$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/6dc14ec4-5fdb-3590-b472-603a79e5e506.roa File: 6dc14ec4-5fdb-3590-b472-603a79e5e506.roa (raw, json) Hash identifier: F0MKcrRRUM7QTrYFx4zZ6cpEwmkUlVGuIbCsUHi1880= Subject key identifier: 12:3D:7A:60:0C:FA:92:2E:DC:B0:05:0B:9C:FB:06:F2:78:10:B2:B8 Certificate issuer: /CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d Certificate serial: 010D0C9F432858486C2B13EB68F54B50B44C7F80 Authority key identifier: E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/6dc14ec4-5fdb-3590-b472-603a79e5e506.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 237 IP address blocks: 2001:48a8:68fe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:13:eb:68:f5:4b:50:b4:4c:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=22e0a100-8b5e-4d12-91fb-1ad918286966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c1:99:bd:1b:ae:0f:26:c9:fc:28:61:cb:8c: d8:ea:28:e5:83:cc:16:ae:3d:6a:c9:85:34:68:a2: 82:be:3a:70:40:db:c0:bb:79:cd:66:43:e8:ea:17: d2:30:90:05:6a:e5:86:fc:61:78:c3:50:62:45:66: 50:44:d6:7f:5c:62:18:15:d2:58:c9:7d:52:43:21: aa:f3:6e:39:04:d1:63:58:f8:8e:82:dd:71:83:75: d1:e0:f4:ce:4b:8f:3a:61:1d:38:c0:74:15:8b:8f: 77:60:8e:3d:1b:04:d1:3c:66:ce:97:36:ba:e8:fc: 9f:ab:4f:00:3b:6a:b7:fc:41:28:e3:96:0b:56:de: 60:20:92:0e:ad:eb:c6:6b:62:77:47:cd:db:25:fd: aa:0f:91:99:8f:09:b8:41:fe:a0:59:49:1b:9c:f2: b3:ba:0f:71:cf:3e:80:f1:a7:d9:c0:72:9c:6c:c6: 56:de:4f:1a:ed:23:0d:0a:df:e8:14:24:42:de:0f: 3e:ad:59:3e:fc:27:9d:53:f5:4b:f2:83:68:e7:73: dc:c9:9e:1c:fa:2f:4d:3e:b9:b6:e9:f1:9d:e3:24: d7:e8:fc:82:ba:b5:62:fa:80:e3:9e:f8:ad:2a:01: bc:3b:df:d0:d4:bc:b2:28:a7:39:a2:8f:81:26:4b: 88:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3D:7A:60:0C:FA:92:2E:DC:B0:05:0B:9C:FB:06:F2:78:10:B2:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/6dc14ec4-5fdb-3590-b472-603a79e5e506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl X509v3 Authority Key Identifier: keyid:E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer sbgp-ipAddrBlock: critical IPv6: 2001:48a8:68fe::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:58:36:3c:b4:00:3a:6b:57:64:c3:64:75:1b:31:b2:9e:36: 92:76:24:47:29:14:b3:4e:c4:8e:90:10:99:9d:ac:7d:d2:20: 7d:ce:b1:89:e9:03:0f:51:dd:5f:7e:7e:0d:5e:f2:e8:97:e0: e6:ce:74:f6:d2:00:f9:80:2f:ec:0b:9c:cb:a5:de:c5:c3:63: f4:0e:6b:54:89:6d:d6:69:96:49:a4:a3:08:0a:35:03:a7:7b: 08:c8:8e:f5:84:88:36:de:88:23:1c:57:91:7f:e9:52:00:1b: a0:77:1c:93:ab:b0:93:3e:5a:cb:db:0a:cd:7b:ff:00:6d:03: a5:95:51:a2:ae:98:f9:58:41:38:28:38:44:a6:23:17:e3:1b: 8e:74:8a:2b:d1:a2:f3:0b:4a:c5:ee:97:19:25:94:1b:63:a9: 1a:ed:9c:07:c5:c1:d9:e5:4f:f7:31:6e:ae:0b:27:cd:71:80: f5:90:52:6b:9c:3e:fa:59:94:68:d2:72:5f:d0:cf:6a:9b:27: f0:e8:42:18:79:4a:06:1b:98:d3:4b:bb:d1:d8:01:ea:56:e2: 44:c9:9c:1a:4b:98:97:79:9b:d9:cc:5d:a6:1c:6a:79:3a:ae: 6a:91:a3:1b:c8:a6:ea:28:45:03:0e:a9:71:09:60:46:9b:d6: a3:cd:09:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhsKxPraPVLULRMf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0OGJhYTgtNmM4My00NWViLWIwOWItNWZiZDFlNDJj NTdkMB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk MjJlMGExMDAtOGI1ZS00ZDEyLTkxZmItMWFkOTE4Mjg2OTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsGZvRuuDybJ/Chhy4zY6ijlg8wWrj1qyYU0 aKKCvjpwQNvAu3nNZkPo6hfSMJAFauWG/GF4w1BiRWZQRNZ/XGIYFdJYyX1SQyGq 8245BNFjWPiOgt1xg3XR4PTOS486YR04wHQVi493YI49GwTRPGbOlza66Pyfq08A O2q3/EEo45YLVt5gIJIOrevGa2J3R83bJf2qD5GZjwm4Qf6gWUkbnPKzug9xzz6A 8afZwHKcbMZW3k8a7SMNCt/oFCRC3g8+rVk+/CedU/VL8oNo53PcyZ4c+i9NPrm2 6fGd4yTX6PyCurVi+oDjnvitKgG8O9/Q1LyyKKc5oo+BJkuImwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBI9emAM+pIu3LAFC5z7BvJ4ELK4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4 YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJkMWU0MmM1N2QvNmRjMTRlYzQtNWZkYi0z NTkwLWI0NzItNjAzYTc5ZTVlNTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2I0OGJhYTgtNmM4My00NWViLWIw OWItNWZiZDFlNDJjNTdkL2NiNDhiYWE4LTZjODMtNDVlYi1iMDliLTVmYmQxZTQy YzU3ZC5jcmwwHwYDVR0jBBgwFoAU6TbcWGb8aAK/ppnetN0TXkzRJ84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJk MWU0MmM1N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIqGj+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADlYNjy0ADprV2TDZHUbMbKeNpJ2JEcpFLNOxI6QEJmdrH3SIH3O sYnpAw9R3V9+fg1e8uiX4ObOdPbSAPmAL+wLnMul3sXDY/QOa1SJbdZplkmkowgK NQOnewjIjvWEiDbeiCMcV5F/6VIAG6B3HJOrsJM+WsvbCs17/wBtA6WVUaKumPlY QTgoOESmIxfjG450iivRovMLSsXulxkllBtjqRrtnAfFwdnlT/cxbq4LJ81xgPWQ UmucPvpZlGjScl/Qz2qbJ/DoQhh5SgYbmNNLu9HYAepW4kTJnBpLmJd5m9nMXaYc ank6rmqRoxvIpuooRQMOqXEJYEab1qPNCXA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:13 2025 by rpki-client