$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/e08ac376-ce02-3dd4-befd-ad1d3181e3a5.roa File: e08ac376-ce02-3dd4-befd-ad1d3181e3a5.roa (raw, json) Hash identifier: LAlpjyd5/kmdtZPQJFO1I1529mOA2GrrNbobAUdRwVc= Subject key identifier: 4C:D9:17:35:3B:70:2E:6C:B2:28:7A:A2:55:E2:CE:C7:BD:14:40:16 Certificate issuer: /CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Certificate serial: 010D0C9F43285848C2B64FA0D3163D17CA460C80 Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/e08ac376-ce02-3dd4-befd-ad1d3181e3a5.roa Signing time: Mon 03 Feb 2025 14:00:52 +0000 ROA not before: Mon 03 Feb 2025 14:00:52 +0000 ROA not after: Sun 04 May 2025 13:00:52 +0000 asID: 399728 IP address blocks: 2620:98:e00a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:b6:4f:a0:d3:16:3d:17:ca:46:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Validity Not Before: Feb 3 14:00:52 2025 GMT Not After : May 4 13:00:52 2025 GMT Subject: CN=356b9479-4102-4cdf-8e59-76466ba4a2ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:34:5e:7c:cc:47:e9:e8:a4:82:6b:dd:6d:5e: a5:27:4d:0c:ac:56:d7:2c:e9:6e:e4:28:d8:29:d7: 64:c9:07:66:82:0f:af:57:9a:11:82:48:fa:fc:77: 5f:79:81:19:86:c2:70:f7:9e:44:86:1b:27:17:af: 86:f9:f6:bd:12:0f:24:30:d9:65:b9:9e:17:13:3f: 24:80:b1:87:d9:6a:4f:0a:f5:13:45:26:61:f0:06: be:fa:8e:76:d1:9c:ee:17:f9:bc:5a:0c:4f:a4:2e: b6:46:3c:96:8e:02:96:29:e8:48:7a:69:bd:ef:40: 57:69:13:c1:5f:eb:49:a2:d9:97:d6:22:32:a7:7e: 4f:a4:87:43:ee:a3:3b:df:fd:e4:16:39:74:0f:c1: 31:a8:10:d5:15:36:ff:fa:e3:b4:31:d0:ef:7e:f7: b1:40:a1:58:c3:7d:f5:33:ca:b8:36:49:db:54:b4: a9:92:de:9c:55:e8:0a:d8:04:53:75:be:31:8e:33: 25:2a:d7:b2:d7:19:95:23:39:9b:6a:65:6e:05:84: 84:00:47:c5:f3:e1:5c:a2:dd:7b:31:4c:79:d8:31: cf:33:c9:46:f4:ef:1b:bd:04:8b:fe:08:fd:81:00: 4a:bf:fe:9d:63:cb:d5:02:8a:a3:9e:19:e5:ff:c1: bd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D9:17:35:3B:70:2E:6C:B2:28:7A:A2:55:E2:CE:C7:BD:14:40:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/e08ac376-ce02-3dd4-befd-ad1d3181e3a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl X509v3 Authority Key Identifier: keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer sbgp-ipAddrBlock: critical IPv6: 2620:98:e00a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:8f:67:87:de:0d:76:8a:cf:33:cf:6e:f0:94:06:e1:e7:1e: d1:12:96:63:12:63:d4:30:b7:ca:6e:16:60:ce:3e:4f:5a:b5: 96:6d:dd:ef:f5:20:04:d7:35:07:14:ef:41:5c:3c:22:da:1e: 5e:59:7c:45:d5:bb:18:ec:af:25:c1:02:70:05:86:46:94:77: 87:d6:fb:be:50:ae:31:c6:87:89:59:28:e6:9c:a0:8e:ea:c5: 7d:d7:9b:38:5a:0c:bd:01:7a:b3:dc:d1:ab:83:55:b4:aa:64: 98:4a:9a:5a:2f:ff:32:f0:0d:9e:e6:6c:35:14:f6:3e:44:79: 7c:ba:3f:93:49:80:f9:c8:01:31:99:5b:fd:60:0c:f2:86:01: d8:e1:63:b7:6e:bf:b9:f0:2e:db:38:6e:39:3d:c9:36:27:ce: db:a8:e1:66:29:1d:6c:a2:5c:19:30:04:c4:3e:f6:e7:d3:5f: ab:6b:a3:39:1f:e6:5d:cc:5d:03:e5:59:0c:0d:26:fe:1d:23: e6:19:be:a6:2c:53:1d:ac:3d:5c:6a:c7:cc:56:f9:db:47:eb: e2:a1:c9:be:30:29:25:1f:40:4e:e3:fe:79:ba:8a:bf:dc:50: 3f:44:75:8c:68:6e:6d:0d:de:77:87:a2:8c:cf:e0:4d:34:19: 55:c7:ea:ee -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjCtk+g0xY9F8pGDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkYTkwMzUtN2M5Yi00NWEwLWI5OGItYTQ1YmU1MzVm MDgyMB4XDTI1MDIwMzE0MDA1MloXDTI1MDUwNDEzMDA1MlowLzEtMCsGA1UEAxMk MzU2Yjk0NzktNDEwMi00Y2RmLThlNTktNzY0NjZiYTRhMmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzRefMxH6eikgmvdbV6lJ00MrFbXLOlu5CjY KddkyQdmgg+vV5oRgkj6/HdfeYEZhsJw955EhhsnF6+G+fa9Eg8kMNlluZ4XEz8k gLGH2WpPCvUTRSZh8Aa++o520ZzuF/m8WgxPpC62RjyWjgKWKehIemm970BXaRPB X+tJotmX1iIyp35PpIdD7qM73/3kFjl0D8ExqBDVFTb/+uO0MdDvfvexQKFYw331 M8q4NknbVLSpkt6cVegK2ARTdb4xjjMlKtey1xmVIzmbamVuBYSEAEfF8+Fcot17 MUx52DHPM8lG9O8bvQSL/gj9gQBKv/6dY8vVAoqjnhnl/8G9gQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEzZFzU7cC5ssih6olXizse9FEAWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRh OTAzNS03YzliLTQ1YTAtYjk4Yi1hNDViZTUzNWYwODIvZTA4YWMzNzYtY2UwMi0z ZGQ0LWJlZmQtYWQxZDMxODFlM2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkYTkwMzUtN2M5Yi00NWEwLWI5 OGItYTQ1YmU1MzVmMDgyLzhlZGE5MDM1LTdjOWItNDVhMC1iOThiLWE0NWJlNTM1 ZjA4Mi5jcmwwHwYDVR0jBBgwFoAUZP3StNWpCqD1ZmjkK5ZRVOd6ZnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRhOTAzNS03YzliLTQ1YTAtYjk4Yi1hNDVi ZTUzNWYwODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAmOAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKePZ4feDXaKzzPPbvCUBuHnHtESlmMSY9Qwt8puFmDOPk9atZZt 3e/1IATXNQcU70FcPCLaHl5ZfEXVuxjsryXBAnAFhkaUd4fW+75QrjHGh4lZKOac oI7qxX3XmzhaDL0BerPc0auDVbSqZJhKmlov/zLwDZ7mbDUU9j5EeXy6P5NJgPnI ATGZW/1gDPKGAdjhY7duv7nwLts4bjk9yTYnztuo4WYpHWyiXBkwBMQ+9ufTX6tr ozkf5l3MXQPlWQwNJv4dI+YZvqYsUx2sPVxqx8xW+dtH6+Khyb4wKSUfQE7j/nm6 ir/cUD9EdYxobm0N3neHoozP4E00GVXH6u4= -----END CERTIFICATE-----Generated at Sat Apr 12 00:15:31 2025 by rpki-client