$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8251dac0-30d1-39c9-8654-e67f6eb06299.roa File: 8251dac0-30d1-39c9-8654-e67f6eb06299.roa (raw, json) Hash identifier: ZAgBVzf0wJGJMIGB08xbbgnqAZlLrx7XT8xmaELaLmU= Subject key identifier: 57:1B:D2:B3:10:AB:D6:EE:A3:92:5B:87:F0:E0:79:0F:97:8B:B9:09 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F22C2A3D057876DCEEBE8FC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8251dac0-30d1-39c9-8654-e67f6eb06299.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 22258 IP address blocks: 2601:3c5:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:2a:3d:05:78:76:dc:ee:be:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=1dd650f1-41b4-40e0-8635-78351fef90ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b9:fe:9b:50:6e:72:3d:88:bd:1a:cf:9e:e6: 02:df:e8:5b:e5:c0:16:41:af:37:e8:7e:cc:f8:4f: 35:54:99:45:80:6d:d4:12:7f:74:57:5d:a0:01:eb: 3f:0e:0c:b1:af:2b:7f:42:02:b8:87:63:b0:06:99: aa:a4:86:2b:16:56:8c:a8:b1:84:5f:2d:ee:6b:06: db:77:f6:f0:43:39:b1:87:a0:da:4e:f4:70:2e:55: d6:7d:75:9c:92:6b:58:12:e9:1c:5f:85:c0:74:38: e6:d1:63:21:dc:0f:54:45:b5:53:29:86:3c:f1:76: 54:37:f7:42:16:72:8c:13:b8:3e:f5:95:25:3f:01: f8:64:a8:11:0f:ac:7e:a8:51:d7:db:74:20:9f:a5: 57:0d:6a:a0:ee:09:16:2a:87:c2:16:42:43:76:14: 26:78:09:96:73:33:1b:c4:28:24:a8:6d:6e:ec:57: 28:47:48:5c:15:d1:c1:75:5c:1d:6e:71:ae:d8:ae: 28:47:1a:09:31:30:00:6f:5c:c9:63:6b:5c:14:be: 27:c3:2c:1b:d9:f4:5b:65:da:23:e1:80:af:76:58: 2a:9a:e4:fe:51:e7:22:8e:46:d7:e7:46:ee:f0:51: 63:b6:97:4a:86:0b:4a:0c:94:3f:7c:9e:7e:31:95: 10:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1B:D2:B3:10:AB:D6:EE:A3:92:5B:87:F0:E0:79:0F:97:8B:B9:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8251dac0-30d1-39c9-8654-e67f6eb06299.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:3c5:8000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:df:5c:f9:ad:85:50:d9:61:3a:5a:23:e6:ed:e8:c1:0b:97: b7:01:fe:4b:f0:60:62:1f:b6:70:2f:61:13:5c:79:c8:48:74: be:f8:c2:69:56:d2:7f:7a:9a:a9:50:36:c4:a7:1a:a0:d0:ad: 7a:84:e7:22:6c:61:e4:e4:ff:96:74:9b:86:d6:e2:42:e2:57: 16:a5:28:8e:c1:b4:bb:2d:50:cf:95:35:f6:fa:9f:e3:6f:20: ee:30:b6:74:1e:60:e6:2f:d1:59:ef:fa:8e:bc:02:0d:01:7e: 21:da:d9:67:be:ae:32:49:c4:4f:ce:8a:77:f7:16:99:3a:19: cd:0e:5c:5a:8f:a7:9b:50:d2:9a:1c:15:41:3f:f5:56:4b:0d: 72:88:31:87:24:d6:fd:1c:a5:df:6c:b4:9c:6c:ca:ac:98:13: 49:f1:ab:3c:9d:16:e6:46:1a:4f:35:9a:43:1e:98:44:f2:19: 29:fc:51:0a:ed:62:7d:99:c1:ca:49:e3:c0:a8:0f:d7:d0:39: 6b:69:29:ae:52:15:36:a8:98:52:fb:f7:01:25:28:40:67:93: 86:f1:34:dc:aa:a4:88:96:96:77:12:8b:1a:e6:4b:f9:4c:ed: ac:f1:c2:fb:24:82:9b:42:b6:aa:2b:00:e2:6e:f2:24:71:29: db:9e:f5:4a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjyLCo9BXh23O6+j8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk MWRkNjUwZjEtNDFiNC00MGUwLTg2MzUtNzgzNTFmZWY5MGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLn+m1Bucj2IvRrPnuYC3+hb5cAWQa836H7M +E81VJlFgG3UEn90V12gAes/Dgyxryt/QgK4h2OwBpmqpIYrFlaMqLGEXy3uawbb d/bwQzmxh6DaTvRwLlXWfXWckmtYEukcX4XAdDjm0WMh3A9URbVTKYY88XZUN/dC FnKME7g+9ZUlPwH4ZKgRD6x+qFHX23Qgn6VXDWqg7gkWKofCFkJDdhQmeAmWczMb xCgkqG1u7FcoR0hcFdHBdVwdbnGu2K4oRxoJMTAAb1zJY2tcFL4nwywb2fRbZdoj 4YCvdlgqmuT+UecijkbX50bu8FFjtpdKhgtKDJQ/fJ5+MZUQTwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFcb0rMQq9buo5Jbh/DgeQ+Xi7kJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODI1MWRhYzAtMzBkMS0z OWM5LTg2NTQtZTY3ZjZlYjA2Mjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEDxYAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAh99c+a2FUNlhOloj5u3owQuXtwH+S/BgYh+2cC9hE1x5yEh0vvjC aVbSf3qaqVA2xKcaoNCteoTnImxh5OT/lnSbhtbiQuJXFqUojsG0uy1Qz5U19vqf 428g7jC2dB5g5i/RWe/6jrwCDQF+IdrZZ76uMknET86Kd/cWmToZzQ5cWo+nm1DS mhwVQT/1VksNcogxhyTW/Ryl32y0nGzKrJgTSfGrPJ0W5kYaTzWaQx6YRPIZKfxR Cu1ifZnByknjwKgP19A5a2kprlIVNqiYUvv3ASUoQGeThvE03KqkiJaWdxKLGuZL +UztrPHC+ySCm0K2qisA4m7yJHEp2571Sg== -----END CERTIFICATE-----Generated at Mon Apr 7 09:37:43 2025 by rpki-client