$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/5af83517-5c07-3ae7-8015-a5e60f3f5a81.roa File: 5af83517-5c07-3ae7-8015-a5e60f3f5a81.roa (raw, json) Hash identifier: AQnsA3cowJ7b5nnCsO0YDzL9ltNdnMeLOKUm2eJ8m70= Subject key identifier: E4:3E:3C:05:87:31:9C:A2:35:50:80:3A:94:FC:FB:0E:A0:6F:EF:80 Certificate issuer: /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72 Certificate serial: 010D0C9F432858486D904C47845C8A175969C880 Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/5af83517-5c07-3ae7-8015-a5e60f3f5a81.roa Signing time: Sat 04 Jan 2025 02:00:39 +0000 ROA not before: Sat 04 Jan 2025 02:00:39 +0000 ROA not after: Fri 04 Apr 2025 01:00:39 +0000 asID: 21957 IP address blocks: 2605:f440:5652::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jan 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6d:90:4c:47:84:5c:8a:17:59:69:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72 Validity Not Before: Jan 4 02:00:39 2025 GMT Not After : Apr 4 01:00:39 2025 GMT Subject: CN=36a141cd-c9fe-43db-a203-bfb60bd81bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b2:d8:1f:b4:40:7a:50:f8:1f:fa:1c:1d:6e: 4c:ad:9a:5d:80:85:67:b6:c6:e0:79:a7:b3:aa:85: 02:36:a0:39:78:b8:f9:dd:b7:fc:32:50:37:23:fa: 23:78:51:0c:7f:bf:d0:d6:8f:e1:8a:70:e6:ac:de: 18:ba:c9:6b:67:d3:60:74:8d:2f:ac:7f:86:49:24: b4:54:e9:8d:aa:8b:8c:af:12:91:f6:c2:0e:46:c2: eb:06:08:9a:f0:0d:26:d6:12:a5:ab:bc:44:64:54: 23:87:07:06:21:a8:a5:15:e1:1c:d6:55:67:2b:80: 33:4a:5f:e0:58:f6:38:90:49:3d:03:bc:3e:62:85: e0:90:8f:eb:b5:8a:df:c7:78:2b:d4:51:c1:d6:4e: 9a:92:36:fd:c3:e2:0e:f6:1b:78:3d:05:50:8a:2e: e9:0a:17:73:f0:e8:b8:a4:81:55:70:83:73:17:96: 1c:83:9d:84:ac:72:f7:1b:83:dd:2b:61:e4:69:e6: d4:99:81:07:0c:23:8b:1e:63:29:f3:00:54:8f:70: 8f:39:39:67:b7:44:64:8f:0f:c8:7e:a1:b9:8b:9e: ad:ce:0d:86:d9:95:da:53:ee:83:f4:24:e2:87:fe: cd:44:39:c8:cd:14:a3:43:7c:0e:0b:ce:83:15:78: 46:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3E:3C:05:87:31:9C:A2:35:50:80:3A:94:FC:FB:0E:A0:6F:EF:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/5af83517-5c07-3ae7-8015-a5e60f3f5a81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl X509v3 Authority Key Identifier: keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer sbgp-ipAddrBlock: critical IPv6: 2605:f440:5652::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:58:95:13:46:3c:06:68:28:59:8b:27:d1:f7:df:db:2b:9e: 18:b8:35:66:1d:e1:3a:2b:ca:21:5d:92:ca:e2:72:4e:72:3c: d7:a6:15:26:83:06:63:fa:07:99:99:f1:e2:93:e8:99:6c:f5: 45:0c:21:d6:c3:38:73:44:06:32:9c:68:e8:8c:d5:ae:cd:47: 55:27:85:a0:d3:33:62:10:33:91:c3:06:37:37:63:20:a5:5b: bb:d8:62:57:7e:2d:e2:97:53:dd:aa:5c:a4:06:fa:f7:84:d8: 35:40:6c:2b:18:ad:8f:a8:e4:29:82:79:6a:da:3e:4d:0a:86: 47:5a:0e:89:e8:85:3f:64:37:5b:bc:3b:15:28:49:d9:fd:ce: 53:af:b8:a5:dd:82:98:87:57:8c:75:d7:89:a5:21:15:a2:03: f0:80:b2:40:a8:af:56:29:0c:44:96:9c:16:e0:e3:c5:90:68: 0a:15:58:c1:04:dc:c3:d5:fa:12:0e:48:3c:21:fa:f9:8c:93: d9:32:82:9b:0d:4b:88:54:c0:72:19:96:69:c7:9d:6f:63:d1: 0a:5d:34:ab:69:b4:a1:4a:e1:4a:18:20:bf:3b:58:21:38:bc: f3:61:98:92:c8:6f:a8:66:b9:cb:c3:7b:b9:25:b1:c6:e3:7e: a5:d8:68:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhtkExHhFyKF1lpyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmYzZDI1YTAtZjdlNS00MjFkLTg4NDItZmM5NjdiZjA4 ZjcyMB4XDTI1MDEwNDAyMDAzOVoXDTI1MDQwNDAxMDAzOVowLzEtMCsGA1UEAxMk MzZhMTQxY2QtYzlmZS00M2RiLWEyMDMtYmZiNjBiZDgxYmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7LYH7RAelD4H/ocHW5MrZpdgIVntsbgeaez qoUCNqA5eLj53bf8MlA3I/ojeFEMf7/Q1o/hinDmrN4YuslrZ9NgdI0vrH+GSSS0 VOmNqouMrxKR9sIORsLrBgia8A0m1hKlq7xEZFQjhwcGIailFeEc1lVnK4AzSl/g WPY4kEk9A7w+YoXgkI/rtYrfx3gr1FHB1k6akjb9w+IO9ht4PQVQii7pChdz8Oi4 pIFVcINzF5Ycg52ErHL3G4PdK2HkaebUmYEHDCOLHmMp8wBUj3CPOTlnt0Rkjw/I fqG5i56tzg2G2ZXaU+6D9CTih/7NRDnIzRSjQ3wOC86DFXhGgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOQ+PAWHMZyiNVCAOpT8+w6gb++AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNk MjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2N2JmMDhmNzIvNWFmODM1MTctNWMwNy0z YWU3LTgwMTUtYTVlNjBmM2Y1YTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmYzZDI1YTAtZjdlNS00MjFkLTg4 NDItZmM5NjdiZjA4ZjcyLzZmM2QyNWEwLWY3ZTUtNDIxZC04ODQyLWZjOTY3YmYw OGY3Mi5jcmwwHwYDVR0jBBgwFoAUV9Ck+WN+PQBHgSzdpn7Mfk696aowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNkMjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2 N2JmMDhmNzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgX0QFZS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFFYlRNGPAZoKFmLJ9H339srnhi4NWYd4ToryiFdksrick5yPNem FSaDBmP6B5mZ8eKT6Jls9UUMIdbDOHNEBjKcaOiM1a7NR1UnhaDTM2IQM5HDBjc3 YyClW7vYYld+LeKXU92qXKQG+veE2DVAbCsYrY+o5CmCeWraPk0KhkdaDonohT9k N1u8OxUoSdn9zlOvuKXdgpiHV4x114mlIRWiA/CAskCor1YpDESWnBbg48WQaAoV WMEE3MPV+hIOSDwh+vmMk9kygpsNS4hUwHIZlmnHnW9j0QpdNKtptKFK4UoYIL87 WCE4vPNhmJLIb6hmucvDe7klscbjfqXYaFI= -----END CERTIFICATE-----Generated at Thu Jan 23 07:33:23 2025 by rpki-client on console-fra.rpki-client.org