$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/7dae324e-ec74-30c2-b235-13f1ed8695f9.roa File: 7dae324e-ec74-30c2-b235-13f1ed8695f9.roa (raw, json) Hash identifier: s88vY45VhplELdq7WEOeSxAWyDct6qb8QlYUyATARQw= Subject key identifier: 4D:21:36:95:08:9A:26:C1:D1:0A:E9:38:FB:35:01:73:78:94:3B:C1 Certificate issuer: /CN=9e5e6e87-5f65-493b-b664-5a12819cdaa4 Certificate serial: 010D0C9F4328584863CB1139AD87824797951900 Authority key identifier: 97:D2:1C:CF:8A:CD:74:E3:8F:B0:93:20:7F:C6:C2:91:E0:45:A1:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/7dae324e-ec74-30c2-b235-13f1ed8695f9.roa Signing time: Tue 31 Dec 2024 14:00:53 +0000 ROA not before: Tue 31 Dec 2024 14:00:53 +0000 ROA not after: Mon 31 Mar 2025 13:00:53 +0000 asID: 394770 IP address blocks: 2607:68c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/9e5e6e87-5f65-493b-b664-5a12819cdaa4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/9e5e6e87-5f65-493b-b664-5a12819cdaa4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:63:cb:11:39:ad:87:82:47:97:95:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e5e6e87-5f65-493b-b664-5a12819cdaa4 Validity Not Before: Dec 31 14:00:53 2024 GMT Not After : Mar 31 13:00:53 2025 GMT Subject: CN=7331694a-db22-40f4-8dd7-98135e627cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9f:5a:a8:65:e9:54:c4:48:a3:cb:dd:1d:57: 20:5c:27:16:68:87:e5:68:19:5c:0f:89:c7:ad:a3: c7:6c:8d:74:d6:d1:5b:27:a2:f8:78:56:07:44:41: cb:1b:41:3a:ab:85:65:a7:c4:be:09:e0:28:bc:0d: e6:4c:e1:cb:3e:01:4f:78:95:03:a0:a5:6c:d2:85: 28:1b:f8:92:95:84:2c:ee:2b:63:e7:ec:8b:e0:20: 0f:f0:be:e6:d0:c5:ed:48:c6:74:c0:6c:83:d9:26: 7a:df:98:35:32:04:6b:9b:08:0d:c7:f5:2b:c1:2b: 38:07:f5:3b:c1:88:00:e4:bc:61:8e:9a:e8:e5:88: e6:37:33:5b:f7:39:6d:ca:4b:ca:5e:c1:49:c7:c4: 25:78:b0:22:52:1e:7a:3b:c1:27:8b:d5:fc:8a:38: 17:4d:6c:8a:ac:7c:0f:48:56:ae:dd:46:bf:81:6d: 01:c4:e7:bf:59:6d:46:3b:8e:fe:d1:50:a7:93:f2: 0a:72:70:a3:3f:98:0c:ef:11:c4:63:ba:ba:76:ef: 84:5b:17:56:b3:5f:ac:7b:6f:5f:a0:d4:f9:c8:29: 6d:fd:7c:75:ac:0c:91:6b:01:f4:00:9c:d3:bc:d9: a8:2c:b1:f2:a2:49:c4:28:bb:bd:f5:40:fe:3e:33: ab:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:21:36:95:08:9A:26:C1:D1:0A:E9:38:FB:35:01:73:78:94:3B:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/7dae324e-ec74-30c2-b235-13f1ed8695f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4/9e5e6e87-5f65-493b-b664-5a12819cdaa4.crl X509v3 Authority Key Identifier: keyid:97:D2:1C:CF:8A:CD:74:E3:8F:B0:93:20:7F:C6:C2:91:E0:45:A1:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e5e6e87-5f65-493b-b664-5a12819cdaa4.cer sbgp-ipAddrBlock: critical IPv6: 2607:68c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:dc:e5:7a:1f:93:39:4e:c6:e2:a7:38:88:0e:90:1d:81:1a: 10:0d:ed:51:b1:96:43:69:3b:5c:ed:f3:fd:71:a6:6a:6c:ee: 90:24:b5:b1:d8:8d:4f:de:33:6f:ab:2d:86:f8:d8:48:50:28: a3:06:42:67:76:0f:aa:2d:0f:6e:f3:75:dd:c2:d9:d8:b4:64: 4d:00:4b:8a:ed:b4:17:36:2c:c1:fa:c5:7e:5a:e7:a4:9c:1e: 94:3b:a4:a0:e1:6b:46:1e:b0:38:ae:33:fa:3c:08:76:e8:36: 65:eb:44:2e:cd:de:8f:34:1b:38:0e:15:41:42:1e:7b:a1:ad: f7:35:d3:e7:13:55:dc:bc:17:1b:d4:ea:70:1a:16:2c:3f:ed: 77:f9:f7:94:9e:7e:25:ef:d8:77:e7:ac:a4:ba:6e:5c:2e:2a: 90:61:72:cc:c9:20:ba:19:a6:ae:c0:8d:14:33:c8:43:e2:c8: b3:07:36:c5:68:c2:0e:d0:91:07:bb:d8:2b:54:36:16:90:c5: 66:f4:db:7b:93:a0:f0:b0:6c:3a:7a:5d:c8:a2:cc:24:f6:41: 99:47:60:bc:9a:1a:64:4f:22:0e:6e:a5:49:ac:02:0e:21:34: c3:b2:6f:0a:00:f3:fe:fb:e4:dd:bf:93:b8:5d:94:c7:ba:88: 14:02:b5:70 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhjyxE5rYeCR5eVGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWU1ZTZlODctNWY2NS00OTNiLWI2NjQtNWExMjgxOWNk YWE0MB4XDTI0MTIzMTE0MDA1M1oXDTI1MDMzMTEzMDA1M1owLzEtMCsGA1UEAxMk NzMzMTY5NGEtZGIyMi00MGY0LThkZDctOTgxMzVlNjI3Y2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ9aqGXpVMRIo8vdHVcgXCcWaIflaBlcD4nH raPHbI101tFbJ6L4eFYHREHLG0E6q4Vlp8S+CeAovA3mTOHLPgFPeJUDoKVs0oUo G/iSlYQs7itj5+yL4CAP8L7m0MXtSMZ0wGyD2SZ635g1MgRrmwgNx/UrwSs4B/U7 wYgA5Lxhjpro5YjmNzNb9zltykvKXsFJx8QleLAiUh56O8Eni9X8ijgXTWyKrHwP SFau3Ua/gW0BxOe/WW1GO47+0VCnk/IKcnCjP5gM7xHEY7q6du+EWxdWs1+se29f oNT5yClt/Xx1rAyRawH0AJzTvNmoLLHyoknEKLu99UD+PjOrgQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE0hNpUImibB0QrpOPs1AXN4lDvBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZTVl NmU4Ny01ZjY1LTQ5M2ItYjY2NC01YTEyODE5Y2RhYTQvN2RhZTMyNGUtZWM3NC0z MGMyLWIyMzUtMTNmMWVkODY5NWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWU1ZTZlODctNWY2NS00OTNiLWI2 NjQtNWExMjgxOWNkYWE0LzllNWU2ZTg3LTVmNjUtNDkzYi1iNjY0LTVhMTI4MTlj ZGFhNC5jcmwwHwYDVR0jBBgwFoAUl9Icz4rNdOOPsJMgf8bCkeBFoTMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZTVlNmU4Ny01ZjY1LTQ5M2ItYjY2NC01YTEy ODE5Y2RhYTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdowDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAX3OV6H5M5TsbipziIDpAdgRoQDe1RsZZDaTtc7fP9caZqbO6QJLWx 2I1P3jNvqy2G+NhIUCijBkJndg+qLQ9u83XdwtnYtGRNAEuK7bQXNizB+sV+Wuek nB6UO6Sg4WtGHrA4rjP6PAh26DZl60Quzd6PNBs4DhVBQh57oa33NdPnE1XcvBcb 1OpwGhYsP+13+feUnn4l79h356ykum5cLiqQYXLMySC6GaauwI0UM8hD4sizBzbF aMIO0JEHu9grVDYWkMVm9Nt7k6DwsGw6el3Ioswk9kGZR2C8mhpkTyIObqVJrAIO ITTDsm8KAPP+++Tdv5O4XZTHuogUArVw -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:38 2025 by rpki-client