$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/038ff4e3-a7b3-305f-9c4a-6acdc0c5709b.roa File: 038ff4e3-a7b3-305f-9c4a-6acdc0c5709b.roa (raw, json) Hash identifier: Fu4vBXmZaYk+ELmlfzDMZoaunc/5v3SsIj6k0/ETWY0= Subject key identifier: B6:60:A5:71:13:B1:5F:70:E4:F9:29:A8:D9:E4:47:4F:EA:61:33:DC Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Certificate serial: 010D0C9F432858491511526D32ABF5A46091A7C0 Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/038ff4e3-a7b3-305f-9c4a-6acdc0c5709b.roa Signing time: Wed 05 Mar 2025 02:00:40 +0000 ROA not before: Wed 05 Mar 2025 02:00:40 +0000 ROA not after: Tue 03 Jun 2025 01:00:40 +0000 asID: 55195 IP address blocks: 2620:10a:80e1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:15:11:52:6d:32:ab:f5:a4:60:91:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Validity Not Before: Mar 5 02:00:40 2025 GMT Not After : Jun 3 01:00:40 2025 GMT Subject: CN=6b3fb0ea-db24-4dc8-babd-28f4d88c7698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8f:3d:94:1e:c1:2d:a8:00:c2:d3:23:07:9a: d1:b6:dd:5f:fd:cd:e9:d4:bd:a5:1e:54:66:27:28: 05:73:e2:a4:4e:f9:3e:7a:23:47:f7:28:ab:2e:32: 12:32:6c:4b:d5:5d:85:81:92:5d:58:8c:b9:bf:e5: 8c:3c:e5:be:aa:b1:9e:db:3d:e3:77:3e:2b:6c:01: 33:0e:85:10:00:a2:0b:50:d6:a2:cc:89:7f:8f:52: 56:34:57:05:80:8c:97:22:35:38:02:8c:0e:4d:cd: f4:38:76:23:5d:b8:3c:3f:ff:2d:3c:62:e8:bd:2e: cd:d1:62:fd:ae:07:78:e3:fa:7b:92:a7:55:7d:21: 40:40:ce:99:a1:0f:23:ca:6b:c1:6c:e5:44:3c:8c: 2d:f5:c2:12:23:de:05:c9:43:77:af:e8:ac:68:2f: 0e:23:79:81:0c:24:dd:79:7e:ed:a7:d1:03:f1:34: 5e:ed:fd:a6:f3:63:fa:58:2d:c5:6a:49:cd:55:ed: 03:63:74:73:48:2a:e5:5b:85:8e:ae:e7:3e:3e:dc: a5:94:37:c0:7f:42:95:7d:58:d2:c2:03:2e:4c:26: 51:f7:eb:a2:df:73:76:05:48:08:73:fb:22:3d:87: 06:03:c8:5f:71:ac:e2:c2:42:9d:c0:1c:ba:ac:c4: 0c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:60:A5:71:13:B1:5F:70:E4:F9:29:A8:D9:E4:47:4F:EA:61:33:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/038ff4e3-a7b3-305f-9c4a-6acdc0c5709b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl X509v3 Authority Key Identifier: keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer sbgp-ipAddrBlock: critical IPv6: 2620:10a:80e1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:d2:9a:aa:83:fa:65:95:05:5a:0f:d1:c0:6a:ea:6d:e1:c7: f6:b9:dc:8b:19:14:f8:0a:27:ee:8f:8b:bc:b9:c7:a1:3a:c0: 7c:9b:5d:e2:d8:e0:5b:0e:53:93:aa:c2:91:4b:40:3b:a1:6a: 42:5e:15:6c:81:d4:69:47:33:07:87:f3:95:74:83:4e:93:51: b6:97:b3:18:11:ab:a9:a3:d3:83:6f:bd:18:b6:2d:4f:b3:f5: 95:b5:f2:42:80:e1:0b:fe:d0:38:d7:23:08:4f:fb:a0:a8:6a: c4:07:ab:6c:0c:f7:0f:30:14:60:a2:ab:4c:1a:37:9e:9c:cb: 8a:8e:8d:0c:33:6a:0a:ce:08:af:1b:f2:31:cd:45:dc:c2:4d: d2:82:54:51:7e:d3:e6:17:80:12:d3:52:b8:27:24:bc:1e:19: f1:f9:32:47:ca:6f:fe:e2:a4:91:e5:74:ec:59:90:57:ba:d6: b3:ab:f7:d8:2c:5c:e7:d6:87:07:90:e0:ee:b0:37:78:49:df: 40:f3:09:06:78:4e:02:f8:39:f8:bb:51:90:6a:ca:f9:24:1f: 20:16:a4:55:65:75:99:7d:58:1d:d3:72:0f:ff:23:df:1d:9a: e1:11:d0:ad:90:31:91:5f:f6:7b:38:e5:04:c7:f4:70:9c:81: 2d:26:ba:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkVEVJtMqv1pGCRp8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx OGU4MB4XDTI1MDMwNTAyMDA0MFoXDTI1MDYwMzAxMDA0MFowLzEtMCsGA1UEAxMk NmIzZmIwZWEtZGIyNC00ZGM4LWJhYmQtMjhmNGQ4OGM3Njk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI89lB7BLagAwtMjB5rRtt1f/c3p1L2lHlRm JygFc+KkTvk+eiNH9yirLjISMmxL1V2FgZJdWIy5v+WMPOW+qrGe2z3jdz4rbAEz DoUQAKILUNaizIl/j1JWNFcFgIyXIjU4AowOTc30OHYjXbg8P/8tPGLovS7N0WL9 rgd44/p7kqdVfSFAQM6ZoQ8jymvBbOVEPIwt9cISI94FyUN3r+isaC8OI3mBDCTd eX7tp9ED8TRe7f2m82P6WC3FaknNVe0DY3RzSCrlW4WOruc+PtyllDfAf0KVfVjS wgMuTCZR9+ui33N2BUgIc/siPYcGA8hfcaziwkKdwBy6rMQMwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLZgpXETsV9w5PkpqNnkR0/qYTPcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2 MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvMDM4ZmY0ZTMtYTdiMy0z MDVmLTljNGEtNmFjZGMwYzU3MDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2 MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5 NzZhYjE4ZTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABCoDh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIXSmqqD+mWVBVoP0cBq6m3hx/a53IsZFPgKJ+6Pi7y5x6E6wHyb XeLY4FsOU5OqwpFLQDuhakJeFWyB1GlHMweH85V0g06TUbaXsxgRq6mj04NvvRi2 LU+z9ZW18kKA4Qv+0DjXIwhP+6CoasQHq2wM9w8wFGCiq0waN56cy4qOjQwzagrO CK8b8jHNRdzCTdKCVFF+0+YXgBLTUrgnJLweGfH5MkfKb/7ipJHldOxZkFe61rOr 99gsXOfWhweQ4O6wN3hJ30DzCQZ4TgL4Ofi7UZBqyvkkHyAWpFVldZl9WB3Tcg// I98dmuER0K2QMZFf9ns45QTH9HCcgS0muvA= -----END CERTIFICATE-----Generated at Fri Mar 14 11:12:31 2025 by rpki-client