$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/e2967edf-17a9-32bb-8570-be2bca3444ee.roa File: e2967edf-17a9-32bb-8570-be2bca3444ee.roa (raw, json) Hash identifier: duufzTp7Odn4V+iB+JcR4ShVPsGc+DpxxDU8lJgqRIw= Subject key identifier: 8A:73:C5:71:F0:10:C3:BE:C1:6D:DF:C6:13:6C:42:90:6F:D3:7D:9F Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3 Certificate serial: 010D0C9F43285848705AFE1D74A6055445A80400 Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/e2967edf-17a9-32bb-8570-be2bca3444ee.roa Signing time: Sun 05 Jan 2025 02:00:39 +0000 ROA not before: Sun 05 Jan 2025 02:00:39 +0000 ROA not after: Sat 05 Apr 2025 01:00:39 +0000 asID: 394353 IP address blocks: 2001:500:205:8000::/49 maxlen: 49 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:70:5a:fe:1d:74:a6:05:54:45:a8:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3 Validity Not Before: Jan 5 02:00:39 2025 GMT Not After : Apr 5 01:00:39 2025 GMT Subject: CN=a65a63ee-a6f7-415c-bfcb-fa699f9706cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:01:72:6f:66:62:b3:4c:8d:bc:64:47:a9:79: 18:0e:1c:e0:28:7d:c5:b9:57:cd:68:b4:e9:aa:ad: 96:91:53:13:74:4b:fd:46:98:33:12:e1:d0:d6:db: 28:09:6b:fd:ab:e2:c0:57:a5:74:32:62:4a:3b:f0: 36:0b:5e:37:d5:17:b3:a6:23:4b:41:78:c6:f6:52: 4c:76:2b:0a:78:31:ef:fb:9c:25:74:60:c8:0d:89: fc:a0:b7:aa:e2:f8:a2:82:fb:78:ba:b7:bf:2a:7c: bd:64:5a:c5:10:a5:fc:79:5d:07:09:e6:44:d5:3a: 36:0c:12:cb:1e:fb:61:7c:43:ef:eb:c0:2c:f4:c9: 03:75:ff:b7:24:24:ce:5e:9b:20:a4:d6:36:07:c4: fc:61:28:b9:13:32:3a:d6:24:4d:a3:3b:2a:47:6f: a9:bc:d3:c7:33:ab:87:d7:b6:ac:70:85:89:bf:88: af:2f:5b:94:52:3a:eb:bd:2a:aa:f8:9f:43:56:ed: 31:c5:2c:fa:a5:df:56:cc:9b:7d:d1:d0:82:38:d9: 34:8f:80:5f:93:4c:1a:ee:57:94:4b:3a:42:35:9e: 0e:25:cf:99:64:aa:54:2a:cf:67:8a:0d:be:82:11: f1:6b:43:d9:1c:03:2c:10:d3:1e:1d:70:97:b8:17: a9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:73:C5:71:F0:10:C3:BE:C1:6D:DF:C6:13:6C:42:90:6F:D3:7D:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/e2967edf-17a9-32bb-8570-be2bca3444ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl X509v3 Authority Key Identifier: keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:205:8000::/49 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:3b:05:47:8d:16:58:6f:25:2d:54:42:27:16:54:96:35:06: ae:c8:a3:51:a9:75:13:36:4d:56:d8:29:c4:51:e3:43:c6:e3: 10:e7:57:e1:e9:78:29:ed:a9:75:cb:ee:10:33:18:f8:c0:c1: 3f:09:84:58:1a:42:09:2f:22:7c:58:bc:a3:d2:5e:fb:26:f8: ff:ab:8e:bf:4e:30:06:77:e9:45:f2:6b:9b:73:e0:0a:6f:28: 38:9f:86:0a:5b:98:7b:e5:30:e5:c0:58:69:d0:10:d1:80:62: 46:8f:84:23:1d:d8:08:86:c3:af:c0:22:d3:f1:27:b1:ae:ed: db:fa:2a:7f:be:3b:e0:24:80:f6:4c:44:c1:0f:7d:a8:6b:b8: a1:fa:6c:bd:ba:33:f8:90:ce:1b:ff:20:7e:d6:f0:5e:13:a2: 61:76:7f:35:2c:2f:7d:e0:83:9b:a8:12:5c:0d:72:69:73:cf: 26:da:f8:d9:e5:98:d3:c1:8f:da:9f:a6:72:0f:e2:b3:6c:ed: 4b:56:05:5d:af:db:8f:ba:89:28:60:04:d6:85:74:cf:89:0e: aa:a9:f4:31:08:3b:0d:5d:d8:43:a1:4d:80:44:af:48:a2:c0: 73:b2:be:be:05:e9:da:45:2d:e0:b6:f4:b8:33:13:01:5b:3c: f1:34:03:b8 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEhwWv4ddKYFVEWoBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk ZWEzMB4XDTI1MDEwNTAyMDAzOVoXDTI1MDQwNTAxMDAzOVowLzEtMCsGA1UEAxMk YTY1YTYzZWUtYTZmNy00MTVjLWJmY2ItZmE2OTlmOTcwNmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wFyb2Zis0yNvGRHqXkYDhzgKH3FuVfNaLTp qq2WkVMTdEv9RpgzEuHQ1tsoCWv9q+LAV6V0MmJKO/A2C1431RezpiNLQXjG9lJM disKeDHv+5wldGDIDYn8oLeq4viigvt4ure/Kny9ZFrFEKX8eV0HCeZE1To2DBLL HvthfEPv68As9MkDdf+3JCTOXpsgpNY2B8T8YSi5EzI61iRNozsqR2+pvNPHM6uH 17ascIWJv4ivL1uUUjrrvSqq+J9DVu0xxSz6pd9WzJt90dCCONk0j4Bfk0wa7leU SzpCNZ4OJc+ZZKpUKs9nig2+ghHxa0PZHAMsENMeHXCXuBepNwIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFIpzxXHwEMO+wW3fxhNsQpBv032fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0 YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvZTI5NjdlZGYtMTdhOS0z MmJiLTg1NzAtYmUyYmNhMzQ0NGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4 ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz MDkwOGRlYTMuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgHIAEFAAIF gDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQAlOwVHjRZYbyUtVEInFlSWNQauyKNRqXUTNk1W2CnEUeNDxuMQ 51fh6Xgp7al1y+4QMxj4wME/CYRYGkIJLyJ8WLyj0l77Jvj/q46/TjAGd+lF8mub c+AKbyg4n4YKW5h75TDlwFhp0BDRgGJGj4QjHdgIhsOvwCLT8Sexru3b+ip/vjvg JID2TETBD32oa7ih+my9ujP4kM4b/yB+1vBeE6Jhdn81LC994IObqBJcDXJpc88m 2vjZ5ZjTwY/an6ZyD+KzbO1LVgVdr9uPuokoYATWhXTPiQ6qqfQxCDsNXdhDoU2A RK9IosBzsr6+BenaRS3gtvS4MxMBWzzxNAO4 -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:20 2025 by rpki-client