$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/4be56354-f558-3bd5-98d1-2a45b275dad7.roa File: 4be56354-f558-3bd5-98d1-2a45b275dad7.roa (raw, json) Hash identifier: ZKfezlvniUDhdm2F1DE/eX2VCXZK2xoeLiaff5Yr8Zo= Subject key identifier: D1:98:2D:EC:BE:48:FC:56:0D:DA:39:4F:15:6A:05:E8:CB:09:8E:C8 Certificate issuer: /CN=9ff43aab-c8c2-4f23-91e5-373be2462e9f Certificate serial: 010D0C9F43285848A136111CDDBE782692958000 Authority key identifier: 56:45:75:A6:DC:99:39:16:88:BC:D3:FE:86:9A:FD:9C:E9:FD:74:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/4be56354-f558-3bd5-98d1-2a45b275dad7.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 18140 IP address blocks: 2620:e6:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/9ff43aab-c8c2-4f23-91e5-373be2462e9f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/9ff43aab-c8c2-4f23-91e5-373be2462e9f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:11:1c:dd:be:78:26:92:95:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ff43aab-c8c2-4f23-91e5-373be2462e9f Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=f2f7314d-d5bb-4ab6-9c2f-bc3a5dced408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1f:b2:1e:b1:03:e8:94:13:a5:5f:89:52:99: 92:5c:6f:57:72:83:24:89:a4:28:d2:46:a6:59:c1: 1b:3e:99:b9:d6:89:39:f5:36:78:6c:72:a5:84:3b: c8:22:f6:bf:89:ba:50:ac:12:1e:90:b8:d9:d5:a7: 5b:36:2c:8d:11:a1:55:fe:5c:a5:2e:ed:4d:a7:de: f5:e7:1a:60:65:d0:8b:72:84:d7:f2:ef:b8:69:64: 11:28:96:b9:2f:09:bf:f0:73:52:c9:29:4b:0e:fd: 0a:fd:f6:04:51:e6:ab:56:a1:f5:62:29:9b:6e:b0: 8a:09:23:03:10:2c:44:95:95:a9:2f:a8:1d:2e:83: 27:ce:7d:a2:f3:22:a5:33:65:9c:e2:30:3c:e9:38: 8c:27:8a:c3:84:8e:d4:3c:b6:4a:7b:ef:0e:e1:a0: 64:15:af:ab:65:18:1a:07:75:9d:b1:f9:b3:cc:15: bd:7f:3d:83:1c:48:9d:1a:73:a3:d5:38:f3:c1:f5: b4:06:5e:55:a7:7f:e7:79:7d:c1:cf:8b:7e:33:5f: 65:25:af:2e:bb:46:f8:02:38:be:65:c0:08:49:10: 1a:ab:48:d7:71:4e:d9:1a:d2:e9:41:21:b9:b3:a6: b0:fc:50:64:09:05:34:8b:2e:90:b4:87:f4:c9:ca: b2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:98:2D:EC:BE:48:FC:56:0D:DA:39:4F:15:6A:05:E8:CB:09:8E:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/4be56354-f558-3bd5-98d1-2a45b275dad7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f/9ff43aab-c8c2-4f23-91e5-373be2462e9f.crl X509v3 Authority Key Identifier: keyid:56:45:75:A6:DC:99:39:16:88:BC:D3:FE:86:9A:FD:9C:E9:FD:74:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ff43aab-c8c2-4f23-91e5-373be2462e9f.cer sbgp-ipAddrBlock: critical IPv6: 2620:e6:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:b8:26:1b:d5:50:8f:1a:02:e2:64:86:af:ca:22:2e:40:d7: d3:ab:31:79:6f:d1:2e:40:24:98:39:e5:d7:15:54:a7:1c:ec: 23:c4:ae:a3:39:93:01:d4:b0:7c:ce:ef:77:bd:30:53:8b:aa: 9a:50:b0:4d:d1:2e:b6:d0:e4:7b:98:b8:80:78:52:30:d8:74: 28:2e:bd:01:6b:77:73:e2:91:fe:1a:27:14:75:37:79:a4:78: 60:cb:94:42:33:85:f7:9a:20:cf:11:e6:45:fa:8f:d4:ec:63: 42:82:28:19:51:0b:ca:3b:98:fc:74:42:bb:26:13:6b:94:53: 1d:f5:3f:ae:2e:cb:1e:53:ea:ec:ca:b6:d3:0e:2e:d7:15:e4: 5e:10:4c:fc:84:e2:6c:d8:09:2b:1e:c2:3b:3f:d8:88:bd:7e: 37:d6:36:35:99:f3:20:30:64:54:28:3c:57:6e:2f:24:b5:ee: 27:d1:b5:db:19:98:9b:9c:2a:c9:96:aa:b1:8b:96:9f:8d:d8: 0f:13:1a:f0:80:12:07:c0:42:af:d4:a4:b0:8b:98:5c:67:a8: cd:54:d9:09:86:4d:72:e1:61:17:0b:e9:0e:45:23:f2:44:5e: 12:e4:7b:55:5f:8b:5b:90:20:8c:38:58:ee:43:65:9a:fe:08: d0:c3:bd:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNhEc3b54JpKVgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZmNDNhYWItYzhjMi00ZjIzLTkxZTUtMzczYmUyNDYy ZTlmMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk ZjJmNzMxNGQtZDViYi00YWI2LTljMmYtYmMzYTVkY2VkNDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmx+yHrED6JQTpV+JUpmSXG9XcoMkiaQo0kam WcEbPpm51ok59TZ4bHKlhDvIIva/ibpQrBIekLjZ1adbNiyNEaFV/lylLu1Np971 5xpgZdCLcoTX8u+4aWQRKJa5Lwm/8HNSySlLDv0K/fYEUearVqH1YimbbrCKCSMD ECxElZWpL6gdLoMnzn2i8yKlM2Wc4jA86TiMJ4rDhI7UPLZKe+8O4aBkFa+rZRga B3WdsfmzzBW9fz2DHEidGnOj1TjzwfW0Bl5Vp3/neX3Bz4t+M19lJa8uu0b4Aji+ ZcAISRAaq0jXcU7ZGtLpQSG5s6aw/FBkCQU0iy6QtIf0ycqyiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNGYLey+SPxWDdo5TxVqBejLCY7IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85ZmY0 M2FhYi1jOGMyLTRmMjMtOTFlNS0zNzNiZTI0NjJlOWYvNGJlNTYzNTQtZjU1OC0z YmQ1LTk4ZDEtMmE0NWIyNzVkYWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOWZmNDNhYWItYzhjMi00ZjIzLTkx ZTUtMzczYmUyNDYyZTlmLzlmZjQzYWFiLWM4YzItNGYyMy05MWU1LTM3M2JlMjQ2 MmU5Zi5jcmwwHwYDVR0jBBgwFoAUVkV1ptyZORaIvNP+hpr9nOn9dBswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85ZmY0M2FhYi1jOGMyLTRmMjMtOTFlNS0zNzNi ZTI0NjJlOWYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA5sAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB+4JhvVUI8aAuJkhq/KIi5A19OrMXlv0S5AJJg55dcVVKcc7CPE rqM5kwHUsHzO73e9MFOLqppQsE3RLrbQ5HuYuIB4UjDYdCguvQFrd3Pikf4aJxR1 N3mkeGDLlEIzhfeaIM8R5kX6j9TsY0KCKBlRC8o7mPx0QrsmE2uUUx31P64uyx5T 6uzKttMOLtcV5F4QTPyE4mzYCSsewjs/2Ii9fjfWNjWZ8yAwZFQoPFduLyS17ifR tdsZmJucKsmWqrGLlp+N2A8TGvCAEgfAQq/UpLCLmFxnqM1U2QmGTXLhYRcL6Q5F I/JEXhLke1Vfi1uQIIw4WO5DZZr+CNDDvdQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:40 2025 by rpki-client