$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/f036e01b-a0c6-3ec8-9c90-69b99202db6e.roa File: f036e01b-a0c6-3ec8-9c90-69b99202db6e.roa (raw, json) Hash identifier: uQ5SeaQITymVjECwOpFIK3LLi7eGxsnCh1+hc31OIfU= Subject key identifier: AF:9D:14:55:21:11:E0:F8:45:78:BB:15:9B:8C:31:5B:79:E0:85:1E Certificate issuer: /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c Certificate serial: 010D0C9F43285849A24EEA285E3C154C2ED38CE0 Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/f036e01b-a0c6-3ec8-9c90-69b99202db6e.roa Signing time: Thu 24 Apr 2025 16:13:47 +0000 ROA not before: Thu 24 Apr 2025 16:13:47 +0000 ROA not after: Wed 23 Jul 2025 16:13:47 +0000 asID: 268624 IP address blocks: 2600:3500:c24::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a2:4e:ea:28:5e:3c:15:4c:2e:d3:8c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c Validity Not Before: Apr 24 16:13:47 2025 GMT Not After : Jul 23 16:13:47 2025 GMT Subject: CN=e5401ca8-973d-4d6b-9bd0-516aad8816a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:16:65:1b:01:a0:76:c5:2b:1c:5e:7b:3d:28: 55:bc:59:47:b7:48:fe:87:f7:16:d8:06:c1:d1:50: 32:22:b5:e2:f4:0d:a1:66:4e:8d:4d:72:c8:1c:d3: 5d:3d:93:af:c4:3c:89:cc:6f:67:3f:ed:89:5f:e6: fa:5f:1a:f6:e5:22:8d:a1:f4:bd:b2:0d:9c:11:7e: f6:e3:93:86:7e:71:2c:bd:55:4d:02:d1:cf:c2:c6: 8f:6c:88:07:a1:bf:93:26:07:69:3b:40:b4:3e:6f: 0d:bf:e4:cf:c5:44:66:77:c1:5a:74:33:5d:9d:42: 51:67:67:6b:d8:64:d6:ac:2d:85:98:59:a6:eb:72: 9e:2a:c3:6a:84:a3:a0:ff:e7:68:30:e5:59:e4:aa: 3b:a9:1a:80:2e:e1:4f:40:7e:0c:9a:dc:c4:a2:97: e0:8c:5c:b3:19:5f:ab:66:ef:3b:0d:17:ac:22:51: 59:18:20:8c:fd:31:10:e8:78:71:48:8f:c8:32:29: ce:1d:b2:c6:43:c5:f6:12:60:94:7d:35:8c:f0:87: 65:5f:21:b4:d2:a8:fb:14:35:c6:7d:1a:cb:e3:2b: 4d:70:e9:73:af:00:a9:78:1e:5c:22:30:fd:e0:29: c0:7c:91:8b:0b:d6:69:3b:ab:66:f9:be:5a:53:85: f7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9D:14:55:21:11:E0:F8:45:78:BB:15:9B:8C:31:5B:79:E0:85:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/f036e01b-a0c6-3ec8-9c90-69b99202db6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl X509v3 Authority Key Identifier: keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer sbgp-ipAddrBlock: critical IPv6: 2600:3500:c24::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:3e:71:9c:3b:27:e9:dc:cc:76:b7:05:40:99:42:fb:bc:c4: d2:e2:44:65:ea:d1:23:4a:38:db:0b:8c:7e:ed:6e:7e:e4:de: b6:5a:b9:73:ac:66:82:08:e8:d0:f4:d6:c4:ab:45:61:32:de: 04:be:b2:98:40:39:2d:9a:8e:29:09:06:a3:e5:68:28:ed:d9: c0:15:46:21:df:4c:01:5d:c9:cc:6e:0f:40:09:3e:94:ab:0c: bd:0e:d2:11:f9:76:d7:44:13:8c:77:bd:87:4c:fa:cc:d7:bd: fe:68:ad:87:2c:40:cf:ad:67:6c:a9:a4:d5:93:f3:11:ee:8d: e6:e3:73:e4:8f:6e:cb:27:f0:46:8e:5b:3d:a7:98:97:e5:5c: 00:9d:df:11:3c:6e:16:a0:e5:7c:d9:18:4e:ff:fd:e1:6c:fd: bc:df:a2:a4:c2:46:f0:77:29:33:cc:1b:02:df:db:08:da:30: 9e:53:e1:5d:84:ee:e6:ad:0d:5b:11:fd:70:03:13:ee:99:59: b1:04:a3:79:e6:8c:df:e2:08:bd:6c:92:1e:f4:48:9a:dc:f1: 23:4b:f6:22:a3:1f:80:25:25:7e:5f:00:25:e8:64:f4:90:81: 95:5c:db:7a:9b:2d:95:12:60:8c:99:ca:c6:e0:7c:e5:45:60: 67:be:f0:28 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmiTuooXjwVTC7TjOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk2YjI0YzQtYjY5Mi00Yjk0LTgzZjUtMWRhNTQ5MGI4 ZjNjMB4XDTI1MDQyNDE2MTM0N1oXDTI1MDcyMzE2MTM0N1owLzEtMCsGA1UEAxMk ZTU0MDFjYTgtOTczZC00ZDZiLTliZDAtNTE2YWFkODgxNmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRZlGwGgdsUrHF57PShVvFlHt0j+h/cW2AbB 0VAyIrXi9A2hZk6NTXLIHNNdPZOvxDyJzG9nP+2JX+b6Xxr25SKNofS9sg2cEX72 45OGfnEsvVVNAtHPwsaPbIgHob+TJgdpO0C0Pm8Nv+TPxURmd8FadDNdnUJRZ2dr 2GTWrC2FmFmm63KeKsNqhKOg/+doMOVZ5Ko7qRqALuFPQH4MmtzEopfgjFyzGV+r Zu87DResIlFZGCCM/TEQ6HhxSI/IMinOHbLGQ8X2EmCUfTWM8IdlXyG00qj7FDXG fRrL4ytNcOlzrwCpeB5cIjD94CnAfJGLC9ZpO6tm+b5aU4X3mQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK+dFFUhEeD4RXi7FZuMMVt54IUeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZi MjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1NDkwYjhmM2MvZjAzNmUwMWItYTBjNi0z ZWM4LTljOTAtNjliOTkyMDJkYjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTk2YjI0YzQtYjY5Mi00Yjk0LTgz ZjUtMWRhNTQ5MGI4ZjNjL2U5NmIyNGM0LWI2OTItNGI5NC04M2Y1LTFkYTU0OTBi OGYzYy5jcmwwHwYDVR0jBBgwFoAUq7bjkDZGS9ALmtUiWl6jYHyd1XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZiMjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1 NDkwYjhmM2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgA1AAwk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIk+cZw7J+nczHa3BUCZQvu8xNLiRGXq0SNKONsLjH7tbn7k3rZa uXOsZoII6ND01sSrRWEy3gS+sphAOS2ajikJBqPlaCjt2cAVRiHfTAFdycxuD0AJ PpSrDL0O0hH5dtdEE4x3vYdM+szXvf5orYcsQM+tZ2yppNWT8xHujebjc+SPbssn 8EaOWz2nmJflXACd3xE8bhag5XzZGE7//eFs/bzfoqTCRvB3KTPMGwLf2wjaMJ5T 4V2E7uatDVsR/XADE+6ZWbEEo3nmjN/iCL1skh70SJrc8SNL9iKjH4AlJX5fACXo ZPSQgZVc23qbLZUSYIyZysbgfOVFYGe+8Cg= -----END CERTIFICATE-----Generated at Sun Apr 27 11:24:47 2025 by rpki-client