$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/28d0aa5b-9621-3eac-b529-dc66454f737a.roa File: 28d0aa5b-9621-3eac-b529-dc66454f737a.roa (raw, json) Hash identifier: N/y4Dez1zocWrszY1S7Q2oyo9lAkNFL5VdiySQrR+S8= Subject key identifier: E1:A2:2B:6B:03:DB:5F:C7:E4:25:7B:58:30:2C:66:35:59:DD:F1:87 Certificate issuer: /CN=0a609de0-040f-42a5-990f-417b65a086a6 Certificate serial: 010D0C9F43285848FD56C066ED757F8033837380 Authority key identifier: F5:71:0D:F6:6C:9D:91:FA:24:17:5E:04:54:1C:35:71:46:05:59:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/28d0aa5b-9621-3eac-b529-dc66454f737a.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 20347 IP address blocks: 2605:7540::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/0a609de0-040f-42a5-990f-417b65a086a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/0a609de0-040f-42a5-990f-417b65a086a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c0:66:ed:75:7f:80:33:83:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a609de0-040f-42a5-990f-417b65a086a6 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=a89e7948-d2cb-460a-a091-69085caa404f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a1:d2:22:9b:2c:b9:07:e2:b3:7a:99:8d:65: 4f:90:3a:57:2e:15:87:3a:9e:ad:b4:31:4c:90:96: 08:c6:0e:4a:14:6c:86:28:a5:70:a2:64:ab:22:b6: 03:c3:de:d6:10:ca:54:23:54:05:05:0a:18:f4:4f: eb:e1:cb:7e:fd:da:57:0b:80:c7:fc:e3:31:ee:ad: db:33:cf:5a:9c:ba:d1:ba:4d:c9:bf:a0:4a:e5:e9: 4b:db:11:e6:c1:0a:81:67:2f:76:5f:2e:a8:51:01: 9a:f2:74:eb:ba:fd:3e:39:fb:6b:66:14:95:69:63: 59:4f:09:69:f5:63:48:76:90:f6:ea:e0:06:27:73: 6a:0e:22:c9:88:29:50:d3:e8:e3:a1:95:45:3f:6d: 7f:16:88:51:b7:dc:4f:65:36:5d:de:03:40:ab:12: 76:96:00:96:b5:bc:3f:ab:66:08:ff:1e:77:8c:ca: 03:c4:7b:90:a5:39:54:b3:dd:d5:88:09:96:c5:18: 3e:89:e2:ee:97:08:8a:39:43:02:75:f0:f3:c0:f9: 0a:8f:84:e8:0d:cd:d5:7b:41:75:04:9a:3b:d2:ae: e7:b4:a2:00:8a:35:47:2d:b2:dd:fd:05:67:30:78: 9d:70:3e:b0:90:7d:e0:36:7d:49:1a:98:1a:ea:d1: 81:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A2:2B:6B:03:DB:5F:C7:E4:25:7B:58:30:2C:66:35:59:DD:F1:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/28d0aa5b-9621-3eac-b529-dc66454f737a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/0a609de0-040f-42a5-990f-417b65a086a6.crl X509v3 Authority Key Identifier: keyid:F5:71:0D:F6:6C:9D:91:FA:24:17:5E:04:54:1C:35:71:46:05:59:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6.cer sbgp-ipAddrBlock: critical IPv6: 2605:7540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:80:58:2c:a5:bb:33:d9:ec:14:aa:8d:8a:75:a8:81:df:0a: 1d:20:1b:d7:b0:e5:6c:31:c6:43:76:2d:2f:87:4b:1e:31:06: 33:1b:3a:14:d4:d1:b4:00:37:11:87:1e:60:4c:52:fc:1c:ea: d5:9c:f1:36:f2:1a:b2:7f:10:e1:d3:51:31:e8:f3:06:e6:a2: 67:d7:28:b7:66:bb:e7:91:a9:55:72:0a:b4:64:50:f2:33:7c: 2b:73:6e:a3:d0:bf:98:cf:9c:f2:e3:ab:66:3b:bb:e2:47:17: c6:08:f6:45:01:d1:d7:9f:ff:1c:cb:27:f5:60:bd:9c:b5:2a: 79:7c:54:03:70:56:60:7d:89:8f:b5:d7:41:a4:2c:be:b2:a8: b1:9d:6a:c0:c5:ee:8b:ec:4c:b7:c8:99:06:32:eb:7d:65:3c: db:31:64:33:2f:bb:04:e0:d8:33:9f:16:4a:86:db:83:a5:a3: bb:56:c7:0a:3f:76:1c:d1:f5:de:6e:8e:b5:25:89:ec:ce:c4: 9a:08:02:28:13:74:c5:89:7b:f0:4e:4b:66:e5:c3:fd:95:4b: 5c:d3:20:ae:0e:88:da:47:63:65:03:cc:65:59:e0:23:9a:dc: 95:ce:03:c3:85:14:b4:9b:ea:cf:e8:c5:65:b1:13:20:c8:8a: 79:3c:58:e3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEj9VsBm7XV/gDODc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE2MDlkZTAtMDQwZi00MmE1LTk5MGYtNDE3YjY1YTA4 NmE2MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk YTg5ZTc5NDgtZDJjYi00NjBhLWEwOTEtNjkwODVjYWE0MDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46HSIpssuQfis3qZjWVPkDpXLhWHOp6ttDFM kJYIxg5KFGyGKKVwomSrIrYDw97WEMpUI1QFBQoY9E/r4ct+/dpXC4DH/OMx7q3b M89anLrRuk3Jv6BK5elL2xHmwQqBZy92Xy6oUQGa8nTruv0+OftrZhSVaWNZTwlp 9WNIdpD26uAGJ3NqDiLJiClQ0+jjoZVFP21/FohRt9xPZTZd3gNAqxJ2lgCWtbw/ q2YI/x53jMoDxHuQpTlUs93ViAmWxRg+ieLulwiKOUMCdfDzwPkKj4ToDc3Ve0F1 BJo70q7ntKIAijVHLbLd/QVnMHidcD6wkH3gNn1JGpga6tGBVwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOGiK2sD21/H5CV7WDAsZjVZ3fGHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTYw OWRlMC0wNDBmLTQyYTUtOTkwZi00MTdiNjVhMDg2YTYvMjhkMGFhNWItOTYyMS0z ZWFjLWI1MjktZGM2NjQ1NGY3MzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE2MDlkZTAtMDQwZi00MmE1LTk5 MGYtNDE3YjY1YTA4NmE2LzBhNjA5ZGUwLTA0MGYtNDJhNS05OTBmLTQxN2I2NWEw ODZhNi5jcmwwHwYDVR0jBBgwFoAU9XEN9mydkfokF14EVBw1cUYFWcswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTYwOWRlMC0wNDBmLTQyYTUtOTkwZi00MTdi NjVhMDg2YTYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgV1QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA2gFgspbsz2ewUqo2KdaiB3wodIBvXsOVsMcZDdi0vh0seMQYzGzoU 1NG0ADcRhx5gTFL8HOrVnPE28hqyfxDh01Ex6PMG5qJn1yi3ZrvnkalVcgq0ZFDy M3wrc26j0L+Yz5zy46tmO7viRxfGCPZFAdHXn/8cyyf1YL2ctSp5fFQDcFZgfYmP tddBpCy+sqixnWrAxe6L7Ey3yJkGMut9ZTzbMWQzL7sE4NgznxZKhtuDpaO7VscK P3Yc0fXebo61JYnszsSaCAIoE3TFiXvwTktm5cP9lUtc0yCuDojaR2NlA8xlWeAj mtyVzgPDhRS0m+rP6MVlsRMgyIp5PFjj -----END CERTIFICATE-----Generated at Fri Mar 14 08:32:25 2025 by rpki-client