$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/3f4cb637-1eff-370b-8e29-c856ec6fc314.roa File: 3f4cb637-1eff-370b-8e29-c856ec6fc314.roa (raw, json) Hash identifier: /l73zARGZ36SvxlvdJFaupFOTz2nJ6N1rbUeSDadF0g= Subject key identifier: 3E:E6:51:F8:1F:F2:F5:FF:5E:15:C8:8B:46:64:AE:9F:A2:34:12:43 Certificate issuer: /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c Certificate serial: 010D0C9F4328584930294E207D8B927DC1CDB780 Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/3f4cb637-1eff-370b-8e29-c856ec6fc314.roa Signing time: Fri 14 Mar 2025 18:55:51 +0000 ROA not before: Fri 14 Mar 2025 18:55:51 +0000 ROA not after: Thu 12 Jun 2025 18:55:51 +0000 asID: 208972 IP address blocks: 2600:3500:c21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:29:4e:20:7d:8b:92:7d:c1:cd:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c Validity Not Before: Mar 14 18:55:51 2025 GMT Not After : Jun 12 18:55:51 2025 GMT Subject: CN=8e90bc51-00cd-4618-a313-03d3680002a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ae:e7:20:0c:60:1b:ba:78:43:f4:4b:37:16: ef:43:45:92:41:43:3b:6e:5d:6f:f5:42:36:2e:ab: 25:43:e1:de:82:ef:a1:ce:ce:7a:40:94:57:00:e9: 29:1d:8b:64:9d:51:2d:ff:c1:4a:50:38:8d:72:65: 1b:97:f9:33:91:11:3d:d0:88:a0:97:f3:6b:09:f4: 7c:17:6c:5d:44:74:94:13:fa:a4:eb:d2:4e:70:27: 21:ad:e9:e6:a2:95:66:8e:53:dd:23:05:52:a6:dc: c7:3d:8d:26:70:3f:38:e1:fb:c8:79:59:01:93:4a: 8e:3c:05:5b:9c:81:44:0c:e3:47:63:ed:62:b2:c8: 12:4e:c9:d8:45:41:76:7d:b4:7a:37:51:74:71:94: 71:98:eb:b5:d2:cc:ed:1d:4d:8b:78:33:c4:57:43: 81:f5:f7:01:94:ec:c1:0e:ad:31:27:06:6a:d3:c4: 7f:39:56:b5:6e:4b:e8:5b:e9:98:42:20:4b:f6:87: f9:0e:ec:0d:d6:ff:b7:23:3a:74:81:9c:1c:dd:12: 9e:0f:d3:2a:92:e6:34:0e:44:43:f3:ea:fd:5f:31: fa:bf:ce:1e:5f:02:58:7b:c1:d0:81:4a:2b:6c:76: 46:b2:45:94:f8:7f:bd:f9:c2:23:87:ba:3d:9e:96: 0c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E6:51:F8:1F:F2:F5:FF:5E:15:C8:8B:46:64:AE:9F:A2:34:12:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/3f4cb637-1eff-370b-8e29-c856ec6fc314.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl X509v3 Authority Key Identifier: keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer sbgp-ipAddrBlock: critical IPv6: 2600:3500:c21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:4f:c7:c4:11:8e:7e:da:e4:1f:90:0e:a3:f7:8c:25:a5:4c: 6d:de:4c:b2:14:3f:75:73:96:1e:60:c3:e0:5a:76:12:01:82: e6:44:ae:48:76:a9:49:c0:94:a6:85:89:f9:49:c8:cb:65:d4: 46:01:7b:f7:1d:8e:f8:2d:52:d8:4d:86:d3:4f:04:1e:e6:e8: 7b:45:51:84:73:82:63:a9:d6:11:8f:ec:28:88:24:b7:c0:a8: 8d:54:e4:a5:ec:17:cd:44:9a:1e:c0:1b:db:90:c6:c2:4e:5a: e1:c4:dc:2a:7f:6c:49:8f:33:53:b9:24:fb:1c:09:56:48:a0: 0d:9a:1d:a9:bb:8f:0a:ed:d4:2a:ed:71:e5:9a:dc:28:df:dc: d4:fe:06:07:60:42:58:d2:a2:d7:ff:1f:77:f0:c2:a4:10:8b: d1:ce:ad:c3:76:0d:b7:c2:cb:83:6e:cd:4d:c2:03:18:17:7d: 87:7b:e3:cb:5b:48:6c:7b:fc:d7:29:1b:81:3e:25:94:f0:56: 56:c4:dd:5d:9f:b8:9c:ff:6c:ef:73:06:16:ad:cf:60:5e:1b: a9:63:0f:c5:d9:6c:54:80:32:c3:0e:6d:35:33:6d:fb:8e:8a: af:e5:d9:0f:3d:75:93:c0:4b:91:8c:09:b6:aa:ab:fe:c3:a6: d3:03:e0:94 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkwKU4gfYuSfcHNt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk2YjI0YzQtYjY5Mi00Yjk0LTgzZjUtMWRhNTQ5MGI4 ZjNjMB4XDTI1MDMxNDE4NTU1MVoXDTI1MDYxMjE4NTU1MVowLzEtMCsGA1UEAxMk OGU5MGJjNTEtMDBjZC00NjE4LWEzMTMtMDNkMzY4MDAwMmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq7nIAxgG7p4Q/RLNxbvQ0WSQUM7bl1v9UI2 LqslQ+Hegu+hzs56QJRXAOkpHYtknVEt/8FKUDiNcmUbl/kzkRE90Iigl/NrCfR8 F2xdRHSUE/qk69JOcCchrenmopVmjlPdIwVSptzHPY0mcD844fvIeVkBk0qOPAVb nIFEDONHY+1issgSTsnYRUF2fbR6N1F0cZRxmOu10sztHU2LeDPEV0OB9fcBlOzB Dq0xJwZq08R/OVa1bkvoW+mYQiBL9of5DuwN1v+3Izp0gZwc3RKeD9MqkuY0DkRD 8+r9XzH6v84eXwJYe8HQgUorbHZGskWU+H+9+cIjh7o9npYMsQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD7mUfgf8vX/XhXIi0Zkrp+iNBJDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZi MjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1NDkwYjhmM2MvM2Y0Y2I2MzctMWVmZi0z NzBiLThlMjktYzg1NmVjNmZjMzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTk2YjI0YzQtYjY5Mi00Yjk0LTgz ZjUtMWRhNTQ5MGI4ZjNjL2U5NmIyNGM0LWI2OTItNGI5NC04M2Y1LTFkYTU0OTBi OGYzYy5jcmwwHwYDVR0jBBgwFoAUq7bjkDZGS9ALmtUiWl6jYHyd1XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZiMjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1 NDkwYjhmM2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgA1AAwh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFdPx8QRjn7a5B+QDqP3jCWlTG3eTLIUP3Vzlh5gw+BadhIBguZE rkh2qUnAlKaFiflJyMtl1EYBe/cdjvgtUthNhtNPBB7m6HtFUYRzgmOp1hGP7CiI JLfAqI1U5KXsF81Emh7AG9uQxsJOWuHE3Cp/bEmPM1O5JPscCVZIoA2aHam7jwrt 1CrtceWa3Cjf3NT+BgdgQljSotf/H3fwwqQQi9HOrcN2DbfCy4NuzU3CAxgXfYd7 48tbSGx7/NcpG4E+JZTwVlbE3V2fuJz/bO9zBhatz2BeG6ljD8XZbFSAMsMObTUz bfuOiq/l2Q89dZPAS5GMCbaqq/7DptMD4JQ= -----END CERTIFICATE-----Generated at Mon Apr 28 01:15:53 2025 by rpki-client