$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/1be5fb30-d6d3-30f1-90bd-a0012e8772e3.roa File: 1be5fb30-d6d3-30f1-90bd-a0012e8772e3.roa (raw, json) Hash identifier: ec3HmVZ1kA4BxjkvKCabt5VOGtbgVTNDdL2ZXLlzyVI= Subject key identifier: 31:79:08:88:A4:00:4A:8D:B9:1B:3E:04:12:4A:EE:88:44:A5:06:C5 Certificate issuer: /CN=2fe89f6f-530f-4fd6-8c9f-68c4478b3a40 Certificate serial: 010D0C9F432858487CEB39E4A28FF9EAD114FC40 Authority key identifier: EB:C9:0D:BE:3E:5C:11:0A:A1:CA:4A:85:23:5E:B1:30:D8:A6:CA:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/1be5fb30-d6d3-30f1-90bd-a0012e8772e3.roa Signing time: Thu 09 Jan 2025 14:00:52 +0000 ROA not before: Thu 09 Jan 2025 14:00:52 +0000 ROA not after: Wed 09 Apr 2025 13:00:52 +0000 asID: 14618 IP address blocks: 2620:c1:e000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7c:eb:39:e4:a2:8f:f9:ea:d1:14:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fe89f6f-530f-4fd6-8c9f-68c4478b3a40 Validity Not Before: Jan 9 14:00:52 2025 GMT Not After : Apr 9 13:00:52 2025 GMT Subject: CN=72b85de6-89e4-4f5e-a557-6b7863017c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ef:6e:18:e1:39:6c:3a:30:3c:cc:3e:cc:d5: 29:04:8b:0e:45:54:05:00:ed:62:37:97:f2:4a:12: 07:68:fd:86:c1:1f:5c:b1:29:14:ab:0f:61:be:de: 26:7d:e3:a2:75:7c:82:07:d0:cb:bc:dd:56:cb:17: 43:11:06:1f:12:e0:08:de:06:10:7d:a7:ad:e7:fb: 42:10:bb:99:ed:e7:c3:70:e8:c2:72:b3:ef:6c:c2: 13:b3:af:32:35:fe:05:dd:19:69:9a:e7:d4:2e:c4: df:1e:45:d0:84:1c:23:6f:92:8c:3e:0b:95:7c:1f: 89:b8:b6:8a:3c:d5:90:df:01:10:75:3f:41:b7:c2: 37:6e:c1:3c:c4:81:e6:d8:9f:79:8f:09:d5:f6:eb: a2:e7:e0:bb:c2:72:f1:d9:5a:79:11:5f:af:b3:11: 66:bb:d7:15:0f:77:e8:25:46:cd:33:8d:dc:9e:02: 83:3e:8e:3e:08:04:df:4b:3f:d9:ea:33:4c:72:78: 9a:64:5f:6b:8e:8b:b9:9b:62:ff:9f:8c:37:1d:65: ae:79:e0:f6:7c:6f:40:be:0a:75:0a:64:38:a4:71: 30:36:69:24:bb:d7:37:e7:68:47:35:c8:00:ad:d8: d5:b5:7b:bd:8e:6a:cc:00:2e:d4:0f:94:4f:0a:b4: 61:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:79:08:88:A4:00:4A:8D:B9:1B:3E:04:12:4A:EE:88:44:A5:06:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/1be5fb30-d6d3-30f1-90bd-a0012e8772e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.crl X509v3 Authority Key Identifier: keyid:EB:C9:0D:BE:3E:5C:11:0A:A1:CA:4A:85:23:5E:B1:30:D8:A6:CA:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2fe89f6f-530f-4fd6-8c9f-68c4478b3a40.cer sbgp-ipAddrBlock: critical IPv6: 2620:c1:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:a7:8c:b9:d4:33:26:da:06:8d:c1:c6:9f:5d:95:21:45:31: 49:4b:e5:62:55:c8:23:31:4b:64:d9:ac:7d:62:d9:b5:63:5e: ce:a5:48:5e:aa:0e:21:ea:09:05:9c:8f:e1:62:18:61:bc:31: 85:9c:bf:c2:f3:cb:2a:c6:c6:30:fe:89:dd:09:a5:b0:4e:e0: 41:d9:54:55:ec:d6:14:79:9a:03:29:0f:1a:7f:75:42:ba:cf: 0f:23:5d:bb:fd:cf:fc:e4:e8:33:cd:c1:d4:a2:2e:c5:47:8a: 69:ae:fa:55:22:60:f2:fc:ae:dd:66:75:b0:16:9d:95:c7:f1: 06:48:3c:7e:6b:b4:ff:e7:85:61:00:ed:4f:54:7e:27:0d:dc: 5e:d9:1a:4a:15:b2:f2:78:79:55:bf:de:a3:7e:fe:18:47:3f: bf:0b:2b:86:b2:d6:0c:dc:a0:14:81:16:ee:e3:de:54:79:bf: 3e:d3:d5:ae:25:9d:ae:51:18:fd:28:16:da:10:f6:e9:71:9e: 7a:1e:8d:a0:6e:32:bd:49:80:30:08:5e:d2:fa:e9:cb:45:0b: e2:36:25:93:54:81:63:ec:f3:6c:a9:69:01:be:71:50:48:7d: 51:a3:46:72:4c:db:77:b2:6c:1e:cd:c5:70:0c:f8:a6:65:37: a6:b5:34:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEh86znkoo/56tEU/EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZlODlmNmYtNTMwZi00ZmQ2LThjOWYtNjhjNDQ3OGIz YTQwMB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk NzJiODVkZTYtODllNC00ZjVlLWE1NTctNmI3ODYzMDE3YzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+9uGOE5bDowPMw+zNUpBIsORVQFAO1iN5fy ShIHaP2GwR9csSkUqw9hvt4mfeOidXyCB9DLvN1WyxdDEQYfEuAI3gYQfaet5/tC ELuZ7efDcOjCcrPvbMITs68yNf4F3RlpmufULsTfHkXQhBwjb5KMPguVfB+JuLaK PNWQ3wEQdT9Bt8I3bsE8xIHm2J95jwnV9uui5+C7wnLx2Vp5EV+vsxFmu9cVD3fo JUbNM43cngKDPo4+CATfSz/Z6jNMcniaZF9rjou5m2L/n4w3HWWueeD2fG9Avgp1 CmQ4pHEwNmkku9c352hHNcgArdjVtXu9jmrMAC7UD5RPCrRhvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDF5CIikAEqNuRs+BBJK7ohEpQbFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZmU4 OWY2Zi01MzBmLTRmZDYtOGM5Zi02OGM0NDc4YjNhNDAvMWJlNWZiMzAtZDZkMy0z MGYxLTkwYmQtYTAwMTJlODc3MmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmZlODlmNmYtNTMwZi00ZmQ2LThj OWYtNjhjNDQ3OGIzYTQwLzJmZTg5ZjZmLTUzMGYtNGZkNi04YzlmLTY4YzQ0Nzhi M2E0MC5jcmwwHwYDVR0jBBgwFoAU68kNvj5cEQqhykqFI16xMNimyscwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yZmU4OWY2Zi01MzBmLTRmZDYtOGM5Zi02OGM0 NDc4YjNhNDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAweAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABynjLnUMybaBo3Bxp9dlSFFMUlL5WJVyCMxS2TZrH1i2bVjXs6l SF6qDiHqCQWcj+FiGGG8MYWcv8LzyyrGxjD+id0JpbBO4EHZVFXs1hR5mgMpDxp/ dUK6zw8jXbv9z/zk6DPNwdSiLsVHimmu+lUiYPL8rt1mdbAWnZXH8QZIPH5rtP/n hWEA7U9UficN3F7ZGkoVsvJ4eVW/3qN+/hhHP78LK4ay1gzcoBSBFu7j3lR5vz7T 1a4lna5RGP0oFtoQ9ulxnnoejaBuMr1JgDAIXtL66ctFC+I2JZNUgWPs82ypaQG+ cVBIfVGjRnJM23eybB7NxXAM+KZlN6a1NGw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:38 2025 by rpki-client