$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/2e25d87f-051d-3d6e-a755-c03b6fb3f1d0.roa File: 2e25d87f-051d-3d6e-a755-c03b6fb3f1d0.roa (raw, json) Hash identifier: 9Th7hJijEzKJ+AF8+OglXFOp75dvzaJslwfAUMfJp4A= Subject key identifier: 04:76:F7:30:A3:A4:43:12:DD:26:FA:1B:BF:27:37:84:EB:C9:9C:A3 Certificate issuer: /CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59 Certificate serial: 010D0C9F43285848854B401782B76221D69B8E00 Authority key identifier: 29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/2e25d87f-051d-3d6e-a755-c03b6fb3f1d0.roa Signing time: Sun 12 Jan 2025 14:00:53 +0000 ROA not before: Sun 12 Jan 2025 14:00:53 +0000 ROA not after: Sat 12 Apr 2025 13:00:53 +0000 asID: 36374 IP address blocks: 2604:4200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:85:4b:40:17:82:b7:62:21:d6:9b:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59 Validity Not Before: Jan 12 14:00:53 2025 GMT Not After : Apr 12 13:00:53 2025 GMT Subject: CN=74fbcf64-7023-484b-b100-e2d1e20c3c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b7:f5:4e:15:a7:58:e8:05:96:76:cb:2f:81: 0d:4b:c1:9c:48:9e:74:b6:a2:6a:c9:c7:01:8e:02: e5:f3:26:a6:60:81:ab:a0:e0:25:67:05:28:30:91: e5:86:94:00:c7:0c:54:fc:98:3c:d1:30:77:e8:90: 3a:d2:fc:3e:56:4d:f0:cb:3e:68:8d:a4:5d:85:c2: 2d:80:72:23:2e:17:c1:d5:67:51:f8:95:37:24:a4: 13:7b:3b:fa:f9:1e:0d:34:84:ca:2a:8d:4f:7f:37: 20:c2:a1:10:23:2a:89:52:0a:bd:62:c7:07:d3:83: ec:6f:4d:3a:95:f2:59:f4:9f:49:bb:47:9f:c4:68: 65:8d:c7:14:e6:66:27:57:79:e9:f9:15:63:4f:12: 47:de:fb:16:e4:41:dd:27:90:7f:0e:0e:2a:83:da: 93:77:17:6c:ed:73:16:5f:04:2b:16:44:8f:fd:0d: e2:a0:ef:20:63:5e:c6:7a:15:33:b0:0d:e0:af:3a: 70:31:60:54:82:b1:44:1e:84:e8:89:d9:aa:bd:c6: 86:40:fa:19:d6:70:3c:f4:34:21:15:a4:c1:89:c5: af:bc:08:ea:37:0f:4e:80:a2:71:0f:db:7a:29:82: b8:f8:53:5b:31:be:58:52:ce:68:7d:e6:2d:90:89: ac:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:76:F7:30:A3:A4:43:12:DD:26:FA:1B:BF:27:37:84:EB:C9:9C:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/2e25d87f-051d-3d6e-a755-c03b6fb3f1d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl X509v3 Authority Key Identifier: keyid:29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer sbgp-ipAddrBlock: critical IPv6: 2604:4200::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:c5:8a:a3:f4:13:56:24:13:ea:7e:8b:0c:52:27:d5:ee:39: 85:a5:85:98:64:62:95:0f:a8:b6:a2:b6:4b:cc:50:a5:3b:53: 66:cd:94:39:6c:e8:ab:0a:f8:0b:11:cd:37:a0:4e:f2:6b:ac: df:4a:19:47:29:20:d6:27:8c:3c:41:1d:44:94:60:57:46:a6: 6f:e7:db:f3:64:51:e4:dd:9e:c3:74:68:ae:55:53:24:63:1f: c1:d0:d1:b3:67:2c:01:6b:02:98:02:24:7d:45:68:20:51:9d: 66:f3:3c:ed:e2:8a:1c:61:95:87:f1:6a:54:fc:be:83:e0:81: fd:0f:37:63:0d:45:be:ca:54:ed:dd:80:a5:81:b3:54:23:f5: 78:f8:ac:85:af:a8:e8:ec:78:de:64:af:25:14:b4:31:ca:d3: f8:7d:f0:e9:51:2b:5f:7b:ae:c1:e9:40:78:67:6c:bc:57:8a: 18:fd:c5:7b:e5:fe:06:8d:c7:7a:e2:c0:b4:22:a7:2e:d9:d4: 1c:9c:d3:4a:73:ee:a4:b6:b8:e3:f9:b8:37:f9:aa:c9:0a:60: dc:04:57:05:36:6f:0c:6b:63:04:8d:31:bf:4c:45:3d:17:6e: c1:c4:a7:31:e3:7e:e6:cb:ec:1f:0d:04:d0:1f:3a:4e:25:50: 36:55:75:96 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiFS0AXgrdiIdabjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E2MjBkNDUtMWYyNi00NjBjLTlhM2UtOWJjMGNjNGE1 ZDU5MB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk NzRmYmNmNjQtNzAyMy00ODRiLWIxMDAtZTJkMWUyMGMzYzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirf1ThWnWOgFlnbLL4ENS8GcSJ50tqJqyccB jgLl8yamYIGroOAlZwUoMJHlhpQAxwxU/Jg80TB36JA60vw+Vk3wyz5ojaRdhcIt gHIjLhfB1WdR+JU3JKQTezv6+R4NNITKKo1PfzcgwqEQIyqJUgq9YscH04Psb006 lfJZ9J9Ju0efxGhljccU5mYnV3np+RVjTxJH3vsW5EHdJ5B/Dg4qg9qTdxds7XMW XwQrFkSP/Q3ioO8gY17GehUzsA3grzpwMWBUgrFEHoToidmqvcaGQPoZ1nA89DQh FaTBicWvvAjqNw9OgKJxD9t6KYK4+FNbMb5YUs5ofeYtkImsZQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAR29zCjpEMS3Sb6G78nN4TryZyjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTYy MGQ0NS0xZjI2LTQ2MGMtOWEzZS05YmMwY2M0YTVkNTkvMmUyNWQ4N2YtMDUxZC0z ZDZlLWE3NTUtYzAzYjZmYjNmMWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2E2MjBkNDUtMWYyNi00NjBjLTlh M2UtOWJjMGNjNGE1ZDU5LzdhNjIwZDQ1LTFmMjYtNDYwYy05YTNlLTliYzBjYzRh NWQ1OS5jcmwwHwYDVR0jBBgwFoAUKRxwwEbJq9wo7iaQmtx92QAr9MIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTYyMGQ0NS0xZjI2LTQ2MGMtOWEzZS05YmMw Y2M0YTVkNTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRCADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCmxYqj9BNWJBPqfosMUifV7jmFpYWYZGKVD6i2orZLzFClO1NmzZQ5 bOirCvgLEc03oE7ya6zfShlHKSDWJ4w8QR1ElGBXRqZv59vzZFHk3Z7DdGiuVVMk Yx/B0NGzZywBawKYAiR9RWggUZ1m8zzt4oocYZWH8WpU/L6D4IH9DzdjDUW+ylTt 3YClgbNUI/V4+KyFr6jo7HjeZK8lFLQxytP4ffDpUStfe67B6UB4Z2y8V4oY/cV7 5f4Gjcd64sC0Iqcu2dQcnNNKc+6ktrjj+bg3+arJCmDcBFcFNm8Ma2MEjTG/TEU9 F27BxKcx437my+wfDQTQHzpOJVA2VXWW -----END CERTIFICATE-----Generated at Fri Mar 14 10:59:08 2025 by rpki-client