$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/7e3414e2-f1b6-3c94-be9d-196c56b0d9dc.roa File: 7e3414e2-f1b6-3c94-be9d-196c56b0d9dc.roa (raw, json) Hash identifier: PQsAVB91sPC0zwpolPLawA946HwT1PWTcTBEC3jJzHs= Subject key identifier: A8:84:02:68:1C:26:EE:6D:2D:7B:FC:BC:71:A4:3C:F9:99:81:5B:0E Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F432858488AE08E02DBD4D23F6369E580 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/7e3414e2-f1b6-3c94-be9d-196c56b0d9dc.roa Signing time: Tue 14 Jan 2025 14:00:51 +0000 ROA not before: Tue 14 Jan 2025 14:00:51 +0000 ROA not after: Mon 14 Apr 2025 13:00:51 +0000 asID: 140096 IP address blocks: 2604:d6c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8a:e0:8e:02:db:d4:d2:3f:63:69:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: Jan 14 14:00:51 2025 GMT Not After : Apr 14 13:00:51 2025 GMT Subject: CN=7158eac7-9a47-47a4-ac66-d278959771eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:50:02:0e:41:a7:44:59:ed:bd:ca:f6:d7:7f: 6b:02:63:86:9b:11:17:81:1b:9f:eb:ca:9a:4f:5e: 81:24:9f:64:94:79:98:67:a6:89:de:0a:16:9e:8f: 85:f4:b7:bd:0d:f3:86:63:35:1d:3d:dd:10:86:3c: d7:15:d3:c1:7c:23:d6:7e:70:e3:8e:e8:60:cc:3e: 20:56:e0:7e:fe:47:8b:9a:95:aa:2a:b2:8e:2f:56: 7d:4a:d5:74:65:29:2b:91:a2:a6:bd:9f:b6:b6:55: 85:d6:8d:be:2a:8f:bc:19:0c:aa:cc:33:31:e9:b1: fd:57:7b:47:7c:a0:17:0e:71:1e:1a:58:35:12:c2: 89:ab:b8:a9:3b:ea:21:10:85:e8:0f:8c:0e:89:d1: ef:48:ca:35:e0:31:7d:17:aa:6b:bd:38:31:d0:71: 2a:ce:42:1b:a0:5b:a9:69:e7:2a:28:cb:f2:1a:1f: 7a:13:8a:1c:30:bb:a2:7b:7b:fe:22:1f:c9:1c:47: ba:87:92:a7:00:05:88:f6:e8:d2:82:05:c3:29:6b: c7:52:4e:38:2a:a8:3f:8b:79:bb:16:06:f7:73:2a: 83:84:84:3a:f8:95:bf:72:a9:34:7b:11:c2:c1:c2: 70:d4:9b:02:f5:42:f2:96:d6:60:52:da:9c:8b:54: c9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:84:02:68:1C:26:EE:6D:2D:7B:FC:BC:71:A4:3C:F9:99:81:5B:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/7e3414e2-f1b6-3c94-be9d-196c56b0d9dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv6: 2604:d6c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:b6:85:8a:71:1e:98:e6:ff:47:77:e3:67:92:da:2c:64:17: 75:8d:38:1a:4a:a4:b1:2f:70:3a:68:21:55:84:55:8e:14:87: 5e:be:f2:85:33:cc:3a:1f:ca:5f:c0:df:96:c0:c9:78:df:ec: af:c1:39:ef:0d:5a:98:de:05:fc:fa:b2:8f:0d:e8:0d:0f:5a: 41:24:f4:0c:38:ea:22:ea:0d:02:0c:53:e2:68:ba:62:cd:c5: 17:b9:be:d1:2b:a5:10:58:f0:b8:81:f8:b3:90:78:89:23:e8: 38:5a:fe:8a:06:13:07:6f:a5:5f:82:1d:98:4a:6e:b9:1e:9a: 33:c4:49:08:ac:9e:44:b7:08:bf:e0:ca:b3:ba:da:79:28:a4: 59:02:18:f2:21:5d:11:e3:53:90:60:51:b2:a7:35:88:d6:9e: 2d:4f:d9:44:ee:a6:04:d1:05:eb:03:1c:b5:51:ce:8b:97:49: 18:3a:1c:74:08:c0:bb:51:eb:f2:91:92:bf:10:0f:a3:47:11: f3:85:2c:1b:cb:b7:58:08:9d:86:f2:49:b0:e0:45:01:f3:f8: 91:04:7c:9a:eb:cf:a5:29:80:29:9c:63:46:c0:bd:67:c8:4b: 1a:f7:23:67:75:dc:00:bc:bf:25:0e:f5:23:45:27:c6:9d:63: 07:61:9c:8f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiK4I4C29TSP2Np5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk NzE1OGVhYzctOWE0Ny00N2E0LWFjNjYtZDI3ODk1OTc3MWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFACDkGnRFntvcr2139rAmOGmxEXgRuf68qa T16BJJ9klHmYZ6aJ3goWno+F9Le9DfOGYzUdPd0QhjzXFdPBfCPWfnDjjuhgzD4g VuB+/keLmpWqKrKOL1Z9StV0ZSkrkaKmvZ+2tlWF1o2+Ko+8GQyqzDMx6bH9V3tH fKAXDnEeGlg1EsKJq7ipO+ohEIXoD4wOidHvSMo14DF9F6prvTgx0HEqzkIboFup aecqKMvyGh96E4ocMLuie3v+Ih/JHEe6h5KnAAWI9ujSggXDKWvHUk44Kqg/i3m7 Fgb3cyqDhIQ6+JW/cqk0exHCwcJw1JsC9ULyltZgUtqci1TJFwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKiEAmgcJu5tLXv8vHGkPPmZgVsOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvN2UzNDE0ZTItZjFiNi0z Yzk0LWJlOWQtMTk2YzU2YjBkOWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTWwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA1toWKcR6Y5v9Hd+NnktosZBd1jTgaSqSxL3A6aCFVhFWOFIdevvKF M8w6H8pfwN+WwMl43+yvwTnvDVqY3gX8+rKPDegND1pBJPQMOOoi6g0CDFPiaLpi zcUXub7RK6UQWPC4gfizkHiJI+g4Wv6KBhMHb6Vfgh2YSm65HpozxEkIrJ5Etwi/ 4Mqzutp5KKRZAhjyIV0R41OQYFGypzWI1p4tT9lE7qYE0QXrAxy1Uc6Ll0kYOhx0 CMC7UevykZK/EA+jRxHzhSwby7dYCJ2G8kmw4EUB8/iRBHya68+lKYApnGNGwL1n yEsa9yNnddwAvL8lDvUjRSfGnWMHYZyP -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:41 2025 by rpki-client