$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/936b2aa5-beb7-33e5-8227-bafa65bda840.roa File: 936b2aa5-beb7-33e5-8227-bafa65bda840.roa (raw, json) Hash identifier: FFRLj95+rtloDBF+0AQMyT5k7Z+cSoANHyJsS9FM8t0= Subject key identifier: C5:49:39:75:AB:CA:A2:CE:2B:66:B8:2A:37:ED:4B:76:B8:0E:E8:FF Certificate issuer: /CN=618a40c8-2175-4e55-926e-6516ce21ec74 Certificate serial: 010D0C9F43285848AD7B7CE5DC1857E87AF78A80 Authority key identifier: 62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/936b2aa5-beb7-33e5-8227-bafa65bda840.roa Signing time: Sun 26 Jan 2025 23:30:33 +0000 ROA not before: Sun 26 Jan 2025 23:30:33 +0000 ROA not after: Sat 26 Apr 2025 22:30:33 +0000 asID: 16509 IP address blocks: 2620:1d8::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:7b:7c:e5:dc:18:57:e8:7a:f7:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618a40c8-2175-4e55-926e-6516ce21ec74 Validity Not Before: Jan 26 23:30:33 2025 GMT Not After : Apr 26 22:30:33 2025 GMT Subject: CN=a3b4694e-deac-444e-b0df-b2bc54acbda1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f6:54:ce:6c:55:0c:ff:d0:cc:47:e1:bd:fa: ca:a4:2a:ad:06:88:1c:18:76:56:fc:9a:55:7e:17: 47:3a:25:97:8c:e1:60:6f:eb:5b:b7:5f:71:fb:fc: 40:5d:2c:07:4b:3b:89:2d:c7:a7:65:a4:78:6d:48: a7:2c:55:c5:66:ee:eb:3f:45:c3:32:7d:02:72:56: cb:9d:4e:63:37:e6:6b:28:85:99:a0:97:fd:d8:62: 91:e1:83:93:ae:9f:d8:42:6e:42:2f:78:b3:90:4e: 21:7f:2f:57:91:ba:89:cc:9f:2f:0e:72:eb:cf:0c: 97:dc:49:53:fa:08:e1:82:e2:38:02:9d:57:d2:ce: 25:5e:36:f4:34:9a:18:f2:60:e4:fc:72:3b:81:eb: 18:97:2b:7b:7b:58:81:b8:8e:82:7f:2a:23:ed:59: ce:84:49:5c:a7:d5:3f:d9:78:36:08:b4:9c:d5:04: bc:ec:18:31:d1:2f:e2:f4:57:56:38:37:fb:4f:86: aa:a2:3a:7b:0f:c8:fd:ca:af:45:4c:5d:b3:6c:54: 8e:c2:84:bc:6e:7e:e4:5a:e9:34:c5:ff:51:60:b1: f7:b6:55:5a:fb:3b:4e:77:3d:1a:9d:91:3b:a8:6e: 49:74:ae:58:d4:fd:e6:00:f8:2e:06:4c:c9:53:27: 45:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:49:39:75:AB:CA:A2:CE:2B:66:B8:2A:37:ED:4B:76:B8:0E:E8:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/936b2aa5-beb7-33e5-8227-bafa65bda840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl X509v3 Authority Key Identifier: keyid:62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer sbgp-ipAddrBlock: critical IPv6: 2620:1d8::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:02:33:0e:99:89:5c:09:6f:8d:56:e9:5a:a8:48:20:31:5b: ee:46:bf:3f:0f:7d:55:a2:3b:dd:22:60:9e:45:ff:38:64:e1: 7f:f4:e6:bb:e5:16:39:64:78:43:df:99:7f:eb:88:da:4f:5f: f5:67:73:b9:c6:5f:ce:b3:c7:1f:24:48:44:73:4a:34:59:7b: 0f:ec:e3:33:6e:db:16:fe:d9:e1:16:c7:1e:df:e9:78:ef:31: d1:68:4a:1e:26:37:1f:a4:cb:63:9d:57:17:27:17:ea:1a:fe: cc:ca:ca:8d:08:50:12:be:34:bf:58:96:8e:0d:ab:15:cc:5b: d5:95:11:9c:ab:c9:2a:61:90:62:9b:e7:87:0a:bf:cf:57:89: 41:f4:95:0c:bb:26:37:77:38:3f:f7:86:6b:60:42:ed:4e:cf: 38:f0:d1:9a:71:94:b8:37:03:d6:02:d6:c1:c6:1a:83:2d:9b: 16:79:5d:d6:c8:ee:3f:6b:79:aa:3d:5b:37:31:24:a5:20:4b: 43:b9:04:b5:b3:fc:39:96:68:15:ed:ed:bf:5e:0a:e1:33:a7: 9b:67:d6:f3:c8:d8:51:66:28:bf:12:88:c7:0b:fd:09:24:fb: 66:27:d7:00:64:98:cd:45:64:c8:41:58:4c:b3:17:5b:95:2d: bf:f8:cf:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEite3zl3BhX6Hr3ioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE4YTQwYzgtMjE3NS00ZTU1LTkyNmUtNjUxNmNlMjFl Yzc0MB4XDTI1MDEyNjIzMzAzM1oXDTI1MDQyNjIyMzAzM1owLzEtMCsGA1UEAxMk YTNiNDY5NGUtZGVhYy00NDRlLWIwZGYtYjJiYzU0YWNiZGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vZUzmxVDP/QzEfhvfrKpCqtBogcGHZW/JpV fhdHOiWXjOFgb+tbt19x+/xAXSwHSzuJLcenZaR4bUinLFXFZu7rP0XDMn0CclbL nU5jN+ZrKIWZoJf92GKR4YOTrp/YQm5CL3izkE4hfy9XkbqJzJ8vDnLrzwyX3ElT +gjhguI4Ap1X0s4lXjb0NJoY8mDk/HI7gesYlyt7e1iBuI6Cfyoj7VnOhElcp9U/ 2Xg2CLSc1QS87Bgx0S/i9FdWODf7T4aqojp7D8j9yq9FTF2zbFSOwoS8bn7kWuk0 xf9RYLH3tlVa+ztOdz0anZE7qG5JdK5Y1P3mAPguBkzJUydFiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMVJOXWryqLOK2a4KjftS3a4Duj/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82MThh NDBjOC0yMTc1LTRlNTUtOTI2ZS02NTE2Y2UyMWVjNzQvOTM2YjJhYTUtYmViNy0z M2U1LTgyMjctYmFmYTY1YmRhODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjE4YTQwYzgtMjE3NS00ZTU1LTky NmUtNjUxNmNlMjFlYzc0LzYxOGE0MGM4LTIxNzUtNGU1NS05MjZlLTY1MTZjZTIx ZWM3NC5jcmwwHwYDVR0jBBgwFoAUYr8kTZ9LKuH4yy1kQwZdByzzTIwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82MThhNDBjOC0yMTc1LTRlNTUtOTI2ZS02NTE2 Y2UyMWVjNzQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJiAB2AAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADYCMw6ZiVwJb41W6VqoSCAxW+5Gvz8PfVWiO90iYJ5F/zhk4X/0 5rvlFjlkeEPfmX/riNpPX/Vnc7nGX86zxx8kSERzSjRZew/s4zNu2xb+2eEWxx7f 6XjvMdFoSh4mNx+ky2OdVxcnF+oa/szKyo0IUBK+NL9Ylo4NqxXMW9WVEZyrySph kGKb54cKv89XiUH0lQy7Jjd3OD/3hmtgQu1Ozzjw0ZpxlLg3A9YC1sHGGoMtmxZ5 XdbI7j9reao9WzcxJKUgS0O5BLWz/DmWaBXt7b9eCuEzp5tn1vPI2FFmKL8SiMcL /Qkk+2Yn1wBkmM1FZMhBWEyzF1uVLb/4z3I= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:08 2025 by rpki-client