$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/c4511c46-226a-385f-bd4e-32968b99e6fd.roa File: c4511c46-226a-385f-bd4e-32968b99e6fd.roa (raw, json) Hash identifier: EhBbMmy97pRCqAbkmIqAop53vrZDbDELR+xXNwdr2bw= Subject key identifier: A5:3D:AD:BC:9F:74:61:86:15:91:FF:38:C0:3C:8D:21:3E:B0:9F:91 Certificate issuer: /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Certificate serial: 010D0C9F432858493ED3CB00E4FA111EE1C534C0 Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/c4511c46-226a-385f-bd4e-32968b99e6fd.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 88 IP address blocks: 2620:c4:0:100::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:cb:00:e4:fa:11:1e:e1:c5:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=7ebfb58c-49f0-434c-aefe-d548e388746d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b4:20:f6:14:c8:fc:05:f4:43:14:fe:db:5d: 2f:14:c0:aa:9a:9a:99:7e:cf:c0:68:f4:b4:9a:db: 45:95:bb:a1:a0:0b:88:b5:38:eb:f9:86:64:b5:3c: 50:57:ea:e3:00:c0:a5:7a:22:b8:19:4e:2d:d0:a2: dc:64:fb:e4:a7:cf:e9:ed:eb:fe:2b:1f:e4:35:e4: c0:90:99:92:f5:d5:92:42:4e:95:1d:93:26:13:55: c7:b0:81:70:e4:ba:4e:b2:59:61:57:a4:f6:ea:20: ac:83:e6:ea:b3:c6:09:b5:7e:50:96:59:bd:f2:07: 9d:3a:ac:27:40:40:fb:c1:20:79:66:65:4d:20:8d: 2b:b3:e4:85:4b:5f:67:c0:78:f7:4f:16:ad:d3:59: 78:c5:0a:a6:8e:05:f2:64:2b:08:56:45:69:53:8b: 42:d7:32:b7:ed:ff:8d:70:c2:a5:8e:a6:e7:df:cb: 84:e2:65:2c:07:74:ef:30:15:ac:5f:54:1c:2e:d4: fd:ce:52:fe:01:44:3a:7c:49:26:2c:be:c4:c2:12: a4:14:ab:7d:01:fe:ef:e7:ec:6b:d6:9d:80:12:68: 3c:e9:55:ff:cd:69:ac:01:c3:4f:d1:49:76:a8:c4: 02:ef:e1:c9:d0:ee:99:f8:41:48:ed:c7:e3:54:dd: 72:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3D:AD:BC:9F:74:61:86:15:91:FF:38:C0:3C:8D:21:3E:B0:9F:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/c4511c46-226a-385f-bd4e-32968b99e6fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl X509v3 Authority Key Identifier: keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer sbgp-ipAddrBlock: critical IPv6: 2620:c4:0:100::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:eb:11:96:19:c1:c5:b0:b9:f0:24:ce:e2:62:ad:d4:1d:17: 82:09:1f:92:be:7a:21:29:73:e0:98:26:56:1a:69:90:46:3f: 17:f7:8a:50:c1:d5:15:1d:70:61:af:7c:0d:b2:99:b7:09:49: 88:71:00:1c:dc:b6:70:63:b7:e1:54:b1:72:43:49:9c:67:1f: 15:14:6b:ef:9f:f8:b3:97:eb:ee:99:84:df:85:80:c5:38:21: 52:77:b6:85:0f:bd:ce:82:bb:c3:70:c6:59:a7:b4:94:ca:8a: b6:56:30:05:01:70:7a:4f:40:39:b7:c5:35:1d:51:ac:b8:a4: 9c:ce:d6:33:d7:76:3b:90:f5:43:d5:4f:b9:56:7f:1a:51:1d: 54:3d:cb:0f:b6:0c:59:27:87:39:97:ca:ba:f6:fa:4d:df:e7: ff:60:4b:75:d2:7e:a4:0c:91:17:34:32:65:7b:c5:81:b4:ba: 3b:8d:ed:6d:20:cb:29:50:ac:4b:6e:1b:0c:45:1a:75:f0:78: a4:de:dc:3a:ba:d1:91:58:65:bf:c1:b9:60:d2:ad:88:24:07: f8:80:81:c8:2f:8e:08:c9:1c:60:c8:61:27:07:97:4e:2a:4c: 1e:03:71:06:81:e6:53:a5:84:49:0e:7b:05:ca:ad:1c:34:b3: 08:27:9d:5a -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEk+08sA5PoRHuHFNMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJmYzE2ZmUtYmYwYS00ZjNhLWE2NWUtMjE3ZDhmOGMz ZWNkMB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk N2ViZmI1OGMtNDlmMC00MzRjLWFlZmUtZDU0OGUzODg3NDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrQg9hTI/AX0QxT+210vFMCqmpqZfs/AaPS0 mttFlbuhoAuItTjr+YZktTxQV+rjAMCleiK4GU4t0KLcZPvkp8/p7ev+Kx/kNeTA kJmS9dWSQk6VHZMmE1XHsIFw5LpOsllhV6T26iCsg+bqs8YJtX5Qllm98gedOqwn QED7wSB5ZmVNII0rs+SFS19nwHj3Txat01l4xQqmjgXyZCsIVkVpU4tC1zK37f+N cMKljqbn38uE4mUsB3TvMBWsX1QcLtT9zlL+AUQ6fEkmLL7EwhKkFKt9Af7v5+xr 1p2AEmg86VX/zWmsAcNP0Ul2qMQC7+HJ0O6Z+EFI7cfjVN1yDwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFKU9rbyfdGGGFZH/OMA8jSE+sJ+RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YmZj MTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdkOGY4YzNlY2QvYzQ1MTFjNDYtMjI2YS0z ODVmLWJkNGUtMzI5NjhiOTllNmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGJmYzE2ZmUtYmYwYS00ZjNhLWE2 NWUtMjE3ZDhmOGMzZWNkLzhiZmMxNmZlLWJmMGEtNGYzYS1hNjVlLTIxN2Q4Zjhj M2VjZC5jcmwwHwYDVR0jBBgwFoAUl/yFHXLGc9xg3OTz+hLE+ivzRnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YmZjMTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdk OGY4YzNlY2QuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJiAAxAAA AQAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAKusRlhnBxbC58CTO4mKt1B0Xggkfkr56ISlz4JgmVhppkEY/ F/eKUMHVFR1wYa98DbKZtwlJiHEAHNy2cGO34VSxckNJnGcfFRRr75/4s5fr7pmE 34WAxTghUne2hQ+9zoK7w3DGWae0lMqKtlYwBQFwek9AObfFNR1RrLiknM7WM9d2 O5D1Q9VPuVZ/GlEdVD3LD7YMWSeHOZfKuvb6Td/n/2BLddJ+pAyRFzQyZXvFgbS6 O43tbSDLKVCsS24bDEUadfB4pN7cOrrRkVhlv8G5YNKtiCQH+ICByC+OCMkcYMhh JweXTipMHgNxBoHmU6WESQ57BcqtHDSzCCedWg== -----END CERTIFICATE-----Generated at Thu Apr 17 17:43:36 2025 by rpki-client