$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11a4fc1a-56e4-386a-a478-e84ce8aa4639.roa File: 11a4fc1a-56e4-386a-a478-e84ce8aa4639.roa (raw, json) Hash identifier: F9WjBsnJ6ZUxFG1MkKrf70BrMicF9qS0jO4zdxuwtcI= Subject key identifier: DF:A2:4A:F2:16:7E:F8:C0:C2:24:8B:3B:61:52:86:23:F6:2A:73:F1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8D52377D121E8E35E9180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11a4fc1a-56e4-386a-a478-e84ce8aa4639.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 2603:240f::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:d5:23:77:d1:21:e8:e3:5e:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=fedb2ef4-66a7-43b6-8860-5f7ad493d118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7f:ec:88:bf:a0:3d:64:ae:10:1d:77:13:e1: 97:4b:b2:89:4a:6a:ae:34:09:01:37:f4:43:38:cc: df:01:7d:af:d2:92:60:6e:d4:06:12:17:d1:f7:80: 12:a6:06:86:25:ee:b9:72:96:8a:94:c7:fb:8d:02: 82:d7:c1:e6:bd:2f:80:d7:19:49:e5:9f:67:60:be: 0b:84:7e:b8:3d:cf:6f:cf:0a:f6:41:88:7f:bf:e4: 50:4a:28:e3:a6:b5:96:92:a9:29:05:36:89:43:f3: 5c:64:78:1f:84:06:1b:34:a2:91:5a:90:fb:49:f8: 21:a9:86:3b:bd:8a:6b:d3:5b:d0:aa:76:22:37:95: a5:fe:07:7f:8f:9d:40:47:14:a9:78:01:e3:be:39: 63:7c:46:88:6b:ef:10:3c:83:97:2a:5f:42:7d:45: 5e:85:46:fb:66:13:d9:af:f0:30:c8:47:09:86:3f: 59:b2:ee:f6:4e:ff:1d:19:27:9e:7b:e1:df:6b:5c: 57:0f:55:56:ec:ad:7b:21:51:fc:1b:3e:f4:bd:cb: 50:3c:31:52:50:69:92:3b:9c:da:ba:25:be:e1:e0: 92:4a:5d:de:b8:65:70:48:71:03:e3:74:ab:ea:0c: 1b:74:41:fb:ed:bc:12:ec:57:92:26:32:8a:9a:20: e5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A2:4A:F2:16:7E:F8:C0:C2:24:8B:3B:61:52:86:23:F6:2A:73:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11a4fc1a-56e4-386a-a478-e84ce8aa4639.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:240f::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:d9:37:80:55:80:b5:bb:8d:35:5f:a4:fd:b5:00:b8:2c:14: 5b:a5:e3:ed:c7:21:e4:0f:69:81:9f:ba:fe:b5:2f:fe:b0:26: c9:60:8f:27:86:9b:ac:f7:ea:a4:80:9a:84:24:69:35:74:fe: af:7c:9e:47:c1:7c:dd:30:4f:13:f1:8f:11:91:e9:50:a2:35: 9a:f8:1c:ac:8a:5c:90:94:d2:55:11:ae:c9:af:e2:bb:0e:83: e9:b8:af:6a:8f:d3:31:90:60:97:c4:2a:31:76:d9:3f:be:0c: 0b:03:4e:11:3e:d3:98:1a:78:b3:67:2f:5f:9f:a5:92:66:79: 46:2c:18:f1:ba:0a:e8:27:8b:ec:e1:31:af:32:a3:9a:a4:05: 0c:0b:d1:1a:0c:52:07:9e:2a:61:37:18:9e:13:18:00:5b:01: f1:46:90:ef:2c:4d:eb:c7:ec:db:7e:16:f0:c7:6b:2c:e5:b9: fb:2b:67:a6:80:a5:a5:46:17:7c:af:45:88:68:f1:93:e4:5a: f9:2b:bf:96:8d:2e:05:17:2a:2c:3b:21:84:ea:0f:50:b0:2b: 08:02:91:95:9d:9c:72:26:eb:cd:19:da:ac:e0:24:8b:a9:e2: 8e:16:42:cf:37:47:f2:b1:34:45:16:c0:ab:30:81:88:fd:2a: a4:1a:1a:7a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEj0+NUjd9Eh6ONekYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZmVkYjJlZjQtNjZhNy00M2I2LTg4NjAtNWY3YWQ0OTNkMTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3H/siL+gPWSuEB13E+GXS7KJSmquNAkBN/RD OMzfAX2v0pJgbtQGEhfR94ASpgaGJe65cpaKlMf7jQKC18HmvS+A1xlJ5Z9nYL4L hH64Pc9vzwr2QYh/v+RQSijjprWWkqkpBTaJQ/NcZHgfhAYbNKKRWpD7SfghqYY7 vYpr01vQqnYiN5Wl/gd/j51ARxSpeAHjvjljfEaIa+8QPIOXKl9CfUVehUb7ZhPZ r/AwyEcJhj9Zsu72Tv8dGSeee+Hfa1xXD1VW7K17IVH8Gz70vctQPDFSUGmSO5za uiW+4eCSSl3euGVwSHED43Sr6gwbdEH77bwS7FeSJjKKmiDl+wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFN+iSvIWfvjAwiSLO2FShiP2KnPxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTFhNGZjMWEtNTZlNC0z ODZhLWE0NzgtZTg0Y2U4YWE0NjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMkDwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAwtk3gFWAtbuNNV+k/bUAuCwUW6Xj7cch5A9pgZ+6/rUv/rAmyWCP J4abrPfqpICahCRpNXT+r3yeR8F83TBPE/GPEZHpUKI1mvgcrIpckJTSVRGuya/i uw6D6bivao/TMZBgl8QqMXbZP74MCwNOET7TmBp4s2cvX5+lkmZ5RiwY8boK6CeL 7OExrzKjmqQFDAvRGgxSB54qYTcYnhMYAFsB8UaQ7yxN68fs234W8MdrLOW5+ytn poClpUYXfK9FiGjxk+Ra+Su/lo0uBRcqLDshhOoPULArCAKRlZ2ccibrzRnarOAk i6nijhZCzzdH8rE0RRbAqzCBiP0qpBoaeg== -----END CERTIFICATE-----Generated at Mon Apr 7 06:11:03 2025 by rpki-client