$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/43384fc3-deb1-37e9-988c-78d975951fe7.roa File: 43384fc3-deb1-37e9-988c-78d975951fe7.roa (raw, json) Hash identifier: MmlsQNcAFr+7QzaO8z8RndpDYCE9u/vGhm4w4xy6wjY= Subject key identifier: 41:7B:DD:A2:2C:EA:D6:FD:88:A9:B7:44:95:A0:4E:5F:B7:8F:A5:62 Certificate issuer: /CN=f0682b49-784e-4da6-8c82-9a4562d0b08c Certificate serial: 010D0C9F43285848748B1D98600458DB6C654A60 Authority key identifier: C3:76:B5:48:78:AD:92:A1:DA:19:D5:D4:9D:0D:28:22:AA:E7:47:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/43384fc3-deb1-37e9-988c-78d975951fe7.roa Signing time: Mon 06 Jan 2025 14:00:52 +0000 ROA not before: Mon 06 Jan 2025 14:00:52 +0000 ROA not after: Sun 06 Apr 2025 13:00:52 +0000 asID: 19382 IP address blocks: 2620:13c:e000::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/f0682b49-784e-4da6-8c82-9a4562d0b08c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/f0682b49-784e-4da6-8c82-9a4562d0b08c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:74:8b:1d:98:60:04:58:db:6c:65:4a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0682b49-784e-4da6-8c82-9a4562d0b08c Validity Not Before: Jan 6 14:00:52 2025 GMT Not After : Apr 6 13:00:52 2025 GMT Subject: CN=b4b3da5d-6684-447c-83ed-f481ee323a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ee:c3:81:c5:30:fe:fe:e2:60:74:bf:db:75: 75:1f:8d:ee:bc:d5:9e:ca:99:34:2d:76:22:04:0b: 98:38:cb:6b:0c:6f:39:84:b2:ec:e8:c6:c3:22:3a: 27:73:7c:14:c9:b7:2e:a3:54:c5:f9:92:74:66:16: 04:f8:aa:5b:1f:f2:e2:62:7d:30:04:fe:a0:fc:a8: 37:bc:07:2c:5f:7f:fc:b8:f0:8c:c7:8c:9a:6f:e6: fa:c7:2b:8b:18:c9:6a:4e:17:5f:ce:77:18:06:f1: 5d:98:62:24:a9:84:f6:a5:4e:31:bd:c1:0b:5e:70: 18:10:50:66:af:1a:22:38:3d:e0:f4:4b:ed:49:e7: 3d:cb:f9:c3:29:17:25:1f:7e:1c:1e:9e:f4:e0:27: bd:5f:c9:27:66:15:6e:be:fd:bf:7a:b7:97:b5:25: 98:2f:c4:79:91:06:25:47:44:2e:42:01:48:c7:3f: c7:fa:d7:ce:c7:4c:58:be:0b:63:5d:e1:52:e2:56: 7b:c0:1a:9a:20:2d:e4:61:6c:ae:bb:84:51:f0:f0: 2e:55:86:17:f0:1c:45:bb:7b:41:81:8c:5e:b2:a3: d2:66:ed:ff:fa:fc:fc:06:28:d3:6f:04:43:51:8b: ba:d1:b3:c4:89:4f:22:b7:46:2d:12:7b:99:e6:2a: 74:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7B:DD:A2:2C:EA:D6:FD:88:A9:B7:44:95:A0:4E:5F:B7:8F:A5:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/43384fc3-deb1-37e9-988c-78d975951fe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c/f0682b49-784e-4da6-8c82-9a4562d0b08c.crl X509v3 Authority Key Identifier: keyid:C3:76:B5:48:78:AD:92:A1:DA:19:D5:D4:9D:0D:28:22:AA:E7:47:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0682b49-784e-4da6-8c82-9a4562d0b08c.cer sbgp-ipAddrBlock: critical IPv6: 2620:13c:e000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:3e:76:bc:c4:6b:d6:14:f5:d9:cd:70:b1:96:0c:b1:73:d4: c6:b5:25:47:3a:d5:ea:8a:74:48:bc:4e:5d:61:49:47:91:8b: e3:c1:f9:da:ed:53:0e:e5:31:7a:83:8b:e4:f5:6d:f2:69:0f: 63:5f:48:3d:4b:72:99:d4:c0:7d:61:6c:06:a0:76:9e:2f:06: 9f:23:b1:5e:49:3a:0b:bd:0e:12:e2:9b:53:e8:0c:1c:e3:7e: 21:16:77:34:32:86:80:78:6d:6f:a7:b1:dd:a8:22:06:e0:48: 3b:f3:30:c0:95:c9:37:c1:88:b5:d5:8d:26:fe:1a:39:02:f4: f0:95:e9:5b:eb:9b:2a:a4:54:3e:32:06:7d:31:d9:35:b8:5a: 63:3b:4b:38:0d:cb:12:f5:47:82:f4:4c:bf:1b:bc:da:03:f7: ae:6d:37:8d:69:ea:a9:86:14:5f:00:2a:a5:11:b4:10:0d:95: 3a:48:4f:ff:87:b4:cd:00:64:66:57:91:79:d2:80:7a:12:0e: 8f:cb:6d:2d:ed:30:a6:0b:f0:03:f1:bf:54:b9:38:5d:a9:a7: 15:e8:83:f8:a5:8b:e9:48:e0:53:a4:4b:b4:c6:cc:76:70:31: 9f:e4:db:cc:ab:ec:cf:48:0f:05:c3:a9:4f:fc:ac:72:48:cb: 53:3b:42:ac -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEh0ix2YYARY22xlSmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA2ODJiNDktNzg0ZS00ZGE2LThjODItOWE0NTYyZDBi MDhjMB4XDTI1MDEwNjE0MDA1MloXDTI1MDQwNjEzMDA1MlowLzEtMCsGA1UEAxMk YjRiM2RhNWQtNjY4NC00NDdjLTgzZWQtZjQ4MWVlMzIzYTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiO7DgcUw/v7iYHS/23V1H43uvNWeypk0LXYi BAuYOMtrDG85hLLs6MbDIjonc3wUybcuo1TF+ZJ0ZhYE+KpbH/LiYn0wBP6g/Kg3 vAcsX3/8uPCMx4yab+b6xyuLGMlqThdfzncYBvFdmGIkqYT2pU4xvcELXnAYEFBm rxoiOD3g9EvtSec9y/nDKRclH34cHp704Ce9X8knZhVuvv2/ereXtSWYL8R5kQYl R0QuQgFIxz/H+tfOx0xYvgtjXeFS4lZ7wBqaIC3kYWyuu4RR8PAuVYYX8BxFu3tB gYxesqPSZu3/+vz8BijTbwRDUYu60bPEiU8it0YtEnuZ5ip04QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEF73aIs6tb9iKm3RJWgTl+3j6ViMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMDY4 MmI0OS03ODRlLTRkYTYtOGM4Mi05YTQ1NjJkMGIwOGMvNDMzODRmYzMtZGViMS0z N2U5LTk4OGMtNzhkOTc1OTUxZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjA2ODJiNDktNzg0ZS00ZGE2LThj ODItOWE0NTYyZDBiMDhjL2YwNjgyYjQ5LTc4NGUtNGRhNi04YzgyLTlhNDU2MmQw YjA4Yy5jcmwwHwYDVR0jBBgwFoAUw3a1SHitkqHaGdXUnQ0oIqrnR4YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMDY4MmI0OS03ODRlLTRkYTYtOGM4Mi05YTQ1 NjJkMGIwOGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABPOAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGA+drzEa9YU9dnNcLGWDLFz1Ma1JUc61eqKdEi8Tl1hSUeRi+PB +drtUw7lMXqDi+T1bfJpD2NfSD1LcpnUwH1hbAagdp4vBp8jsV5JOgu9DhLim1Po DBzjfiEWdzQyhoB4bW+nsd2oIgbgSDvzMMCVyTfBiLXVjSb+GjkC9PCV6Vvrmyqk VD4yBn0x2TW4WmM7SzgNyxL1R4L0TL8bvNoD965tN41p6qmGFF8AKqURtBANlTpI T/+HtM0AZGZXkXnSgHoSDo/LbS3tMKYL8APxv1S5OF2ppxXog/ili+lI4FOkS7TG zHZwMZ/k28yr7M9IDwXDqU/8rHJIy1M7Qqw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:11 2025 by rpki-client