$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/713b89e8-8e74-386b-b6e1-336af71f2195.roa File: 713b89e8-8e74-386b-b6e1-336af71f2195.roa (raw, json) Hash identifier: ohJx/r0wDUBpYRCLcuPhfpJwqGJEaE5OIlMPJPwLHpU= Subject key identifier: D8:95:D9:69:9E:2F:DC:2D:F7:09:EA:22:ED:19:D0:B7:65:8A:A4:DF Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F43285848E208F53F9001827B638D4F80 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/713b89e8-8e74-386b-b6e1-336af71f2195.roa Signing time: Fri 14 Feb 2025 19:17:37 +0000 ROA not before: Fri 14 Feb 2025 19:17:37 +0000 ROA not after: Thu 15 May 2025 18:17:37 +0000 asID: 398395 IP address blocks: 2606:fc40::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:08:f5:3f:90:01:82:7b:63:8d:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Feb 14 19:17:37 2025 GMT Not After : May 15 18:17:37 2025 GMT Subject: CN=a005861f-8fe3-438c-a7c3-62d41002f838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:af:fc:13:e4:00:2a:31:cc:02:4b:35:bd:4e: 2a:69:ec:b7:66:8a:6a:6b:1e:88:1b:96:40:e2:c8: 3d:2e:e8:cf:2d:c6:71:b8:fa:98:d1:ca:40:f5:99: a2:f5:54:49:29:8c:31:33:76:2f:67:4d:2a:0b:68: 0a:f9:90:68:89:a7:64:b3:3a:b5:76:ca:54:3b:97: 90:21:fa:0b:95:7c:0f:7c:ff:94:cb:e3:6a:d7:4c: b5:ed:e4:8d:3b:a3:e4:ec:bb:f7:0d:f7:a1:0d:ae: e2:cc:89:9e:53:87:cd:c7:c3:a6:fc:61:86:f0:09: 79:fd:50:99:2b:ee:b1:67:b3:73:60:ed:ab:13:f6: d9:bb:c6:9f:82:8c:17:e7:cd:e7:1d:a5:15:01:45: 35:2a:18:a4:5c:96:1a:1b:cd:f8:7a:2a:b8:9f:d6: 21:74:f2:23:12:fb:3a:56:0f:ad:f8:d3:a9:e2:a9: f6:22:32:3e:7d:51:a6:15:5a:a0:fa:30:05:97:ac: e1:f6:f0:35:e4:f5:b9:4d:f6:23:8c:50:cd:32:e0: d2:bb:0d:b1:81:fe:d6:f9:6c:1a:ec:a9:d4:e1:7b: 48:83:24:c6:b5:dc:63:c2:c0:47:f9:a6:2c:b5:fd: a2:a8:18:e8:3a:a0:25:aa:36:bb:7f:81:9c:5b:db: f9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:95:D9:69:9E:2F:DC:2D:F7:09:EA:22:ED:19:D0:B7:65:8A:A4:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/713b89e8-8e74-386b-b6e1-336af71f2195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv6: 2606:fc40::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:f8:ab:08:0a:05:c6:e2:a4:61:ac:cb:2e:1e:1b:8a:72:e7: 32:61:a1:6d:17:f3:ae:2e:93:e9:fb:75:80:17:d8:63:5f:be: ea:e9:65:7a:5a:a7:2a:cb:5e:69:9e:d6:72:a6:83:eb:23:25: 53:cc:fb:22:4c:7a:98:ad:98:ec:b0:9d:39:18:37:54:77:6d: 82:25:f0:9a:c7:c3:0c:cf:77:7c:c3:50:1e:48:25:6e:4f:8c: 45:2f:57:c2:38:5c:01:dc:41:ed:07:b1:c3:33:5d:c9:a0:ab: ea:9c:21:50:b9:eb:0e:e8:55:3f:16:91:67:e0:81:fa:22:f7: 6b:4f:2d:f6:a0:31:8b:97:cc:0f:26:26:fb:21:eb:55:eb:3a: bd:8b:3e:7f:6b:3f:49:77:62:6c:a1:ba:ef:5e:70:1e:b6:f7: 1a:6e:8c:df:61:e7:78:02:a0:68:4e:86:71:db:6f:b7:3e:40: 36:3c:4c:86:eb:fa:8f:f0:1c:82:dc:72:cd:42:dd:1a:88:cb: 34:13:60:d9:4d:e5:74:0a:1a:37:67:e9:10:e2:e9:bb:f6:50: d2:7e:7e:aa:a6:d9:7e:2d:53:e5:e0:8d:c3:b0:12:93:6c:7f: a7:60:67:14:f5:07:5f:8d:43:94:e0:0f:54:7e:28:2d:b0:e7: 62:75:65:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjiCPU/kAGCe2ONT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI1MDIxNDE5MTczN1oXDTI1MDUxNTE4MTczN1owLzEtMCsGA1UEAxMk YTAwNTg2MWYtOGZlMy00MzhjLWE3YzMtNjJkNDEwMDJmODM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra/8E+QAKjHMAks1vU4qaey3Zopqax6IG5ZA 4sg9LujPLcZxuPqY0cpA9Zmi9VRJKYwxM3YvZ00qC2gK+ZBoiadkszq1dspUO5eQ IfoLlXwPfP+Uy+Nq10y17eSNO6Pk7Lv3DfehDa7izImeU4fNx8Om/GGG8Al5/VCZ K+6xZ7NzYO2rE/bZu8afgowX583nHaUVAUU1KhikXJYaG834eiq4n9YhdPIjEvs6 Vg+t+NOp4qn2IjI+fVGmFVqg+jAFl6zh9vA15PW5TfYjjFDNMuDSuw2xgf7W+Wwa 7KnU4XtIgyTGtdxjwsBH+aYstf2iqBjoOqAlqja7f4GcW9v5dwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNiV2WmeL9wt9wnqIu0Z0LdliqTfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvNzEzYjg5ZTgtOGU3NC0z ODZiLWI2ZTEtMzM2YWY3MWYyMTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgb8QAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJP4qwgKBcbipGGsyy4eG4py5zJhoW0X864uk+n7dYAX2GNfvurp ZXpapyrLXmme1nKmg+sjJVPM+yJMepitmOywnTkYN1R3bYIl8JrHwwzPd3zDUB5I JW5PjEUvV8I4XAHcQe0HscMzXcmgq+qcIVC56w7oVT8WkWfggfoi92tPLfagMYuX zA8mJvsh61XrOr2LPn9rP0l3Ymyhuu9ecB629xpujN9h53gCoGhOhnHbb7c+QDY8 TIbr+o/wHILccs1C3RqIyzQTYNlN5XQKGjdn6RDi6bv2UNJ+fqqm2X4tU+XgjcOw EpNsf6dgZxT1B1+NQ5TgD1R+KC2w52J1ZWk= -----END CERTIFICATE-----Generated at Sat Apr 5 16:42:39 2025 by rpki-client