$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/40a41a6c-6163-3b59-a588-7c820c4d608c.roa File: 40a41a6c-6163-3b59-a588-7c820c4d608c.roa (raw, json) Hash identifier: 8P5ffVFLvJc5EUbjFfN09a3jFDZLByHeAFXSNogOyGg= Subject key identifier: 5C:4D:09:59:86:DE:7D:0D:CD:85:DA:3A:F7:F3:00:98:57:D3:73:08 Certificate issuer: /CN=829d195a-d541-4371-970d-5be56cd489a8 Certificate serial: 010D0C9F432858489075EC79ABECFA4B98455F00 Authority key identifier: C7:71:2A:18:24:84:EF:6E:8E:F0:83:87:1C:48:6E:34:B1:E9:98:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/40a41a6c-6163-3b59-a588-7c820c4d608c.roa Signing time: Thu 16 Jan 2025 14:00:50 +0000 ROA not before: Thu 16 Jan 2025 14:00:50 +0000 ROA not after: Wed 16 Apr 2025 13:00:50 +0000 asID: 46892 IP address blocks: 2606:2100::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:90:75:ec:79:ab:ec:fa:4b:98:45:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=829d195a-d541-4371-970d-5be56cd489a8 Validity Not Before: Jan 16 14:00:50 2025 GMT Not After : Apr 16 13:00:50 2025 GMT Subject: CN=fe827a34-3fa2-4925-a912-97286abe9cea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3b:48:5d:95:8e:1d:55:2a:25:df:d4:0f:cd: 07:b6:55:69:71:17:19:7b:cf:16:d4:99:a7:93:74: 9e:08:ec:02:fd:80:e2:d5:0d:b5:44:23:26:0a:7f: ec:cd:56:39:ab:71:0f:76:0d:34:72:65:ec:41:68: 85:77:2a:38:58:b8:a4:e5:c0:8e:45:5b:1a:f1:64: c3:e0:dd:22:8c:ce:b7:11:fa:fb:85:88:5d:08:8a: 20:43:48:45:37:45:8e:60:11:2a:c2:48:90:c5:d7: 2a:86:74:fa:3f:28:a8:ce:77:65:fd:02:0c:39:39: 5c:db:a8:fa:42:c6:1a:66:4e:58:2b:d2:bd:91:2f: 5f:66:6d:a6:24:8b:27:9a:af:b0:19:b1:33:70:bc: 6c:e8:8f:6d:d2:42:44:66:41:fe:b3:73:26:99:5c: e5:d8:d5:0f:ca:e1:4a:f7:2b:b3:77:c5:e4:12:ab: fa:c3:a7:48:cf:19:3f:fc:1f:1e:10:c1:78:41:bb: 37:16:67:43:9e:2b:70:f1:58:28:17:19:2e:8c:35: db:6e:aa:24:d1:c0:d0:fc:b9:e1:94:88:f1:d4:be: 7d:5d:9a:88:1b:ff:72:f7:d0:7a:ec:cf:23:af:ad: 72:43:ac:6d:f1:d7:62:7d:ef:f5:f0:1e:7f:88:93: b9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4D:09:59:86:DE:7D:0D:CD:85:DA:3A:F7:F3:00:98:57:D3:73:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/40a41a6c-6163-3b59-a588-7c820c4d608c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.crl X509v3 Authority Key Identifier: keyid:C7:71:2A:18:24:84:EF:6E:8E:F0:83:87:1C:48:6E:34:B1:E9:98:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer sbgp-ipAddrBlock: critical IPv6: 2606:2100::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:76:b5:fd:f8:e5:80:e4:04:9f:00:e4:cf:3d:81:c7:bc:18: 2a:3d:59:b3:8c:cc:f1:f1:c2:87:cc:f2:16:e7:a4:95:8b:1e: 0a:0d:4c:e1:8e:40:95:de:0e:54:d4:0b:69:6d:32:b5:3b:21: 0f:c5:02:b4:48:4a:00:10:6d:e1:41:25:58:49:36:84:eb:73: c9:4a:24:c7:0a:ec:8a:cd:7c:ef:af:b6:65:af:5c:ed:9b:fc: 2c:8b:16:c6:67:08:c6:bb:6f:b6:d0:db:58:31:75:8c:d8:f7: c3:10:b2:80:72:63:00:4c:ab:dd:dc:47:57:15:37:eb:85:10: 2c:6d:13:17:2c:65:15:72:a4:55:b7:8f:35:21:06:79:63:3e: 80:bc:de:e4:58:f8:9b:1c:5f:0c:1f:3c:05:cb:33:bd:0e:77: 27:52:09:ba:8c:32:e4:95:d0:30:61:c3:39:ea:e4:3a:1c:8a: 48:79:12:78:05:b6:01:0a:df:f7:4f:91:03:dd:00:2a:95:f9: a7:59:b3:37:8c:c7:82:9d:dd:75:41:39:05:8e:e0:2b:ad:bf: f2:9b:3d:fd:25:3b:7e:3f:16:e6:f5:47:ed:3f:a3:74:c4:bf: 3d:07:d9:21:ce:17:d0:3c:08:7c:84:42:b5:7e:b9:22:47:0a: 35:2e:35:43 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiQdex5q+z6S5hFXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI5ZDE5NWEtZDU0MS00MzcxLTk3MGQtNWJlNTZjZDQ4 OWE4MB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk ZmU4MjdhMzQtM2ZhMi00OTI1LWE5MTItOTcyODZhYmU5Y2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjtIXZWOHVUqJd/UD80HtlVpcRcZe88W1Jmn k3SeCOwC/YDi1Q21RCMmCn/szVY5q3EPdg00cmXsQWiFdyo4WLik5cCORVsa8WTD 4N0ijM63Efr7hYhdCIogQ0hFN0WOYBEqwkiQxdcqhnT6Pyiozndl/QIMOTlc26j6 QsYaZk5YK9K9kS9fZm2mJIsnmq+wGbEzcLxs6I9t0kJEZkH+s3MmmVzl2NUPyuFK 9yuzd8XkEqv6w6dIzxk//B8eEMF4Qbs3FmdDnitw8VgoFxkujDXbbqok0cDQ/Lnh lIjx1L59XZqIG/9y99B67M8jr61yQ6xt8ddife/18B5/iJO5CwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFxNCVmG3n0NzYXaOvfzAJhX03MIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84Mjlk MTk1YS1kNTQxLTQzNzEtOTcwZC01YmU1NmNkNDg5YTgvNDBhNDFhNmMtNjE2My0z YjU5LWE1ODgtN2M4MjBjNGQ2MDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODI5ZDE5NWEtZDU0MS00MzcxLTk3 MGQtNWJlNTZjZDQ4OWE4LzgyOWQxOTVhLWQ1NDEtNDM3MS05NzBkLTViZTU2Y2Q0 ODlhOC5jcmwwHwYDVR0jBBgwFoAUx3EqGCSE726O8IOHHEhuNLHpmBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MjlkMTk1YS1kNTQxLTQzNzEtOTcwZC01YmU1 NmNkNDg5YTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYhADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBGdrX9+OWA5ASfAOTPPYHHvBgqPVmzjMzx8cKHzPIW56SVix4KDUzh jkCV3g5U1AtpbTK1OyEPxQK0SEoAEG3hQSVYSTaE63PJSiTHCuyKzXzvr7Zlr1zt m/wsixbGZwjGu2+20NtYMXWM2PfDELKAcmMATKvd3EdXFTfrhRAsbRMXLGUVcqRV t481IQZ5Yz6AvN7kWPibHF8MHzwFyzO9DncnUgm6jDLkldAwYcM56uQ6HIpIeRJ4 BbYBCt/3T5ED3QAqlfmnWbM3jMeCnd11QTkFjuArrb/ymz39JTt+Pxbm9UftP6N0 xL89B9khzhfQPAh8hEK1frkiRwo1LjVD -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:26 2025 by rpki-client