$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/0903951d-fdef-3255-8700-70bfa8497ea2.roa File: 0903951d-fdef-3255-8700-70bfa8497ea2.roa (raw, json) Hash identifier: wvjDZfiho4VcwmH7+oYhomiw0WcVJ1pUNBo+rhbZFuI= Subject key identifier: 07:63:FB:10:E6:E3:31:BA:2C:3C:45:0A:D0:26:40:E3:3F:5C:AD:DA Certificate issuer: /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c Certificate serial: 010D0C9F4328584930291EF0478094CDC2DD2B30 Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/0903951d-fdef-3255-8700-70bfa8497ea2.roa Signing time: Fri 14 Mar 2025 18:55:29 +0000 ROA not before: Fri 14 Mar 2025 18:55:29 +0000 ROA not after: Thu 12 Jun 2025 18:55:29 +0000 asID: 400529 IP address blocks: 2600:3500:c20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:29:1e:f0:47:80:94:cd:c2:dd:2b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c Validity Not Before: Mar 14 18:55:29 2025 GMT Not After : Jun 12 18:55:29 2025 GMT Subject: CN=4a80e5f1-05ea-49f9-bdb9-197a0aaf5de7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ce:e5:b4:52:f3:c2:65:5d:29:34:c2:b2:68: ac:f0:65:b1:87:bc:34:e5:2a:8d:15:ac:a0:6e:37: ae:60:17:db:ea:0b:f7:a7:90:62:c2:b3:f8:51:3e: f7:5c:0f:33:d9:54:53:f4:5b:10:80:0b:79:ed:f9: 01:e6:d9:c9:95:51:9c:95:25:51:d6:41:0a:89:c4: 8c:01:21:56:08:cb:0a:ad:ac:af:74:00:a7:c2:71: 07:c7:e8:08:55:b4:b6:d9:ed:cf:cc:8a:df:75:53: d9:36:8c:bd:e5:b8:c9:4e:9f:62:2b:b0:5b:82:c2: 05:65:56:10:d8:be:52:00:3a:16:dc:9b:3a:8c:ad: 7e:00:d3:00:3a:2c:ea:1d:68:49:c8:4e:3c:6a:c5: f2:32:3b:db:28:a0:f6:97:41:88:97:0a:e1:05:8a: d5:36:39:04:d9:4a:64:a3:f8:cb:ca:6f:ae:a2:0e: e8:13:74:40:bd:38:24:ae:69:11:36:ec:d4:8a:09: b2:6a:2a:17:fc:1a:d1:30:e6:47:e1:80:26:45:43: 48:92:63:7b:47:b3:2b:32:d5:ba:92:7b:f9:d8:f9: 54:a3:b8:98:82:c9:c0:c5:34:9b:71:eb:e4:1b:64: 77:ab:c8:86:ef:e5:1e:2e:53:34:da:79:fd:ff:cf: 6e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:63:FB:10:E6:E3:31:BA:2C:3C:45:0A:D0:26:40:E3:3F:5C:AD:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/0903951d-fdef-3255-8700-70bfa8497ea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl X509v3 Authority Key Identifier: keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer sbgp-ipAddrBlock: critical IPv6: 2600:3500:c20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:7a:e5:f2:bf:d8:85:1b:dd:0a:05:c6:f5:33:d3:2b:b6:6e: c7:33:0a:41:bd:55:4c:02:b0:84:a1:ae:e1:30:84:09:ff:68: 9e:f5:a1:1c:7b:b4:73:ee:71:2d:f1:b3:95:7c:0a:2f:9a:4b: 1d:94:bf:5f:b6:35:a9:28:b4:4a:f3:93:2c:35:5b:5e:6a:4e: 7e:d8:80:aa:ea:b3:51:eb:25:f3:74:81:46:83:02:1f:50:7b: 3f:bb:65:2d:ca:ae:96:3b:9a:ea:de:7d:c2:08:9b:2e:1d:68: 39:f5:45:d7:7e:0a:40:b7:97:8f:c0:36:9d:c2:87:15:c4:31: 61:26:5e:4e:14:bc:8a:dc:c0:87:1a:a2:6e:92:22:8d:dc:29: f6:f2:2f:0a:94:c3:1f:8d:ce:e8:0e:e5:2a:df:e8:4d:18:a5: 7c:b4:40:67:23:be:c8:d1:84:7c:e2:f5:90:bf:fc:ad:8a:99: 8e:39:87:f4:e3:98:e2:03:e5:7f:39:c0:ee:5e:ad:d5:42:f0: 5a:d7:8a:81:0b:d3:d7:7b:be:63:62:5d:9a:00:cd:c4:af:82: 20:f0:7e:7f:85:db:64:13:ac:d1:b3:53:ce:94:56:52:60:aa: 8d:5f:1e:45:28:4a:67:49:37:03:e5:45:f7:66:e9:f8:e2:ca: f2:42:f2:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkwKR7wR4CUzcLdKzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk2YjI0YzQtYjY5Mi00Yjk0LTgzZjUtMWRhNTQ5MGI4 ZjNjMB4XDTI1MDMxNDE4NTUyOVoXDTI1MDYxMjE4NTUyOVowLzEtMCsGA1UEAxMk NGE4MGU1ZjEtMDVlYS00OWY5LWJkYjktMTk3YTBhYWY1ZGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo87ltFLzwmVdKTTCsmis8GWxh7w05SqNFayg bjeuYBfb6gv3p5BiwrP4UT73XA8z2VRT9FsQgAt57fkB5tnJlVGclSVR1kEKicSM ASFWCMsKrayvdACnwnEHx+gIVbS22e3PzIrfdVPZNoy95bjJTp9iK7BbgsIFZVYQ 2L5SADoW3Js6jK1+ANMAOizqHWhJyE48asXyMjvbKKD2l0GIlwrhBYrVNjkE2Upk o/jLym+uog7oE3RAvTgkrmkRNuzUigmyaioX/BrRMOZH4YAmRUNIkmN7R7MrMtW6 knv52PlUo7iYgsnAxTSbcevkG2R3q8iG7+UeLlM02nn9/89uFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAdj+xDm4zG6LDxFCtAmQOM/XK3aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZi MjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1NDkwYjhmM2MvMDkwMzk1MWQtZmRlZi0z MjU1LTg3MDAtNzBiZmE4NDk3ZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTk2YjI0YzQtYjY5Mi00Yjk0LTgz ZjUtMWRhNTQ5MGI4ZjNjL2U5NmIyNGM0LWI2OTItNGI5NC04M2Y1LTFkYTU0OTBi OGYzYy5jcmwwHwYDVR0jBBgwFoAUq7bjkDZGS9ALmtUiWl6jYHyd1XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZiMjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1 NDkwYjhmM2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgA1AAwg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKV65fK/2IUb3QoFxvUz0yu2bsczCkG9VUwCsIShruEwhAn/aJ71 oRx7tHPucS3xs5V8Ci+aSx2Uv1+2NakotErzkyw1W15qTn7YgKrqs1HrJfN0gUaD Ah9Qez+7ZS3KrpY7murefcIImy4daDn1Rdd+CkC3l4/ANp3ChxXEMWEmXk4UvIrc wIcaom6SIo3cKfbyLwqUwx+NzugO5Srf6E0YpXy0QGcjvsjRhHzi9ZC//K2KmY45 h/TjmOID5X85wO5erdVC8FrXioEL09d7vmNiXZoAzcSvgiDwfn+F22QTrNGzU86U VlJgqo1fHkUoSmdJNwPlRfdm6fjiyvJC8r0= -----END CERTIFICATE-----Generated at Sun Apr 6 17:13:07 2025 by rpki-client