$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/f78860c2-0b10-3d41-9efe-8347af34308d.roa File: f78860c2-0b10-3d41-9efe-8347af34308d.roa (raw, json) Hash identifier: 0aOMAwINU2m3VHoeZxzFUkDoAcFydDL5gd6FsGAWJmQ= Subject key identifier: 14:CC:20:C9:4F:B4:A8:3A:DD:29:08:BD:FA:87:60:7C:40:41:7C:10 Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Certificate serial: 010D0C9F43285848D2113D0EC7D97A0DDE7C2280 Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/f78860c2-0b10-3d41-9efe-8347af34308d.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 396501 IP address blocks: 2620:10a:80ac::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:3d:0e:c7:d9:7a:0d:de:7c:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=d52f1eee-b107-4c0c-96fe-1cbcb606a182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f2:fa:de:08:50:4b:aa:9a:0f:ab:b0:14:c8: 4e:3b:2b:5b:68:3d:13:2b:05:75:7f:c9:6b:a9:ac: 71:b4:53:63:b8:93:c6:b2:31:4b:98:87:a1:1a:1f: 36:1d:e0:64:af:bb:ca:05:fc:5f:db:15:ab:7c:5c: 55:7c:3a:14:b3:7a:ab:d0:c6:f0:06:9a:1c:00:f7: 25:e0:56:f6:f8:f9:35:60:95:79:dc:e4:e5:bb:ed: fd:1e:30:81:d3:1b:23:b0:c0:af:21:72:65:73:69: 53:72:b7:9a:1f:35:b1:78:0a:a6:ae:82:f0:2b:45: 07:ea:09:2f:f1:ac:37:41:16:3c:9f:76:c0:ab:ff: 46:a2:08:40:8b:95:79:23:f3:2a:8e:d8:37:31:72: a0:ae:f7:d1:11:84:ee:a6:69:0f:e4:6c:29:fc:e3: a5:17:17:5a:59:6c:77:7f:1f:55:a7:35:4b:23:86: 3d:d2:36:4d:35:e2:3d:64:00:bd:26:90:d0:05:ec: ea:6c:21:49:55:60:0d:bc:a9:64:2f:2c:98:8a:5a: bb:4d:ef:2d:e6:88:7c:ca:ac:f8:5c:74:0f:b8:2c: 6e:6a:11:1d:c8:53:c2:e7:b1:d2:37:fc:f0:6c:e1: 2c:e4:7c:23:ef:40:ac:9f:64:09:01:2a:16:a3:50: 85:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:CC:20:C9:4F:B4:A8:3A:DD:29:08:BD:FA:87:60:7C:40:41:7C:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/f78860c2-0b10-3d41-9efe-8347af34308d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl X509v3 Authority Key Identifier: keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer sbgp-ipAddrBlock: critical IPv6: 2620:10a:80ac::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:c2:e8:f4:4f:e5:ce:90:c2:8f:9d:bc:07:c7:44:49:7b:74: 72:7a:5b:fa:8f:ca:f2:c0:97:34:56:9a:ae:da:28:d0:14:83: 01:93:86:92:c1:f4:4c:51:69:f7:22:a3:6b:ec:d6:5a:53:13: 41:0b:12:ce:f1:45:07:3b:16:58:5b:92:bb:49:74:69:87:92: b2:b3:bb:cc:59:47:33:46:05:8f:c1:c4:68:40:09:e1:94:cb: 32:05:ad:c4:aa:4d:b3:b0:7c:f7:3c:ad:2b:9f:17:03:5f:6e: 6f:5b:56:29:b4:79:5c:c9:11:91:64:69:f7:a7:f3:b0:aa:67: e9:c6:36:ad:40:6f:4f:20:ab:4a:40:35:38:24:3f:08:28:e0: 4d:27:79:87:42:dd:dc:a1:37:85:dd:ce:33:f2:ad:26:ec:09: ae:00:e2:c8:4d:ef:4e:2f:fc:d4:1f:5c:62:30:f9:aa:fa:da: b6:34:d6:0f:38:a5:3b:20:1c:54:57:41:e6:ae:3b:31:0c:9f: 07:f7:bf:d8:37:e9:2f:28:8e:c7:92:9c:91:41:33:4a:18:3e: 86:e3:46:eb:7f:e7:b8:c6:48:8d:f6:78:9b:c8:04:10:e6:30: ed:2b:21:82:fa:bc:2c:06:7e:d7:36:6a:02:ae:80:09:dc:7f: 18:ed:ec:65 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjSET0Ox9l6Dd58IoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx OGU4MB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZDUyZjFlZWUtYjEwNy00YzBjLTk2ZmUtMWNiY2I2MDZhMTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/L63ghQS6qaD6uwFMhOOytbaD0TKwV1f8lr qaxxtFNjuJPGsjFLmIehGh82HeBkr7vKBfxf2xWrfFxVfDoUs3qr0MbwBpocAPcl 4Fb2+Pk1YJV53OTlu+39HjCB0xsjsMCvIXJlc2lTcreaHzWxeAqmroLwK0UH6gkv 8aw3QRY8n3bAq/9GoghAi5V5I/Mqjtg3MXKgrvfREYTupmkP5Gwp/OOlFxdaWWx3 fx9VpzVLI4Y90jZNNeI9ZAC9JpDQBezqbCFJVWANvKlkLyyYilq7Te8t5oh8yqz4 XHQPuCxuahEdyFPC57HSN/zwbOEs5Hwj70Csn2QJASoWo1CFJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBTMIMlPtKg63SkIvfqHYHxAQXwQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2 MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvZjc4ODYwYzItMGIxMC0z ZDQxLTllZmUtODM0N2FmMzQzMDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2 MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5 NzZhYjE4ZTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABCoCs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJLC6PRP5c6Qwo+dvAfHREl7dHJ6W/qPyvLAlzRWmq7aKNAUgwGT hpLB9ExRafcio2vs1lpTE0ELEs7xRQc7FlhbkrtJdGmHkrKzu8xZRzNGBY/BxGhA CeGUyzIFrcSqTbOwfPc8rSufFwNfbm9bVim0eVzJEZFkafen87CqZ+nGNq1Ab08g q0pANTgkPwgo4E0neYdC3dyhN4XdzjPyrSbsCa4A4shN704v/NQfXGIw+ar62rY0 1g84pTsgHFRXQeauOzEMnwf3v9g36S8ojseSnJFBM0oYPobjRut/57jGSI32eJvI BBDmMO0rIYL6vCwGftc2agKugAncfxjt7GU= -----END CERTIFICATE-----Generated at Mon Apr 28 10:37:39 2025 by rpki-client