$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/ff4f066a-1678-34b5-9861-cccf7607e203.roa File: ff4f066a-1678-34b5-9861-cccf7607e203.roa (raw, json) Hash identifier: CdQyflomDOESHECAQm3FwnP/J/j7ASNMxtQ3+s5Levo= Subject key identifier: A8:6F:66:CB:B4:57:AC:C4:A8:84:34:1A:4A:9F:20:6D:84:24:99:FA Certificate issuer: /CN=0a684002-9100-46b0-8a9b-64ee2e7bda6a Certificate serial: 010D0C9F43285848A400B70E53A308610EB8CD80 Authority key identifier: B9:83:6E:9B:8D:E6:6D:0F:B6:D3:03:46:0B:31:28:21:E3:FE:33:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/ff4f066a-1678-34b5-9861-cccf7607e203.roa Signing time: Thu 23 Jan 2025 14:00:52 +0000 ROA not before: Thu 23 Jan 2025 14:00:52 +0000 ROA not after: Wed 23 Apr 2025 13:00:52 +0000 asID: 40764 IP address blocks: 2604:edc0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/0a684002-9100-46b0-8a9b-64ee2e7bda6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/0a684002-9100-46b0-8a9b-64ee2e7bda6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a4:00:b7:0e:53:a3:08:61:0e:b8:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a684002-9100-46b0-8a9b-64ee2e7bda6a Validity Not Before: Jan 23 14:00:52 2025 GMT Not After : Apr 23 13:00:52 2025 GMT Subject: CN=042518f1-47ff-4327-85d0-f42e2e7f6ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:be:9b:19:4c:f4:39:34:60:d6:19:48:71:3e: 0d:02:09:a8:43:4e:75:bd:63:d5:ab:db:04:d8:b4: 85:b6:9b:c2:d5:a0:46:21:32:a5:bd:ca:fc:67:be: fa:c4:8d:6a:68:8d:20:a0:29:73:09:9c:e1:65:91: 0f:1e:6b:ab:bd:01:7b:d9:28:ff:0f:a5:b5:97:88: 24:f1:8d:36:02:22:ed:61:0e:60:7f:73:40:d6:9d: e0:15:15:11:ee:91:a8:ad:41:4d:be:e2:cb:fb:5e: 5a:5d:a5:ad:fc:70:c0:7f:70:0b:d4:de:aa:ad:19: 18:16:61:45:4a:6b:e6:c9:30:30:99:9b:31:53:f2: e1:13:d6:55:37:f3:9c:73:8c:bb:fb:a0:e8:d2:14: 88:65:79:d0:04:de:93:aa:3b:f9:4d:11:95:b6:5a: 67:d7:f5:b9:40:3f:2b:bc:4c:8b:76:ce:53:1b:c1: c5:03:56:2c:9c:fe:11:c1:39:74:d9:70:33:e3:b4: e7:91:e9:0a:d1:5e:2b:1c:64:87:a1:3a:ca:69:b8: a3:f2:0c:3b:59:23:8f:41:0b:ad:52:8c:b8:42:63: d0:69:a8:c1:10:18:c9:6c:fb:49:37:3d:c8:3e:35: 4d:dc:70:53:92:e9:b9:d8:15:60:fe:f1:65:7b:e9: 5a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6F:66:CB:B4:57:AC:C4:A8:84:34:1A:4A:9F:20:6D:84:24:99:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/ff4f066a-1678-34b5-9861-cccf7607e203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a/0a684002-9100-46b0-8a9b-64ee2e7bda6a.crl X509v3 Authority Key Identifier: keyid:B9:83:6E:9B:8D:E6:6D:0F:B6:D3:03:46:0B:31:28:21:E3:FE:33:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a684002-9100-46b0-8a9b-64ee2e7bda6a.cer sbgp-ipAddrBlock: critical IPv6: 2604:edc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:f5:27:cc:8f:c7:23:ed:3c:52:32:fa:94:fc:8e:91:52:01: bf:38:d7:90:be:04:5e:46:b0:ff:30:5a:f5:b4:9c:64:7f:03: 51:e6:e8:e1:63:b8:6c:02:d1:5a:fa:56:1b:6f:40:bb:6b:a3: 1e:3c:bc:66:98:33:32:80:25:45:3c:4d:3c:bd:ef:b8:34:48: 0c:03:4d:40:2e:3a:37:83:cb:d3:7b:97:18:ee:fe:63:ec:68: 29:7d:6f:43:42:0d:1d:37:67:48:33:73:c3:aa:6e:2d:92:07: 69:08:81:6d:43:57:bb:17:e0:09:5f:27:49:bb:16:c4:33:c1: 27:42:03:20:08:2c:e1:88:73:a2:9d:5f:39:96:89:15:eb:55: 87:eb:39:c2:30:76:07:34:36:63:a6:d1:85:9c:8c:6e:be:4e: b5:8c:1f:7c:be:00:bb:7c:30:a9:75:83:4d:6f:26:64:6d:1a: c0:7e:31:71:2a:cc:59:87:67:81:4d:cd:98:37:34:7b:5f:d3: 1d:22:55:35:d8:19:59:f6:6a:92:d1:56:b4:44:1b:94:c8:11: 62:db:c4:53:34:38:08:4f:0d:fc:30:ef:77:5a:e6:7b:aa:14: 0e:e1:66:4d:5c:65:ed:8d:af:dd:2c:b9:d1:7a:67:bd:0d:e4: 42:5c:b0:f8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEikALcOU6MIYQ64zYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE2ODQwMDItOTEwMC00NmIwLThhOWItNjRlZTJlN2Jk YTZhMB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk MDQyNTE4ZjEtNDdmZi00MzI3LTg1ZDAtZjQyZTJlN2Y2ZWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjb6bGUz0OTRg1hlIcT4NAgmoQ051vWPVq9sE 2LSFtpvC1aBGITKlvcr8Z776xI1qaI0goClzCZzhZZEPHmurvQF72Sj/D6W1l4gk 8Y02AiLtYQ5gf3NA1p3gFRUR7pGorUFNvuLL+15aXaWt/HDAf3AL1N6qrRkYFmFF SmvmyTAwmZsxU/LhE9ZVN/Occ4y7+6Do0hSIZXnQBN6Tqjv5TRGVtlpn1/W5QD8r vEyLds5TG8HFA1YsnP4RwTl02XAz47TnkekK0V4rHGSHoTrKabij8gw7WSOPQQut Uoy4QmPQaajBEBjJbPtJNz3IPjVN3HBTkum52BVg/vFle+la7QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKhvZsu0V6zEqIQ0GkqfIG2EJJn6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wYTY4 NDAwMi05MTAwLTQ2YjAtOGE5Yi02NGVlMmU3YmRhNmEvZmY0ZjA2NmEtMTY3OC0z NGI1LTk4NjEtY2NjZjc2MDdlMjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGE2ODQwMDItOTEwMC00NmIwLThh OWItNjRlZTJlN2JkYTZhLzBhNjg0MDAyLTkxMDAtNDZiMC04YTliLTY0ZWUyZTdi ZGE2YS5jcmwwHwYDVR0jBBgwFoAUuYNum43mbQ+20wNGCzEoIeP+MxswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wYTY4NDAwMi05MTAwLTQ2YjAtOGE5Yi02NGVl MmU3YmRhNmEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTtwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA69SfMj8cj7TxSMvqU/I6RUgG/ONeQvgReRrD/MFr1tJxkfwNR5ujh Y7hsAtFa+lYbb0C7a6MePLxmmDMygCVFPE08ve+4NEgMA01ALjo3g8vTe5cY7v5j 7GgpfW9DQg0dN2dIM3PDqm4tkgdpCIFtQ1e7F+AJXydJuxbEM8EnQgMgCCzhiHOi nV85lokV61WH6znCMHYHNDZjptGFnIxuvk61jB98vgC7fDCpdYNNbyZkbRrAfjFx KsxZh2eBTc2YNzR7X9MdIlU12BlZ9mqS0Va0RBuUyBFi28RTNDgITw38MO93WuZ7 qhQO4WZNXGXtja/dLLnReme9DeRCXLD4 -----END CERTIFICATE-----Generated at Sun Feb 16 15:22:29 2025 by rpki-client