$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3b0d4d50-1cb7-3c73-b058-64185717f9ce.roa File: 3b0d4d50-1cb7-3c73-b058-64185717f9ce.roa (raw, json) Hash identifier: bs5ieKBKO9tOQlvwp79+zytHFkJJL7wtZxs+t3VkBrI= Subject key identifier: 22:DF:82:CA:F3:19:BC:8B:83:BE:27:73:21:4D:A5:B3:A5:BA:61:FF Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F43285848A99625D71EA0DB9A03D26F80 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3b0d4d50-1cb7-3c73-b058-64185717f9ce.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397182 IP address blocks: 2606:c7c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:25:d7:1e:a0:db:9a:03:d2:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=d10f0e57-6699-4164-93a3-9e595ee75772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a3:80:b2:3c:1d:8a:f1:1c:0f:b9:40:3e:7e: 22:a1:69:c2:79:63:7f:b0:f5:b4:37:1e:5a:1d:54: 11:10:83:ba:c5:66:51:9f:ca:4b:81:07:4d:ee:c2: 87:8c:b3:e7:bf:fe:3f:47:6a:45:c3:1e:de:24:0c: 42:a2:2c:2a:6d:68:11:31:c3:d8:0d:d2:5c:8b:fa: d9:11:18:aa:c3:69:a8:5f:15:d1:1d:b6:52:3a:e5: 50:aa:bd:5b:c2:44:58:a1:55:f9:5d:8a:72:c3:cb: 0d:69:d3:ac:9e:9c:19:99:41:01:62:72:f8:2c:7d: 69:26:ef:70:e3:7d:78:53:ff:bd:16:10:5e:52:7e: 75:91:d9:e9:4d:73:e8:08:28:e9:09:86:8f:31:c8: 1b:0e:cf:06:db:c1:cb:a8:99:0d:6d:e0:60:85:4a: 13:ae:f7:c8:73:5a:df:d6:62:69:1b:40:91:3d:1c: 0d:73:ec:5c:81:e3:cf:8d:35:74:b0:48:03:01:bd: 66:72:57:03:9e:f7:48:54:b0:4a:65:b1:74:45:a9: 60:ce:3b:cf:fd:bf:47:c0:53:df:5c:6a:1b:d8:d7: ae:0e:77:59:4e:61:91:a9:ab:59:55:15:de:b4:c3: 31:89:4a:93:5a:f0:a5:0d:f7:80:d9:70:1a:6e:eb: 41:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DF:82:CA:F3:19:BC:8B:83:BE:27:73:21:4D:A5:B3:A5:BA:61:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/3b0d4d50-1cb7-3c73-b058-64185717f9ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv6: 2606:c7c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ff:aa:64:b1:4f:e8:79:d6:60:69:a8:43:7b:8f:ad:57:01: 0f:76:95:d7:4e:f7:71:b0:1d:aa:81:90:bb:31:e6:cd:41:01: d9:5a:7e:25:f4:d1:61:10:20:90:e4:99:f7:0b:e5:f5:43:c4: 82:7c:8e:7e:59:af:64:5f:16:6b:e5:10:26:c5:a1:70:bf:c5: 32:5f:6b:4f:80:71:0f:7e:1f:ae:db:0e:d1:1f:f1:30:ca:53: 54:13:cd:55:51:b2:7d:55:91:72:ad:c8:8e:32:ba:1d:a0:75: 8c:80:1d:fa:47:8c:6f:5d:a1:76:36:99:5e:23:5e:f6:f6:a3: 7b:21:9c:5b:24:27:b5:7f:bd:9d:46:bb:65:2d:a4:0b:3d:c4: 81:01:3e:67:20:74:4f:2e:06:33:75:5f:af:67:d9:bd:19:0f: 86:07:29:9d:47:fc:25:5c:11:72:73:c0:49:3c:52:72:d4:2a: 43:8e:26:95:6e:88:20:90:2e:4f:2a:72:de:a4:d6:07:9d:5e: b4:a7:d9:90:38:c1:6d:b1:db:a8:10:0f:81:b8:38:c2:51:6c: 44:50:43:0f:43:34:cc:3d:74:7c:88:88:3a:e2:6e:dc:f3:32: f9:c7:73:c7:7b:d0:2e:9c:07:dc:ab:a9:36:1f:5f:49:3f:e3: 78:13:8c:d3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEipliXXHqDbmgPSb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDEwZjBlNTctNjY5OS00MTY0LTkzYTMtOWU1OTVlZTc1NzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaOAsjwdivEcD7lAPn4ioWnCeWN/sPW0Nx5a HVQREIO6xWZRn8pLgQdN7sKHjLPnv/4/R2pFwx7eJAxCoiwqbWgRMcPYDdJci/rZ ERiqw2moXxXRHbZSOuVQqr1bwkRYoVX5XYpyw8sNadOsnpwZmUEBYnL4LH1pJu9w 4314U/+9FhBeUn51kdnpTXPoCCjpCYaPMcgbDs8G28HLqJkNbeBghUoTrvfIc1rf 1mJpG0CRPRwNc+xcgePPjTV0sEgDAb1mclcDnvdIVLBKZbF0RalgzjvP/b9HwFPf XGob2NeuDndZTmGRqatZVRXetMMxiUqTWvClDfeA2XAabutBGQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCLfgsrzGbyLg74ncyFNpbOlumH/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvM2IwZDRkNTAtMWNiNy0z YzczLWIwNTgtNjQxODU3MTdmOWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbHwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAH/6pksU/oedZgaahDe4+tVwEPdpXXTvdxsB2qgZC7MebNQQHZWn4l 9NFhECCQ5Jn3C+X1Q8SCfI5+Wa9kXxZr5RAmxaFwv8UyX2tPgHEPfh+u2w7RH/Ew ylNUE81VUbJ9VZFyrciOMrodoHWMgB36R4xvXaF2NpleI1729qN7IZxbJCe1f72d RrtlLaQLPcSBAT5nIHRPLgYzdV+vZ9m9GQ+GBymdR/wlXBFyc8BJPFJy1CpDjiaV boggkC5PKnLepNYHnV60p9mQOMFtsduoEA+BuDjCUWxEUEMPQzTMPXR8iIg64m7c 8zL5x3PHe9AunAfcq6k2H19JP+N4E4zT -----END CERTIFICATE-----Generated at Sun Apr 6 10:57:31 2025 by rpki-client