$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95c191b1-117b-432f-9f4c-3d2e1fcce27b/beddf382-2311-342e-b8a8-3f1816a6040b.roa File: beddf382-2311-342e-b8a8-3f1816a6040b.roa (raw, json) Hash identifier: IDg9aKx6kJgiki0HFMP6bjIAGSleVnJps6ewIYuAeGo= Subject key identifier: F4:23:6E:FD:C9:FB:25:06:5F:CE:03:29:E0:7D:0E:52:D7:F1:05:AC Certificate issuer: /CN=95c191b1-117b-432f-9f4c-3d2e1fcce27b Certificate serial: 010D0C9F43285848B80E3E4EC05C8176BB046840 Authority key identifier: 66:35:5F:1F:DC:4D:D3:38:F9:35:F0:BE:E5:BE:BE:18:47:CF:48:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95c191b1-117b-432f-9f4c-3d2e1fcce27b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95c191b1-117b-432f-9f4c-3d2e1fcce27b/beddf382-2311-342e-b8a8-3f1816a6040b.roa Signing time: Thu 30 Jan 2025 18:24:19 +0000 ROA not before: Thu 30 Jan 2025 18:24:19 +0000 ROA not after: Wed 30 Apr 2025 17:24:19 +0000 asID: 18799 IP address blocks: 2620:d2:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95c191b1-117b-432f-9f4c-3d2e1fcce27b/95c191b1-117b-432f-9f4c-3d2e1fcce27b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95c191b1-117b-432f-9f4c-3d2e1fcce27b/95c191b1-117b-432f-9f4c-3d2e1fcce27b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95c191b1-117b-432f-9f4c-3d2e1fcce27b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:0e:3e:4e:c0:5c:81:76:bb:04:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95c191b1-117b-432f-9f4c-3d2e1fcce27b Validity Not Before: Jan 30 18:24:19 2025 GMT Not After : Apr 30 17:24:19 2025 GMT Subject: CN=e4f017f5-1921-4520-a947-257085a42f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c7:43:02:78:3d:6a:c3:8b:e3:e6:74:88:4b: 49:7f:6f:6c:18:e1:ee:bf:ba:85:ba:79:a6:2a:d8: e8:30:d3:a1:67:3b:08:7c:80:d3:a6:4f:b7:6c:48: 9e:e9:5c:e0:34:99:cc:f1:b2:59:50:98:6f:6b:ce: 7d:eb:08:36:a1:be:e1:4e:3f:e2:e2:c2:ce:02:9f: 36:21:3b:ca:83:90:06:81:2e:93:be:51:10:33:bc: e4:e3:51:2d:bf:b6:4b:aa:5b:36:e6:e6:71:22:f9: c5:74:58:96:5b:89:44:c2:69:1b:08:ca:18:11:ed: 98:01:c7:8d:33:b4:b8:e2:80:fb:d2:e6:21:25:ef: e5:23:ac:ac:7e:08:92:36:c9:51:92:c3:32:5c:f7: dd:fe:6c:56:f5:4f:05:46:68:dd:16:38:16:ec:9f: a6:9a:04:4b:f0:7e:b7:ff:22:98:48:66:f8:07:dd: 97:f4:ff:e4:d4:89:86:42:b2:91:9a:36:ed:d6:d6: 44:1a:c6:85:b1:39:79:cd:b7:1b:48:e3:20:32:53: 8f:7c:f2:f3:af:7b:be:2b:17:5f:d0:7d:94:3a:2b: e2:ba:8a:20:b4:a8:a3:17:7f:89:27:9b:ac:45:c1: e5:cc:5e:9f:35:4a:b3:ff:4c:46:44:ab:98:d4:56: b7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:23:6E:FD:C9:FB:25:06:5F:CE:03:29:E0:7D:0E:52:D7:F1:05:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95c191b1-117b-432f-9f4c-3d2e1fcce27b/beddf382-2311-342e-b8a8-3f1816a6040b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95c191b1-117b-432f-9f4c-3d2e1fcce27b/95c191b1-117b-432f-9f4c-3d2e1fcce27b.crl X509v3 Authority Key Identifier: keyid:66:35:5F:1F:DC:4D:D3:38:F9:35:F0:BE:E5:BE:BE:18:47:CF:48:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95c191b1-117b-432f-9f4c-3d2e1fcce27b.cer sbgp-ipAddrBlock: critical IPv6: 2620:d2:6000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:f4:7f:8d:69:4b:d7:45:4e:1f:5b:42:d9:dd:ef:0a:8a:a6: de:5a:10:1d:e3:66:36:fc:fd:ad:a7:bf:b4:fe:8e:e4:eb:51: ed:b8:07:6f:72:cf:57:03:8f:50:ed:d6:0f:27:c3:cb:d1:75: 9a:c0:20:e8:03:97:ae:f0:76:58:7b:e5:2a:83:9b:0f:b0:4e: 51:83:47:93:1b:06:a0:cc:4c:f3:5e:7d:ee:71:6c:8a:28:a1: 09:35:7c:19:e1:aa:d7:0b:0d:3a:e2:d4:4d:ec:b7:13:d2:6c: ee:cc:9f:6e:9e:5e:7b:5f:16:dc:ae:37:fc:97:11:fb:86:42: 07:6f:3a:5a:a0:f1:23:7f:e3:7f:48:ea:c3:5b:ec:a9:0b:61: 32:01:cb:5d:22:9c:d2:f4:e8:d0:79:a2:6c:ab:88:c5:59:2d: 6b:72:0c:b7:de:4a:38:3f:97:67:9c:21:85:4f:15:93:10:35: d2:7f:09:22:b6:96:96:48:19:64:15:01:d9:49:e8:55:6a:a1: ff:19:5f:0d:31:4a:38:a7:88:3c:99:36:a1:60:7e:5c:f8:df: 56:34:41:74:88:35:e3:77:00:85:2e:f1:cf:71:95:34:b5:5f: 01:1e:25:60:82:9b:89:20:20:9c:fa:c4:57:a0:c8:c3:ba:a1: 7d:48:06:0c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEi4Dj5OwFyBdrsEaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVjMTkxYjEtMTE3Yi00MzJmLTlmNGMtM2QyZTFmY2Nl MjdiMB4XDTI1MDEzMDE4MjQxOVoXDTI1MDQzMDE3MjQxOVowLzEtMCsGA1UEAxMk ZTRmMDE3ZjUtMTkyMS00NTIwLWE5NDctMjU3MDg1YTQyZjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMdDAng9asOL4+Z0iEtJf29sGOHuv7qFunmm KtjoMNOhZzsIfIDTpk+3bEie6VzgNJnM8bJZUJhva8596wg2ob7hTj/i4sLOAp82 ITvKg5AGgS6TvlEQM7zk41Etv7ZLqls25uZxIvnFdFiWW4lEwmkbCMoYEe2YAceN M7S44oD70uYhJe/lI6ysfgiSNslRksMyXPfd/mxW9U8FRmjdFjgW7J+mmgRL8H63 /yKYSGb4B92X9P/k1ImGQrKRmjbt1tZEGsaFsTl5zbcbSOMgMlOPfPLzr3u+Kxdf 0H2UOiviuoogtKijF3+JJ5usRcHlzF6fNUqz/0xGRKuY1Fa3dQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPQjbv3J+yUGX84DKeB9DlLX8QWsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85NWMx OTFiMS0xMTdiLTQzMmYtOWY0Yy0zZDJlMWZjY2UyN2IvYmVkZGYzODItMjMxMS0z NDJlLWI4YTgtM2YxODE2YTYwNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTVjMTkxYjEtMTE3Yi00MzJmLTlm NGMtM2QyZTFmY2NlMjdiLzk1YzE5MWIxLTExN2ItNDMyZi05ZjRjLTNkMmUxZmNj ZTI3Yi5jcmwwHwYDVR0jBBgwFoAUZjVfH9xN0zj5NfC+5b6+GEfPSBkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85NWMxOTFiMS0xMTdiLTQzMmYtOWY0Yy0zZDJl MWZjY2UyN2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA0mAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADj0f41pS9dFTh9bQtnd7wqKpt5aEB3jZjb8/a2nv7T+juTrUe24 B29yz1cDj1Dt1g8nw8vRdZrAIOgDl67wdlh75SqDmw+wTlGDR5MbBqDMTPNefe5x bIoooQk1fBnhqtcLDTri1E3stxPSbO7Mn26eXntfFtyuN/yXEfuGQgdvOlqg8SN/ 439I6sNb7KkLYTIBy10inNL06NB5omyriMVZLWtyDLfeSjg/l2ecIYVPFZMQNdJ/ CSK2lpZIGWQVAdlJ6FVqof8ZXw0xSjiniDyZNqFgflz431Y0QXSINeN3AIUu8c9x lTS1XwEeJWCCm4kgIJz6xFegyMO6oX1IBgw= -----END CERTIFICATE-----Generated at Mon Apr 7 19:55:34 2025 by rpki-client