$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a338d603-009d-38f4-ab6b-12f8f20c0959.roa File: a338d603-009d-38f4-ab6b-12f8f20c0959.roa (raw, json) Hash identifier: fBjMdFed0ycLWDx0Th468/ZKQNyFOOGVyQOjC7oaQhc= Subject key identifier: 75:8A:44:5C:75:E9:F8:E3:DA:96:A4:35:3B:B3:8B:53:14:08:34:CE Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F432858488DAB508BC6866B9123A38F20 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a338d603-009d-38f4-ab6b-12f8f20c0959.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 30103 IP address blocks: 2620:123:2085::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:50:8b:c6:86:6b:91:23:a3:8f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=0ca09472-46b0-4008-9c31-1b25ef38a56a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:90:8a:01:f5:d5:f3:57:ce:84:77:11:df:27: 3b:45:d5:ab:6e:18:1a:a8:57:db:6b:10:12:4f:db: a2:5e:9d:12:ad:e9:7e:ad:72:bb:15:7d:33:3e:9c: 9b:02:d1:c0:cf:34:71:07:99:50:26:ae:86:77:c3: 45:69:c4:98:0f:f7:96:97:9c:77:be:28:b1:cd:08: 04:d8:87:2a:0e:c3:76:30:a4:11:6e:58:0c:44:73: 68:76:ab:72:f8:7b:6b:29:ef:04:da:9c:a0:2a:65: 41:02:fe:2e:be:53:b6:b7:fb:b3:ac:e0:72:ec:b1: f3:30:0d:93:58:2c:05:e7:a1:1e:c0:57:8d:10:ca: 70:12:91:2b:ec:83:49:3e:07:9e:29:ca:d0:39:35: 22:e2:8f:29:12:f7:84:24:ad:62:ca:9e:e2:2b:f5: ed:b5:fd:11:5a:ac:63:b7:bc:60:32:7b:6e:3d:34: df:57:24:a1:fe:71:68:d4:82:c7:76:82:3c:ea:43: b8:ee:30:80:60:f1:17:32:99:56:00:7f:14:91:03: f2:91:72:ef:4a:dd:a3:b3:c0:06:9b:27:44:fa:5b: 68:a9:e6:b0:2f:f0:54:c5:8b:87:61:46:c0:54:fa: 36:11:df:15:e7:ab:ad:e3:7c:80:62:b4:4c:0b:5b: 9f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:8A:44:5C:75:E9:F8:E3:DA:96:A4:35:3B:B3:8B:53:14:08:34:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a338d603-009d-38f4-ab6b-12f8f20c0959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv6: 2620:123:2085::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:bb:53:42:91:2c:e1:57:0f:d8:d8:0f:ca:86:92:c8:b8:61: c7:16:29:83:b4:29:72:2f:06:ea:ca:13:73:1b:0d:7c:70:d0: b7:4c:c6:69:25:a4:c2:a6:64:61:7c:49:b9:42:c7:51:73:a9: 25:ab:7f:36:42:a2:eb:8d:2e:09:93:e8:12:84:b6:06:94:3d: 43:19:6c:83:c6:86:a8:8d:ca:e6:5a:c2:0c:79:48:69:ff:f7: eb:ce:f8:5d:8d:3b:c8:13:c0:90:b0:58:3d:e4:ff:0d:de:2b: b3:4d:9e:0a:79:e2:b9:9f:2d:cd:95:14:be:28:30:9f:ef:24: 97:f5:b8:34:8d:d9:f0:15:e1:9c:a4:e4:45:3b:a9:b9:2d:fb: 6c:13:2a:22:a1:23:9a:be:6a:6e:01:e3:68:81:e3:f7:d5:e7: 23:b3:1a:c4:b1:d9:c8:fe:9e:a1:9e:fa:cf:3c:1b:62:ef:9b: 23:89:08:bc:c4:50:39:d7:b0:72:c5:3e:b8:b9:9c:0b:18:cc: bc:0a:cd:26:75:0c:9a:c8:9e:3a:df:4b:bf:bd:09:57:04:b3: 43:02:70:15:75:ca:96:ab:6b:cb:c6:9c:a1:7d:1b:59:18:05: 31:2a:7b:00:c2:95:d8:71:14:08:96:a8:7e:86:fe:6d:ef:09: 8d:2c:05:75 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiNq1CLxoZrkSOjjyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk MGNhMDk0NzItNDZiMC00MDA4LTljMzEtMWIyNWVmMzhhNTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZCKAfXV81fOhHcR3yc7RdWrbhgaqFfbaxAS T9uiXp0Srel+rXK7FX0zPpybAtHAzzRxB5lQJq6Gd8NFacSYD/eWl5x3viixzQgE 2IcqDsN2MKQRblgMRHNodqty+HtrKe8E2pygKmVBAv4uvlO2t/uzrOBy7LHzMA2T WCwF56EewFeNEMpwEpEr7INJPgeeKcrQOTUi4o8pEveEJK1iyp7iK/Xttf0RWqxj t7xgMntuPTTfVySh/nFo1ILHdoI86kO47jCAYPEXMplWAH8UkQPykXLvSt2js8AG mydE+ltoqeawL/BUxYuHYUbAVPo2Ed8V56ut43yAYrRMC1ufIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHWKRFx16fjj2pakNTuzi1MUCDTOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvYTMzOGQ2MDMtMDA5ZC0z OGY0LWFiNmItMTJmOGYyMGMwOTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABIyCF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADe7U0KRLOFXD9jYD8qGksi4YccWKYO0KXIvBurKE3MbDXxw0LdM xmklpMKmZGF8SblCx1FzqSWrfzZCouuNLgmT6BKEtgaUPUMZbIPGhqiNyuZawgx5 SGn/9+vO+F2NO8gTwJCwWD3k/w3eK7NNngp54rmfLc2VFL4oMJ/vJJf1uDSN2fAV 4Zyk5EU7qbkt+2wTKiKhI5q+am4B42iB4/fV5yOzGsSx2cj+nqGe+s88G2LvmyOJ CLzEUDnXsHLFPri5nAsYzLwKzSZ1DJrInjrfS7+9CVcEs0MCcBV1ypara8vGnKF9 G1kYBTEqewDCldhxFAiWqH6G/m3vCY0sBXU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:00 2025 by rpki-client