$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/870b3555-4770-357a-83a4-150807097e93.roa File: 870b3555-4770-357a-83a4-150807097e93.roa (raw, json) Hash identifier: 8kuHzO1gEAFG+NHpY825uYgLF5IatwSL0RKvMUOpOug= Subject key identifier: B6:30:84:71:11:5E:02:EF:D0:B4:BB:D2:14:3B:33:4B:A2:29:38:3A Certificate issuer: /CN=3bbdd71c-c30e-44ac-90f8-ba443134d8dd Certificate serial: 010D0C9F43285848EF61609DAFEDEA1DA4E1FB20 Authority key identifier: B7:F4:1B:FB:03:A3:D7:21:03:F8:AE:08:6D:5E:76:BC:E6:BB:EC:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/870b3555-4770-357a-83a4-150807097e93.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 6491 IP address blocks: 2620:67:a000::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:60:9d:af:ed:ea:1d:a4:e1:fb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bbdd71c-c30e-44ac-90f8-ba443134d8dd Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=bd6bce7e-20a8-4b82-ae5a-209e86a9a50a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8e:48:9a:2c:55:53:d6:ac:67:5b:9a:9d:55: 8d:31:12:25:47:ca:47:42:92:4b:bd:01:80:2b:6c: 64:f4:57:94:08:8f:b4:03:04:38:8d:1d:64:e8:fb: 47:54:c1:4c:5c:c3:b4:60:b5:b2:be:38:8f:3f:1e: f6:7d:7a:56:f7:aa:e4:fa:bd:5b:cc:96:8a:ac:73: ae:c7:1d:52:0c:c9:15:37:f5:ba:ec:aa:83:ff:cd: 7a:da:76:1d:35:93:0c:b9:13:59:bb:6f:d2:ce:e8: ec:2b:0a:41:7b:19:88:b2:a0:c9:8a:8b:13:ce:4c: 24:d7:9f:9e:cd:ac:39:41:e0:71:03:8d:65:17:6e: f6:e4:34:77:44:26:72:7f:e1:39:1b:b5:47:1e:61: 78:55:3a:2e:47:4e:d7:c0:ca:11:68:0c:68:fb:96: 5f:a4:69:b5:81:18:dc:ac:4e:fd:76:d8:df:72:63: 8b:fc:a4:09:d9:a1:23:d6:70:67:e3:d4:80:1b:01: b4:e2:c7:df:e7:0c:b2:14:18:5a:13:3c:02:93:ce: 36:c9:4e:db:5d:4b:68:81:a5:08:f3:cb:11:f4:0c: 4b:77:51:65:d3:18:5d:07:0c:c9:d9:a0:2e:9f:7b: 21:09:f5:68:b0:ef:3b:56:3b:84:ac:02:2b:b1:d5: 41:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:30:84:71:11:5E:02:EF:D0:B4:BB:D2:14:3B:33:4B:A2:29:38:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/870b3555-4770-357a-83a4-150807097e93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.crl X509v3 Authority Key Identifier: keyid:B7:F4:1B:FB:03:A3:D7:21:03:F8:AE:08:6D:5E:76:BC:E6:BB:EC:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3bbdd71c-c30e-44ac-90f8-ba443134d8dd.cer sbgp-ipAddrBlock: critical IPv6: 2620:67:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:c8:84:ab:95:d1:8c:0f:5d:ec:9f:10:ab:05:9c:42:ce:ee: 8e:1b:b4:4c:61:d3:20:ae:6e:7f:72:86:07:f4:03:7d:cf:05: 85:b1:dc:4d:c9:47:a4:cf:32:95:ba:c1:f7:a1:3b:2f:42:80: 8a:70:3b:06:e3:55:7e:5e:cd:79:cd:a9:7d:22:c5:6f:0c:b9: 51:f1:4a:95:c5:49:2e:6e:ff:13:08:d1:1d:0c:94:d8:f7:06: 69:2b:87:82:91:81:82:75:08:d9:84:84:73:e7:8c:5e:b1:18: f8:1f:91:38:85:2f:ea:77:61:10:70:f4:d3:29:54:76:a8:ae: 01:1f:e8:d5:a9:12:54:41:cc:c0:b4:2f:71:ac:77:a2:58:78: 03:cb:b1:7b:87:8c:72:c9:77:86:d1:6c:e6:74:69:6a:d3:0a: a0:5d:57:d2:18:99:88:37:32:83:87:f1:e8:0b:32:db:27:74: a4:20:2f:9b:b7:bb:04:b8:40:61:4b:f4:50:fd:d7:db:eb:e8: 3d:37:dc:30:09:75:19:d7:89:42:f7:a5:6b:2e:61:15:ee:43: cc:da:60:9e:89:4c:e5:50:7a:18:ca:d6:91:95:9c:7d:fb:a3: cb:e1:34:2f:3b:22:20:70:75:52:f8:d8:d9:b6:e3:bc:b2:fa: 5e:a2:7b:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjvYWCdr+3qHaTh+yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiZGQ3MWMtYzMwZS00NGFjLTkwZjgtYmE0NDMxMzRk OGRkMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk YmQ2YmNlN2UtMjBhOC00YjgyLWFlNWEtMjA5ZTg2YTlhNTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY5ImixVU9asZ1uanVWNMRIlR8pHQpJLvQGA K2xk9FeUCI+0AwQ4jR1k6PtHVMFMXMO0YLWyvjiPPx72fXpW96rk+r1bzJaKrHOu xx1SDMkVN/W67KqD/8162nYdNZMMuRNZu2/SzujsKwpBexmIsqDJiosTzkwk15+e zaw5QeBxA41lF2725DR3RCZyf+E5G7VHHmF4VTouR07XwMoRaAxo+5ZfpGm1gRjc rE79dtjfcmOL/KQJ2aEj1nBn49SAGwG04sff5wyyFBhaEzwCk842yU7bXUtogaUI 88sR9AxLd1Fl0xhdBwzJ2aAun3shCfVosO87VjuErAIrsdVBCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLYwhHERXgLv0LS70hQ7M0uiKTg6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zYmJk ZDcxYy1jMzBlLTQ0YWMtOTBmOC1iYTQ0MzEzNGQ4ZGQvODcwYjM1NTUtNDc3MC0z NTdhLTgzYTQtMTUwODA3MDk3ZTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2JiZGQ3MWMtYzMwZS00NGFjLTkw ZjgtYmE0NDMxMzRkOGRkLzNiYmRkNzFjLWMzMGUtNDRhYy05MGY4LWJhNDQzMTM0 ZDhkZC5jcmwwHwYDVR0jBBgwFoAUt/Qb+wOj1yED+K4IbV52vOa77HMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zYmJkZDcxYy1jMzBlLTQ0YWMtOTBmOC1iYTQ0 MzEzNGQ4ZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAZ6AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ/IhKuV0YwPXeyfEKsFnELO7o4btExh0yCubn9yhgf0A33PBYWx 3E3JR6TPMpW6wfehOy9CgIpwOwbjVX5ezXnNqX0ixW8MuVHxSpXFSS5u/xMI0R0M lNj3Bmkrh4KRgYJ1CNmEhHPnjF6xGPgfkTiFL+p3YRBw9NMpVHaorgEf6NWpElRB zMC0L3Gsd6JYeAPLsXuHjHLJd4bRbOZ0aWrTCqBdV9IYmYg3MoOH8egLMtsndKQg L5u3uwS4QGFL9FD919vr6D033DAJdRnXiUL3pWsuYRXuQ8zaYJ6JTOVQehjK1pGV nH37o8vhNC87IiBwdVL42Nm247yy+l6ie4s= -----END CERTIFICATE-----Generated at Sun Apr 6 05:14:02 2025 by rpki-client