$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/afbb9cae-6b2c-3d8c-9643-cc0c7053b42e.roa File: afbb9cae-6b2c-3d8c-9643-cc0c7053b42e.roa (raw, json) Hash identifier: Jz+o1eB6fyHiH8MlAvLonz9tG6N+SCTIaBW90Hjiq5U= Subject key identifier: EF:08:51:47:78:27:E1:FC:35:F5:B5:2C:A6:9D:55:FE:2B:6E:B1:B6 Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F43285848B007E7A004F28D12DD0BCA40 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/afbb9cae-6b2c-3d8c-9643-cc0c7053b42e.roa Signing time: Mon 27 Jan 2025 21:25:05 +0000 ROA not before: Mon 27 Jan 2025 21:25:05 +0000 ROA not after: Sun 27 Apr 2025 20:25:05 +0000 asID: 5769 IP address blocks: 2605:d6c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b0:07:e7:a0:04:f2:8d:12:dd:0b:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Jan 27 21:25:05 2025 GMT Not After : Apr 27 20:25:05 2025 GMT Subject: CN=40836b1a-eaf8-4972-aea4-6cdf1c81b844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:46:43:34:3b:32:e5:1e:d3:ce:88:90:a6:72: fc:71:2c:36:90:9b:8e:d3:b8:30:af:73:54:c9:99: 50:3e:11:b7:3a:f4:5d:0f:6c:6f:42:02:4d:f3:05: da:34:7c:46:64:58:eb:11:0a:98:e8:30:56:72:89: cb:48:33:c9:d3:0a:de:f3:52:49:f2:c9:a0:ea:6d: a2:d6:9c:ed:49:fc:f0:ae:ab:b6:c5:9a:f9:28:46: 0d:f3:21:8e:70:72:02:a5:ca:60:4d:65:45:6b:77: 7c:24:04:0c:48:9b:fe:7d:21:d9:a2:6f:71:4c:90: 70:71:d1:39:73:cf:df:e8:66:2e:49:bf:6e:e7:6b: 20:67:2c:63:6c:01:f6:bd:a1:2f:bb:55:ee:3f:c9: 2b:d1:c1:eb:0d:1f:f6:b7:10:d9:a0:c3:26:76:fb: 91:a2:ea:de:94:66:90:e6:4e:41:d2:ae:fd:b8:36: 5c:3c:6e:ea:36:93:29:ca:eb:ae:90:8d:d8:4c:28: 1f:bf:19:cc:66:06:69:e2:38:d9:25:b8:c0:0c:7d: 94:1f:a1:76:1c:2f:c9:56:15:6c:d6:ee:26:9c:5d: 27:29:dd:29:3e:76:f0:a7:1e:73:e9:ee:e6:af:88: 61:26:02:6e:8d:29:f6:b9:54:6e:ab:fc:62:04:30: 69:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:08:51:47:78:27:E1:FC:35:F5:B5:2C:A6:9D:55:FE:2B:6E:B1:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/afbb9cae-6b2c-3d8c-9643-cc0c7053b42e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv6: 2605:d6c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ba:b7:78:de:bf:35:7a:35:b4:d3:50:39:24:9b:5e:db:35: 95:5d:24:e3:02:17:66:0f:24:3d:94:ad:75:40:52:a5:e6:ff: 32:7f:fc:23:d0:76:12:2c:18:71:76:94:1f:5b:e8:10:d0:01: a0:9f:69:09:94:96:8f:b2:58:29:bc:36:8c:ac:4a:44:0b:72: a8:95:83:cb:45:62:ab:34:bc:4a:27:42:da:39:66:c9:62:82: d9:db:98:30:e4:0e:cd:b3:d9:42:15:aa:27:26:6b:ca:5d:1c: 77:4b:18:52:61:b3:35:67:92:f0:9e:8b:fe:23:42:3f:8c:81: 5c:eb:39:7c:1f:01:81:f9:ca:bf:0f:6b:b4:04:4e:eb:52:c7: bc:1c:9b:49:2e:df:2d:8f:4c:18:eb:4f:46:a7:78:a4:5e:f1: a8:a1:f6:90:58:f8:5d:13:91:19:c9:0b:99:2f:6e:a4:aa:da: 46:ad:07:7f:b4:2e:b7:0f:e9:17:f9:92:69:6b:b3:f8:fb:d7: c1:94:1e:ee:b9:64:03:81:25:2d:c2:cb:39:e9:33:cd:12:fc: 7f:e8:f6:a9:54:9c:d2:79:b6:ed:e1:42:09:b5:57:a3:71:5e: 4a:86:28:21:0a:13:eb:fa:ea:80:7e:94:14:5d:a0:35:79:33: 63:e3:4b:75 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiwB+egBPKNEt0LykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI1MDEyNzIxMjUwNVoXDTI1MDQyNzIwMjUwNVowLzEtMCsGA1UEAxMk NDA4MzZiMWEtZWFmOC00OTcyLWFlYTQtNmNkZjFjODFiODQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEZDNDsy5R7TzoiQpnL8cSw2kJuO07gwr3NU yZlQPhG3OvRdD2xvQgJN8wXaNHxGZFjrEQqY6DBWconLSDPJ0wre81JJ8smg6m2i 1pztSfzwrqu2xZr5KEYN8yGOcHICpcpgTWVFa3d8JAQMSJv+fSHZom9xTJBwcdE5 c8/f6GYuSb9u52sgZyxjbAH2vaEvu1XuP8kr0cHrDR/2txDZoMMmdvuRourelGaQ 5k5B0q79uDZcPG7qNpMpyuuukI3YTCgfvxnMZgZp4jjZJbjADH2UH6F2HC/JVhVs 1u4mnF0nKd0pPnbwpx5z6e7mr4hhJgJujSn2uVRuq/xiBDBpxQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFO8IUUd4J+H8NfW1LKadVf4rbrG2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvYWZiYjljYWUtNmIyYy0z ZDhjLTk2NDMtY2MwYzcwNTNiNDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXWwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQArurd43r81ejW001A5JJte2zWVXSTjAhdmDyQ9lK11QFKl5v8yf/wj 0HYSLBhxdpQfW+gQ0AGgn2kJlJaPslgpvDaMrEpEC3KolYPLRWKrNLxKJ0LaOWbJ YoLZ25gw5A7Ns9lCFaonJmvKXRx3SxhSYbM1Z5Lwnov+I0I/jIFc6zl8HwGB+cq/ D2u0BE7rUse8HJtJLt8tj0wY609Gp3ikXvGoofaQWPhdE5EZyQuZL26kqtpGrQd/ tC63D+kX+ZJpa7P4+9fBlB7uuWQDgSUtwss56TPNEvx/6PapVJzSebbt4UIJtVej cV5KhighChPr+uqAfpQUXaA1eTNj40t1 -----END CERTIFICATE-----Generated at Sat Apr 12 00:01:32 2025 by rpki-client