$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/a3882799-952b-3088-babc-d21c9fdf0685.roa File: a3882799-952b-3088-babc-d21c9fdf0685.roa (raw, json) Hash identifier: 0DMGk/J1eWPZlAhgN/j67QpP7EGi3bOdGS5tbMAYh14= Subject key identifier: 22:E0:BF:23:DF:80:12:5A:8A:9E:42:D5:AB:09:0B:E8:7C:6D:41:69 Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Certificate serial: 010D0C9F43285848530AF5966FD500FE6D213480 Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/a3882799-952b-3088-babc-d21c9fdf0685.roa Signing time: Wed 25 Dec 2024 14:00:52 +0000 ROA not before: Wed 25 Dec 2024 14:00:52 +0000 ROA not after: Tue 25 Mar 2025 13:00:52 +0000 asID: 29854 IP address blocks: 2607:fc98::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:53:0a:f5:96:6f:d5:00:fe:6d:21:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Validity Not Before: Dec 25 14:00:52 2024 GMT Not After : Mar 25 13:00:52 2025 GMT Subject: CN=235a4e9a-5083-4314-a4ef-f9e3147a6bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:91:57:fc:ac:4c:e2:63:88:ad:a4:8c:19:fd: 22:1b:2c:e9:6c:1d:1d:83:59:b0:c2:87:2f:71:f2: 01:66:29:06:fe:a5:67:3b:08:fa:09:ac:90:36:24: 57:09:c9:78:10:a2:a9:0f:c6:cb:22:41:5e:eb:47: 2b:0a:43:eb:2f:8b:0e:8f:37:92:9b:e3:5c:98:a8: 1f:63:e1:57:81:df:cf:f5:14:47:96:ec:a9:05:8f: 2e:c8:2b:7d:3a:d2:b5:ab:e6:1a:e8:8e:ad:31:41: dc:4b:c6:bb:bd:a7:ab:de:e2:90:bf:0c:a0:f3:8b: 9d:45:83:db:0c:e7:0a:ee:fa:53:56:45:d8:fb:e1: 3c:d0:ad:5a:7b:55:52:e5:0a:9f:ae:bd:81:53:ea: 9d:a5:9e:30:f6:d2:04:0b:ea:ef:b2:d5:0b:d4:65: c1:5d:47:d2:d5:7a:da:77:6d:56:69:3f:18:1a:0c: 4e:f3:4b:f3:19:4b:85:f1:21:9c:a9:a2:94:c2:54: fc:7a:d1:2d:61:eb:34:9b:c1:51:df:40:1b:70:05: b4:71:13:4a:80:b5:b4:aa:fe:df:9e:f1:4f:88:b6: 1c:6b:7f:d6:5a:7c:57:52:6f:5d:47:37:30:39:13: 6d:88:07:e5:31:bd:ed:ae:4b:d3:1c:0e:27:96:c4: 1e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E0:BF:23:DF:80:12:5A:8A:9E:42:D5:AB:09:0B:E8:7C:6D:41:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/a3882799-952b-3088-babc-d21c9fdf0685.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl X509v3 Authority Key Identifier: keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer sbgp-ipAddrBlock: critical IPv6: 2607:fc98::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:6a:25:08:b1:6d:ba:31:ac:9c:1e:8b:35:45:25:61:57:c2: 2c:48:a4:a1:dc:89:62:ba:5e:49:ab:b4:b6:44:de:1e:39:51: bf:ba:8b:12:45:dc:b0:c9:b8:2d:87:9e:f0:a5:ed:ff:ae:01: 89:4a:7a:e0:d3:d9:9f:7a:0e:04:d0:41:7e:a0:37:e6:23:1a: e5:74:86:25:ed:15:e7:b5:34:88:1b:9a:7c:f0:b8:3e:4f:e2: 4b:f1:d9:91:a1:b6:23:41:74:7c:46:00:bd:68:b6:df:51:85: 2c:72:17:b1:5b:8e:aa:5f:42:b0:86:bf:8d:c8:99:00:6c:8a: 11:d0:74:2f:a9:78:c5:e1:1b:15:0a:c0:57:56:0b:0c:ac:ae: 4b:e2:eb:ad:e4:ae:ae:73:77:b4:3b:75:b0:d3:35:67:db:58: 38:e3:0e:19:19:89:8e:bc:72:cf:0c:ef:63:13:5e:4c:e5:81: c0:94:ce:41:96:b7:02:71:fa:dd:49:16:a7:07:65:98:36:71: 86:59:59:56:ec:56:fe:1b:09:91:10:39:08:fd:2a:b7:95:46: 77:dc:85:99:6f:70:d7:01:2c:7f:b2:99:3f:db:dd:30:48:28: 5c:a8:b3:f4:55:32:a3:78:7c:5c:5c:21:15:28:f3:f0:c5:80: 69:c5:e5:6c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhTCvWWb9UA/m0hNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY3YTk4YjAtMTAwZi00ZTY5LThhOWYtYmNlYWRiN2U5 YWFlMB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk MjM1YTRlOWEtNTA4My00MzE0LWE0ZWYtZjllMzE0N2E2YmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipFX/KxM4mOIraSMGf0iGyzpbB0dg1mwwocv cfIBZikG/qVnOwj6CayQNiRXCcl4EKKpD8bLIkFe60crCkPrL4sOjzeSm+NcmKgf Y+FXgd/P9RRHluypBY8uyCt9OtK1q+Ya6I6tMUHcS8a7vaer3uKQvwyg84udRYPb DOcK7vpTVkXY++E80K1ae1VS5Qqfrr2BU+qdpZ4w9tIEC+rvstUL1GXBXUfS1Xra d21WaT8YGgxO80vzGUuF8SGcqaKUwlT8etEtYes0m8FR30AbcAW0cRNKgLW0qv7f nvFPiLYca3/WWnxXUm9dRzcwORNtiAflMb3trkvTHA4nlsQeZwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCLgvyPfgBJaip5C1asJC+h8bUFpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Njdh OThiMC0xMDBmLTRlNjktOGE5Zi1iY2VhZGI3ZTlhYWUvYTM4ODI3OTktOTUyYi0z MDg4LWJhYmMtZDIxYzlmZGYwNjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTY3YTk4YjAtMTAwZi00ZTY5LThh OWYtYmNlYWRiN2U5YWFlLzk2N2E5OGIwLTEwMGYtNGU2OS04YTlmLWJjZWFkYjdl OWFhZS5jcmwwHwYDVR0jBBgwFoAU11g4vsgJB/HhoBW3h78hrABJOTswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NjdhOThiMC0xMDBmLTRlNjktOGE5Zi1iY2Vh ZGI3ZTlhYWUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf8mDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAmaiUIsW26MaycHos1RSVhV8IsSKSh3Iliul5Jq7S2RN4eOVG/uosS Rdywybgth57wpe3/rgGJSnrg09mfeg4E0EF+oDfmIxrldIYl7RXntTSIG5p88Lg+ T+JL8dmRobYjQXR8RgC9aLbfUYUschexW46qX0Kwhr+NyJkAbIoR0HQvqXjF4RsV CsBXVgsMrK5L4uut5K6uc3e0O3Ww0zVn21g44w4ZGYmOvHLPDO9jE15M5YHAlM5B lrcCcfrdSRanB2WYNnGGWVlW7Fb+GwmREDkI/Sq3lUZ33IWZb3DXASx/spk/290w SChcqLP0VTKjeHxcXCEVKPPwxYBpxeVs -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:43 2025 by rpki-client