$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cb059ce-2684-3bd3-a5e4-acb59eaee514.roa File: 3cb059ce-2684-3bd3-a5e4-acb59eaee514.roa (raw, json) Hash identifier: Tna9WrnMCCIxFGh/JuGyscwC5GhKA8jg+iiKtbmUGIc= Subject key identifier: 89:58:B1:EE:E3:92:CC:E5:B8:89:D0:7E:90:07:EC:30:B6:25:0C:8D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849203C2F25DFBDF4AF524EA5B8 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cb059ce-2684-3bd3-a5e4-acb59eaee514.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 7725 IP address blocks: 2601:cf:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:2f:25:df:bd:f4:af:52:4e:a5:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=0ae00817-506c-45e4-ae2e-27f320d1b00e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0e:6e:21:78:a7:e1:9e:42:7b:1a:71:5b:df: 68:cf:96:81:6c:c4:ac:85:1a:24:7e:46:d4:7d:96: 93:ae:d2:57:00:46:94:49:8a:ed:e1:5d:97:a1:4c: 77:9d:f4:02:be:5d:01:ec:00:5a:19:2a:ef:c4:97: e8:7c:e3:b7:e2:0f:dc:1a:69:d8:26:21:fe:f6:6a: 19:34:b3:e2:ea:a2:20:01:d3:aa:06:23:33:1a:47: 8e:59:67:31:50:44:76:a4:6f:73:9a:0a:db:8a:08: c1:cf:02:4e:58:79:7e:27:85:f7:76:56:2a:cd:92: 14:b6:78:db:5a:ae:29:b0:21:a3:50:ce:d2:11:90: 9c:5a:96:03:6f:ad:53:bf:8a:86:66:ce:f0:7c:ae: d4:8f:6c:5f:e3:e4:c1:9b:21:19:80:df:a3:e8:a8: fa:3c:3b:70:1a:0c:cd:e5:c0:93:50:10:61:73:22: 45:3a:82:7f:43:31:99:82:ac:87:a6:b8:5c:ab:a3: c1:02:c2:9a:aa:f5:3a:12:e9:58:47:85:12:37:58: 6f:e9:b8:95:4c:d4:9a:7f:aa:69:d1:1c:9b:f3:3f: f8:a8:24:b9:1b:1f:fb:46:23:2a:05:69:33:4b:7b: a3:0e:22:79:69:da:17:47:17:4d:85:41:0f:fc:49: d1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:58:B1:EE:E3:92:CC:E5:B8:89:D0:7E:90:07:EC:30:B6:25:0C:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cb059ce-2684-3bd3-a5e4-acb59eaee514.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:cf:8000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:25:28:ce:ba:26:b7:ca:e5:1e:9c:36:da:95:cb:e7:30:8b: e8:34:cf:a7:d7:27:65:81:d4:79:94:f1:f4:91:52:bb:34:cc: cf:b8:9d:25:68:b9:02:71:8f:48:96:d8:00:74:0b:a6:f2:2e: 17:69:51:b7:f7:23:5a:ab:a9:3b:95:6f:88:61:1c:ba:81:31: 3e:68:80:a2:dc:3a:65:f6:7b:8c:1b:dc:f8:cb:96:bb:65:ae: 03:a8:29:01:39:da:a3:d5:97:81:49:36:98:c1:77:57:4a:55: 22:ca:93:3a:8f:b0:b7:70:06:e3:db:12:f7:79:e0:a2:88:4b: 47:aa:29:ab:55:0d:ce:e1:32:c5:58:84:47:e5:7a:64:81:a9: 69:97:85:6a:f8:8e:61:65:cc:d9:e9:2e:dd:2d:35:15:f7:b6: fe:d0:c6:61:05:4b:cf:95:12:78:e1:10:19:92:8b:f7:a7:7e: c3:2f:39:d6:71:ec:4c:ed:e5:6a:13:5d:27:45:df:55:43:c2: 30:bc:7f:38:b3:af:18:5b:6a:35:02:00:9c:66:5d:73:d9:25: fd:ec:f2:8d:25:82:ec:af:74:35:eb:2f:bb:82:88:a5:18:9b: 93:d2:64:4d:ba:a9:94:41:82:f7:f2:94:d9:2e:47:b6:9f:f8: 7a:cd:7c:06 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkgPC8l3730r1JOpbgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk MGFlMDA4MTctNTA2Yy00NWU0LWFlMmUtMjdmMzIwZDFiMDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg5uIXin4Z5CexpxW99oz5aBbMSshRokfkbU fZaTrtJXAEaUSYrt4V2XoUx3nfQCvl0B7ABaGSrvxJfofOO34g/cGmnYJiH+9moZ NLPi6qIgAdOqBiMzGkeOWWcxUER2pG9zmgrbigjBzwJOWHl+J4X3dlYqzZIUtnjb Wq4psCGjUM7SEZCcWpYDb61Tv4qGZs7wfK7Uj2xf4+TBmyEZgN+j6Kj6PDtwGgzN 5cCTUBBhcyJFOoJ/QzGZgqyHprhcq6PBAsKaqvU6EulYR4USN1hv6biVTNSaf6pp 0Ryb8z/4qCS5Gx/7RiMqBWkzS3ujDiJ5adoXRxdNhUEP/EnRMQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIlYse7jkszluInQfpAH7DC2JQyNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2NiMDU5Y2UtMjY4NC0z YmQzLWE1ZTQtYWNiNTllYWVlNTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEAz4Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEADSUozromt8rlHpw22pXL5zCL6DTPp9cnZYHUeZTx9JFSuzTMz7id JWi5AnGPSJbYAHQLpvIuF2lRt/cjWqupO5VviGEcuoExPmiAotw6ZfZ7jBvc+MuW u2WuA6gpATnao9WXgUk2mMF3V0pVIsqTOo+wt3AG49sS93ngoohLR6opq1UNzuEy xViER+V6ZIGpaZeFaviOYWXM2eku3S01Ffe2/tDGYQVLz5USeOEQGZKL96d+wy85 1nHsTO3lahNdJ0XfVUPCMLx/OLOvGFtqNQIAnGZdc9kl/ezyjSWC7K90Nesvu4KI pRibk9JkTbqplEGC9/KU2S5Htp/4es18Bg== -----END CERTIFICATE-----Generated at Mon Apr 7 06:03:37 2025 by rpki-client