$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/13c1aa45-1be2-3120-b677-18f0d15c80ce.roa File: 13c1aa45-1be2-3120-b677-18f0d15c80ce.roa (raw, json) Hash identifier: 8r9jYLFxtt5ddbKz+xj3wSfBneSV0UU4+vPOOQ9ZP3U= Subject key identifier: B8:8B:99:3D:6A:69:4E:FD:45:71:BB:7B:9B:E7:82:BB:D1:C4:53:B8 Certificate issuer: /CN=e5c2b906-947b-452e-a546-6011e1a0e535 Certificate serial: 010D0C9F43285848F65BF521C78CE708AC8FAB00 Authority key identifier: 07:4F:E3:D0:AA:F0:11:BF:7A:CB:C8:51:6B:21:E5:BC:9E:5E:9F:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/13c1aa45-1be2-3120-b677-18f0d15c80ce.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 39941 IP address blocks: 2001:504:b::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/e5c2b906-947b-452e-a546-6011e1a0e535.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/e5c2b906-947b-452e-a546-6011e1a0e535.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:f5:21:c7:8c:e7:08:ac:8f:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5c2b906-947b-452e-a546-6011e1a0e535 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=b71ef1a9-ee38-480f-bad7-6973928301e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:95:56:06:de:1d:0c:4d:83:ef:75:f2:98:b2: c6:c4:cd:00:db:f3:0d:ff:e4:ba:61:ac:aa:75:f0: 0d:75:82:0f:3f:18:9a:fc:57:d6:3e:84:64:4b:41: 47:ec:29:32:f5:67:1d:b5:7b:5d:4a:d7:dd:28:ef: c8:40:40:4f:6b:a8:b3:32:4c:1e:fa:80:a9:a7:c1: 4e:6f:fb:87:f0:d0:34:c9:23:69:04:25:56:c1:d1: 1a:a8:7b:71:31:d3:41:19:e0:7d:94:76:15:e2:f0: 30:b3:8f:c9:85:0f:63:d8:ba:83:ed:9e:4a:64:23: 73:bd:e2:9b:ca:46:17:e3:e7:51:c0:82:4a:36:46: 72:20:df:f7:a7:82:05:78:ef:70:da:31:1a:6e:41: 10:2f:f9:c6:c7:fe:4e:02:7f:f0:a4:5d:f7:e4:d4: 3f:f4:d2:c9:90:63:a4:19:3b:58:15:10:2b:c6:c9: 55:97:cc:df:89:48:f2:ae:97:0a:81:08:33:c1:2a: 05:eb:2e:ab:66:c1:8d:7b:eb:65:90:94:ee:2d:a8: 8c:32:29:78:55:50:46:43:12:f6:4e:92:64:5b:40: f8:2f:7a:17:43:bf:75:6e:21:7d:6a:20:ad:94:55: 77:fc:40:a6:07:b2:bb:b0:ba:1a:c5:4d:a4:5e:67: 92:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8B:99:3D:6A:69:4E:FD:45:71:BB:7B:9B:E7:82:BB:D1:C4:53:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/13c1aa45-1be2-3120-b677-18f0d15c80ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/e5c2b906-947b-452e-a546-6011e1a0e535.crl X509v3 Authority Key Identifier: keyid:07:4F:E3:D0:AA:F0:11:BF:7A:CB:C8:51:6B:21:E5:BC:9E:5E:9F:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ca:40:ee:03:ea:fe:c2:5c:dd:e1:60:dd:1d:56:af:fb:32: d8:19:3e:60:3c:ba:6a:d2:55:a5:4e:2f:de:ac:04:4f:13:59: 62:ac:8e:98:f2:b7:c1:cd:d4:9c:57:1e:bf:a5:ce:81:a8:02: 74:61:76:f7:21:5e:9d:13:b0:06:f4:36:96:2c:b2:75:84:e8: f1:fb:ad:93:52:57:e2:e2:83:53:ce:a1:72:d7:c0:ce:d8:d4: f3:3d:51:a0:8b:c3:03:8c:2f:0d:3d:3f:ac:e1:a2:9a:8d:b6: 27:83:86:f4:11:6a:a6:14:e0:d2:50:da:e1:67:74:87:1f:31: 89:42:8f:58:eb:13:c9:c1:ab:15:85:52:b3:08:e7:ba:65:5a: dd:fe:2c:56:b0:f7:6e:a2:83:a4:1a:e4:1f:a7:f9:66:a9:9f: 9e:2f:52:38:82:d9:51:9d:fb:6c:0d:db:56:fc:a0:a9:61:f5: ed:55:db:1b:d6:97:47:50:22:0c:98:6e:13:80:64:63:3a:4a: e4:e4:7b:1d:c0:47:1d:c3:6e:4f:8b:57:08:b3:c1:0b:de:00: 7b:7c:b1:ec:b8:a1:9e:bb:ab:9f:65:16:21:b0:84:3c:0b:c0: 40:00:bc:04:a9:ca:d5:d4:88:4c:d1:da:fe:4a:75:23:98:ff: c5:4e:68:1b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj2W/Uhx4znCKyPqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTVjMmI5MDYtOTQ3Yi00NTJlLWE1NDYtNjAxMWUxYTBl NTM1MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk YjcxZWYxYTktZWUzOC00ODBmLWJhZDctNjk3MzkyODMwMWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZVWBt4dDE2D73XymLLGxM0A2/MN/+S6Yayq dfANdYIPPxia/FfWPoRkS0FH7Cky9WcdtXtdStfdKO/IQEBPa6izMkwe+oCpp8FO b/uH8NA0ySNpBCVWwdEaqHtxMdNBGeB9lHYV4vAws4/JhQ9j2LqD7Z5KZCNzveKb ykYX4+dRwIJKNkZyIN/3p4IFeO9w2jEabkEQL/nGx/5OAn/wpF335NQ/9NLJkGOk GTtYFRArxslVl8zfiUjyrpcKgQgzwSoF6y6rZsGNe+tlkJTuLaiMMil4VVBGQxL2 TpJkW0D4L3oXQ791biF9aiCtlFV3/ECmB7K7sLoaxU2kXmeSKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLiLmT1qaU79RXG7e5vngrvRxFO4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lNWMy YjkwNi05NDdiLTQ1MmUtYTU0Ni02MDExZTFhMGU1MzUvMTNjMWFhNDUtMWJlMi0z MTIwLWI2NzctMThmMGQxNWM4MGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTVjMmI5MDYtOTQ3Yi00NTJlLWE1 NDYtNjAxMWUxYTBlNTM1L2U1YzJiOTA2LTk0N2ItNDUyZS1hNTQ2LTYwMTFlMWEw ZTUzNS5jcmwwHwYDVR0jBBgwFoAUB0/j0KrwEb96y8hRayHlvJ5en8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lNWMyYjkwNi05NDdiLTQ1MmUtYTU0Ni02MDEx ZTFhMGU1MzUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADrKQO4D6v7CXN3hYN0dVq/7MtgZPmA8umrSVaVOL96sBE8TWWKs jpjyt8HN1JxXHr+lzoGoAnRhdvchXp0TsAb0NpYssnWE6PH7rZNSV+Lig1POoXLX wM7Y1PM9UaCLwwOMLw09P6zhopqNtieDhvQRaqYU4NJQ2uFndIcfMYlCj1jrE8nB qxWFUrMI57plWt3+LFaw926ig6Qa5B+n+Wapn54vUjiC2VGd+2wN21b8oKlh9e1V 2xvWl0dQIgyYbhOAZGM6SuTkex3ARx3Dbk+LVwizwQveAHt8sey4oZ67q59lFiGw hDwLwEAAvASpytXUiEzR2v5KdSOY/8VOaBs= -----END CERTIFICATE-----Generated at Mon May 5 09:10:02 2025 by rpki-client