$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/40979e81-e4d5-3b9e-aa17-d47ae9979638.roa File: 40979e81-e4d5-3b9e-aa17-d47ae9979638.roa (raw, json) Hash identifier: 5E0q02GtEouZDi5qUQUBLvCkyHjzhEIGv9pqz5M48gg= Subject key identifier: 22:C0:CE:92:88:B2:0A:E9:67:3F:42:E6:40:BF:1A:44:71:DA:1B:30 Certificate issuer: /CN=d23910be-77e9-4381-87eb-cb12cfc9b676 Certificate serial: 010D0C9F43285848D64107035AEBFF476C9EEE00 Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/40979e81-e4d5-3b9e-aa17-d47ae9979638.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 2606:9680:20c0::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:07:03:5a:eb:ff:47:6c:9e:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676 Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=3b6c5358-94e2-4e85-9f1d-02d670010ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b1:bc:24:0b:c4:15:47:40:99:df:fe:4d:24: 8b:2f:21:b0:d2:c7:31:e1:ac:2e:98:67:aa:39:a9: 9b:8c:87:6c:3d:84:40:99:b7:40:0e:04:15:73:4e: 35:a0:ac:dc:83:d8:d4:1a:8e:4f:6c:e2:e2:e4:7a: e6:c4:9a:28:ba:4c:ef:ad:e9:b0:1f:65:6a:e5:3a: 3b:4a:d0:4e:90:5e:5b:cd:3d:55:7b:1f:fe:77:aa: c9:ff:7c:9a:62:18:08:17:21:45:e4:03:fb:3d:2e: 16:3b:59:ac:f8:f3:5e:5f:49:67:27:55:0d:58:2a: fc:e1:c5:b1:ec:8f:65:5f:a5:90:ac:c2:17:51:b2: f4:78:ef:57:79:0e:7a:b9:d2:74:5f:45:3e:7a:fb: 51:fb:4d:4f:3d:35:8a:15:df:df:7c:a5:c1:9c:4b: 84:bd:36:31:8e:14:e0:c0:43:10:f5:9f:b3:86:e0: b7:75:5e:a3:8a:d6:c7:cb:f9:9f:d2:3d:01:90:e0: 01:82:06:10:91:f1:b5:6b:db:fa:9c:c2:e0:5c:56: f1:ee:d1:31:d5:78:fc:00:4f:f6:db:5f:c4:fc:7e: 3c:76:0f:ef:22:58:e0:34:33:87:48:c2:7a:53:c5: 34:01:84:b7:d4:48:0b:4c:41:49:09:35:d7:45:c5: 42:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C0:CE:92:88:B2:0A:E9:67:3F:42:E6:40:BF:1A:44:71:DA:1B:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/40979e81-e4d5-3b9e-aa17-d47ae9979638.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl X509v3 Authority Key Identifier: keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer sbgp-ipAddrBlock: critical IPv6: 2606:9680:20c0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:6e:7c:9e:9f:66:02:6c:56:31:a8:a5:4f:f5:da:b7:b0:2d: 20:dc:fc:57:19:8b:44:0b:a5:91:78:59:53:88:3e:f2:60:2f: 72:35:33:5c:85:4a:74:38:75:9f:b4:21:f8:bd:f4:9a:54:d7: 13:7b:2e:28:63:2e:22:62:a3:82:af:28:d9:0a:87:d8:c0:4e: a3:10:a0:a4:55:a9:fe:0b:a0:d6:75:77:1a:2a:ca:6a:51:8c: 16:bd:0e:4c:21:d2:8f:1d:e4:a2:ea:6c:a1:ea:cf:df:a5:cf: 96:56:3d:1e:6b:49:3b:2e:55:08:c4:39:52:17:76:21:04:81: 8d:64:c5:82:ae:d9:6b:8d:17:3d:32:bc:87:71:16:a8:c5:8a: 2f:28:20:82:a8:9e:2f:52:e4:97:ad:f4:50:eb:31:56:4f:24: 51:ed:08:09:60:a6:21:38:dd:ee:3c:ae:e8:20:3d:b0:18:35: 8c:8f:02:31:06:b5:15:5a:94:43:80:b7:ff:23:9d:d2:5e:08: c4:95:5d:f1:31:cf:69:db:08:dc:15:ec:0c:9e:57:f6:71:1e: 86:66:8d:63:85:07:4c:95:02:f5:3e:bc:d3:77:e2:5f:34:84: 6f:1e:dc:ac:52:10:b2:1f:78:31:e4:72:f2:0f:fa:64:2b:e6: 92:94:45:e4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjWQQcDWuv/R2ye7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIzOTEwYmUtNzdlOS00MzgxLTg3ZWItY2IxMmNmYzli Njc2MB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk M2I2YzUzNTgtOTRlMi00ZTg1LTlmMWQtMDJkNjcwMDEwZmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbG8JAvEFUdAmd/+TSSLLyGw0scx4awumGeq OambjIdsPYRAmbdADgQVc041oKzcg9jUGo5PbOLi5HrmxJooukzvremwH2Vq5To7 StBOkF5bzT1Vex/+d6rJ/3yaYhgIFyFF5AP7PS4WO1ms+PNeX0lnJ1UNWCr84cWx 7I9lX6WQrMIXUbL0eO9XeQ56udJ0X0U+evtR+01PPTWKFd/ffKXBnEuEvTYxjhTg wEMQ9Z+zhuC3dV6jitbHy/mf0j0BkOABggYQkfG1a9v6nMLgXFbx7tEx1Xj8AE/2 21/E/H48dg/vIljgNDOHSMJ6U8U0AYS31EgLTEFJCTXXRcVCcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCLAzpKIsgrpZz9C5kC/GkRx2hswMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjM5 MTBiZS03N2U5LTQzODEtODdlYi1jYjEyY2ZjOWI2NzYvNDA5NzllODEtZTRkNS0z YjllLWFhMTctZDQ3YWU5OTc5NjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDIzOTEwYmUtNzdlOS00MzgxLTg3 ZWItY2IxMmNmYzliNjc2L2QyMzkxMGJlLTc3ZTktNDM4MS04N2ViLWNiMTJjZmM5 YjY3Ni5jcmwwHwYDVR0jBBgwFoAU8u8UTSWnxBh7mYJba+AKrUJIapgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kMjM5MTBiZS03N2U5LTQzODEtODdlYi1jYjEy Y2ZjOWI2NzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgaWgCDA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHpufJ6fZgJsVjGopU/12rewLSDc/FcZi0QLpZF4WVOIPvJgL3I1 M1yFSnQ4dZ+0Ifi99JpU1xN7LihjLiJio4KvKNkKh9jATqMQoKRVqf4LoNZ1dxoq ympRjBa9Dkwh0o8d5KLqbKHqz9+lz5ZWPR5rSTsuVQjEOVIXdiEEgY1kxYKu2WuN Fz0yvIdxFqjFii8oIIKoni9S5Jet9FDrMVZPJFHtCAlgpiE43e48ruggPbAYNYyP AjEGtRValEOAt/8jndJeCMSVXfExz2nbCNwV7AyeV/ZxHoZmjWOFB0yVAvU+vNN3 4l80hG8e3KxSELIfeDHkcvIP+mQr5pKUReQ= -----END CERTIFICATE-----Generated at Sat Apr 26 16:33:18 2025 by rpki-client