$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/25e5b986-81e2-3eeb-92e5-ed21524cf5b6.roa File: 25e5b986-81e2-3eeb-92e5-ed21524cf5b6.roa (raw, json) Hash identifier: PCYtWPS45MoHCR/085WDMUU/iwt7XLgRqkAKFsSldJo= Subject key identifier: 12:B2:B0:A2:23:18:78:1D:66:84:D5:CE:00:A3:26:D8:3F:29:4A:61 Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b Certificate serial: 010D0C9F432858485B6AFC4D90364B527A36B5E0 Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/25e5b986-81e2-3eeb-92e5-ed21524cf5b6.roa Signing time: Sat 28 Dec 2024 14:00:52 +0000 ROA not before: Sat 28 Dec 2024 14:00:52 +0000 ROA not after: Fri 28 Mar 2025 13:00:52 +0000 asID: 29802 IP address blocks: 2604:8380::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5b:6a:fc:4d:90:36:4b:52:7a:36:b5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b Validity Not Before: Dec 28 14:00:52 2024 GMT Not After : Mar 28 13:00:52 2025 GMT Subject: CN=01dde061-ce97-4fdd-815f-665e62578ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:16:51:f6:65:ba:4e:40:7f:93:75:7e:32:bd: eb:6d:82:bc:b6:dd:6e:dc:c2:25:12:c3:d8:7a:af: 2b:d5:ba:e2:31:da:41:06:2d:42:a3:92:87:a8:f1: 20:9f:be:81:11:78:f1:5f:91:1c:61:d5:79:e8:10: 6f:29:98:a5:4d:e2:95:b6:f5:26:c2:10:f1:61:bc: fa:17:8f:66:2e:97:98:a7:df:43:2b:bd:21:29:73: 79:4f:a0:41:ff:fb:4b:59:7f:a4:5d:5c:89:a2:f4: 52:89:e0:2d:07:63:48:76:92:33:9a:87:85:69:1a: d8:f1:d5:bf:b2:eb:3f:25:53:22:37:b2:db:b1:91: 00:43:0e:59:e2:f2:bb:85:2c:20:3c:f0:7c:98:3b: 50:68:71:11:8a:2b:bb:a1:51:e5:f4:8c:cd:49:4c: b1:e6:18:cd:5d:57:32:e8:62:d7:6f:1c:b0:aa:ee: d9:17:47:97:6f:aa:0b:b6:86:78:c6:36:1f:2a:2a: e9:56:b4:49:8f:24:e1:6b:6c:5b:77:22:42:84:ea: e0:c3:41:4f:f5:7e:7c:cc:de:02:e7:ad:97:8d:3a: a2:36:3f:55:35:1e:f9:fc:4a:d4:d3:b3:c6:6f:34: 8e:11:88:55:7e:85:6e:0b:d1:4d:2c:ab:48:f9:32: 1b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B2:B0:A2:23:18:78:1D:66:84:D5:CE:00:A3:26:D8:3F:29:4A:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/25e5b986-81e2-3eeb-92e5-ed21524cf5b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl X509v3 Authority Key Identifier: keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:8380::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:b9:6a:a7:12:f3:91:38:f0:e6:95:d2:64:5a:8c:51:f3:65: 43:95:e0:48:15:f3:64:6c:ce:d7:96:98:3b:b6:81:0c:d3:45: 23:59:93:2c:c6:d9:f4:47:e7:72:c9:0e:57:31:e7:38:b4:c3: 1e:9c:7c:f6:bb:20:22:3d:1c:3c:57:8a:36:4a:f4:b6:bd:c3: f6:03:63:ac:3b:5f:88:f0:c3:8b:ce:5e:17:3e:07:47:33:7f: f3:44:ba:01:dc:19:25:c9:53:af:79:7e:5a:b6:5a:25:72:ec: 27:b6:35:29:2b:5f:fc:8c:1b:af:82:b2:63:f6:d5:33:ce:17: 52:44:22:fd:a0:54:1c:81:fe:8e:da:07:bb:03:d5:37:dc:c6: 80:15:8c:06:c2:21:81:f4:10:73:5d:cc:6a:c8:a2:1a:de:a2: 3c:65:57:7d:56:c6:18:f4:cd:a5:b3:17:1e:25:91:01:75:ec: 47:a5:f2:b6:9f:2f:10:84:11:2c:bf:0f:9a:57:50:5c:b1:31: ab:c7:dc:e2:01:14:a4:a3:e7:5f:a9:e4:e8:8f:fe:b9:10:c1: 94:e1:bc:b7:74:05:52:9c:e3:ee:4a:2a:40:22:f2:ec:29:8a: cf:d1:7e:d7:34:ab:fb:96:5b:f3:67:e6:db:d1:1e:7d:13:be: 9b:41:6f:ec -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhbavxNkDZLUno2teAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTBkMjMwODUtNzJlMy00OTlkLTliN2YtZTU1Mjc5MmIz ZjFiMB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk MDFkZGUwNjEtY2U5Ny00ZmRkLTgxNWYtNjY1ZTYyNTc4YWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihZR9mW6TkB/k3V+Mr3rbYK8tt1u3MIlEsPY eq8r1briMdpBBi1Co5KHqPEgn76BEXjxX5EcYdV56BBvKZilTeKVtvUmwhDxYbz6 F49mLpeYp99DK70hKXN5T6BB//tLWX+kXVyJovRSieAtB2NIdpIzmoeFaRrY8dW/ sus/JVMiN7LbsZEAQw5Z4vK7hSwgPPB8mDtQaHERiiu7oVHl9IzNSUyx5hjNXVcy 6GLXbxywqu7ZF0eXb6oLtoZ4xjYfKirpVrRJjyTha2xbdyJChOrgw0FP9X58zN4C 562XjTqiNj9VNR75/ErU07PGbzSOEYhVfoVuC9FNLKtI+TIb/wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBKysKIjGHgdZoTVzgCjJtg/KUphMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MGQy MzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUyNzkyYjNmMWIvMjVlNWI5ODYtODFlMi0z ZWViLTkyZTUtZWQyMTUyNGNmNWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTBkMjMwODUtNzJlMy00OTlkLTli N2YtZTU1Mjc5MmIzZjFiLzUwZDIzMDg1LTcyZTMtNDk5ZC05YjdmLWU1NTI3OTJi M2YxYi5jcmwwHwYDVR0jBBgwFoAUV80LmQxnVdqR0qTYVmG1jv5wNakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MGQyMzA4NS03MmUzLTQ5OWQtOWI3Zi1lNTUy NzkyYjNmMWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSDgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAwuWqnEvOROPDmldJkWoxR82VDleBIFfNkbM7Xlpg7toEM00UjWZMs xtn0R+dyyQ5XMec4tMMenHz2uyAiPRw8V4o2SvS2vcP2A2OsO1+I8MOLzl4XPgdH M3/zRLoB3BklyVOveX5atlolcuwntjUpK1/8jBuvgrJj9tUzzhdSRCL9oFQcgf6O 2ge7A9U33MaAFYwGwiGB9BBzXcxqyKIa3qI8ZVd9VsYY9M2lsxceJZEBdexHpfK2 ny8QhBEsvw+aV1BcsTGrx9ziARSko+dfqeToj/65EMGU4by3dAVSnOPuSipAIvLs KYrP0X7XNKv7llvzZ+bb0R59E76bQW/s -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:16 2025 by rpki-client