$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/e635d76f-d2d0-3af9-a38c-c806ec850321.roa File: e635d76f-d2d0-3af9-a38c-c806ec850321.roa (raw, json) Hash identifier: 7xWwH1oDTuKAShfnyK8Rl4vnEFxVKIM1BoEjA42hXzI= Subject key identifier: 5A:64:65:BD:B8:5C:84:9E:CB:A3:73:0B:26:10:FB:6B:E4:C0:D8:4B Certificate issuer: /CN=f95a39d1-400d-423a-89c4-37f7f1a145f2 Certificate serial: 010D0C9F43285848ADC608254F91DAE412E66500 Authority key identifier: 45:8E:89:B4:32:05:8D:58:19:8A:7F:23:01:4B:F6:1F:1D:CD:44:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/e635d76f-d2d0-3af9-a38c-c806ec850321.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 397335 IP address blocks: 2620:68:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:08:25:4f:91:da:e4:12:e6:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f95a39d1-400d-423a-89c4-37f7f1a145f2 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=985c245e-eb2f-403c-8943-2e2d6082b38f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:33:b2:b1:24:d0:1d:57:83:51:b7:0a:08:92: 7c:16:73:00:46:63:6d:2c:3b:de:a6:d5:0b:61:40: 1b:f0:b5:c1:4c:c7:32:f5:d8:f0:02:92:e5:2b:e8: f9:f7:e5:9d:49:95:9d:df:1b:2b:e5:ff:cf:aa:34: ed:eb:73:e1:b6:07:73:9b:c6:d9:e6:42:2b:67:7a: c4:6d:b6:9d:ae:e2:2e:01:dd:a8:8f:f8:be:24:b1: 6f:5d:73:7c:7b:55:5f:f1:ff:a2:d2:a2:6b:fa:b7: 9c:79:4d:53:6f:fa:85:5d:4a:b7:b8:c7:6e:d0:18: 98:df:24:81:2a:37:b4:b2:7e:f0:7c:04:61:03:30: a9:81:a1:74:28:ee:6f:e6:7c:e5:ef:9b:ed:55:95: 7f:48:a2:68:4b:fe:d0:7e:41:da:16:af:7e:fa:31: ae:c1:b0:5b:29:56:a4:94:6a:ac:75:17:33:2f:e9: 15:31:26:4b:a0:b3:9e:c0:60:9a:97:bc:dc:4f:bb: 12:3a:08:46:06:0e:ea:83:ab:8b:6d:db:9a:d4:15: d2:63:e6:7d:dd:4c:e8:e8:c3:b1:ba:72:47:f2:84: d6:4d:95:9c:57:62:02:73:a9:28:71:5c:2b:0c:cb: 3e:cd:a4:db:49:1f:12:ca:38:7a:a1:a4:fd:cf:ea: 59:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:64:65:BD:B8:5C:84:9E:CB:A3:73:0B:26:10:FB:6B:E4:C0:D8:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/e635d76f-d2d0-3af9-a38c-c806ec850321.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.crl X509v3 Authority Key Identifier: keyid:45:8E:89:B4:32:05:8D:58:19:8A:7F:23:01:4B:F6:1F:1D:CD:44:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer sbgp-ipAddrBlock: critical IPv6: 2620:68:2000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:e7:e8:ac:f0:fb:ac:7d:17:5c:d9:c6:4f:af:7b:cb:ee:a8: 55:96:9f:4a:d9:7b:0b:2c:e1:96:28:a4:4c:0f:df:c3:66:c4: ee:c6:65:10:26:2f:11:9d:0b:87:ab:70:8f:cb:e1:d2:ed:70: 23:99:b5:a3:30:82:08:5b:d3:bd:a4:62:5b:fe:89:6a:47:3b: a9:61:ed:8f:aa:50:21:10:e5:ab:89:75:a5:79:a5:ec:c0:05: 22:a7:f0:c3:91:91:2b:8d:93:69:fb:40:a5:b5:d2:c5:ec:3c: 78:50:a9:79:f2:31:dc:fe:10:bb:c3:30:ab:26:b3:25:0e:03: 64:e6:d4:18:eb:52:59:76:77:db:70:7d:c2:ac:7d:5d:fa:b2: 64:66:20:3b:ff:89:0a:10:82:4e:b7:c7:e2:e6:a3:d6:db:a2: 3c:ad:f1:f0:0c:3b:7f:e2:e8:8a:4f:9b:32:92:fd:bc:a4:60: 02:6d:9e:cb:4b:4d:8c:ca:dd:d7:d8:08:79:58:94:98:c1:d2: 11:2c:98:a4:2d:9a:f3:c7:3e:3c:35:59:e4:29:35:b8:d9:69: 50:3c:bb:ec:4d:d1:f7:f6:dc:e3:b4:7c:38:e3:58:97:ea:0e: e9:10:28:37:e7:97:83:7a:2b:28:e7:93:44:7e:4a:cd:4e:a1: d3:49:1b:ca -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEitxgglT5Ha5BLmZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1YTM5ZDEtNDAwZC00MjNhLTg5YzQtMzdmN2YxYTE0 NWYyMB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk OTg1YzI0NWUtZWIyZi00MDNjLTg5NDMtMmUyZDYwODJiMzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTOysSTQHVeDUbcKCJJ8FnMARmNtLDveptUL YUAb8LXBTMcy9djwApLlK+j59+WdSZWd3xsr5f/PqjTt63Phtgdzm8bZ5kIrZ3rE bbadruIuAd2oj/i+JLFvXXN8e1Vf8f+i0qJr+receU1Tb/qFXUq3uMdu0BiY3ySB Kje0sn7wfARhAzCpgaF0KO5v5nzl75vtVZV/SKJoS/7QfkHaFq9++jGuwbBbKVak lGqsdRczL+kVMSZLoLOewGCal7zcT7sSOghGBg7qg6uLbdua1BXSY+Z93Uzo6MOx unJH8oTWTZWcV2ICc6kocVwrDMs+zaTbSR8Syjh6oaT9z+pZ8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFpkZb24XISey6NzCyYQ+2vkwNhLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTVh MzlkMS00MDBkLTQyM2EtODljNC0zN2Y3ZjFhMTQ1ZjIvZTYzNWQ3NmYtZDJkMC0z YWY5LWEzOGMtYzgwNmVjODUwMzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1YTM5ZDEtNDAwZC00MjNhLTg5 YzQtMzdmN2YxYTE0NWYyL2Y5NWEzOWQxLTQwMGQtNDIzYS04OWM0LTM3ZjdmMWEx NDVmMi5jcmwwHwYDVR0jBBgwFoAURY6JtDIFjVgZin8jAUv2Hx3NRHUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTVhMzlkMS00MDBkLTQyM2EtODljNC0zN2Y3 ZjFhMTQ1ZjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAaCAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGnn6Kzw+6x9F1zZxk+ve8vuqFWWn0rZewss4ZYopEwP38NmxO7G ZRAmLxGdC4ercI/L4dLtcCOZtaMwgghb072kYlv+iWpHO6lh7Y+qUCEQ5auJdaV5 pezABSKn8MORkSuNk2n7QKW10sXsPHhQqXnyMdz+ELvDMKsmsyUOA2Tm1BjrUll2 d9twfcKsfV36smRmIDv/iQoQgk63x+Lmo9bbojyt8fAMO3/i6IpPmzKS/bykYAJt nstLTYzK3dfYCHlYlJjB0hEsmKQtmvPHPjw1WeQpNbjZaVA8u+xN0ff23OO0fDjj WJfqDukQKDfnl4N6Kyjnk0R+Ss1OodNJG8o= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:50 2025 by rpki-client