$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cc3aac0c-bbc3-350c-b0ef-eeca06afab2a.roa File: cc3aac0c-bbc3-350c-b0ef-eeca06afab2a.roa (raw, json) Hash identifier: WNvA5buvZXwsWxkvUQlrCRu+zHUkGfrRvy6NnvPF6+Q= Subject key identifier: 6B:8E:2E:32:95:41:6F:FE:88:00:C2:78:94:AF:16:55:B2:50:64:4D Certificate issuer: /CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d Certificate serial: 010D0C9F432858487A2078C8099F95F79D631280 Authority key identifier: E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cc3aac0c-bbc3-350c-b0ef-eeca06afab2a.roa Signing time: Wed 08 Jan 2025 14:00:51 +0000 ROA not before: Wed 08 Jan 2025 14:00:51 +0000 ROA not after: Tue 08 Apr 2025 13:00:51 +0000 asID: 177 IP address blocks: 2001:48a8:68fd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:20:78:c8:09:9f:95:f7:9d:63:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb48baa8-6c83-45eb-b09b-5fbd1e42c57d Validity Not Before: Jan 8 14:00:51 2025 GMT Not After : Apr 8 13:00:51 2025 GMT Subject: CN=376012ef-de47-4d6e-9d3d-923f64681a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:af:1c:02:33:0d:78:d1:78:6b:51:ad:37:a5: e7:d3:01:d1:a0:e2:b0:98:b6:fc:c9:ce:6d:d7:26: d6:39:17:07:d9:05:d1:67:e0:7f:91:d5:ef:c0:e6: e1:49:1d:80:6d:cc:60:20:48:2c:d0:bf:55:6b:ff: 1c:e6:b9:35:60:0b:59:9b:b6:33:12:3a:78:b4:c2: 05:bf:5b:6e:d6:40:18:45:4a:f2:79:12:b4:c9:73: 0f:de:76:8e:cd:cd:4e:42:a0:f3:72:5b:b5:c9:98: 87:87:69:3e:aa:76:7c:02:96:1c:ff:da:ba:12:60: ec:7b:fb:ff:72:00:11:a8:52:b7:66:a1:5b:50:87: 04:ec:fd:82:75:0c:b5:34:d6:86:2c:2f:c6:8d:9d: f5:c6:f2:af:4b:e9:44:f9:7c:b9:9a:e9:59:4f:6b: 9e:e7:46:13:9b:f5:3e:72:5e:a8:20:42:e5:2c:6f: 73:16:d3:6a:67:8b:c7:e4:b1:6a:77:f9:05:c4:ef: 1b:84:7b:0f:fd:c5:9b:3b:bb:52:35:fc:ee:3c:8c: cc:3c:52:f3:1f:36:be:60:6d:65:38:c1:7c:1e:15: 16:ba:80:be:a5:59:66:b3:52:81:ab:f1:6a:53:91: b7:9b:e6:dd:6b:e1:a1:bc:c7:fb:62:4f:01:71:6d: 79:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:8E:2E:32:95:41:6F:FE:88:00:C2:78:94:AF:16:55:B2:50:64:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cc3aac0c-bbc3-350c-b0ef-eeca06afab2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.crl X509v3 Authority Key Identifier: keyid:E9:36:DC:58:66:FC:68:02:BF:A6:99:DE:B4:DD:13:5E:4C:D1:27:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cb48baa8-6c83-45eb-b09b-5fbd1e42c57d.cer sbgp-ipAddrBlock: critical IPv6: 2001:48a8:68fd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:1c:2c:fc:52:de:d1:ec:1d:3c:f4:ee:0b:b2:09:ad:e6:30: af:6c:8d:94:d0:c9:12:54:81:6e:fb:5f:56:25:93:3d:af:11: fd:42:0a:34:00:b6:0e:f9:5d:3d:98:1d:cb:af:e5:e0:64:21: 42:03:03:48:64:1b:cc:27:8d:69:55:dc:3a:69:b6:c3:ec:65: c6:fb:e7:b1:f7:f7:22:ce:62:e7:f3:4e:91:b0:56:17:6f:d8: 88:28:77:6a:2a:86:40:12:f1:82:7b:f6:1a:e1:c3:65:f4:6b: 52:88:02:25:43:91:72:d4:77:99:c8:a8:a1:66:4f:04:ee:db: 2f:37:9c:45:59:e3:bb:03:e3:bd:75:eb:32:99:4d:a5:57:27: 8d:40:cf:c1:99:92:cd:19:e0:5a:a9:d7:37:c5:69:ea:21:99: 0d:02:25:77:15:4d:41:9b:b5:e6:ad:41:0d:f0:67:d8:24:ae: 07:60:fc:c7:bc:01:95:06:93:2e:bc:a6:42:bf:b5:09:ce:0d: 46:a3:aa:dc:20:ef:95:36:4a:83:8c:c7:d9:90:27:b1:09:18: 4f:c5:b7:8a:45:60:5d:c6:e9:dd:6b:d6:6c:3f:2e:68:41:b7: 8d:1d:dc:0c:bb:ad:bf:17:5f:0f:49:92:03:57:c1:6f:ad:6d: 77:b0:e3:28 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEh6IHjICZ+V951jEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0OGJhYTgtNmM4My00NWViLWIwOWItNWZiZDFlNDJj NTdkMB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk Mzc2MDEyZWYtZGU0Ny00ZDZlLTlkM2QtOTIzZjY0NjgxYTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA868cAjMNeNF4a1GtN6Xn0wHRoOKwmLb8yc5t 1ybWORcH2QXRZ+B/kdXvwObhSR2AbcxgIEgs0L9Va/8c5rk1YAtZm7YzEjp4tMIF v1tu1kAYRUryeRK0yXMP3naOzc1OQqDzclu1yZiHh2k+qnZ8ApYc/9q6EmDse/v/ cgARqFK3ZqFbUIcE7P2CdQy1NNaGLC/GjZ31xvKvS+lE+Xy5mulZT2ue50YTm/U+ cl6oIELlLG9zFtNqZ4vH5LFqd/kFxO8bhHsP/cWbO7tSNfzuPIzMPFLzHza+YG1l OMF8HhUWuoC+pVlms1KBq/FqU5G3m+bda+GhvMf7Yk8BcW15WQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGuOLjKVQW/+iADCeJSvFlWyUGRNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4 YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJkMWU0MmM1N2QvY2MzYWFjMGMtYmJjMy0z NTBjLWIwZWYtZWVjYTA2YWZhYjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2I0OGJhYTgtNmM4My00NWViLWIw OWItNWZiZDFlNDJjNTdkL2NiNDhiYWE4LTZjODMtNDVlYi1iMDliLTVmYmQxZTQy YzU3ZC5jcmwwHwYDVR0jBBgwFoAU6TbcWGb8aAK/ppnetN0TXkzRJ84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYjQ4YmFhOC02YzgzLTQ1ZWItYjA5Yi01ZmJk MWU0MmM1N2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIqGj9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEAcLPxS3tHsHTz07guyCa3mMK9sjZTQyRJUgW77X1Ylkz2vEf1C CjQAtg75XT2YHcuv5eBkIUIDA0hkG8wnjWlV3DpptsPsZcb757H39yLOYufzTpGw Vhdv2Igod2oqhkAS8YJ79hrhw2X0a1KIAiVDkXLUd5nIqKFmTwTu2y83nEVZ47sD 47116zKZTaVXJ41Az8GZks0Z4Fqp1zfFaeohmQ0CJXcVTUGbteatQQ3wZ9gkrgdg /Me8AZUGky68pkK/tQnODUajqtwg75U2SoOMx9mQJ7EJGE/Ft4pFYF3G6d1r1mw/ LmhBt40d3Ay7rb8XXw9JkgNXwW+tbXew4yg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:19 2025 by rpki-client