$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7e0c7d4f-86bb-3685-b1b4-7cc65c6f26ed.roa File: 7e0c7d4f-86bb-3685-b1b4-7cc65c6f26ed.roa (raw, json) Hash identifier: x/USclGhoRChjQxIq3JNmZnZG5CHQNuEJXbAVY1JNbA= Subject key identifier: 51:48:68:56:B6:CD:3D:F2:E2:D1:FA:51:22:1F:66:70:FE:50:BA:81 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F432858495ABEC449B8042A46D7201488 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7e0c7d4f-86bb-3685-b1b4-7cc65c6f26ed.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 21949 IP address blocks: 2606:880::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:c4:49:b8:04:2a:46:d7:20:14:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=4cc6785d-da2d-40ae-a158-8f27fd7c965f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8b:1b:5f:5d:e6:2b:ef:6e:3d:92:ef:c0:d3: 8f:08:24:c3:8b:70:e0:9e:2d:dd:09:40:cd:f7:9e: 51:13:a2:69:eb:a1:99:0c:58:f9:b3:98:20:83:99: 13:72:11:a2:25:0c:8d:7f:24:1d:c3:bb:a4:ef:08: 9a:2e:43:fc:1c:6a:f8:b7:49:53:ef:06:06:81:be: 48:d9:60:bb:aa:66:f8:29:3a:31:a6:f5:a5:f1:ad: d6:92:8e:72:49:5d:f0:87:d9:9c:ad:f0:d8:72:4c: 36:74:d3:20:88:14:f6:5c:b4:fe:12:ae:7b:cb:e5: d9:7b:f8:18:c3:02:89:ef:d7:28:ca:6e:26:04:db: 9c:e8:9e:8c:e1:ec:de:b6:93:6a:74:cd:c1:0d:af: 70:73:a6:50:f8:75:67:ad:03:e2:af:d2:97:eb:86: 51:71:90:f3:b7:15:ae:56:f4:73:90:3d:78:a9:a9: 6f:8f:9a:fa:38:d6:54:3e:46:3e:b7:25:80:74:ee: 87:08:7e:07:a3:a1:a5:92:a6:a7:96:09:16:27:f1: 93:94:e9:51:72:8a:c3:62:d4:86:f6:1f:df:98:b9: 1d:62:44:6f:d1:91:a5:12:98:36:21:1a:5d:a4:9d: 1b:0f:70:2c:af:b8:67:44:1b:60:c5:fc:14:c9:1b: 0a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:48:68:56:B6:CD:3D:F2:E2:D1:FA:51:22:1F:66:70:FE:50:BA:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7e0c7d4f-86bb-3685-b1b4-7cc65c6f26ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv6: 2606:880::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:1a:70:ba:4c:f7:8d:cf:d2:41:22:4e:8e:46:6a:b0:3c:5d: e8:69:50:c5:c4:32:eb:40:7b:7e:39:b1:57:57:1b:06:55:a7: 4f:d2:1a:7c:88:9e:d3:5a:b1:50:3d:c4:b1:da:8a:36:15:99: ca:7f:6d:80:ed:6d:f8:0e:69:d1:ff:2a:57:05:b7:cc:92:f8: 2e:7e:54:e5:4b:0d:0f:83:2f:62:e1:a9:95:d3:90:90:39:17: 46:a8:1e:d4:6d:1a:41:10:69:ce:73:3f:e2:3c:ce:68:a6:15: df:61:a9:53:7f:e9:8b:98:a5:8a:d7:22:7c:ce:18:61:ef:61: 19:fb:18:10:11:15:fa:46:7b:f2:d3:9f:aa:fe:4a:71:e9:30: a5:5f:61:4e:de:3a:e7:ba:39:2a:ca:dd:82:d6:99:b5:a2:d1: 91:6e:68:ad:a2:e8:a0:bc:1e:db:3d:e1:d5:66:a3:0b:f8:13: 01:db:bb:37:2d:f0:fd:ea:43:3d:7e:0c:45:8b:10:f5:99:58: 43:06:cf:41:a3:cc:ee:b6:b4:9b:42:ad:2d:4f:89:b5:d9:7c: 2a:3f:01:21:66:f4:02:81:f4:d0:7e:5f:fb:aa:77:97:95:ae: be:14:8b:05:f8:cc:e2:8a:4c:09:8e:7f:08:48:e3:c0:ae:91: bd:2d:40:8b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElavsRJuAQqRtcgFIgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk NGNjNjc4NWQtZGEyZC00MGFlLWExNTgtOGYyN2ZkN2M5NjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwosbX13mK+9uPZLvwNOPCCTDi3Dgni3dCUDN 955RE6Jp66GZDFj5s5ggg5kTchGiJQyNfyQdw7uk7wiaLkP8HGr4t0lT7wYGgb5I 2WC7qmb4KToxpvWl8a3Wko5ySV3wh9mcrfDYckw2dNMgiBT2XLT+Eq57y+XZe/gY wwKJ79coym4mBNuc6J6M4ezetpNqdM3BDa9wc6ZQ+HVnrQPir9KX64ZRcZDztxWu VvRzkD14qalvj5r6ONZUPkY+tyWAdO6HCH4Ho6GlkqanlgkWJ/GTlOlRcorDYtSG 9h/fmLkdYkRv0ZGlEpg2IRpdpJ0bD3Asr7hnRBtgxfwUyRsK3wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFFIaFa2zT3y4tH6USIfZnD+ULqBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvN2UwYzdkNGYtODZiYi0z Njg1LWIxYjQtN2NjNjVjNmYyNmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYIgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCQGnC6TPeNz9JBIk6ORmqwPF3oaVDFxDLrQHt+ObFXVxsGVadP0hp8 iJ7TWrFQPcSx2oo2FZnKf22A7W34DmnR/ypXBbfMkvguflTlSw0Pgy9i4amV05CQ ORdGqB7UbRpBEGnOcz/iPM5ophXfYalTf+mLmKWK1yJ8zhhh72EZ+xgQERX6Rnvy 05+q/kpx6TClX2FO3jrnujkqyt2C1pm1otGRbmitouigvB7bPeHVZqML+BMB27s3 LfD96kM9fgxFixD1mVhDBs9Bo8zutrSbQq0tT4m12XwqPwEhZvQCgfTQfl/7qneX la6+FIsF+MziikwJjn8ISOPArpG9LUCL -----END CERTIFICATE-----Generated at Tue Apr 8 10:12:46 2025 by rpki-client