a0:4f: 99:5a:81:11:3c:7e:47:23:eb:07:94:d2:1d:c4:ef: ee:bb:22:ea:34:40:ff:7c:c9:4d:31:32:38:77:80: bb:0a:40:85:f7:53:73:7f:84:f5:0d:49:cc:75:20: 2d:f5:fd:f9:38:cd:92:30:bc:d9:fa:b1:93:5a:c2: 03:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:85:A8:D3:72:95:94:D5:61:11:86:78:EA:D1:F5:44:E4:FD:75:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e1dddc1c-9b84-3914-861a-ce4ab64ece04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv6: 2605:4300:3601::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:4c:76:23:83:46:a7:07:32:8b:ea:55:20:2a:7e:8c:da:11: 08:1c:a4:75:4c:ef:ae:c0:43:a8:5b:4e:50:df:ce:5c:2b:db: 1c:35:ab:ac:ca:92:84:70:5e:33:84:2f:ed:86:36:ac:63:8f: cb:a6:3d:ce:58:da:b8:65:0d:eb:1b:52:09:8a:c7:aa:aa:41: 63:d9:bb:e4:3b:bc:b0:68:c8:1d:bb:41:90:97:48:df:73:f0: db:88:e1:7c:c8:53:0e:4b:f7:62:42:88:2d:ba:fe:56:82:a7: 95:8a:09:9d:72:11:ec:4b:ad:d1:f1:95:26:22:52:73:2a:75: ba:0b:88:1f:ff:f6:f5:fe:76:74:1b:76:70:c1:c9:a4:f5:10: 31:07:b7:51:0a:0f:8a:4c:b8:81:ce:f0:eb:8d:9e:21:41:7b: d5:08:bf:bd:fd:7b:95:86:50:a4:b6:1a:82:8b:d0:1c:60:69: 86:fb:7d:b1:56:ea:37:8b:1e:12:62:4f:05:0c:df:9f:af:cb: fb:a0:42:f1:b0:b3:72:76:10:82:fd:9d:04:eb:89:43:50:fc: 76:0c:7c:13:54:1c:97:83:ef:c6:5d:84:94:e1:9d:37:9a:19: 24:cb:7a:43:3b:c0:ed:93:aa:9e:66:d4:13:47:e2:f1:2f:25: 4d:1f:d5:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjMWP2Sk6aqFMwf6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDIwNzAwNTEwNloXDTI1MDUwNzIzNTEwNlowLzEtMCsGA1UEAxMk M2JjOTBkOWItZmExMi00NDRjLWJhZTMtZWEyMmY2Mjk5MzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu20TIIu2iTiaOWbKxD47OOzZn5DXIHR5p7Ra 6slFhtBLRyAox7pXeDHpcUu1E1ozOc49PHhUMD0I851+0NCkoXqol3799xFVgfcM 26T4U31o0kJmwFT6do5qw8ZVrlCTrY+PcsvcKpfiSu3ZNXx8+a0EwOhewZP2gyVa C00FfMzr06ipXPtv7SRfpNxcZuUj9vlgN+vlS2uzGbAprZCypVbulxTJkjmaCr3q SXZHVUzGK0ch333BHj6/sBnsrooyoE+ZWoERPH5HI+sHlNIdxO/uuyLqNED/fMlN MTI4d4C7CkCF91Nzf4T1DUnMdSAt9f35OM2SMLzZ+rGTWsIDcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPuFqNNylZTVYRGGeOrR9UTk/XWwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZTFkZGRjMWMtOWI4NC0z OTE0LTg2MWEtY2U0YWI2NGVjZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgVDADYB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKFMdiODRqcHMovqVSAqfozaEQgcpHVM767AQ6hbTlDfzlwr2xw1 q6zKkoRwXjOEL+2GNqxjj8umPc5Y2rhlDesbUgmKx6qqQWPZu+Q7vLBoyB27QZCX SN9z8NuI4XzIUw5L92JCiC26/laCp5WKCZ1yEexLrdHxlSYiUnMqdboLiB//9vX+ dnQbdnDByaT1EDEHt1EKD4pMuIHO8OuNniFBe9UIv739e5WGUKS2GoKL0BxgaYb7 fbFW6jeLHhJiTwUM35+vy/ugQvGws3J2EIL9nQTriUNQ/HYMfBNUHJeD78ZdhJTh nTeaGSTLekM7wO2Tqp5m1BNH4vEvJU0f1Vw= -----END CERTIFICATE-----Generated at Sat Apr 19 07:10:21 2025 by rpki-client