$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/2f6c7b5c-927e-35e4-97d7-0b378c680f16.roa File: 2f6c7b5c-927e-35e4-97d7-0b378c680f16.roa (raw, json) Hash identifier: gm2rcBXZKZ4jaNMPWxEJpk+HMgHGPZ6uH9DtelbbHD4= Subject key identifier: B6:B6:FA:BB:92:89:DB:22:14:A7:A1:8B:44:AB:08:92:AA:C9:44:D8 Certificate issuer: /CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Certificate serial: 010D0C9F43285848BA563FD409B149B155391800 Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/2f6c7b5c-927e-35e4-97d7-0b378c680f16.roa Signing time: Fri 31 Jan 2025 14:00:51 +0000 ROA not before: Fri 31 Jan 2025 14:00:51 +0000 ROA not after: Thu 01 May 2025 13:00:51 +0000 asID: 53264 IP address blocks: 2607:ff50::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ba:56:3f:d4:09:b1:49:b1:55:39:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Validity Not Before: Jan 31 14:00:51 2025 GMT Not After : May 1 13:00:51 2025 GMT Subject: CN=2d5e51e6-9ef4-453c-83a0-2427edc9efbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:00:3e:9c:9b:d5:b3:d1:b8:7a:f0:28:16:b5: 54:86:69:6b:96:99:f1:fe:c9:f4:70:79:a7:b5:14: 9b:7a:e5:4c:c5:cb:ee:d9:ea:1c:f8:04:c3:47:3e: 99:da:92:bb:86:73:66:04:83:60:d2:32:43:05:b7: 06:04:66:9e:54:8b:27:ae:b8:39:0e:b8:4f:ee:14: cd:89:74:86:06:4c:10:82:11:08:4b:e0:a2:63:b3: a8:84:70:3b:57:6b:36:fb:ce:91:fb:94:72:85:62: 0e:84:ef:e9:ff:81:02:e5:d2:cf:6c:a4:17:42:49: 01:d2:97:ac:81:24:c1:30:fe:29:06:37:1e:90:75: 67:ab:7e:54:8f:59:1c:17:21:5a:81:8a:fe:9c:43: eb:2d:3a:11:18:21:0b:f8:5b:22:76:1d:dc:4c:fd: 90:ae:06:fc:10:43:33:94:00:a6:b5:a0:b5:c4:2d: 54:f1:46:ce:f5:bd:b6:f3:59:88:e6:fd:89:0d:1c: dd:13:c2:84:cf:a5:d0:84:a7:2d:b8:d7:5a:86:16: 6e:89:43:6e:e8:f3:e6:73:e7:b6:40:35:25:9f:0a: 73:87:42:9b:d1:61:00:99:57:da:c8:ae:35:43:91: c9:a0:20:15:e9:44:22:56:2f:47:d9:1d:b0:22:3e: 70:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B6:FA:BB:92:89:DB:22:14:A7:A1:8B:44:AB:08:92:AA:C9:44:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/2f6c7b5c-927e-35e4-97d7-0b378c680f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl X509v3 Authority Key Identifier: keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer sbgp-ipAddrBlock: critical IPv6: 2607:ff50::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:71:55:27:c9:51:5f:e8:c2:90:e8:41:11:67:be:f0:0e:32: 2a:03:b8:7e:0b:2a:b0:3c:a4:92:61:fe:24:67:fa:b2:cb:1d: b1:31:e5:fe:52:ac:7e:f4:7c:4e:f4:02:93:3f:3b:34:8f:0b: e0:ca:b6:0f:1a:1f:d2:e9:d3:e3:db:41:76:ac:74:20:26:07: 89:07:38:51:fa:18:b9:1e:8c:79:f2:3a:c9:30:6e:55:7d:28: ce:0d:7e:ff:dd:ba:45:3e:f1:51:da:7d:56:ec:73:05:f4:1d: ea:53:76:d7:40:45:2d:66:ed:df:f8:c7:8c:94:be:c0:e4:e1: 2f:85:d0:2d:f3:bf:3e:91:31:af:f6:03:d7:b6:0a:c3:e1:f6: 6e:51:7c:2c:3c:2f:22:26:f3:16:33:5a:5b:e5:47:c6:41:fc: a6:d4:2e:a9:70:7b:d2:27:b0:97:c4:ae:9a:8a:51:20:53:75: 56:a5:e0:36:22:83:de:99:7b:84:84:36:f7:95:9a:6a:92:67: dd:0b:ae:49:11:d3:90:70:dd:8c:5f:ac:6f:a5:1b:ce:39:5e: eb:8e:78:84:2d:55:b7:26:a0:e9:3a:c9:92:95:fa:87:7f:b3: 39:26:ac:50:c3:d8:98:38:6d:c8:5c:3d:15:87:5c:0c:6d:14: b8:d6:69:d3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi6Vj/UCbFJsVU5GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU3NGM3OTktN2Q0Yy00ZGYzLWI3MTEtMjk2YzM0MzM4 ZWY1MB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk MmQ1ZTUxZTYtOWVmNC00NTNjLTgzYTAtMjQyN2VkYzllZmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAA+nJvVs9G4evAoFrVUhmlrlpnx/sn0cHmn tRSbeuVMxcvu2eoc+ATDRz6Z2pK7hnNmBINg0jJDBbcGBGaeVIsnrrg5DrhP7hTN iXSGBkwQghEIS+CiY7OohHA7V2s2+86R+5RyhWIOhO/p/4EC5dLPbKQXQkkB0pes gSTBMP4pBjcekHVnq35Uj1kcFyFagYr+nEPrLToRGCEL+Fsidh3cTP2Qrgb8EEMz lACmtaC1xC1U8UbO9b2281mI5v2JDRzdE8KEz6XQhKctuNdahhZuiUNu6PPmc+e2 QDUlnwpzh0Kb0WEAmVfayK41Q5HJoCAV6UQiVi9H2R2wIj5w9QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLa2+ruSidsiFKehi0SrCJKqyUTYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0 Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZjMzQzMzhlZjUvMmY2YzdiNWMtOTI3ZS0z NWU0LTk3ZDctMGIzNzhjNjgwZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWU3NGM3OTktN2Q0Yy00ZGYzLWI3 MTEtMjk2YzM0MzM4ZWY1L2VlNzRjNzk5LTdkNGMtNGRmMy1iNzExLTI5NmMzNDMz OGVmNS5jcmwwHwYDVR0jBBgwFoAUbNfgDzg2OujJMgu3w5YFtxms98QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZj MzQzMzhlZjUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf/UDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQChcVUnyVFf6MKQ6EERZ77wDjIqA7h+CyqwPKSSYf4kZ/qyyx2xMeX+ Uqx+9HxO9AKTPzs0jwvgyrYPGh/S6dPj20F2rHQgJgeJBzhR+hi5Hox58jrJMG5V fSjODX7/3bpFPvFR2n1W7HMF9B3qU3bXQEUtZu3f+MeMlL7A5OEvhdAt878+kTGv 9gPXtgrD4fZuUXwsPC8iJvMWM1pb5UfGQfym1C6pcHvSJ7CXxK6ailEgU3VWpeA2 IoPemXuEhDb3lZpqkmfdC65JEdOQcN2MX6xvpRvOOV7rjniELVW3JqDpOsmSlfqH f7M5JqxQw9iYOG3IXD0Vh1wMbRS41mnT -----END CERTIFICATE-----Generated at Mon Apr 7 19:58:18 2025 by rpki-client