$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/d68caa82-7ee3-3b57-a8f9-90262d3791f7.roa File: d68caa82-7ee3-3b57-a8f9-90262d3791f7.roa (raw, json) Hash identifier: hkHpUHV+Z//5vc1lr0kJHjoYQKcLY0fDj0P4w1SWhcY= Subject key identifier: F9:5F:8F:5A:96:01:A9:83:6F:A0:42:A0:F3:E7:6D:B6:28:71:40:14 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F43285848EF616A5D822170D74AE8D985 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/d68caa82-7ee3-3b57-a8f9-90262d3791f7.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 21743 IP address blocks: 2620:b9:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:6a:5d:82:21:70:d7:4a:e8:d9:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=c9b2a264-b688-4916-a0dc-6021d2a9f0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:91:ce:b2:f9:8c:ba:49:1f:07:de:04:16:c9: 29:1f:9f:c1:53:6c:40:45:4e:39:20:7c:47:76:ed: b0:c2:e4:c2:4c:10:07:72:6f:13:d6:77:a5:7b:c7: 21:c5:40:e3:e5:58:75:c3:17:ab:90:ca:1b:38:14: a8:1f:5f:41:80:a4:ac:f8:e1:8c:e0:bd:93:d1:01: 4f:9c:c5:8c:e7:36:e4:0f:d1:0c:24:49:00:c1:7d: 63:fc:7f:02:4a:17:19:99:f1:2a:ac:76:01:53:6b: 58:dc:1d:7c:22:f1:18:f3:bb:ed:c8:44:b3:30:7c: d8:51:7e:49:da:81:f4:85:e5:90:5f:d7:83:a0:65: 8a:ef:32:6c:93:12:d9:3f:36:7c:12:0a:53:9b:79: 4c:6c:b8:8d:53:0a:e2:d5:02:95:17:07:48:86:80: 41:3c:35:a3:1c:27:33:c8:84:ba:72:a9:28:3f:a0: b2:fa:b8:10:cb:0c:16:64:6e:c0:11:03:0d:1e:a0: 1f:a1:21:51:b5:84:38:07:0a:01:ec:5d:ca:4b:e3: 56:4e:6f:7b:15:3f:8f:ef:05:54:d8:04:1d:1c:96: 09:b8:f0:2f:10:a9:23:24:ba:c8:62:83:44:e3:aa: b7:1e:99:93:44:40:c9:fd:2b:2d:04:67:1d:13:8e: 9f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:5F:8F:5A:96:01:A9:83:6F:A0:42:A0:F3:E7:6D:B6:28:71:40:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/d68caa82-7ee3-3b57-a8f9-90262d3791f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv6: 2620:b9:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:c5:34:71:f7:cc:d9:95:ba:f7:b5:f0:1c:c1:92:80:4f:22: ae:02:91:44:48:c3:a5:fb:1b:f5:68:0c:ed:be:61:cc:bc:e1: 90:5f:e4:4a:38:28:df:01:61:5c:57:24:f9:8a:fd:83:16:7e: 25:4e:34:64:f5:0f:d2:de:d2:ba:38:ea:a3:a4:6c:55:f4:89: 19:36:b1:0d:e8:11:0e:9e:84:bd:c4:7f:0b:25:da:df:ba:9a: 35:c1:c5:ab:b6:89:28:7d:71:38:1e:21:83:94:a0:75:2d:c0: 37:f7:11:cd:9d:c9:3a:da:46:8b:31:38:ac:3e:0c:57:0f:70: 20:21:eb:67:48:d4:a4:c7:e0:ce:ca:54:f1:e0:6d:8b:2f:11: 05:aa:72:05:95:7a:c6:9d:d4:73:90:4f:92:dc:50:9a:4a:54: 1e:12:78:2b:d6:ac:ea:87:ff:73:60:b5:f4:66:3b:e8:7b:a3: 4e:cc:ee:b7:22:95:5a:83:d2:c5:1a:6c:ee:2b:1c:16:da:62: 3e:84:b1:55:15:31:cc:97:96:5b:c1:a0:e8:6b:13:29:75:ad: 8c:6a:6b:1b:12:4b:cf:16:6d:b4:ab:36:5e:ff:22:20:f3:be: f0:a2:ec:92:b7:b3:f9:8d:52:0f:aa:79:4e:20:c9:11:0d:4a: 63:7f:75:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjvYWpdgiFw10ro2YUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk YzliMmEyNjQtYjY4OC00OTE2LWEwZGMtNjAyMWQyYTlmMGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55HOsvmMukkfB94EFskpH5/BU2xARU45IHxH du2wwuTCTBAHcm8T1nele8chxUDj5Vh1wxerkMobOBSoH19BgKSs+OGM4L2T0QFP nMWM5zbkD9EMJEkAwX1j/H8CShcZmfEqrHYBU2tY3B18IvEY87vtyESzMHzYUX5J 2oH0heWQX9eDoGWK7zJskxLZPzZ8EgpTm3lMbLiNUwri1QKVFwdIhoBBPDWjHCcz yIS6cqkoP6Cy+rgQywwWZG7AEQMNHqAfoSFRtYQ4BwoB7F3KS+NWTm97FT+P7wVU 2AQdHJYJuPAvEKkjJLrIYoNE46q3HpmTREDJ/SstBGcdE46fFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPlfj1qWAamDb6BCoPPnbbYocUAUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvZDY4Y2FhODItN2VlMy0z YjU3LWE4ZjktOTAyNjJkMzc5MWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAueAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABbFNHH3zNmVuve18BzBkoBPIq4CkURIw6X7G/VoDO2+Ycy84ZBf 5Eo4KN8BYVxXJPmK/YMWfiVONGT1D9Le0ro46qOkbFX0iRk2sQ3oEQ6ehL3Efwsl 2t+6mjXBxau2iSh9cTgeIYOUoHUtwDf3Ec2dyTraRosxOKw+DFcPcCAh62dI1KTH 4M7KVPHgbYsvEQWqcgWVesad1HOQT5LcUJpKVB4SeCvWrOqH/3NgtfRmO+h7o07M 7rcilVqD0sUabO4rHBbaYj6EsVUVMcyXllvBoOhrEyl1rYxqaxsSS88WbbSrNl7/ IiDzvvCi7JK3s/mNUg+qeU4gyRENSmN/dUM= -----END CERTIFICATE-----Generated at Fri Mar 14 07:52:25 2025 by rpki-client