$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/0a8bf32e-5cd1-3122-963a-91125458622e.roa File: 0a8bf32e-5cd1-3122-963a-91125458622e.roa (raw, json) Hash identifier: g2VyTS2H7ndOgKi7qV82oQHnoguelT3s18veJMLhYz8= Subject key identifier: 19:2E:6C:F7:AB:F2:63:6D:CD:DA:D6:64:6D:E5:B6:87:D8:2B:6C:EC Certificate issuer: /CN=3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f Certificate serial: 010D0C9F4328584917DBFFC6F6ABE993DB98FF00 Authority key identifier: 44:D8:08:BE:65:B2:3D:54:D0:2C:EA:50:56:50:09:BB:D8:D5:7D:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/0a8bf32e-5cd1-3122-963a-91125458622e.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 394086 IP address blocks: 2607:d640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:db:ff:c6:f6:ab:e9:93:db:98:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=8418b8e5-2a55-4c9f-bc04-028fcd3cf74a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:94:7e:af:59:bd:da:18:68:64:44:f8:58:c2: 59:60:cf:97:b2:c4:aa:0c:b8:37:a6:d0:07:5b:f9: 07:59:83:a5:89:9a:ac:c4:2f:d4:d0:99:c5:e2:76: 2c:8b:d9:1f:d8:4e:f6:cf:b2:52:5d:39:b6:2f:43: 10:09:e2:4b:14:22:19:f8:61:da:90:14:aa:58:eb: 0d:b8:47:9f:17:66:3b:28:dd:dd:b4:b8:55:4e:49: 70:0e:d9:f0:53:91:1d:7a:34:ab:51:e0:ff:5f:bf: 32:b6:b7:c6:c0:17:fd:b6:e6:47:0c:0b:10:ad:fe: 7e:14:82:dc:12:6f:c3:28:99:57:d0:66:15:97:cb: 17:52:08:fc:2b:f0:27:8a:17:eb:b9:a0:c4:58:eb: 97:a2:e3:cb:e1:4c:91:67:f4:44:39:03:2d:2d:b2: 81:e5:9a:92:b8:84:2f:54:0a:c5:90:e3:10:3d:27: 2e:7a:03:32:8e:82:5d:9b:8d:8c:e2:76:13:d5:38: c4:c1:81:a7:46:46:d4:bb:16:24:b8:8e:ce:6c:df: 50:89:85:9a:7c:7b:cc:92:37:1b:3b:c7:6f:dd:03: 33:c6:f8:7c:78:ec:96:87:b9:9a:a9:06:40:1e:d2: 0c:e3:38:33:b3:4a:93:66:f3:6c:a9:1c:0b:fd:52: d7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2E:6C:F7:AB:F2:63:6D:CD:DA:D6:64:6D:E5:B6:87:D8:2B:6C:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/0a8bf32e-5cd1-3122-963a-91125458622e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.crl X509v3 Authority Key Identifier: keyid:44:D8:08:BE:65:B2:3D:54:D0:2C:EA:50:56:50:09:BB:D8:D5:7D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.cer sbgp-ipAddrBlock: critical IPv6: 2607:d640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:a6:58:bf:21:b0:54:19:22:88:95:22:1d:ac:52:89:83:cf: d0:71:cc:25:d7:f9:df:1b:9c:48:51:1f:46:26:da:e4:07:bc: 49:ea:5c:c5:3f:65:ca:c8:13:72:af:4f:1f:22:e6:cc:4c:41: fd:43:92:cd:81:a7:8c:9a:60:b5:f1:a9:4e:dd:1f:6a:56:44: bc:50:b4:fa:ce:5f:1b:c9:76:c1:5a:e1:ed:85:20:b8:6e:fd: 07:2d:20:63:a5:94:6f:b1:4a:c4:9a:a8:3d:6e:5c:55:97:06: 16:16:bc:b2:f1:7d:c6:73:71:4a:b6:9e:16:57:5f:42:18:23: 15:d6:6b:62:f1:29:cd:09:fb:ea:90:ac:f0:8a:15:43:cd:a6: 7f:3c:4e:f6:b0:a5:df:38:1f:b3:4e:f0:09:5e:08:1f:22:b8: b4:0a:5e:52:cd:9d:7d:a5:9c:a3:b3:b2:07:6a:d5:d4:ee:c4: 01:1d:18:8f:54:75:42:e4:ab:40:4a:65:b5:c6:f7:6e:da:e2: b3:dd:9b:b1:4b:01:7e:ed:66:ad:a1:38:94:10:54:46:8e:99: a4:c9:a4:b4:c0:45:eb:4e:f4:fc:bb:c9:fc:fa:37:c5:59:ea: 01:17:bf:06:ae:97:7b:8e:68:cc:30:65:8a:ca:2d:43:09:1d: 47:9b:88:57 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkX2//G9qvpk9uY/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RjNjZjNWUtMjNhYi00NGNkLTg3OGEtNGU3NmNiMGQ3 YjRmMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk ODQxOGI4ZTUtMmE1NS00YzlmLWJjMDQtMDI4ZmNkM2NmNzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZR+r1m92hhoZET4WMJZYM+XssSqDLg3ptAH W/kHWYOliZqsxC/U0JnF4nYsi9kf2E72z7JSXTm2L0MQCeJLFCIZ+GHakBSqWOsN uEefF2Y7KN3dtLhVTklwDtnwU5EdejSrUeD/X78ytrfGwBf9tuZHDAsQrf5+FILc Em/DKJlX0GYVl8sXUgj8K/AnihfruaDEWOuXouPL4UyRZ/REOQMtLbKB5ZqSuIQv VArFkOMQPScuegMyjoJdm42M4nYT1TjEwYGnRkbUuxYkuI7ObN9QiYWafHvMkjcb O8dv3QMzxvh8eOyWh7maqQZAHtIM4zgzs0qTZvNsqRwL/VLXkwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBkubPer8mNtzdrWZG3ltofYK2zsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZGM2 NmM1ZS0yM2FiLTQ0Y2QtODc4YS00ZTc2Y2IwZDdiNGYvMGE4YmYzMmUtNWNkMS0z MTIyLTk2M2EtOTExMjU0NTg2MjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2RjNjZjNWUtMjNhYi00NGNkLTg3 OGEtNGU3NmNiMGQ3YjRmLzNkYzY2YzVlLTIzYWItNDRjZC04NzhhLTRlNzZjYjBk N2I0Zi5jcmwwHwYDVR0jBBgwFoAURNgIvmWyPVTQLOpQVlAJu9jVfWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZGM2NmM1ZS0yM2FiLTQ0Y2QtODc4YS00ZTc2 Y2IwZDdiNGYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfWQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBppli/IbBUGSKIlSIdrFKJg8/Qccwl1/nfG5xIUR9GJtrkB7xJ6lzF P2XKyBNyr08fIubMTEH9Q5LNgaeMmmC18alO3R9qVkS8ULT6zl8byXbBWuHthSC4 bv0HLSBjpZRvsUrEmqg9blxVlwYWFryy8X3Gc3FKtp4WV19CGCMV1mti8SnNCfvq kKzwihVDzaZ/PE72sKXfOB+zTvAJXggfIri0Cl5SzZ19pZyjs7IHatXU7sQBHRiP VHVC5KtASmW1xvdu2uKz3ZuxSwF+7WatoTiUEFRGjpmkyaS0wEXrTvT8u8n8+jfF WeoBF78Grpd7jmjMMGWKyi1DCR1Hm4hX -----END CERTIFICATE-----Generated at Fri Apr 11 23:08:15 2025 by rpki-client