$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43f702c2-900d-3293-9d57-bac03196c665.roa File: 43f702c2-900d-3293-9d57-bac03196c665.roa (raw, json) Hash identifier: 0KgN0ktUeg5UyCOznZUT0b4SN82HA2LtPcSSg6l+9wU= Subject key identifier: D7:68:BA:50:9A:9F:95:CB:C7:86:51:A2:8B:5F:00:31:2C:3B:C2:D7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584908818A9B7F516441DA96FB00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43f702c2-900d-3293-9d57-bac03196c665.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 2606:4700:5a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:8a:9b:7f:51:64:41:da:96:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=fadc843a-27b8-49e3-8706-6c615dedbcd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:44:c8:7d:79:67:1f:4f:85:2d:de:8a:19:c0: 11:ae:80:26:c7:c6:38:02:32:39:dd:a3:a7:93:0e: 04:4f:14:7b:c4:23:a1:65:4b:a6:56:9c:62:02:24: 22:7c:37:f4:8e:1a:53:53:55:d6:11:b5:c2:8e:bc: db:de:e2:98:4a:57:60:be:f6:a0:e6:08:2b:94:ec: 1c:f3:83:56:e1:7f:d9:b4:e2:bd:0b:cb:80:02:d3: 27:4b:6b:c0:35:b4:74:49:1c:1c:03:a2:ee:3e:5d: b8:fe:0d:aa:06:50:c6:ec:25:20:22:e3:6e:77:f2: d5:ad:41:40:6f:22:05:12:27:d4:f6:48:a1:14:a5: f0:d5:6c:36:e7:dd:d1:92:16:da:13:67:63:ee:2f: 1f:9a:2f:ae:2d:6d:93:af:c1:33:1a:66:18:65:97: a6:de:23:fc:13:b4:6f:37:fe:d7:c0:27:ec:7b:96: 83:8d:ec:ff:23:51:9d:0c:01:89:b8:62:5a:ba:a0: b9:4a:43:36:f6:22:ec:58:d0:59:59:98:a9:7d:83: 91:42:1a:f9:a5:41:93:f7:9d:0f:06:a1:2f:39:22: e9:bf:1e:0c:c9:44:75:8d:77:be:03:b3:7b:d9:3e: 9e:b7:36:6f:cb:52:fe:03:17:fe:b6:c4:83:99:13: 20:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:68:BA:50:9A:9F:95:CB:C7:86:51:A2:8B:5F:00:31:2C:3B:C2:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/43f702c2-900d-3293-9d57-bac03196c665.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:5a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:6a:db:b1:60:f8:4b:04:4f:da:8c:0f:f8:f7:19:0a:3a:e1: 80:ed:e2:07:d8:9f:67:df:62:52:b5:e8:4d:98:58:79:31:2b: c7:fe:bc:44:74:e7:48:f6:dc:4f:e2:13:36:03:56:d2:af:6c: 4a:b6:99:68:39:06:93:c8:3a:df:29:ab:e7:46:18:ba:7d:dc: 1d:3d:1c:80:dd:90:bb:e1:4f:93:8c:6c:64:14:0f:d1:24:5e: 18:62:03:58:ff:57:22:d3:e6:d6:51:1a:c8:54:e3:ac:6a:35: 47:ca:e0:2c:44:99:61:1f:a9:a5:67:4a:d2:c1:4c:ed:cf:bb: b2:e5:0f:4f:2c:b7:a6:0d:34:de:46:8f:4e:cd:b2:3f:ff:dd: 07:a8:68:4d:44:29:8f:53:24:f8:68:c9:90:e9:93:74:ed:64: a1:ab:36:93:35:7c:50:13:94:d2:c1:a4:00:1e:70:a2:7a:db: 40:ea:8a:40:e6:2e:f5:17:ea:cd:ae:6b:31:97:d4:78:b2:5f: 05:95:e9:0f:81:03:45:cf:55:21:34:de:ac:7b:01:26:20:21: be:a1:2c:ee:87:ef:b8:09:d7:b2:0a:0a:ac:fb:45:e7:20:60: ef:ca:b9:f9:b4:33:b5:d1:f0:e8:05:b2:f6:73:dc:48:38:ee: 8e:96:64:92 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkIgYqbf1FkQdqW+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk ZmFkYzg0M2EtMjdiOC00OWUzLTg3MDYtNmM2MTVkZWRiY2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUTIfXlnH0+FLd6KGcARroAmx8Y4AjI53aOn kw4ETxR7xCOhZUumVpxiAiQifDf0jhpTU1XWEbXCjrzb3uKYSldgvvag5ggrlOwc 84NW4X/ZtOK9C8uAAtMnS2vANbR0SRwcA6LuPl24/g2qBlDG7CUgIuNud/LVrUFA byIFEifU9kihFKXw1Ww2593RkhbaE2dj7i8fmi+uLW2Tr8EzGmYYZZem3iP8E7Rv N/7XwCfse5aDjez/I1GdDAGJuGJauqC5SkM29iLsWNBZWZipfYORQhr5pUGT950P BqEvOSLpvx4MyUR1jXe+A7N72T6etzZvy1L+Axf+tsSDmRMgLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNdoulCan5XLx4ZRootfADEsO8LXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDNmNzAyYzItOTAwZC0z MjkzLTlkNTctYmFjMDMxOTZjNjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAABa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI1q27Fg+EsET9qMD/j3GQo64YDt4gfYn2ffYlK16E2YWHkxK8f+ vER050j23E/iEzYDVtKvbEq2mWg5BpPIOt8pq+dGGLp93B09HIDdkLvhT5OMbGQU D9EkXhhiA1j/VyLT5tZRGshU46xqNUfK4CxEmWEfqaVnStLBTO3Pu7LlD08st6YN NN5Gj07Nsj//3QeoaE1EKY9TJPhoyZDpk3TtZKGrNpM1fFATlNLBpAAecKJ620Dq ikDmLvUX6s2uazGX1HiyXwWV6Q+BA0XPVSE03qx7ASYgIb6hLO6H77gJ17IKCqz7 RecgYO/Kufm0M7XR8OgFsvZz3Eg47o6WZJI= -----END CERTIFICATE-----Generated at Thu Apr 10 11:13:27 2025 by rpki-client