$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/0663eb20-8a0c-34f1-9232-13a51a419382.roa File: 0663eb20-8a0c-34f1-9232-13a51a419382.roa (raw, json) Hash identifier: nEcS49QsXsKXL74VHMPKX0ro5MmKxLb4otZVxzK+2E4= Subject key identifier: C2:F2:0F:91:B1:13:D4:EF:8B:4D:F8:46:47:0D:BC:98:52:91:86:D1 Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Certificate serial: 010D0C9F43285848A136102D3ABC170CBA82CC60 Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/0663eb20-8a0c-34f1-9232-13a51a419382.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 394354 IP address blocks: 2620:10a:80a9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:10:2d:3a:bc:17:0c:ba:82:cc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=846069ec-b5fb-4644-bde6-106969b0226d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b3:cc:20:c0:9d:93:36:c1:48:3a:d2:92:dc: 6d:27:cc:7a:85:fc:49:ee:c1:f1:a3:9a:38:ab:a6: 4d:4c:c5:28:34:a2:e4:23:c7:14:d6:a6:55:1d:4d: 77:a0:4d:bb:b7:69:cf:76:7b:9d:b5:26:26:7e:77: a4:c5:e1:b3:8b:6e:ed:1f:43:8a:e4:bc:59:cf:2e: b8:45:d2:ed:65:90:1a:5b:fb:41:46:37:d2:20:fd: 00:da:3c:15:44:49:8d:87:1f:fd:a6:ce:46:ab:2b: 67:fd:0a:25:bd:65:b1:93:f1:d9:b9:6a:db:86:91: 04:92:58:93:80:0e:af:04:5e:09:80:3f:03:bd:a2: 56:07:ef:96:dc:57:10:2a:1c:c1:e6:52:5f:2c:6f: 75:23:c3:33:51:27:9b:3f:42:f4:48:c9:2b:fd:70: 49:75:13:00:e7:fb:0f:b5:c8:b3:88:62:21:65:71: 21:1d:13:6b:55:0a:26:59:b2:b9:80:25:cc:f4:de: 46:e3:e8:d2:0a:f4:cc:5e:89:3f:72:3e:c5:ed:fd: e2:d5:57:e5:2e:77:c0:65:07:47:66:ef:90:b9:6f: 7b:32:62:bd:c4:d2:33:ef:95:38:f2:70:bb:fe:e2: a4:b1:4f:5e:51:f0:06:89:1d:dd:e0:01:2d:b5:3f: ae:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F2:0F:91:B1:13:D4:EF:8B:4D:F8:46:47:0D:BC:98:52:91:86:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/0663eb20-8a0c-34f1-9232-13a51a419382.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl X509v3 Authority Key Identifier: keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer sbgp-ipAddrBlock: critical IPv6: 2620:10a:80a9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:23:9b:0f:f3:7d:c0:f2:a4:3b:d6:22:7f:e2:e4:9e:2f:03: f8:4d:b5:12:46:a3:61:17:41:c6:62:c5:4b:ed:72:9e:21:27: 8c:d6:8b:24:95:de:d7:b5:a2:1c:55:69:d6:2d:91:c7:f2:57: 2e:c5:a4:02:64:1c:8f:9a:37:d7:a5:b4:d6:d7:8c:70:28:27: bb:17:70:32:c3:db:e2:df:87:a3:09:09:a2:96:cd:21:db:db: 92:92:a0:19:54:1e:90:9e:1c:2d:21:52:85:07:43:58:19:c8: ed:54:0e:24:8c:2f:35:13:8f:65:d2:b3:5a:9f:8d:5a:c4:d3: 6f:79:e3:4d:b0:50:05:a2:18:67:78:1a:3d:df:2b:6f:c5:8d: 7a:2c:5b:74:94:42:07:54:fd:a7:68:8b:b6:77:c4:0e:14:7f: 83:6a:ab:48:a6:28:ff:9e:c3:da:0f:2e:53:c1:60:ce:59:55: 92:9e:41:5f:a9:41:3b:41:43:31:79:42:22:47:76:1e:95:30: a7:0b:5d:1c:1a:bc:fe:05:41:c8:bc:5b:3b:49:54:42:11:11: 9c:fe:6a:86:d5:34:ab:87:a6:8b:bd:51:34:ee:2a:4d:e2:b2: e7:8e:49:ba:88:97:2e:c2:f2:54:10:1c:dc:34:46:3a:c8:5f: 2e:c9:74:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNhAtOrwXDLqCzGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx OGU4MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk ODQ2MDY5ZWMtYjVmYi00NjQ0LWJkZTYtMTA2OTY5YjAyMjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLPMIMCdkzbBSDrSktxtJ8x6hfxJ7sHxo5o4 q6ZNTMUoNKLkI8cU1qZVHU13oE27t2nPdnudtSYmfnekxeGzi27tH0OK5LxZzy64 RdLtZZAaW/tBRjfSIP0A2jwVREmNhx/9ps5Gqytn/QolvWWxk/HZuWrbhpEEkliT gA6vBF4JgD8DvaJWB++W3FcQKhzB5lJfLG91I8MzUSebP0L0SMkr/XBJdRMA5/sP tciziGIhZXEhHRNrVQomWbK5gCXM9N5G4+jSCvTMXok/cj7F7f3i1VflLnfAZQdH Zu+QuW97MmK9xNIz75U48nC7/uKksU9eUfAGiR3d4AEttT+uXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMLyD5GxE9Tvi034RkcNvJhSkYbRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2 MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvMDY2M2ViMjAtOGEwYy0z NGYxLTkyMzItMTNhNTFhNDE5MzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2 MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5 NzZhYjE4ZTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABCoCp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALUjmw/zfcDypDvWIn/i5J4vA/hNtRJGo2EXQcZixUvtcp4hJ4zW iySV3te1ohxVadYtkcfyVy7FpAJkHI+aN9eltNbXjHAoJ7sXcDLD2+Lfh6MJCaKW zSHb25KSoBlUHpCeHC0hUoUHQ1gZyO1UDiSMLzUTj2XSs1qfjVrE0295402wUAWi GGd4Gj3fK2/FjXosW3SUQgdU/adoi7Z3xA4Uf4Nqq0imKP+ew9oPLlPBYM5ZVZKe QV+pQTtBQzF5QiJHdh6VMKcLXRwavP4FQci8WztJVEIREZz+aobVNKuHpou9UTTu Kk3isueOSbqIly7C8lQQHNw0RjrIXy7JdJc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:12 2025 by rpki-client