$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/854c42fa-3e10-360c-b939-919df3fc02c0.roa File: 854c42fa-3e10-360c-b939-919df3fc02c0.roa (raw, json) Hash identifier: rV+/KISHGEUUVzdXNINtt3aQnUXEEhBVG1+8l2m9VnQ= Subject key identifier: 18:FA:11:16:26:3E:0B:7A:DF:02:DF:01:7A:43:81:A3:14:34:4A:93 Certificate issuer: /CN=5bac54b9-66dc-4956-863d-1804cfb9e853 Certificate serial: 010D0C9F4328584900216CDE0932A5B12BE7ECA0 Authority key identifier: 7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/854c42fa-3e10-360c-b939-919df3fc02c0.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 399077 IP address blocks: 2606:4dc0:ffff::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:6c:de:09:32:a5:b1:2b:e7:ec:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bac54b9-66dc-4956-863d-1804cfb9e853 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=66dbf260-8a86-429a-b8b2-fd2f0a9fe76a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4f:a4:18:15:6a:36:f1:93:0e:74:e1:5c:fc: d4:c2:96:44:14:a1:f8:46:66:d3:a0:06:c4:da:42: fe:aa:db:92:03:c6:02:a5:57:28:50:92:eb:2a:68: d0:bd:c1:f5:db:ca:5d:1b:21:3c:45:2c:dc:af:89: 7e:60:2c:78:99:9a:88:65:28:bc:17:18:fe:de:66: 5a:ba:95:7d:ae:8a:52:a8:38:35:e0:00:8b:59:7f: c7:f4:21:94:e7:ba:d8:71:5e:ce:c5:d6:ff:5d:1c: 28:f9:4b:2e:c4:92:f4:c2:0f:55:74:74:e7:e8:30: c4:b2:d8:0c:20:67:ef:f2:b3:23:01:f7:98:f5:a7: 38:8b:0f:90:6b:0b:8f:2c:2d:6a:3f:c0:d3:10:8d: 00:62:c5:69:12:4d:f0:23:da:75:20:05:dd:22:8f: 16:31:7e:e9:5a:78:8f:9b:fc:3d:28:cc:c5:48:1a: 20:03:a6:e0:97:de:f1:92:de:37:a4:2f:22:b1:d0: 51:82:f9:fb:bd:48:61:b0:21:e5:b1:99:ca:d5:fd: 36:dd:8a:b4:8d:46:c3:4f:c6:6d:c9:76:fb:06:08: 91:42:29:54:32:42:77:3e:09:13:e5:0d:3b:2b:48: e8:1c:6a:3e:f6:67:f8:bb:09:23:3b:85:72:6f:10: fc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:FA:11:16:26:3E:0B:7A:DF:02:DF:01:7A:43:81:A3:14:34:4A:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/854c42fa-3e10-360c-b939-919df3fc02c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853/5bac54b9-66dc-4956-863d-1804cfb9e853.crl X509v3 Authority Key Identifier: keyid:7F:4A:9A:A7:40:62:CD:6D:BF:70:19:16:CE:FD:9B:2A:27:E6:2E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5bac54b9-66dc-4956-863d-1804cfb9e853.cer sbgp-ipAddrBlock: critical IPv6: 2606:4dc0:ffff::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:bf:64:e0:82:69:71:d8:12:cc:2c:df:38:26:30:6c:53:ef: 0b:d0:b5:95:d1:78:45:af:5a:6b:0a:84:73:7d:96:42:70:f2: d6:cb:2a:ea:c9:c3:77:d8:65:4e:09:d4:0f:a9:55:dc:de:dd: 79:e4:5f:a2:fd:d1:b3:a4:01:f7:e9:72:3b:11:8c:9c:bd:d7: b3:a8:c8:2e:d6:f9:66:e8:ea:21:bc:3b:8f:fe:4d:bd:1f:78: e2:b8:8e:91:16:ed:e9:18:ca:f7:8d:48:ee:e0:d4:3f:b4:0b: eb:73:eb:ab:89:f8:8f:79:dd:2a:4d:99:13:01:fb:04:51:e4: 09:73:d8:17:b5:a3:c8:b6:20:07:95:64:49:72:e7:14:d8:bc: 46:05:9b:c2:41:9b:a8:b3:a8:91:63:d1:a6:90:f1:c9:84:29: 5c:59:3e:ee:93:78:63:1f:1b:38:05:18:ab:dd:bf:c1:0b:b7: 86:bc:ff:c1:78:94:d3:c1:86:06:81:e3:0a:55:83:6f:a2:08: c8:8a:46:6d:da:55:ab:c5:dd:10:7b:41:0d:3e:c1:07:76:af: 5c:a4:60:b9:37:82:20:eb:ea:6f:41:08:7c:7f:d2:84:fd:25: 7b:9b:c2:47:a3:76:93:71:13:35:2c:06:5e:90:f9:2b:da:66: c3:aa:bf:91 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkAIWzeCTKlsSvn7KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWJhYzU0YjktNjZkYy00OTU2LTg2M2QtMTgwNGNmYjll ODUzMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk NjZkYmYyNjAtOGE4Ni00MjlhLWI4YjItZmQyZjBhOWZlNzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0+kGBVqNvGTDnThXPzUwpZEFKH4RmbToAbE 2kL+qtuSA8YCpVcoUJLrKmjQvcH128pdGyE8RSzcr4l+YCx4mZqIZSi8Fxj+3mZa upV9ropSqDg14ACLWX/H9CGU57rYcV7Oxdb/XRwo+UsuxJL0wg9VdHTn6DDEstgM IGfv8rMjAfeY9ac4iw+QawuPLC1qP8DTEI0AYsVpEk3wI9p1IAXdIo8WMX7pWniP m/w9KMzFSBogA6bgl97xkt43pC8isdBRgvn7vUhhsCHlsZnK1f023Yq0jUbDT8Zt yXb7BgiRQilUMkJ3PgkT5Q07K0joHGo+9mf4uwkjO4VybxD8eQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBj6ERYmPgt63wLfAXpDgaMUNEqTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81YmFj NTRiOS02NmRjLTQ5NTYtODYzZC0xODA0Y2ZiOWU4NTMvODU0YzQyZmEtM2UxMC0z NjBjLWI5MzktOTE5ZGYzZmMwMmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWJhYzU0YjktNjZkYy00OTU2LTg2 M2QtMTgwNGNmYjllODUzLzViYWM1NGI5LTY2ZGMtNDk1Ni04NjNkLTE4MDRjZmI5 ZTg1My5jcmwwHwYDVR0jBBgwFoAUf0qap0BizW2/cBkWzv2bKifmLp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81YmFjNTRiOS02NmRjLTQ5NTYtODYzZC0xODA0 Y2ZiOWU4NTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZNwP// MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKy/ZOCCaXHYEsws3zgmMGxT7wvQtZXReEWvWmsKhHN9lkJw8tbL KurJw3fYZU4J1A+pVdze3XnkX6L90bOkAffpcjsRjJy917OoyC7W+Wbo6iG8O4/+ Tb0feOK4jpEW7ekYyveNSO7g1D+0C+tz66uJ+I953SpNmRMB+wRR5Alz2Be1o8i2 IAeVZEly5xTYvEYFm8JBm6izqJFj0aaQ8cmEKVxZPu6TeGMfGzgFGKvdv8ELt4a8 /8F4lNPBhgaB4wpVg2+iCMiKRm3aVavF3RB7QQ0+wQd2r1ykYLk3giDr6m9BCHx/ 0oT9JXubwkejdpNxEzUsBl6Q+SvaZsOqv5E= -----END CERTIFICATE-----Generated at Wed Apr 9 22:08:30 2025 by rpki-client