$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/b01a6fd0-5038-3515-9519-e4df95bc9b9a.roa File: b01a6fd0-5038-3515-9519-e4df95bc9b9a.roa (raw, json) Hash identifier: tqiVThi6rtRJ3GpfloMc5fGQ34mEN3pe9Gn14J4EOFA= Subject key identifier: 4A:73:4B:9C:41:BA:42:A3:28:75:ED:27:68:05:6A:04:E8:8E:98:6F Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F43285848EC96864111A41D43BBCB1080 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/b01a6fd0-5038-3515-9519-e4df95bc9b9a.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 187 IP address blocks: 2620:171:d00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:86:41:11:a4:1d:43:bb:cb:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=b5c264f6-3bb7-427b-b467-f5352ce84fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a2:60:6f:50:92:56:24:35:ff:fd:09:17:ec: 36:80:43:e4:a5:a6:0c:d9:5d:a2:33:ce:c1:f5:ac: 96:91:ab:b3:79:04:74:39:5f:a7:ce:06:2f:9b:02: c5:53:d1:96:cb:c5:12:52:43:8a:f5:53:80:13:61: 62:71:eb:ff:03:38:04:9b:c3:64:5b:ae:6b:77:16: 37:96:6a:3d:4e:e5:a9:0c:2f:4b:33:82:cf:68:79: 80:d3:84:5d:10:ec:63:1b:08:f6:35:79:39:4d:00: 52:94:a0:b7:bc:65:49:67:72:15:70:2c:cc:30:8d: 03:9b:9c:53:0a:fc:17:ce:50:10:76:17:ef:98:de: 1b:30:cc:39:4d:fb:06:b7:2a:bb:10:99:6a:76:92: 7a:d0:55:5c:f2:b2:09:10:bb:c2:3e:78:e5:db:99: f7:69:8c:c5:e2:2b:09:8d:f8:ad:7f:a2:25:2a:5b: 01:1d:5d:c0:72:6c:68:a2:9a:51:a7:4d:c4:d9:e8: 35:24:80:db:a1:bc:c1:b7:38:a1:b9:c1:50:1f:69: 04:85:bb:08:91:7e:aa:59:c8:9b:b7:25:9e:70:1b: 35:3b:c9:5b:1c:c5:92:76:51:48:b2:6f:a2:43:b7: 1f:70:c7:b8:d3:ac:f2:d4:6e:30:bd:43:c5:72:40: 42:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:73:4B:9C:41:BA:42:A3:28:75:ED:27:68:05:6A:04:E8:8E:98:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/b01a6fd0-5038-3515-9519-e4df95bc9b9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv6: 2620:171:d00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:e5:e2:cf:09:1e:e8:da:c8:70:2f:54:9d:c9:ae:7d:55:51: 15:83:f2:8d:86:fc:78:81:f2:b6:9d:55:9c:a2:db:af:a1:4a: fa:50:f3:7c:64:44:d8:f9:65:f7:2d:26:5a:d2:ce:91:f7:fb: f5:58:f9:0e:1f:f2:08:8a:00:79:cb:5a:5a:a9:00:2b:3d:e2: 08:3c:27:2f:2f:e6:82:aa:ae:e4:9d:ea:7d:c0:88:92:3a:94: c1:c0:ff:5e:9b:54:4b:0f:91:21:80:8b:c0:9a:e3:d1:b7:57: 12:02:f6:e4:ce:08:94:bd:d9:6b:fb:20:2e:73:f2:9e:4a:89: f5:97:a8:04:46:d2:38:96:d4:92:5c:51:6e:03:69:b3:c0:e4: bf:a1:2e:88:52:f2:e8:67:26:38:f9:80:d9:d7:2a:dd:f3:b6: b9:6e:72:ca:87:b9:01:dc:96:77:0e:7a:6b:2e:12:96:b3:6c: 1d:da:b4:9e:4d:b8:41:73:8c:77:d5:a4:c5:c9:e6:63:54:c6: 92:71:2d:2f:87:1b:c8:28:21:c2:2c:a1:a3:cb:36:71:fa:79: 3d:fe:d0:3d:25:a9:8c:46:8c:3d:95:43:6e:07:e3:49:6f:b3: 64:13:11:27:a3:38:ba:4f:8b:d4:58:96:16:30:e2:5f:62:c6: 6f:3e:ae:ab -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjsloZBEaQdQ7vLEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk YjVjMjY0ZjYtM2JiNy00MjdiLWI0NjctZjUzNTJjZTg0ZmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qJgb1CSViQ1//0JF+w2gEPkpaYM2V2iM87B 9ayWkauzeQR0OV+nzgYvmwLFU9GWy8USUkOK9VOAE2Ficev/AzgEm8NkW65rdxY3 lmo9TuWpDC9LM4LPaHmA04RdEOxjGwj2NXk5TQBSlKC3vGVJZ3IVcCzMMI0Dm5xT CvwXzlAQdhfvmN4bMMw5TfsGtyq7EJlqdpJ60FVc8rIJELvCPnjl25n3aYzF4isJ jfitf6IlKlsBHV3AcmxooppRp03E2eg1JIDbobzBtzihucFQH2kEhbsIkX6qWcib tyWecBs1O8lbHMWSdlFIsm+iQ7cfcMe406zy1G4wvUPFckBC7QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEpzS5xBukKjKHXtJ2gFagTojphvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvYjAxYTZmZDAtNTAzOC0z NTE1LTk1MTktZTRkZjk1YmM5YjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABcQ0w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAXuXizwke6NrIcC9UncmufVVRFYPyjYb8eIHytp1VnKLbr6FK+lDz fGRE2Pll9y0mWtLOkff79Vj5Dh/yCIoAectaWqkAKz3iCDwnLy/mgqqu5J3qfcCI kjqUwcD/XptUSw+RIYCLwJrj0bdXEgL25M4IlL3Za/sgLnPynkqJ9ZeoBEbSOJbU klxRbgNps8Dkv6EuiFLy6GcmOPmA2dcq3fO2uW5yyoe5AdyWdw56ay4SlrNsHdq0 nk24QXOMd9WkxcnmY1TGknEtL4cbyCghwiyho8s2cfp5Pf7QPSWpjEaMPZVDbgfj SW+zZBMRJ6M4uk+L1FiWFjDiX2LGbz6uqw== -----END CERTIFICATE-----Generated at Fri Mar 14 10:19:35 2025 by rpki-client