$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/7861eb62-18d8-313b-8576-6f10f89a37de.roa File: 7861eb62-18d8-313b-8576-6f10f89a37de.roa (raw, json) Hash identifier: W7/mSEwBhPklU4t3AnaCd1i2Zb3f5tFTTLgCqUhUarc= Subject key identifier: F3:AB:A9:18:A0:BA:52:BC:D4:C1:DB:A3:D4:FE:B9:24:D3:AE:FA:40 Certificate issuer: /CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3 Certificate serial: 010D0C9F43285848B090B56B812203F2A321CC00 Authority key identifier: 9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/7861eb62-18d8-313b-8576-6f10f89a37de.roa Signing time: Tue 28 Jan 2025 02:00:39 +0000 ROA not before: Tue 28 Jan 2025 02:00:39 +0000 ROA not after: Mon 28 Apr 2025 01:00:39 +0000 asID: 16509 IP address blocks: 2620:117:bfc0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b0:90:b5:6b:81:22:03:f2:a3:21:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd865c6a-54c8-4f58-ac80-9f9bdd368ee3 Validity Not Before: Jan 28 02:00:39 2025 GMT Not After : Apr 28 01:00:39 2025 GMT Subject: CN=1ca26ea0-98fd-4633-8e84-52a135e9bd4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d2:11:2b:6f:c1:54:82:1f:68:fd:63:d0:8c: cf:86:48:55:0f:99:85:74:d5:e7:ea:06:01:ba:df: 76:9e:d5:f6:22:dc:db:6b:33:dd:b4:aa:14:f0:db: 72:31:4d:48:a0:e3:27:95:ff:dd:2c:1b:77:50:38: 48:2c:8d:8c:5b:a7:45:41:1d:49:de:4c:e7:6b:2a: 5f:12:ef:ed:a1:95:f7:d0:f2:33:ba:32:86:fb:38: 22:f1:34:e7:33:e1:c1:b2:ff:f4:ad:b8:27:b0:bb: ef:0d:e2:03:f0:bd:2a:cc:67:a7:bd:87:7a:85:15: 55:ee:57:78:12:53:50:3a:0c:22:59:cf:d4:5d:3d: 58:fa:23:3d:1c:79:5d:f9:2c:43:3d:91:f4:95:7b: 1a:5a:5d:c2:a5:69:dc:f9:f7:e2:d9:0c:35:ca:94: de:3c:52:b4:58:f7:ae:80:79:cd:db:d1:a7:57:b9: e0:54:e1:17:e2:52:af:4e:61:1e:e2:b5:25:d9:1a: 02:8e:ea:f9:88:ed:41:6b:40:ac:08:89:87:ca:cd: c0:cd:66:63:43:e2:d3:94:c5:04:49:e3:5d:d2:44: 37:83:87:7d:62:eb:72:7a:17:0a:7c:91:4f:16:14: 3c:21:6e:62:39:4f:e3:0d:48:9e:1c:53:0e:e9:76: fc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AB:A9:18:A0:BA:52:BC:D4:C1:DB:A3:D4:FE:B9:24:D3:AE:FA:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/7861eb62-18d8-313b-8576-6f10f89a37de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.crl X509v3 Authority Key Identifier: keyid:9C:5E:DB:84:DA:D7:B5:46:10:65:08:BB:F3:24:5A:F8:71:1F:CE:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fd865c6a-54c8-4f58-ac80-9f9bdd368ee3.cer sbgp-ipAddrBlock: critical IPv6: 2620:117:bfc0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:16:1e:63:1b:7e:7a:8b:4d:36:f2:ec:0c:64:6b:1e:2e:67: 79:15:e1:47:40:e4:f1:4b:e5:6b:32:7c:f9:11:f0:bc:7d:0e: 84:7c:c2:00:30:91:3f:7d:63:7a:ee:36:a9:bb:2c:6c:29:42: 8f:c0:3f:3b:c4:fa:9c:2b:6b:fb:e9:93:34:63:02:84:fd:e7: a6:ad:5f:19:66:2f:4d:36:7e:79:b6:09:91:d4:80:3e:37:02: 3f:01:c7:2e:d0:38:89:71:47:b8:ba:fe:f7:e8:a8:1e:90:97: 86:75:a5:16:d7:fa:69:e4:d2:dd:39:76:4a:ca:99:b4:91:a7: 57:ab:87:c9:28:47:d7:86:97:85:d1:b1:7a:18:71:21:58:c1: 37:9f:43:ef:22:81:54:e9:78:3c:56:ce:37:23:2a:a0:b3:dc: 39:37:eb:89:0e:b7:b1:2f:ef:28:fb:21:29:79:d6:99:5d:8b: 8e:5d:a1:4d:cf:c5:7d:88:52:0a:13:da:4e:b3:48:f4:c9:05: 8f:80:ec:f7:f6:8f:de:71:de:e7:e0:65:3a:d3:70:c5:a3:7c: 5f:e0:47:20:67:53:70:45:93:d5:6a:3f:49:7f:ef:34:3f:df: 80:f5:50:51:85:c1:0c:3f:4d:38:8f:e7:46:ec:22:99:8b:e9: 01:e3:3c:35 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiwkLVrgSID8qMhzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ4NjVjNmEtNTRjOC00ZjU4LWFjODAtOWY5YmRkMzY4 ZWUzMB4XDTI1MDEyODAyMDAzOVoXDTI1MDQyODAxMDAzOVowLzEtMCsGA1UEAxMk MWNhMjZlYTAtOThmZC00NjMzLThlODQtNTJhMTM1ZTliZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdIRK2/BVIIfaP1j0IzPhkhVD5mFdNXn6gYB ut92ntX2ItzbazPdtKoU8NtyMU1IoOMnlf/dLBt3UDhILI2MW6dFQR1J3kznaypf Eu/toZX30PIzujKG+zgi8TTnM+HBsv/0rbgnsLvvDeID8L0qzGenvYd6hRVV7ld4 ElNQOgwiWc/UXT1Y+iM9HHld+SxDPZH0lXsaWl3CpWnc+ffi2Qw1ypTePFK0WPeu gHnN29GnV7ngVOEX4lKvTmEe4rUl2RoCjur5iO1Ba0CsCImHys3AzWZjQ+LTlMUE SeNd0kQ3g4d9YutyehcKfJFPFhQ8IW5iOU/jDUieHFMO6Xb8jQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPOrqRigulK81MHbo9T+uSTTrvpAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mZDg2 NWM2YS01NGM4LTRmNTgtYWM4MC05ZjliZGQzNjhlZTMvNzg2MWViNjItMThkOC0z MTNiLTg1NzYtNmYxMGY4OWEzN2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZmQ4NjVjNmEtNTRjOC00ZjU4LWFj ODAtOWY5YmRkMzY4ZWUzL2ZkODY1YzZhLTU0YzgtNGY1OC1hYzgwLTlmOWJkZDM2 OGVlMy5jcmwwHwYDVR0jBBgwFoAUnF7bhNrXtUYQZQi78yRa+HEfzo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mZDg2NWM2YS01NGM4LTRmNTgtYWM4MC05Zjli ZGQzNjhlZTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABF7/A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJcWHmMbfnqLTTby7Axkax4uZ3kV4UdA5PFL5WsyfPkR8Lx9DoR8 wgAwkT99Y3ruNqm7LGwpQo/APzvE+pwra/vpkzRjAoT956atXxlmL002fnm2CZHU gD43Aj8Bxy7QOIlxR7i6/vfoqB6Ql4Z1pRbX+mnk0t05dkrKmbSRp1erh8koR9eG l4XRsXoYcSFYwTefQ+8igVTpeDxWzjcjKqCz3Dk364kOt7Ev7yj7ISl51pldi45d oU3PxX2IUgoT2k6zSPTJBY+A7Pf2j95x3ufgZTrTcMWjfF/gRyBnU3BFk9VqP0l/ 7zQ/34D1UFGFwQw/TTiP50bsIpmL6QHjPDU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:17 2025 by rpki-client