$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482/3d6f486f-3da5-3554-aee4-3f1a62659f74.roa File: 3d6f486f-3da5-3554-aee4-3f1a62659f74.roa (raw, json) Hash identifier: VRyvw7EW8m4i3bIw038xdJ+i6RuSS+iDcNiB1tMFua8= Subject key identifier: D1:3D:A2:66:A7:1A:2C:99:12:AA:35:B6:9F:36:A7:AB:24:49:5D:1D Certificate issuer: /CN=1140553e-654b-4538-9cd3-d94d30ee0482 Certificate serial: 010D0C9F43285848EF616ACB0C05829FBBE9A980 Authority key identifier: 58:3D:4A:6B:4A:3E:7F:42:B3:36:1F:60:99:69:D0:A2:1D:19:71:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482/3d6f486f-3da5-3554-aee4-3f1a62659f74.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 1734 IP address blocks: 2620:0:930::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482/1140553e-654b-4538-9cd3-d94d30ee0482.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482/1140553e-654b-4538-9cd3-d94d30ee0482.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:6a:cb:0c:05:82:9f:bb:e9:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1140553e-654b-4538-9cd3-d94d30ee0482 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=e116f2c5-a75e-4c57-a89e-2219f3a1b9f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f5:60:7c:72:b2:91:b5:39:c7:bb:40:41:9b: 39:d2:bc:8c:62:d6:74:73:a2:6e:da:85:fd:7f:0e: 5e:8f:c6:32:a9:7f:2a:9b:92:db:dd:88:f3:f0:d4: cc:ee:32:95:ec:31:43:22:f5:db:b6:f3:2a:f2:21: 1e:52:f0:a0:29:c9:9c:7c:e2:40:33:75:59:28:2a: f6:aa:ce:a6:e8:d1:f7:8e:09:2a:f5:9e:59:92:8b: 9a:54:ab:cf:ac:9c:49:f6:39:39:77:7c:31:85:4e: 21:82:da:23:a4:40:14:02:e8:ac:b4:11:3c:14:82: 5b:8b:20:ce:a1:c7:11:4d:af:66:20:0d:c1:67:66: 82:91:7f:a1:45:b8:8b:50:f5:2c:42:ad:5a:58:28: 6b:db:32:6e:96:ba:7d:c8:35:b6:b6:f8:a5:7f:e7: 4e:18:8a:0b:92:70:09:40:55:55:5c:65:44:4f:46: 46:8e:13:a5:c2:55:95:ed:f5:e6:58:1b:c5:07:2e: ab:9c:87:a7:0e:ca:db:fe:2a:69:80:47:e5:a3:3b: 51:25:52:0d:49:b1:f4:39:1c:ef:93:fa:33:ce:cd: d1:2c:b0:bb:95:65:1d:64:dd:64:8c:f2:40:d0:b9: 27:93:64:b1:e9:42:72:17:d8:5d:b0:3a:06:67:f4: c4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3D:A2:66:A7:1A:2C:99:12:AA:35:B6:9F:36:A7:AB:24:49:5D:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482/3d6f486f-3da5-3554-aee4-3f1a62659f74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482/1140553e-654b-4538-9cd3-d94d30ee0482.crl X509v3 Authority Key Identifier: keyid:58:3D:4A:6B:4A:3E:7F:42:B3:36:1F:60:99:69:D0:A2:1D:19:71:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:930::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:7a:70:fe:04:55:8c:b1:45:9d:bd:51:0e:73:83:97:ed:bd: 6c:b9:92:cb:d3:c5:9c:96:13:c8:89:39:0c:57:b2:3c:2d:19: ff:64:4e:08:f7:7c:7e:ab:a3:6c:0a:3b:f7:d7:57:db:72:f0: 66:fd:76:5d:15:85:0b:d7:9c:bd:5f:0b:c2:6d:a6:f8:9c:5d: c5:66:17:4d:43:b7:1a:fa:2f:3c:e4:cd:bd:ee:d3:56:85:98: 73:da:69:1b:32:19:fb:71:35:fe:47:2e:df:66:83:48:a3:4c: a2:90:52:b9:9e:9c:94:09:7f:3c:78:47:84:8b:38:0c:9d:06: 53:5e:69:45:f9:9e:fc:72:0a:94:44:86:37:93:b4:25:49:61: b4:f7:12:fa:5a:69:e3:c4:79:97:37:a1:45:ec:b4:1f:a5:72: f6:7f:2d:1a:90:0f:cb:db:ab:2b:75:c4:6a:23:ad:d8:0f:e0: 36:06:c4:09:98:2c:fb:0e:16:d7:77:03:15:71:45:0b:86:aa: c5:b0:79:ef:33:97:29:30:b7:c1:0f:04:a4:b8:22:88:35:47: e5:84:6d:99:40:f4:59:5b:40:43:93:f9:df:45:cd:da:c8:81: ed:ee:60:49:9e:e6:58:05:74:1c:05:b8:8e:89:bc:ae:1e:8d: b7:1d:84:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjvYWrLDAWCn7vpqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTE0MDU1M2UtNjU0Yi00NTM4LTljZDMtZDk0ZDMwZWUw NDgyMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk ZTExNmYyYzUtYTc1ZS00YzU3LWE4OWUtMjIxOWYzYTFiOWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/VgfHKykbU5x7tAQZs50ryMYtZ0c6Ju2oX9 fw5ej8YyqX8qm5Lb3Yjz8NTM7jKV7DFDIvXbtvMq8iEeUvCgKcmcfOJAM3VZKCr2 qs6m6NH3jgkq9Z5ZkouaVKvPrJxJ9jk5d3wxhU4hgtojpEAUAuistBE8FIJbiyDO occRTa9mIA3BZ2aCkX+hRbiLUPUsQq1aWChr2zJulrp9yDW2tvilf+dOGIoLknAJ QFVVXGVET0ZGjhOlwlWV7fXmWBvFBy6rnIenDsrb/ippgEfloztRJVINSbH0ORzv k/ozzs3RLLC7lWUdZN1kjPJA0Lknk2Sx6UJyF9hdsDoGZ/TEEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNE9omanGiyZEqo1tp82p6skSV0dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMTQw NTUzZS02NTRiLTQ1MzgtOWNkMy1kOTRkMzBlZTA0ODIvM2Q2ZjQ4NmYtM2RhNS0z NTU0LWFlZTQtM2YxYTYyNjU5Zjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTE0MDU1M2UtNjU0Yi00NTM4LTlj ZDMtZDk0ZDMwZWUwNDgyLzExNDA1NTNlLTY1NGItNDUzOC05Y2QzLWQ5NGQzMGVl MDQ4Mi5jcmwwHwYDVR0jBBgwFoAUWD1Ka0o+f0KzNh9gmWnQoh0ZcdAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMTQwNTUzZS02NTRiLTQ1MzgtOWNkMy1kOTRk MzBlZTA0ODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAkw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACR6cP4EVYyxRZ29UQ5zg5ftvWy5ksvTxZyWE8iJOQxXsjwtGf9k Tgj3fH6ro2wKO/fXV9ty8Gb9dl0VhQvXnL1fC8JtpvicXcVmF01Dtxr6Lzzkzb3u 01aFmHPaaRsyGftxNf5HLt9mg0ijTKKQUrmenJQJfzx4R4SLOAydBlNeaUX5nvxy CpREhjeTtCVJYbT3EvpaaePEeZc3oUXstB+lcvZ/LRqQD8vbqyt1xGojrdgP4DYG xAmYLPsOFtd3AxVxRQuGqsWwee8zlykwt8EPBKS4Iog1R+WEbZlA9FlbQEOT+d9F zdrIge3uYEme5lgFdBwFuI6JvK4ejbcdhFo= -----END CERTIFICATE-----Generated at Mon Apr 28 10:41:32 2025 by rpki-client