$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/bae8e28d-e4a2-3286-91f3-d55570d1925e.roa File: bae8e28d-e4a2-3286-91f3-d55570d1925e.roa (raw, json) Hash identifier: hWs010ssXS184u38MirMmjFnGX26oa+zAXFnDIdXPHg= Subject key identifier: 82:F2:D6:9D:94:C4:AA:9C:09:02:24:5B:4C:CC:24:CC:87:A3:A2:4C Certificate issuer: /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Certificate serial: 010D0C9F432858491246B7616B40A11794C10800 Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/bae8e28d-e4a2-3286-91f3-d55570d1925e.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 16904 IP address blocks: 2600:a00::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:b7:61:6b:40:a1:17:94:c1:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=bd68cc60-5705-4f4e-925d-65cf98c4ce7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:12:3c:52:2a:d5:73:00:92:80:99:e2:4f:3a: a1:06:91:52:32:72:b3:96:ca:40:54:ed:f0:38:1a: ce:bb:e6:d8:38:e5:f5:a0:c0:b9:94:59:c2:5b:32: e8:11:23:f5:03:98:ad:31:c7:b8:ec:31:ba:fb:fa: c9:ed:16:db:2e:6b:50:27:d3:69:41:a6:63:50:b4: a2:94:5a:0b:4c:6d:0c:e5:4b:3e:d0:14:d3:44:2d: 86:a0:cb:92:2d:07:4e:9b:71:8f:93:59:74:1e:8b: b1:08:cc:3b:0b:a6:2d:a4:64:d4:04:87:52:24:07: 64:be:63:33:80:ef:3d:39:30:ae:34:fd:c7:c8:45: 63:db:08:b0:19:c4:83:81:cd:03:9b:fc:83:0f:14: da:f6:36:59:ae:18:b4:02:e3:6e:91:1d:a3:05:d9: 2c:85:66:04:9c:a1:13:c9:2c:44:af:c2:19:02:40: 91:d2:ea:83:23:3e:6c:97:15:45:a3:36:a5:f6:20: c2:4e:e4:cf:12:82:00:c4:40:2f:9b:6c:b5:83:10: a6:bf:06:34:31:1b:4f:af:3f:f5:8b:5a:7b:46:48: 19:d4:16:bf:f4:1c:9f:f4:20:bc:ab:2e:7b:8a:41: 99:c8:2e:dd:47:82:5f:97:7d:ed:19:d7:1c:25:db: 90:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F2:D6:9D:94:C4:AA:9C:09:02:24:5B:4C:CC:24:CC:87:A3:A2:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/bae8e28d-e4a2-3286-91f3-d55570d1925e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl X509v3 Authority Key Identifier: keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer sbgp-ipAddrBlock: critical IPv6: 2600:a00::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:e8:30:73:d0:04:96:54:8e:80:93:2c:ed:d6:90:66:ad:9d: ee:29:e0:65:df:e0:2b:f4:93:85:29:bf:35:40:59:d0:40:b2: b8:d8:ff:fa:9f:f0:f8:13:6d:70:84:e9:db:4b:6f:85:69:34: 15:db:6d:cc:86:d5:4e:fc:b6:f0:03:8c:bf:75:b7:c0:97:a3: ee:d5:c8:d4:41:23:6b:aa:c8:da:2f:2f:98:32:ca:0c:9b:13: bf:c6:ce:99:1f:80:eb:d7:dd:fb:b4:06:04:55:6f:bf:4a:31: 29:0a:7e:db:03:2a:26:1d:9e:4c:fe:2a:41:68:ad:39:0b:d4: 1d:95:0b:cb:e6:d6:36:d5:c5:50:16:35:90:54:84:4c:a4:4f: bc:61:99:20:88:83:e4:49:63:5f:6f:0f:fa:0e:d3:5c:82:cf: 72:af:50:8b:89:c2:62:3b:41:06:4e:39:bd:9a:4c:b0:ba:29: 2f:89:b5:fd:a8:02:a6:3b:13:9f:0b:f1:1b:bd:35:40:f9:71: 2a:8c:24:ef:1e:0b:a7:7a:e5:3a:4f:31:1b:8f:08:2c:6f:bd: 0c:bf:7d:54:bd:7b:30:13:f6:6c:db:eb:f8:66:4b:40:86:c0: 93:78:8a:6e:f5:93:02:ec:2f:06:96:97:6c:75:28:f1:db:27: a2:82:c3:27 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkSRrdha0ChF5TBCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx MzFiMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YmQ2OGNjNjAtNTcwNS00ZjRlLTkyNWQtNjVjZjk4YzRjZTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhI8UirVcwCSgJniTzqhBpFSMnKzlspAVO3w OBrOu+bYOOX1oMC5lFnCWzLoESP1A5itMce47DG6+/rJ7RbbLmtQJ9NpQaZjULSi lFoLTG0M5Us+0BTTRC2GoMuSLQdOm3GPk1l0HouxCMw7C6YtpGTUBIdSJAdkvmMz gO89OTCuNP3HyEVj2wiwGcSDgc0Dm/yDDxTa9jZZrhi0AuNukR2jBdkshWYEnKET ySxEr8IZAkCR0uqDIz5slxVFozal9iDCTuTPEoIAxEAvm2y1gxCmvwY0MRtPrz/1 i1p7RkgZ1Ba/9Byf9CC8qy57ikGZyC7dR4Jfl33tGdccJduQAQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFILy1p2UxKqcCQIkW0zMJMyHo6JMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1 YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvYmFlOGUyOGQtZTRhMi0z Mjg2LTkxZjMtZDU1NTcwZDE5MjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi ZGFiMDEzMWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAKADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBX6DBz0ASWVI6Akyzt1pBmrZ3uKeBl3+Ar9JOFKb81QFnQQLK42P/6 n/D4E21whOnbS2+FaTQV223MhtVO/LbwA4y/dbfAl6Pu1cjUQSNrqsjaLy+YMsoM mxO/xs6ZH4Dr1937tAYEVW+/SjEpCn7bAyomHZ5M/ipBaK05C9QdlQvL5tY21cVQ FjWQVIRMpE+8YZkgiIPkSWNfbw/6DtNcgs9yr1CLicJiO0EGTjm9mkywuikvibX9 qAKmOxOfC/EbvTVA+XEqjCTvHguneuU6TzEbjwgsb70Mv31UvXswE/Zs2+v4ZktA hsCTeIpu9ZMC7C8GlpdsdSjx2yeigsMn -----END CERTIFICATE-----Generated at Fri Mar 14 11:03:04 2025 by rpki-client