$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/7c0cede4-8012-3c79-9d4f-59f194f7d629.roa File: 7c0cede4-8012-3c79-9d4f-59f194f7d629.roa (raw, json) Hash identifier: GL1+1WrjTss+Iw51fVX7SCqZVE9qFiyo1QK6btlzakY= Subject key identifier: 87:6D:90:17:B4:5C:CD:E0:1E:7D:52:97:EA:AF:E5:05:58:71:3F:7D Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Certificate serial: 010D0C9F432858489E6B6E1101EBE8BB74A15B00 Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/7c0cede4-8012-3c79-9d4f-59f194f7d629.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 11810 IP address blocks: 2620:98:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:6e:11:01:eb:e8:bb:74:a1:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=a5b9bdeb-4524-45b0-861c-bf24d4ffb74e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5e:cc:1b:e1:f0:da:3f:87:36:fc:4c:af:93: de:1b:3f:3e:9a:58:4e:5d:5f:1f:2f:df:3b:5c:f6: 82:d0:02:9e:fa:5b:7f:e5:94:3f:d1:07:7b:c3:d3: 8c:3b:8b:9f:1e:29:7d:cc:f3:fe:e5:1a:d5:41:46: 45:0c:bc:0f:3e:f5:1d:38:d2:d7:df:88:f1:2c:5f: e3:4b:ec:1e:3a:f1:1d:d0:ca:47:f2:e9:59:da:01: fb:6c:19:35:7f:de:be:30:2b:f4:a9:5e:f4:eb:07: e4:a8:c0:ce:4a:82:ad:dd:50:38:78:12:d0:74:51: c3:66:fe:02:c6:32:2a:e0:85:d1:9b:86:3a:cb:a6: ce:f1:d0:19:29:16:6e:0b:aa:f2:84:be:62:5e:5f: 6e:c5:80:79:de:f5:ee:67:50:ae:37:2a:9a:df:12: a3:bd:60:23:f0:75:3e:a5:08:79:69:b7:3e:ab:ca: 15:18:88:89:f9:e1:dc:da:54:2d:c2:42:90:db:f9: 3e:8d:79:7e:25:a5:39:68:7e:e4:de:0c:ab:3f:6c: de:aa:b1:24:e1:73:2b:2c:7d:e6:15:9b:46:8e:04: 42:6c:46:ef:24:e1:0f:1d:5f:b3:ca:c5:b2:fb:2a: 6b:18:d9:96:3b:a2:c4:63:3e:3b:20:28:52:de:93: 91:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:6D:90:17:B4:5C:CD:E0:1E:7D:52:97:EA:AF:E5:05:58:71:3F:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/7c0cede4-8012-3c79-9d4f-59f194f7d629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl X509v3 Authority Key Identifier: keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer sbgp-ipAddrBlock: critical IPv6: 2620:98:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:15:04:b8:e8:f2:86:b5:b1:8c:c4:84:8e:f5:01:7f:01:fa: 2a:25:4b:78:58:52:d8:c2:ec:b7:bf:ce:f0:5a:df:9c:db:7f: 1e:42:cd:ec:08:ef:5f:88:5c:3b:d9:83:d7:88:82:67:7f:ef: 8e:d3:91:47:a4:dd:ea:47:2b:ea:c9:c0:c9:39:42:12:7b:03: 0a:50:7e:07:a2:ab:89:d6:f5:e9:07:b0:53:ed:7f:9a:d0:5a: 2c:ca:18:30:5a:1b:26:4a:0e:28:01:10:1d:88:46:4b:33:20: b9:ff:7f:cd:25:61:6a:b9:b9:df:fb:54:91:24:b6:18:ba:6e: 03:2c:84:7c:b1:05:1f:0f:52:0c:6d:69:26:ba:eb:43:3a:0a: f2:27:3c:45:a1:16:b2:2a:79:da:86:ff:ff:45:a7:55:23:44: b5:b0:6a:72:db:53:19:b9:9a:25:99:b2:81:2b:e5:47:67:0f: bf:2c:67:fb:c5:45:f8:ef:d0:33:c1:68:cc:3e:ad:10:af:ab: 88:d4:ec:ca:43:bb:93:21:83:88:3f:dc:82:3f:6c:b2:ea:79: c2:9b:ae:36:60:7c:6f:66:b8:55:f8:b1:54:af:35:df:08:91: 59:73:a0:29:5c:c8:1c:5d:42:5c:55:d7:7b:71:a9:b2:51:a3: c3:76:f3:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiea24RAevou3ShWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw NGRhMB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YTViOWJkZWItNDUyNC00NWIwLTg2MWMtYmYyNGQ0ZmZiNzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl7MG+Hw2j+HNvxMr5PeGz8+mlhOXV8fL987 XPaC0AKe+lt/5ZQ/0Qd7w9OMO4ufHil9zPP+5RrVQUZFDLwPPvUdONLX34jxLF/j S+weOvEd0MpH8ulZ2gH7bBk1f96+MCv0qV706wfkqMDOSoKt3VA4eBLQdFHDZv4C xjIq4IXRm4Y6y6bO8dAZKRZuC6ryhL5iXl9uxYB53vXuZ1CuNyqa3xKjvWAj8HU+ pQh5abc+q8oVGIiJ+eHc2lQtwkKQ2/k+jXl+JaU5aH7k3gyrP2zeqrEk4XMrLH3m FZtGjgRCbEbvJOEPHV+zysWy+yprGNmWO6LEYz47IChS3pORaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIdtkBe0XM3gHn1Sl+qv5QVYcT99MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4 YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvN2MwY2VkZTQtODAxMi0z Yzc5LTlkNGYtNTlmMTk0ZjdkNjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4 ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1 MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh NWE1NTA0ZGEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAmMAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFIVBLjo8oa1sYzEhI71AX8B+iolS3hYUtjC7Le/zvBa35zbfx5C zewI71+IXDvZg9eIgmd/747TkUek3epHK+rJwMk5QhJ7AwpQfgeiq4nW9ekHsFPt f5rQWizKGDBaGyZKDigBEB2IRkszILn/f80lYWq5ud/7VJEkthi6bgMshHyxBR8P UgxtaSa660M6CvInPEWhFrIqedqG//9Fp1UjRLWwanLbUxm5miWZsoEr5UdnD78s Z/vFRfjv0DPBaMw+rRCvq4jU7MpDu5Mhg4g/3II/bLLqecKbrjZgfG9muFX4sVSv Nd8IkVlzoClcyBxdQlxV13txqbJRo8N287U= -----END CERTIFICATE-----Generated at Sat Apr 5 21:49:04 2025 by rpki-client