$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/f6ca69fc-afe5-3eea-8a7a-15f18ae6e21a.roa File: f6ca69fc-afe5-3eea-8a7a-15f18ae6e21a.roa (raw, json) Hash identifier: 62s9UoEkgCxFXSZ5kDsHjUyyuKL3EAQQjwU5qzIkCqE= Subject key identifier: 4F:1D:38:63:34:EC:0A:7C:E7:01:D0:72:5A:6C:F8:A2:7F:AA:9F:88 Certificate issuer: /CN=42b6e093-f636-4e25-936b-6fc6232f50c5 Certificate serial: 010D0C9F43285849446933074558A13BA14E9A40 Authority key identifier: DF:25:1D:13:0F:4C:E6:2B:9C:69:A3:4E:C0:E6:AA:14:9E:58:1E:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/f6ca69fc-afe5-3eea-8a7a-15f18ae6e21a.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 955 IP address blocks: 2606:82c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/42b6e093-f636-4e25-936b-6fc6232f50c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/42b6e093-f636-4e25-936b-6fc6232f50c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:33:07:45:58:a1:3b:a1:4e:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42b6e093-f636-4e25-936b-6fc6232f50c5 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=833e9d56-04e7-42b6-a41a-5825d790d82b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:6e:c7:11:1e:3e:e7:6c:ca:ec:e5:02:f9:49: a5:31:6b:5b:b0:dd:81:8a:54:63:fc:30:87:c8:32: 07:63:9e:9a:61:ac:f7:9f:8b:c6:e6:1b:5a:b0:d2: fc:1d:e6:11:eb:07:0b:32:b9:b2:ef:d7:06:5b:f7: e3:ab:2a:28:c5:aa:d6:f7:fe:b2:0f:ad:1c:9d:f4: 95:bb:ee:a0:c2:c3:77:d2:e7:be:a6:57:d7:c4:48: b2:52:e1:eb:a7:f6:39:45:cb:42:21:1c:88:39:b2: 51:6c:06:9e:82:70:71:2f:c3:84:28:1e:3b:61:ef: f0:3c:04:45:6c:a7:e6:08:d1:49:c5:c1:c5:8b:53: 44:21:a6:31:34:c9:cc:64:9e:63:c5:c6:da:07:4b: e6:b1:ee:19:3e:35:44:46:1e:82:0a:45:90:6b:c0: 45:56:34:fd:eb:bb:30:ac:ef:d0:8c:ea:03:09:41: c8:9e:a9:58:f0:63:8f:aa:e9:86:7b:d9:31:d5:07: 11:c8:0f:9f:01:fa:d2:76:2a:3f:19:b0:a0:64:73: c0:57:16:df:53:e4:23:aa:cf:ca:63:14:d1:fa:98: 67:fc:da:95:7c:8d:f2:af:24:f0:2c:d4:3b:49:00: 2b:9d:33:83:63:ab:71:2e:61:c6:62:41:43:21:42: 25:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1D:38:63:34:EC:0A:7C:E7:01:D0:72:5A:6C:F8:A2:7F:AA:9F:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/f6ca69fc-afe5-3eea-8a7a-15f18ae6e21a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/42b6e093-f636-4e25-936b-6fc6232f50c5.crl X509v3 Authority Key Identifier: keyid:DF:25:1D:13:0F:4C:E6:2B:9C:69:A3:4E:C0:E6:AA:14:9E:58:1E:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5.cer sbgp-ipAddrBlock: critical IPv6: 2606:82c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:d4:17:11:39:65:ff:d4:2e:34:56:e4:a5:14:83:eb:af:3b: 19:9c:d9:d8:36:70:af:d1:f9:0e:0b:71:c8:d9:ad:44:09:9f: 19:39:8b:d2:a6:dc:24:ba:e6:8f:22:20:1b:09:80:c5:5e:2c: 29:c2:45:1a:ae:a4:79:57:11:94:ee:a7:7b:17:26:02:c3:62: 0d:79:9a:63:bd:4d:ca:a5:b8:d8:04:f0:a7:8d:ca:36:9e:f2: cf:26:94:4d:5b:b1:10:a0:58:0b:1f:9b:cb:2c:ac:6d:9b:c2: 2d:00:3e:f4:02:53:13:8a:80:c2:b8:e8:71:d3:93:60:e4:7d: 21:50:b5:9c:b0:ab:3d:af:e0:a4:6e:dc:1a:34:9f:de:93:ca: f7:a1:2d:6e:a2:6f:66:29:82:80:54:1e:f3:fd:63:59:f3:9a: bd:78:af:c6:96:7f:5f:ae:27:99:76:2f:18:b5:ab:ec:44:3e: 4e:2a:63:cf:d8:9c:d9:da:5e:cb:d9:e6:d7:8b:73:ea:2c:37: c9:f1:f0:69:79:7c:f5:e6:be:58:a5:60:2f:ef:dd:2b:e4:e5: 7c:e3:dc:7d:c6:d3:69:24:88:87:bb:05:2a:93:9b:44:6a:b5: c1:c2:2c:ac:ad:5b:b2:3a:0f:e5:f1:56:1e:31:84:a3:33:f2: af:ef:05:83 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElEaTMHRVihO6FOmkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJiNmUwOTMtZjYzNi00ZTI1LTkzNmItNmZjNjIzMmY1 MGM1MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk ODMzZTlkNTYtMDRlNy00MmI2LWE0MWEtNTgyNWQ3OTBkODJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6G7HER4+52zK7OUC+UmlMWtbsN2BilRj/DCH yDIHY56aYaz3n4vG5htasNL8HeYR6wcLMrmy79cGW/fjqyooxarW9/6yD60cnfSV u+6gwsN30ue+plfXxEiyUuHrp/Y5RctCIRyIObJRbAaegnBxL8OEKB47Ye/wPARF bKfmCNFJxcHFi1NEIaYxNMnMZJ5jxcbaB0vmse4ZPjVERh6CCkWQa8BFVjT967sw rO/QjOoDCUHInqlY8GOPqumGe9kx1QcRyA+fAfrSdio/GbCgZHPAVxbfU+Qjqs/K YxTR+phn/NqVfI3yryTwLNQ7SQArnTODY6txLmHGYkFDIUIlvQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE8dOGM07Ap85wHQclps+KJ/qp+IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MmI2 ZTA5My1mNjM2LTRlMjUtOTM2Yi02ZmM2MjMyZjUwYzUvZjZjYTY5ZmMtYWZlNS0z ZWVhLThhN2EtMTVmMThhZTZlMjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDJiNmUwOTMtZjYzNi00ZTI1LTkz NmItNmZjNjIzMmY1MGM1LzQyYjZlMDkzLWY2MzYtNGUyNS05MzZiLTZmYzYyMzJm NTBjNS5jcmwwHwYDVR0jBBgwFoAU3yUdEw9M5iucaaNOwOaqFJ5YHjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MmI2ZTA5My1mNjM2LTRlMjUtOTM2Yi02ZmM2 MjMyZjUwYzUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgaCwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBu1BcROWX/1C40VuSlFIPrrzsZnNnYNnCv0fkOC3HI2a1ECZ8ZOYvS ptwkuuaPIiAbCYDFXiwpwkUarqR5VxGU7qd7FyYCw2INeZpjvU3KpbjYBPCnjco2 nvLPJpRNW7EQoFgLH5vLLKxtm8ItAD70AlMTioDCuOhx05Ng5H0hULWcsKs9r+Ck btwaNJ/ek8r3oS1uom9mKYKAVB7z/WNZ85q9eK/Gln9frieZdi8YtavsRD5OKmPP 2JzZ2l7L2ebXi3PqLDfJ8fBpeXz15r5YpWAv790r5OV849x9xtNpJIiHuwUqk5tE arXBwiysrVuyOg/l8VYeMYSjM/Kv7wWD -----END CERTIFICATE-----Generated at Sun Apr 6 12:40:59 2025 by rpki-client