$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/3e585714-0ddd-318e-8df9-c94d81bf79ac.roa File: 3e585714-0ddd-318e-8df9-c94d81bf79ac.roa (raw, json) Hash identifier: ffv/pRmQsVYRS10dzawIhpDSAQ4GW6hFc+hVRGlCERM= Subject key identifier: 7E:EF:3A:F3:D5:E3:F4:67:45:C8:21:64:14:20:65:23:80:E6:28:5B Certificate issuer: /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Certificate serial: 010D0C9F43285848696059FA54690D094F2B8A80 Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/3e585714-0ddd-318e-8df9-c94d81bf79ac.roa Signing time: Thu 02 Jan 2025 14:00:52 +0000 ROA not before: Thu 02 Jan 2025 14:00:52 +0000 ROA not after: Wed 02 Apr 2025 13:00:52 +0000 asID: 63399 IP address blocks: 2620:e1:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:69:60:59:fa:54:69:0d:09:4f:2b:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e Validity Not Before: Jan 2 14:00:52 2025 GMT Not After : Apr 2 13:00:52 2025 GMT Subject: CN=2e0745a1-9c62-41c1-a703-846f67573fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:cd:82:6c:c4:a4:06:97:b4:94:57:e1:4c:69: ce:59:1e:0d:9f:75:7a:a0:32:0d:52:52:e9:f2:44: 88:08:ef:6d:53:4a:0a:4e:a8:4c:98:58:81:ae:c6: d1:73:6b:c9:8e:0b:4b:6e:ea:e3:95:b8:8a:5b:8b: dc:59:1b:10:a3:80:ad:c9:5a:40:27:a3:ea:14:37: b2:cf:4c:05:13:38:e5:88:c1:e1:1e:49:ba:ab:42: 79:ed:92:97:91:7f:10:6a:16:e7:14:0e:4a:db:fc: 82:f9:26:da:a0:23:e5:0d:2c:d6:69:52:d0:d2:c9: 5a:f1:3a:08:18:d7:0e:4f:ea:31:dd:5c:60:11:4c: ef:bb:a8:e5:69:f0:8a:d1:1b:c2:47:33:b7:2e:6e: 29:63:f9:d6:83:45:97:4d:f0:f5:1f:6c:54:55:c5: b8:d1:b1:31:c6:64:43:d8:d6:53:12:01:0e:19:f4: 39:00:0a:1d:9d:8c:7d:84:f8:64:2d:83:2b:78:76: ee:e3:32:b2:58:f2:a5:fd:7b:c3:d9:c3:e1:1e:5a: 42:63:91:1a:83:8a:a9:35:13:8d:0c:93:68:73:00: bf:98:22:fb:95:2e:c7:97:48:ec:6e:61:b2:9e:b4: 3b:13:14:33:4a:e1:ea:11:bb:3f:3f:93:3c:4e:ac: 84:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:EF:3A:F3:D5:E3:F4:67:45:C8:21:64:14:20:65:23:80:E6:28:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/3e585714-0ddd-318e-8df9-c94d81bf79ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl X509v3 Authority Key Identifier: keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer sbgp-ipAddrBlock: critical IPv6: 2620:e1:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:ea:f4:be:2b:9a:51:68:ba:a2:d8:72:a8:60:ee:fc:d2:96: e7:81:ac:9e:f5:89:6b:48:7f:6c:c2:4e:45:45:80:38:ca:7f: 11:49:4f:1e:82:91:54:1f:81:6a:a4:1e:58:5d:99:a7:39:c9: c3:be:b6:37:ab:8f:de:1d:71:de:56:ba:2c:75:b5:64:9f:6b: 1f:a0:d4:e7:67:7b:54:46:27:e4:0d:bd:ec:67:7a:8e:a0:a4: 7c:72:35:ea:e1:00:d4:6a:99:8a:63:c6:9d:ae:79:f0:35:d6: 9a:61:32:bf:0c:eb:b8:ed:29:81:7c:d9:b2:74:57:35:b0:54: 4e:f9:ea:fc:b0:08:4b:af:d5:d3:7c:e1:96:88:0b:95:9d:91: a4:57:aa:fc:01:07:76:1f:2f:c3:65:c1:db:55:89:0e:e8:0f: ee:0e:67:ac:fe:eb:a3:af:a6:97:33:f9:a3:9a:84:f6:0e:a3: 7b:73:35:6e:f5:8d:79:ac:51:f0:22:ac:6f:ac:29:95:aa:06: 35:c3:ea:b7:9f:44:07:e9:c8:c8:cb:2f:c2:f2:8f:4a:52:13: 91:52:c5:51:0b:de:ce:7e:7b:d0:b5:33:dc:42:b9:c3:ed:39: 05:84:80:89:9e:d7:82:94:86:01:76:b1:fe:5d:bb:9e:6b:bc: 2c:d3:78:3a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhpYFn6VGkNCU8rioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhOWRiMjItOGQ0OS00OTM4LTljNmYtZTNmZDQyOGMx NThlMB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk MmUwNzQ1YTEtOWM2Mi00MWMxLWE3MDMtODQ2ZjY3NTczZmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4M2CbMSkBpe0lFfhTGnOWR4Nn3V6oDINUlLp 8kSICO9tU0oKTqhMmFiBrsbRc2vJjgtLburjlbiKW4vcWRsQo4CtyVpAJ6PqFDey z0wFEzjliMHhHkm6q0J57ZKXkX8QahbnFA5K2/yC+SbaoCPlDSzWaVLQ0sla8ToI GNcOT+ox3VxgEUzvu6jlafCK0RvCRzO3Lm4pY/nWg0WXTfD1H2xUVcW40bExxmRD 2NZTEgEOGfQ5AAodnYx9hPhkLYMreHbu4zKyWPKl/XvD2cPhHlpCY5Eag4qpNRON DJNocwC/mCL7lS7Hl0jsbmGynrQ7ExQzSuHqEbs/P5M8TqyEvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH7vOvPV4/RnRcghZBQgZSOA5ihbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5 ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2ZkNDI4YzE1OGUvM2U1ODU3MTQtMGRkZC0z MThlLThkZjktYzk0ZDgxYmY3OWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzRhOWRiMjItOGQ0OS00OTM4LTlj NmYtZTNmZDQyOGMxNThlLzc0YTlkYjIyLThkNDktNDkzOC05YzZmLWUzZmQ0Mjhj MTU4ZS5jcmwwHwYDVR0jBBgwFoAUmPupDsV3auhpmoOFV1QuM6AcJkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2Zk NDI4YzE1OGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA4UAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFfq9L4rmlFouqLYcqhg7vzSlueBrJ71iWtIf2zCTkVFgDjKfxFJ Tx6CkVQfgWqkHlhdmac5ycO+tjerj94dcd5Wuix1tWSfax+g1Odne1RGJ+QNvexn eo6gpHxyNerhANRqmYpjxp2uefA11pphMr8M67jtKYF82bJ0VzWwVE756vywCEuv 1dN84ZaIC5WdkaRXqvwBB3YfL8NlwdtViQ7oD+4OZ6z+66Ovppcz+aOahPYOo3tz NW71jXmsUfAirG+sKZWqBjXD6refRAfpyMjLL8Lyj0pSE5FSxVEL3s5+e9C1M9xC ucPtOQWEgIme14KUhgF2sf5du55rvCzTeDo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:25 2025 by rpki-client