$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/e8f4510c-5de6-3f1e-8e6c-8a4f890a242d.roa File: e8f4510c-5de6-3f1e-8e6c-8a4f890a242d.roa (raw, json) Hash identifier: Oey4nTq9npi36rrlNJAJai9qp/G/Ew9fZ/cyHW+9PXc= Subject key identifier: C0:E4:F7:F6:4C:31:D9:17:C1:9C:82:85:00:44:5F:F9:7B:DD:7F:11 Certificate issuer: /CN=b32217e1-2473-49a5-919e-08e1896c5019 Certificate serial: 010D0C9F43285848E1A155BB0503FEB4B8AC4FE0 Authority key identifier: 48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/e8f4510c-5de6-3f1e-8e6c-8a4f890a242d.roa Signing time: Fri 14 Feb 2025 15:48:50 +0000 ROA not before: Fri 14 Feb 2025 15:48:50 +0000 ROA not after: Thu 15 May 2025 14:48:50 +0000 asID: 22191 IP address blocks: 2604:1dc0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:a1:55:bb:05:03:fe:b4:b8:ac:4f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32217e1-2473-49a5-919e-08e1896c5019 Validity Not Before: Feb 14 15:48:50 2025 GMT Not After : May 15 14:48:50 2025 GMT Subject: CN=643b30e7-7505-4570-b807-1938fc6cb664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:30:27:5f:25:f9:44:f4:f0:87:f4:1d:a6:8d: 67:61:7e:2f:c6:2d:09:78:e5:f1:d8:cf:68:c5:d6: 44:81:8c:e8:04:b3:7b:68:01:68:1f:21:12:e7:a3: 5f:dd:2b:d0:c8:c4:5c:e8:53:6d:d5:13:1b:86:ed: 5d:69:2e:43:6e:b1:97:86:0d:19:54:07:55:64:be: f7:eb:99:70:65:ea:6c:70:3b:4f:97:b2:03:96:39: 30:c9:5e:78:7a:66:de:84:59:32:76:f2:c6:b8:da: 4d:bd:17:97:18:4e:1f:d4:fe:3e:bd:7b:22:60:de: 87:e7:86:97:fe:ef:dd:02:00:a6:a6:7f:16:21:41: eb:c0:9b:fe:cb:ab:9c:27:29:62:fc:bd:78:a0:23: cd:b5:4c:b0:fc:c5:4f:8e:84:b0:e6:9e:21:26:1e: 09:4f:86:85:70:76:49:9f:0c:eb:6a:50:19:8a:d7: f4:e0:0a:f9:17:dd:7f:e8:91:df:22:88:58:82:00: 5f:f1:ac:61:05:14:92:4a:d8:5d:db:dc:b0:d3:3d: 4a:5b:40:5a:48:0f:2f:e3:82:55:b4:4a:8b:03:ab: 2b:ee:42:6a:89:f5:61:fa:0b:de:3c:dd:3c:35:68: 78:ab:6b:3c:16:25:48:78:d4:62:f1:15:89:00:ab: 1a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E4:F7:F6:4C:31:D9:17:C1:9C:82:85:00:44:5F:F9:7B:DD:7F:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/e8f4510c-5de6-3f1e-8e6c-8a4f890a242d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl X509v3 Authority Key Identifier: keyid:48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer sbgp-ipAddrBlock: critical IPv6: 2604:1dc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:7b:e1:e7:16:15:30:ea:1b:ee:ef:d3:79:a0:26:ba:64:9b: 16:46:d8:bd:b0:f6:13:e4:91:7a:b2:f6:bd:c9:db:82:b2:b1: 89:ed:2a:93:cf:f4:5d:25:64:9d:d0:3d:ff:99:20:b1:66:1c: f6:6d:7e:64:46:21:98:3f:a9:0d:3d:69:89:c1:0c:c9:a5:60: 88:2c:1a:a8:25:88:15:8d:c5:f9:db:e8:21:82:b9:97:1c:b1: 5c:73:1e:f7:43:00:2b:b8:a6:bf:a5:3f:5d:cd:f0:1b:13:12: 30:df:fd:f4:14:95:fc:83:7c:c6:dc:30:f8:f0:9d:e7:c2:c3: 9b:d9:bf:1d:52:7e:13:f0:15:e2:4e:6f:dc:00:18:11:bb:1f: 0b:3c:8d:9d:23:be:af:34:b9:22:dc:dd:32:ef:61:96:d0:ea: 5c:7f:02:6e:f8:81:c0:f1:ab:c8:4f:ee:b9:13:47:de:55:30: 26:70:b7:1e:69:00:19:c9:36:f1:35:fe:2d:57:ec:0c:ff:32: c8:0f:61:58:46:1f:c2:e6:da:af:98:e8:90:dd:62:a6:cb:ef: 10:6b:31:3f:26:85:33:7c:55:d7:3b:f8:0d:fe:f9:34:48:c4: c6:59:09:e2:de:cd:00:84:f3:7b:d2:c1:99:30:a4:8b:5c:6c: d7:30:67:3f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjhoVW7BQP+tLisT+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjMyMjE3ZTEtMjQ3My00OWE1LTkxOWUtMDhlMTg5NmM1 MDE5MB4XDTI1MDIxNDE1NDg1MFoXDTI1MDUxNTE0NDg1MFowLzEtMCsGA1UEAxMk NjQzYjMwZTctNzUwNS00NTcwLWI4MDctMTkzOGZjNmNiNjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjAnXyX5RPTwh/Qdpo1nYX4vxi0JeOXx2M9o xdZEgYzoBLN7aAFoHyES56Nf3SvQyMRc6FNt1RMbhu1daS5DbrGXhg0ZVAdVZL73 65lwZepscDtPl7IDljkwyV54embehFkydvLGuNpNvReXGE4f1P4+vXsiYN6H54aX /u/dAgCmpn8WIUHrwJv+y6ucJyli/L14oCPNtUyw/MVPjoSw5p4hJh4JT4aFcHZJ nwzralAZitf04Ar5F91/6JHfIohYggBf8axhBRSSSthd29yw0z1KW0BaSA8v44JV tEqLA6sr7kJqifVh+gvePN08NWh4q2s8FiVIeNRi8RWJAKsacQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMDk9/ZMMdkXwZyChQBEX/l73X8RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzIy MTdlMS0yNDczLTQ5YTUtOTE5ZS0wOGUxODk2YzUwMTkvZThmNDUxMGMtNWRlNi0z ZjFlLThlNmMtOGE0Zjg5MGEyNDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjMyMjE3ZTEtMjQ3My00OWE1LTkx OWUtMDhlMTg5NmM1MDE5L2IzMjIxN2UxLTI0NzMtNDlhNS05MTllLTA4ZTE4OTZj NTAxOS5jcmwwHwYDVR0jBBgwFoAUSK4N+KDXdJBYpFq1I6Zut7HAd7YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzIyMTdlMS0yNDczLTQ5YTUtOTE5ZS0wOGUx ODk2YzUwMTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQdwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAde+HnFhUw6hvu79N5oCa6ZJsWRti9sPYT5JF6sva9yduCsrGJ7SqT z/RdJWSd0D3/mSCxZhz2bX5kRiGYP6kNPWmJwQzJpWCILBqoJYgVjcX52+ghgrmX HLFccx73QwAruKa/pT9dzfAbExIw3/30FJX8g3zG3DD48J3nwsOb2b8dUn4T8BXi Tm/cABgRux8LPI2dI76vNLki3N0y72GW0OpcfwJu+IHA8avIT+65E0feVTAmcLce aQAZyTbxNf4tV+wM/zLID2FYRh/C5tqvmOiQ3WKmy+8QazE/JoUzfFXXO/gN/vk0 SMTGWQni3s0AhPN70sGZMKSLXGzXMGc/ -----END CERTIFICATE-----Generated at Tue Apr 29 16:14:41 2025 by rpki-client