$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90f20f29-5f10-32c8-a08e-6af176b497a5.roa File: 90f20f29-5f10-32c8-a08e-6af176b497a5.roa (raw, json) Hash identifier: Ja992RLc7FuKOtQO7mIize3fu4kej5LsMV81RsvyLxk= Subject key identifier: 9B:93:20:36:4A:6A:8F:0B:38:D9:87:D0:D0:C4:65:11:A4:EF:A1:41 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F22BECAA59172C999C57AAC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90f20f29-5f10-32c8-a08e-6af176b497a5.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 22258 IP address blocks: 2601:3c8:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2b:ec:aa:59:17:2c:99:9c:57:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=d0af0357-91fb-4355-be1b-52ff9df0c3da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8c:25:26:ec:5e:a7:a6:59:68:a9:ed:4d:c6: af:de:4c:58:72:14:d8:ae:d1:6f:c0:b5:7d:97:0f: 2f:0e:46:be:91:72:95:e6:8c:21:3b:e6:01:a6:e4: 71:c0:a6:9b:d3:ae:88:80:74:4a:5c:81:0f:ef:52: 98:46:75:c8:28:d8:71:30:b1:0b:b7:25:c4:4a:9a: 70:4f:6d:dc:8a:0c:d7:3a:6e:f4:b2:14:e4:fc:ee: 89:02:33:d3:19:20:44:51:7d:7e:3a:05:55:5f:23: 2b:9d:eb:e4:d3:f8:cc:20:66:38:a7:8d:26:af:e9: 99:e5:56:a7:07:ac:1b:a5:f4:f2:bb:70:b6:d3:99: 16:2c:f8:ed:2b:2e:10:92:9b:8a:6a:bf:a6:f7:73: 8f:34:bd:ca:ac:f3:4c:00:45:c5:d4:5e:77:25:a4: c0:ee:83:dc:cf:f5:c9:98:67:33:75:95:a0:16:5b: 6a:51:02:e6:9a:4b:46:fd:da:92:86:9d:bd:04:44: fc:aa:af:58:cd:cf:22:aa:88:56:fa:63:03:3b:0f: 17:6f:72:39:24:5a:21:51:06:1e:01:d9:14:9e:88: 94:a4:1d:7a:54:59:a7:b6:b3:37:9e:ac:1a:4c:76: 3c:32:de:81:bd:18:59:08:af:f0:af:86:e6:db:45: d2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:93:20:36:4A:6A:8F:0B:38:D9:87:D0:D0:C4:65:11:A4:EF:A1:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90f20f29-5f10-32c8-a08e-6af176b497a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:3c8:4000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:1f:57:45:1e:8d:ca:34:03:a7:89:06:ce:d6:96:a5:f0:12: 13:1a:fb:67:92:0f:47:be:b3:1a:7c:9e:e0:66:a0:b3:b9:f5: 33:f5:77:eb:ea:57:34:0b:73:d5:06:55:b2:d1:61:95:47:fc: bc:65:be:de:f8:96:32:40:50:e4:70:32:6f:da:e2:8c:b8:c1: 46:59:5f:ed:07:40:cb:07:5b:7b:19:c1:e9:8f:e6:28:1a:ff: 6a:80:ca:e3:b9:d2:f3:40:d0:97:04:ab:19:fb:20:3d:45:9d: 65:31:26:a3:a0:21:58:89:32:1f:67:be:be:1b:af:47:d3:c7: 57:42:80:1f:34:54:0b:37:64:e3:0b:82:d1:f5:3b:b6:34:46: c2:ec:92:13:35:53:38:95:e0:50:0a:8f:7d:2a:11:c5:cd:3c: 7d:30:5a:9b:73:b7:03:bf:ad:5c:b2:23:9d:a9:c2:ca:d9:99: d4:1f:7c:0e:47:c4:f1:82:5d:8f:43:bd:97:46:47:7e:e5:ce: 3f:8c:5d:11:64:30:ee:72:75:6a:64:ab:e9:53:ab:43:33:8b: 7c:9b:73:a4:cd:d6:8f:54:cb:4d:46:0c:2f:29:ad:a3:fa:1a: f8:2d:2c:9e:d3:b3:94:fd:22:82:e1:2c:91:0d:64:e8:bd:4a: 6c:de:73:5c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjyK+yqWRcsmZxXqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ZDBhZjAzNTctOTFmYi00MzU1LWJlMWItNTJmZjlkZjBjM2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YwlJuxep6ZZaKntTcav3kxYchTYrtFvwLV9 lw8vDka+kXKV5owhO+YBpuRxwKab066IgHRKXIEP71KYRnXIKNhxMLELtyXESppw T23cigzXOm70shTk/O6JAjPTGSBEUX1+OgVVXyMrnevk0/jMIGY4p40mr+mZ5Van B6wbpfTyu3C205kWLPjtKy4QkpuKar+m93OPNL3KrPNMAEXF1F53JaTA7oPcz/XJ mGczdZWgFltqUQLmmktG/dqShp29BET8qq9Yzc8iqohW+mMDOw8Xb3I5JFohUQYe AdkUnoiUpB16VFmntrM3nqwaTHY8Mt6BvRhZCK/wr4bm20XSEQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJuTIDZKao8LONmH0NDEZRGk76FBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTBmMjBmMjktNWYxMC0z MmM4LWEwOGUtNmFmMTc2YjQ5N2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEDyEAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAmx9XRR6NyjQDp4kGztaWpfASExr7Z5IPR76zGnye4Gags7n1M/V3 6+pXNAtz1QZVstFhlUf8vGW+3viWMkBQ5HAyb9rijLjBRllf7QdAywdbexnB6Y/m KBr/aoDK47nS80DQlwSrGfsgPUWdZTEmo6AhWIkyH2e+vhuvR9PHV0KAHzRUCzdk 4wuC0fU7tjRGwuySEzVTOJXgUAqPfSoRxc08fTBam3O3A7+tXLIjnanCytmZ1B98 DkfE8YJdj0O9l0ZHfuXOP4xdEWQw7nJ1amSr6VOrQzOLfJtzpM3Wj1TLTUYMLymt o/oa+C0sntOzlP0iguEskQ1k6L1KbN5zXA== -----END CERTIFICATE-----Generated at Mon Apr 7 06:05:40 2025 by rpki-client