$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95255218-7a3b-3b07-ad8f-17c500a512c7.roa File: 95255218-7a3b-3b07-ad8f-17c500a512c7.roa (raw, json) Hash identifier: jHR2lulBPqq8PzRYQ+rVwh0hh8wDXnjxyJoEl167/B0= Subject key identifier: 11:E6:F8:61:90:18:AA:80:3C:8F:A3:C0:7F:5C:F4:0D:17:FA:5B:92 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C69ACE29409B0334CE380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95255218-7a3b-3b07-ad8f-17c500a512c7.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 13367 IP address blocks: 2603:2442::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:69:ac:e2:94:09:b0:33:4c:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=136f739e-0994-412d-bdda-c43aec9232f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:17:55:c2:82:8b:81:97:e3:ad:fd:74:dc:c2: 51:80:4e:f0:df:3d:0f:d8:65:14:99:c3:18:68:e3: ce:dd:fd:21:0d:73:2f:fd:6f:04:5e:ed:8c:3c:fc: 69:b6:0f:4e:8f:0f:b7:b0:37:47:fa:c9:e8:63:84: 22:dd:35:cf:d5:47:5d:8b:56:50:3e:d9:2f:25:39: f7:bd:a6:a8:cf:d8:ff:b9:73:04:27:8a:3d:78:92: 47:c3:34:eb:7a:3f:9a:1a:16:f0:ab:de:95:c4:ce: 68:d8:51:c3:b2:c3:95:5f:d4:7f:e4:b0:30:38:e4: 72:00:b8:e9:92:fb:2f:b9:59:e9:1c:d7:e9:9d:bf: 50:7b:c2:9f:66:6c:ae:8b:f9:4d:79:44:41:e3:f9: 11:16:59:4a:9e:bc:72:fc:d5:ca:87:27:60:e8:8c: c2:a7:4b:4c:78:9e:ab:54:7f:5c:cd:eb:1b:61:a7: 64:d6:d4:51:0a:57:de:65:4d:87:53:75:b8:97:be: 5c:dc:d6:6c:3f:b0:e8:a6:ab:51:d4:09:a0:3f:65: 08:5f:33:8c:c2:19:2a:bc:b8:1f:fc:f3:98:3b:8a: a7:9b:73:d3:ed:45:de:5d:55:f0:ad:45:30:4d:e9: da:cc:bb:97:5f:00:13:1e:7b:b2:81:9c:5f:f4:36: 17:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E6:F8:61:90:18:AA:80:3C:8F:A3:C0:7F:5C:F4:0D:17:FA:5B:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95255218-7a3b-3b07-ad8f-17c500a512c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:2442::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:42:e9:ee:c9:10:e5:7e:d2:cd:11:6b:af:72:fc:b1:94:d4: db:d9:e7:4e:16:e7:16:31:d2:74:ae:83:36:4d:c7:d0:8c:05: af:be:ee:72:db:25:38:d8:f7:4a:37:b0:6d:b2:fd:35:06:4c: 8b:84:38:99:3e:2a:32:d0:77:66:d4:84:84:a8:13:1c:68:74: dd:00:d1:b1:92:b9:d4:7f:20:d0:c8:9d:9a:9a:c4:9f:37:80: d9:cd:e2:7b:0c:21:ac:c5:70:0a:b8:0b:f2:c7:e2:7d:4d:12: 4a:f1:63:7f:49:77:9b:f7:ca:bb:28:42:87:c1:fc:39:2a:44: 7e:58:72:0f:6a:32:cf:91:4a:63:e3:67:f7:c9:de:2c:eb:09: fa:af:ac:95:94:27:3f:fd:be:29:e3:61:2c:35:95:72:1d:12: 11:16:3a:08:31:33:d1:2e:64:72:2a:e6:83:1d:23:58:59:0b: 72:2f:17:2e:57:ce:20:09:92:18:07:4a:4b:b4:9b:e4:8f:65: a8:cc:56:d6:f6:7b:4b:b4:0b:fd:26:cb:5f:cf:5f:6b:28:ac: e0:79:ac:36:7a:04:58:14:69:56:10:c2:7e:3b:c1:ee:59:37: a0:eb:24:33:03:f5:ae:2d:f1:4b:5f:b1:c7:8a:e8:4f:b6:96: 27:9a:d8:ca -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEiebGms4pQJsDNM44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MTM2ZjczOWUtMDk5NC00MTJkLWJkZGEtYzQzYWVjOTIzMmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BdVwoKLgZfjrf103MJRgE7w3z0P2GUUmcMY aOPO3f0hDXMv/W8EXu2MPPxptg9Ojw+3sDdH+snoY4Qi3TXP1Uddi1ZQPtkvJTn3 vaaoz9j/uXMEJ4o9eJJHwzTrej+aGhbwq96VxM5o2FHDssOVX9R/5LAwOORyALjp kvsvuVnpHNfpnb9Qe8KfZmyui/lNeURB4/kRFllKnrxy/NXKhydg6IzCp0tMeJ6r VH9czesbYadk1tRRClfeZU2HU3W4l75c3NZsP7DopqtR1AmgP2UIXzOMwhkqvLgf /POYO4qnm3PT7UXeXVXwrUUwTenazLuXXwATHnuygZxf9DYXgwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBHm+GGQGKqAPI+jwH9c9A0X+luSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTUyNTUyMTgtN2EzYi0z YjA3LWFkOGYtMTdjNTAwYTUxMmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMkQgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEArELp7skQ5X7SzRFrr3L8sZTU29nnThbnFjHSdK6DNk3H0IwFr77u ctslONj3SjewbbL9NQZMi4Q4mT4qMtB3ZtSEhKgTHGh03QDRsZK51H8g0MidmprE nzeA2c3iewwhrMVwCrgL8sfifU0SSvFjf0l3m/fKuyhCh8H8OSpEflhyD2oyz5FK Y+Nn98neLOsJ+q+slZQnP/2+KeNhLDWVch0SERY6CDEz0S5kcirmgx0jWFkLci8X LlfOIAmSGAdKS7Sb5I9lqMxW1vZ7S7QL/SbLX89fayis4HmsNnoEWBRpVhDCfjvB 7lk3oOskMwP1ri3xS1+xx4roT7aWJ5rYyg== -----END CERTIFICATE-----Generated at Mon Apr 7 06:24:32 2025 by rpki-client