$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ae8d74ce-1a49-331e-a652-0cc5965e7cb5.roa File: ae8d74ce-1a49-331e-a652-0cc5965e7cb5.roa (raw, json) Hash identifier: SIeuqQd5SbNfswRP6JUEVshtHfpDyYvBGLRS96d5kX8= Subject key identifier: E3:90:12:B5:53:D9:34:88:5D:E7:9E:3B:D9:98:6C:83:7A:92:BD:D3 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C5818F2405CA6B8E60615E80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ae8d74ce-1a49-331e-a652-0cc5965e7cb5.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 2600:1900:40d0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:8f:24:05:ca:6b:8e:60:61:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=c61841f1-2d24-4b8c-bd99-13c962cf46a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d8:70:5e:c5:b0:77:d2:5d:df:77:50:9c:0e: d8:09:20:db:76:4f:ef:25:ee:f3:95:70:ce:c9:33: 68:2c:e8:fc:ee:d8:28:61:bb:9b:83:f5:f1:c7:dd: f0:39:53:d4:ee:20:05:2b:7b:98:36:44:60:73:78: ef:68:39:dd:0f:08:55:34:28:b4:7a:ad:8d:1b:a8: 52:ac:22:2a:dc:71:06:24:50:02:34:19:3f:5c:e1: 2d:97:7e:ea:ea:97:8a:75:9a:6f:f7:a8:bd:e5:4d: 8b:e5:2e:e6:eb:76:87:c0:56:53:10:4b:39:a9:11: 3c:51:e8:ce:12:57:b0:4b:f2:31:21:e2:ef:ad:b8: ef:63:93:93:8c:5a:72:b0:5b:3e:45:e4:2a:9f:31: e5:f2:ae:33:3d:85:14:29:2d:05:9e:9b:bb:f1:c2: 6c:3e:ef:7f:ec:9c:31:46:0a:c2:f8:7d:93:98:19: 7a:32:03:42:09:48:6c:a6:9d:57:55:c3:12:fd:1d: 85:1a:1c:5f:c2:8d:09:6e:73:20:1a:f1:db:11:89: e0:a4:20:3a:5c:b2:b2:57:07:78:e4:44:64:6b:2d: a4:d1:ea:45:05:bb:58:33:5d:61:4b:97:8b:6a:da: ee:88:41:64:5f:64:3a:72:fd:68:db:fe:d5:0a:b1: 2b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:90:12:B5:53:D9:34:88:5D:E7:9E:3B:D9:98:6C:83:7A:92:BD:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ae8d74ce-1a49-331e-a652-0cc5965e7cb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv6: 2600:1900:40d0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:0d:44:0e:31:29:be:dc:e5:47:ec:4f:1b:fe:25:7a:22:49: 59:9a:89:59:e9:3b:9b:75:e2:d9:ae:d3:04:20:1b:dc:b4:14: 78:db:8c:4c:23:ea:73:a4:db:0f:07:80:d4:7e:6c:28:3b:f4: f2:44:f4:10:55:28:ba:26:44:2a:4b:a3:88:70:cf:51:4a:6b: ff:59:59:b9:72:d5:9d:94:30:2d:8f:b3:e8:01:56:4f:0f:d2: c9:54:6f:bc:e1:33:93:3c:44:e6:cf:d1:2d:56:bb:2a:1b:c1: 7d:69:15:78:cf:3d:31:63:84:8d:5f:45:da:c4:ad:07:27:2e: 58:1f:31:41:3e:4a:88:4f:1f:f2:bd:b4:34:fd:e4:b2:ff:ab: f3:5c:45:ef:34:42:82:0e:56:83:a6:be:12:eb:e0:60:8e:6c: 91:02:95:44:87:b3:54:b9:8d:ca:1c:85:1b:eb:24:fc:ad:9c: 13:22:48:86:ae:60:a7:10:ca:e9:52:6a:e0:42:9a:c7:2d:dd: 15:e0:0c:ce:68:ca:b9:41:fd:57:02:95:4a:4f:02:9a:05:45: 30:34:ee:0d:44:ad:76:b0:18:21:cb:dd:1a:b3:db:2a:5d:c9: e3:59:64:0c:3f:f5:47:16:68:9f:c3:29:5c:0a:d3:b0:91:41: 10:d7:9d:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFgY8kBcprjmBhXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YzYxODQxZjEtMmQyNC00YjhjLWJkOTktMTNjOTYyY2Y0NmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9hwXsWwd9Jd33dQnA7YCSDbdk/vJe7zlXDO yTNoLOj87tgoYbubg/Xxx93wOVPU7iAFK3uYNkRgc3jvaDndDwhVNCi0eq2NG6hS rCIq3HEGJFACNBk/XOEtl37q6peKdZpv96i95U2L5S7m63aHwFZTEEs5qRE8UejO ElewS/IxIeLvrbjvY5OTjFpysFs+ReQqnzHl8q4zPYUUKS0Fnpu78cJsPu9/7Jwx RgrC+H2TmBl6MgNCCUhspp1XVcMS/R2FGhxfwo0JbnMgGvHbEYngpCA6XLKyVwd4 5ERkay2k0epFBbtYM11hS5eLatruiEFkX2Q6cv1o2/7VCrErWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOOQErVT2TSIXeeeO9mYbIN6kr3TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWU4ZDc0Y2UtMWE0OS0z MzFlLWE2NTItMGNjNTk2NWU3Y2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAEDQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIcNRA4xKb7c5UfsTxv+JXoiSVmaiVnpO5t14tmu0wQgG9y0FHjb jEwj6nOk2w8HgNR+bCg79PJE9BBVKLomRCpLo4hwz1FKa/9ZWbly1Z2UMC2Ps+gB Vk8P0slUb7zhM5M8RObP0S1WuyobwX1pFXjPPTFjhI1fRdrErQcnLlgfMUE+SohP H/K9tDT95LL/q/NcRe80QoIOVoOmvhLr4GCObJEClUSHs1S5jcochRvrJPytnBMi SIauYKcQyulSauBCmsct3RXgDM5oyrlB/VcClUpPApoFRTA07g1ErXawGCHL3Rqz 2ypdyeNZZAw/9UcWaJ/DKVwK07CRQRDXnWE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:49 2025 by rpki-client