$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76f4f340-d85d-3822-9dd5-431f31e7731c.roa File: 76f4f340-d85d-3822-9dd5-431f31e7731c.roa (raw, json) Hash identifier: 4ZrBcpTfNqzt4UBGsNMN5AW8it9WsYa0QHUBkvbJDaM= Subject key identifier: A1:59:E1:3F:A0:92:74:EE:5D:75:48:32:64:C7:70:7E:26:BD:0A:11 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D132C4C3E8218B97E0E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76f4f340-d85d-3822-9dd5-431f31e7731c.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 2603:3011:600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:13:2c:4c:3e:82:18:b9:7e:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=3cbdbf18-7659-439e-a743-71dcd36723a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:65:22:62:f9:be:9d:0c:d3:9e:a7:19:6a:10: 38:3c:e4:64:5e:bb:c7:c7:f4:60:de:36:a7:29:d7: fc:92:09:37:55:4e:0d:63:60:e1:d5:d9:90:20:cc: e8:07:16:f0:ac:62:14:0f:cb:c8:c8:31:b2:c2:de: 3a:96:c8:5d:54:02:76:9c:3a:61:f2:ee:28:e8:18: 2b:8e:70:f7:20:2f:aa:cb:26:0d:6c:2c:de:d5:19: 0a:28:05:ad:66:72:d7:fa:d7:ca:8c:5b:c4:c5:a2: 57:9a:1f:97:c4:83:e7:95:fd:77:97:ed:c8:88:5f: 75:23:3e:6e:e3:02:72:50:9f:95:2d:f5:f9:87:7b: 66:58:f6:75:d0:05:3b:f7:87:ef:1c:28:fe:18:48: 93:16:ba:1f:15:e0:96:8a:5f:26:5e:ac:3b:7f:2f: ba:6d:35:57:44:cc:04:76:e0:b1:d3:88:08:4b:20: ee:f2:61:48:24:84:0c:b4:d9:80:26:29:4b:8c:ad: 63:76:f1:48:76:7f:99:71:0a:05:2b:1a:33:31:0a: 28:7c:9c:6a:35:21:f8:b3:cc:5d:b1:15:0a:3d:32: 87:2c:e3:64:8f:75:ca:98:ee:d7:ac:74:ef:63:0e: de:54:eb:96:7c:38:b4:3c:47:21:e5:9a:01:6c:53: fd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:59:E1:3F:A0:92:74:EE:5D:75:48:32:64:C7:70:7E:26:BD:0A:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76f4f340-d85d-3822-9dd5-431f31e7731c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3011:600::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:ef:80:77:ea:58:52:70:f3:75:e6:7a:21:47:ca:39:05:04: 6b:76:5f:e4:e8:54:3f:52:36:17:c8:35:46:f7:22:63:68:da: a6:c8:a2:1d:48:9b:21:13:7a:63:cc:c9:36:f1:5e:c1:79:92: 34:61:3f:57:2d:90:b0:99:9f:63:86:b3:ed:b2:ab:26:a9:f3: c1:f9:04:88:03:0e:f7:2b:1f:1c:b5:70:bf:74:7c:7d:ef:82: 80:ea:bd:2d:cf:dd:e5:11:79:a2:b3:09:5c:13:60:b4:b0:0d: 3b:a5:35:8c:25:17:73:7b:9e:a9:f8:80:04:b6:a7:6c:01:d6: 81:39:56:e5:ec:1e:15:96:0d:02:e3:98:26:be:fc:f1:d1:98: 96:5f:32:b0:20:7a:bb:3e:59:40:d6:32:fe:c0:48:c1:76:c0: 08:34:e9:cd:83:f6:d4:dc:c8:57:22:1d:ae:4d:eb:aa:95:e7: b2:f5:7c:2a:bc:66:2b:e3:91:96:0a:90:c1:ed:a3:5a:5c:8a: 18:0c:27:10:a8:44:88:3a:17:5a:05:a1:b9:53:88:42:1d:b6: d7:3f:37:83:46:93:c6:43:1d:0e:03:9e:71:63:1b:15:4a:27: d3:76:c7:ea:73:66:d5:e7:05:0b:3c:4f:41:2d:83:61:60:e5: 23:fe:2f:54 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEiebRMsTD6CGLl+DoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk M2NiZGJmMTgtNzY1OS00MzllLWE3NDMtNzFkY2QzNjcyM2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmUiYvm+nQzTnqcZahA4PORkXrvHx/Rg3jan Kdf8kgk3VU4NY2Dh1dmQIMzoBxbwrGIUD8vIyDGywt46lshdVAJ2nDph8u4o6Bgr jnD3IC+qyyYNbCze1RkKKAWtZnLX+tfKjFvExaJXmh+XxIPnlf13l+3IiF91Iz5u 4wJyUJ+VLfX5h3tmWPZ10AU794fvHCj+GEiTFrofFeCWil8mXqw7fy+6bTVXRMwE duCx04gISyDu8mFIJIQMtNmAJilLjK1jdvFIdn+ZcQoFKxozMQoofJxqNSH4s8xd sRUKPTKHLONkj3XKmO7XrHTvYw7eVOuWfDi0PEch5ZoBbFP9bQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKFZ4T+gknTuXXVIMmTHcH4mvQoRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzZmNGYzNDAtZDg1ZC0z ODIyLTlkZDUtNDMxZjMxZTc3MzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwEQYw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAl++Ad+pYUnDzdeZ6IUfKOQUEa3Zf5OhUP1I2F8g1RvciY2japsii HUibIRN6Y8zJNvFewXmSNGE/Vy2QsJmfY4az7bKrJqnzwfkEiAMO9ysfHLVwv3R8 fe+CgOq9Lc/d5RF5orMJXBNgtLANO6U1jCUXc3ueqfiABLanbAHWgTlW5eweFZYN AuOYJr788dGYll8ysCB6uz5ZQNYy/sBIwXbACDTpzYP21NzIVyIdrk3rqpXnsvV8 KrxmK+ORlgqQwe2jWlyKGAwnEKhEiDoXWgWhuVOIQh221z83g0aTxkMdDgOecWMb FUon03bH6nNm1ecFCzxPQS2DYWDlI/4vVA== -----END CERTIFICATE-----Generated at Mon Apr 7 06:07:59 2025 by rpki-client