$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e52cc105-fe4f-3c2a-ada3-7b906ddb0d14.roa File: e52cc105-fe4f-3c2a-ada3-7b906ddb0d14.roa (raw, json) Hash identifier: N6TKJfUbhl6YK7xcCBqkFnB3iLetYrf4hKAhhnHN35o= Subject key identifier: 23:58:B6:DA:6C:05:04:02:8F:11:BA:5B:5E:12:EE:7B:7F:3F:0F:42 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285848EC969E9D6B291F5483CC1A80 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e52cc105-fe4f-3c2a-ada3-7b906ddb0d14.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 140952 IP address blocks: 2604:fc80:3200::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:9e:9d:6b:29:1f:54:83:cc:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=5dc86837-dc94-4eb4-8e8a-7b4afd1c57f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:43:c0:b0:b0:25:1c:28:96:74:60:57:f9:87: e8:f6:f1:4a:d8:35:38:05:0a:a8:e5:c2:f9:d6:09: c4:4b:39:f5:24:60:c4:a0:1a:39:ea:67:51:53:a7: af:34:a5:dc:74:2b:52:7c:ce:69:a3:d7:01:3d:85: 38:13:a4:1f:31:f8:48:ea:55:72:b6:48:58:90:d2: e5:56:40:53:bb:2c:0f:c9:cf:3a:94:de:48:65:06: 62:86:d0:44:91:09:1c:4d:eb:c2:69:49:9e:de:4f: d6:19:ae:92:88:2e:d8:5a:ce:1b:0a:e8:32:64:55: ad:7b:60:0f:5a:0c:c1:1e:68:04:da:c9:94:34:7d: e4:8c:df:02:94:86:6b:e6:b0:e2:72:f7:ed:ee:20: 47:34:33:78:12:ee:d9:19:05:ec:ed:7c:56:97:9c: 51:a0:ba:54:9c:5c:3f:da:8c:a0:91:d4:e1:0d:71: 16:90:cb:5d:47:e0:af:2d:4d:fc:f8:2a:d8:11:a4: 29:98:8a:dd:40:78:23:95:c7:e0:02:33:05:86:e9: b6:fe:14:88:de:84:fa:98:43:ef:ed:78:30:7f:89: f8:e8:7f:d3:97:40:1c:6d:ea:20:7b:39:42:ea:0e: 55:97:db:91:dc:dd:ac:4d:6e:c3:5c:76:43:40:17: e1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:58:B6:DA:6C:05:04:02:8F:11:BA:5B:5E:12:EE:7B:7F:3F:0F:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e52cc105-fe4f-3c2a-ada3-7b906ddb0d14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv6: 2604:fc80:3200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:b2:1e:4b:21:ce:86:59:11:49:c2:a3:ea:6d:b4:73:b9:64: 08:c8:28:59:a6:10:bd:d4:79:7f:a1:ea:e4:4c:6a:34:a5:cb: 4b:99:e1:3d:57:e5:cb:c9:95:6d:ae:83:e5:ea:fd:41:11:95: e9:16:d2:b2:2e:04:90:36:1c:a0:00:51:37:fe:16:12:36:da: 35:c6:26:73:64:a2:2e:d3:af:79:6f:2f:01:11:dd:d0:f2:6f: ca:54:4f:53:eb:b7:23:be:86:a3:cb:2f:47:94:62:55:ea:b2: 6d:31:d8:9d:a3:7e:11:ee:58:1b:f9:a3:be:1b:a9:1d:bc:69: 82:aa:80:16:3b:c1:f3:a3:be:f1:99:37:4e:b6:26:72:c6:56: 50:3d:b9:c8:2a:1f:b1:d9:0d:26:74:e1:e1:35:ac:9c:09:2c: 9b:d3:72:d2:68:34:70:2f:4e:88:28:3c:af:70:d3:25:9e:91: 80:8d:c6:22:4d:5d:46:84:17:58:85:b8:a3:1b:8b:be:b2:eb: 4c:c8:d0:56:e5:f3:72:35:dc:73:04:b4:9d:0e:a6:64:fc:da: e1:5f:9b:ab:e8:7f:a6:19:54:cc:13:12:5f:85:75:e8:6d:9f: 55:87:a4:4e:e7:75:ad:92:34:46:75:7f:68:f3:b2:49:a0:c0: 0d:c2:a8:0f -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjslp6daykfVIPMGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk NWRjODY4MzctZGM5NC00ZWI0LThlOGEtN2I0YWZkMWM1N2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkPAsLAlHCiWdGBX+Yfo9vFK2DU4BQqo5cL5 1gnESzn1JGDEoBo56mdRU6evNKXcdCtSfM5po9cBPYU4E6QfMfhI6lVytkhYkNLl VkBTuywPyc86lN5IZQZihtBEkQkcTevCaUme3k/WGa6SiC7YWs4bCugyZFWte2AP WgzBHmgE2smUNH3kjN8ClIZr5rDicvft7iBHNDN4Eu7ZGQXs7XxWl5xRoLpUnFw/ 2oygkdThDXEWkMtdR+CvLU38+CrYEaQpmIrdQHgjlcfgAjMFhum2/hSI3oT6mEPv 7Xgwf4n46H/Tl0AcbeogezlC6g5Vl9uR3N2sTW7DXHZDQBfhyQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCNYttpsBQQCjxG6W14S7nt/Pw9CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZTUyY2MxMDUtZmU0Zi0z YzJhLWFkYTMtN2I5MDZkZGIwZDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgT8gDIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAArIeSyHOhlkRScKj6m20c7lkCMgoWaYQvdR5f6Hq5ExqNKXLS5nh PVfly8mVba6D5er9QRGV6RbSsi4EkDYcoABRN/4WEjbaNcYmc2SiLtOveW8vARHd 0PJvylRPU+u3I76Go8svR5RiVeqybTHYnaN+Ee5YG/mjvhupHbxpgqqAFjvB86O+ 8Zk3TrYmcsZWUD25yCofsdkNJnTh4TWsnAksm9Ny0mg0cC9OiCg8r3DTJZ6RgI3G Ik1dRoQXWIW4oxuLvrLrTMjQVuXzcjXccwS0nQ6mZPza4V+bq+h/phlUzBMSX4V1 6G2fVYekTud1rZI0RnV/aPOySaDADcKoDw== -----END CERTIFICATE-----Generated at Mon Apr 7 18:40:08 2025 by rpki-client