$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/b0aead21-fe86-32c1-8560-e3f695d01240.roa File: b0aead21-fe86-32c1-8560-e3f695d01240.roa (raw, json) Hash identifier: gXN/m5Ep75gAURGY09eReVSrVmoY7HQI2y1fNCZn6MU= Subject key identifier: 10:E3:DF:80:C3:33:8E:AB:A5:9D:5B:97:97:88:13:C5:54:B2:E1:B4 Certificate issuer: /CN=66afc7a0-9424-431b-87aa-fab4c7032ed2 Certificate serial: 010D0C9F43285848EF613F86DA4AE93CE154E480 Authority key identifier: 8B:B7:43:2E:1D:4B:AF:D0:79:03:06:96:4C:AC:AD:5C:64:24:61:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/b0aead21-fe86-32c1-8560-e3f695d01240.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 19919 IP address blocks: 2601:1600::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/66afc7a0-9424-431b-87aa-fab4c7032ed2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/66afc7a0-9424-431b-87aa-fab4c7032ed2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:3f:86:da:4a:e9:3c:e1:54:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66afc7a0-9424-431b-87aa-fab4c7032ed2 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=51d6e4b9-4c38-419c-9527-00c449c15bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2f:9c:9e:ba:e4:68:5a:3e:9c:3f:3e:a1:59: af:ce:a2:55:d4:65:ea:43:c4:70:38:82:83:05:bb: c7:be:2f:9c:b7:0c:aa:29:d9:e5:80:6e:04:9c:e5: 22:cc:e6:02:3e:40:da:1a:8b:a8:e8:bb:a5:a8:ac: 26:5b:9b:3c:0a:93:d2:21:d0:0f:93:c7:14:47:49: ea:b7:28:a6:10:73:03:d3:9e:8d:8b:5c:1b:ff:cf: ea:39:98:fd:a8:00:d6:95:5d:9c:50:64:83:1a:91: 0b:72:52:d5:fb:36:31:71:e7:7f:c3:c0:32:f8:9f: 2f:47:7a:f7:03:17:26:3e:3c:5b:2f:02:f0:90:b9: de:76:4e:ef:5b:6f:33:85:14:02:95:08:59:f7:b9: c4:de:2d:c0:18:02:e5:27:f3:76:42:66:17:76:f6: 86:1c:df:8d:69:98:80:a7:88:08:84:23:f8:78:e9: 8c:e1:4c:05:a1:f5:d0:1a:e6:47:02:20:50:42:d9: d2:e9:89:39:7c:d8:db:7c:55:61:dc:3d:72:04:74: 04:12:bc:c6:5b:bb:2e:7a:bf:30:22:32:b7:18:9d: ee:25:e5:5e:8b:8a:a4:19:6e:fc:40:88:7f:57:2d: 5f:81:fe:2a:1e:49:b6:e7:41:ef:f7:20:c0:47:15: 81:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E3:DF:80:C3:33:8E:AB:A5:9D:5B:97:97:88:13:C5:54:B2:E1:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/b0aead21-fe86-32c1-8560-e3f695d01240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/66afc7a0-9424-431b-87aa-fab4c7032ed2.crl X509v3 Authority Key Identifier: keyid:8B:B7:43:2E:1D:4B:AF:D0:79:03:06:96:4C:AC:AD:5C:64:24:61:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2.cer sbgp-ipAddrBlock: critical IPv6: 2601:1600::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:dd:59:41:5b:b8:5a:c6:42:b0:4d:97:03:6b:e9:39:e3:f3: 7a:52:d7:4c:ee:2b:1d:91:d7:35:f9:92:bf:4f:95:f6:12:35: 9e:c2:bf:1b:78:b6:49:4c:ce:63:5a:42:bd:41:58:13:e7:0d: 3d:8f:2c:30:33:83:6b:e2:c4:cf:88:38:07:3f:4c:54:02:e2: c8:b4:f6:6e:14:79:e3:70:af:3c:45:02:52:90:29:7f:6f:80: 6c:48:ba:09:0d:bd:17:0f:d3:af:b9:42:9d:f8:81:5e:94:ab: 76:58:28:98:cc:1e:73:98:38:d9:c4:75:b2:db:c5:6b:43:36: d4:be:b3:63:c1:5f:9c:a2:89:23:ba:f1:cc:89:1c:45:82:00: cd:d3:8a:24:dc:b5:b4:aa:6d:3f:fe:f0:86:b6:44:9e:50:bc: 40:0f:15:2a:bd:3b:ba:cb:94:db:0e:70:03:d3:46:dd:e4:e0: 1c:43:45:8d:df:24:9c:7f:6b:c9:be:dc:05:e3:ef:6e:47:ae: 99:5f:1d:fe:e5:37:80:9c:93:26:c5:77:2a:be:be:16:3d:b1: cf:fc:df:af:6c:95:3a:a0:ae:84:d3:b8:58:31:f3:e3:6f:a1: 53:a2:d0:6e:2f:48:dc:9f:7f:b4:5f:d8:87:75:74:56:98:e8: eb:13:c0:90 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjvYT+G2krpPOFU5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZhZmM3YTAtOTQyNC00MzFiLTg3YWEtZmFiNGM3MDMy ZWQyMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NTFkNmU0YjktNGMzOC00MTljLTk1MjctMDBjNDQ5YzE1YmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmC+cnrrkaFo+nD8+oVmvzqJV1GXqQ8RwOIKD BbvHvi+ctwyqKdnlgG4EnOUizOYCPkDaGouo6LulqKwmW5s8CpPSIdAPk8cUR0nq tyimEHMD056Ni1wb/8/qOZj9qADWlV2cUGSDGpELclLV+zYxced/w8Ay+J8vR3r3 AxcmPjxbLwLwkLnedk7vW28zhRQClQhZ97nE3i3AGALlJ/N2QmYXdvaGHN+NaZiA p4gIhCP4eOmM4UwFofXQGuZHAiBQQtnS6Yk5fNjbfFVh3D1yBHQEErzGW7suer8w IjK3GJ3uJeVei4qkGW78QIh/Vy1fgf4qHkm250Hv9yDARxWBPQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBDj34DDM46rpZ1bl5eIE8VUsuG0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NmFm YzdhMC05NDI0LTQzMWItODdhYS1mYWI0YzcwMzJlZDIvYjBhZWFkMjEtZmU4Ni0z MmMxLTg1NjAtZTNmNjk1ZDAxMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjZhZmM3YTAtOTQyNC00MzFiLTg3 YWEtZmFiNGM3MDMyZWQyLzY2YWZjN2EwLTk0MjQtNDMxYi04N2FhLWZhYjRjNzAz MmVkMi5jcmwwHwYDVR0jBBgwFoAUi7dDLh1Lr9B5AwaWTKytXGQkYSAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NmFmYzdhMC05NDI0LTQzMWItODdhYS1mYWI0 YzcwMzJlZDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgEWADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAv3VlBW7haxkKwTZcDa+k54/N6UtdM7isdkdc1+ZK/T5X2EjWewr8b eLZJTM5jWkK9QVgT5w09jywwM4Nr4sTPiDgHP0xUAuLItPZuFHnjcK88RQJSkCl/ b4BsSLoJDb0XD9OvuUKd+IFelKt2WCiYzB5zmDjZxHWy28VrQzbUvrNjwV+cookj uvHMiRxFggDN04ok3LW0qm0//vCGtkSeULxADxUqvTu6y5TbDnAD00bd5OAcQ0WN 3yScf2vJvtwF4+9uR66ZXx3+5TeAnJMmxXcqvr4WPbHP/N+vbJU6oK6E07hYMfPj b6FTotBuL0jcn3+0X9iHdXRWmOjrE8CQ -----END CERTIFICATE-----Generated at Wed Apr 9 00:21:37 2025 by rpki-client