$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/8df79e80-7df4-3262-a053-5aa89ec5cb94.roa File: 8df79e80-7df4-3262-a053-5aa89ec5cb94.roa (raw, json) Hash identifier: txL6QWLhqT7M71VUErCdUqxmcoO0gM+hVcMzrD41vzo= Subject key identifier: E6:4E:EC:A2:51:53:6F:E2:11:58:E1:EE:6A:07:0C:C0:87:2F:CD:31 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584925B3AE45C9CCC8794A6B5680 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/8df79e80-7df4-3262-a053-5aa89ec5cb94.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 397651 IP address blocks: 2601:2008::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:ae:45:c9:cc:c8:79:4a:6b:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=bfa10e7a-022f-484c-9840-faeedb10a155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fe:10:cd:42:29:36:00:98:09:f0:2f:a7:9a: 13:d9:70:df:1c:c7:16:a0:f8:5c:51:44:21:4f:80: 9d:de:eb:eb:60:7b:15:0d:ca:87:a7:13:84:84:0a: f7:b4:cf:4f:7f:94:fe:12:05:dd:7d:2a:13:98:cf: e1:8f:9c:6d:d6:bb:2d:1c:8a:cd:de:bb:48:42:94: 04:f6:98:b6:a2:b4:c7:bd:8a:85:fd:d0:d1:ad:53: 33:dd:3d:a3:57:19:20:14:f0:69:43:c8:95:ca:de: 1d:3f:6c:7b:07:8b:4d:e2:2f:a4:2a:9e:ac:d6:c7: df:c7:25:91:60:45:45:37:6c:e1:b6:c1:ac:8b:90: e1:a9:f3:bb:b2:6b:1c:ed:5d:65:73:f9:a8:00:b9: a7:d2:8b:81:45:09:79:68:d4:53:27:d7:db:4c:d9: 33:d8:aa:da:b0:17:0e:bb:22:65:8b:3e:5c:00:90: 36:2b:0f:99:03:87:28:b7:e0:c2:12:b3:ab:e2:a8: 71:03:4d:65:28:22:09:1b:ad:d5:71:f9:30:42:93: de:fc:b8:8c:6a:36:df:b3:80:28:61:2f:e6:4a:0f: 5a:ee:17:1b:76:a0:e7:cc:4a:d5:2c:57:ce:ce:a5: 94:12:da:ef:2d:ac:e2:85:77:c5:ff:97:6c:0c:e6: a2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:4E:EC:A2:51:53:6F:E2:11:58:E1:EE:6A:07:0C:C0:87:2F:CD:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/8df79e80-7df4-3262-a053-5aa89ec5cb94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv6: 2601:2008::/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:63:5a:3c:84:e5:84:0f:9b:a0:80:cc:2b:2b:19:1f:e5:6a: c6:2c:da:1e:ff:93:3b:8a:f3:46:9b:d0:ab:19:f9:23:bc:9b: 75:a9:a3:16:36:5d:d7:83:98:61:d5:8b:06:cf:ac:cf:fa:e3: 49:f5:9b:40:54:02:42:74:60:dd:a9:49:25:da:cc:d6:e9:3b: 2d:d6:a1:5a:13:6d:58:c6:a8:c4:09:d1:97:c4:75:72:d4:05: 1a:98:17:93:c6:69:0d:54:a9:e3:e6:fc:c2:90:6c:7c:84:e6: 0d:11:46:57:2b:2f:c1:9c:af:ad:91:5b:e6:25:20:40:39:bc: 84:fc:e3:e9:68:a3:a0:9d:a0:07:54:0c:e2:f3:cd:aa:de:66: 5d:1c:fe:fd:e6:d3:95:22:e9:3a:42:39:af:80:96:a5:20:dd: f4:db:b0:86:e8:2f:cd:dc:91:71:a8:18:b2:e1:78:ce:22:45: ff:3e:ce:16:ad:c8:4f:9b:e9:2f:0a:5b:de:32:27:aa:1f:90: 1a:4b:4b:c4:0c:08:49:15:4e:dc:4f:74:03:e2:53:9f:02:48: e0:e0:d5:28:e8:4e:e6:67:26:9c:bf:82:a9:9a:45:af:83:29: 9f:99:5e:b1:5d:35:a6:ad:7c:00:68:70:9a:d0:96:e9:81:41: 7b:2c:0f:37 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkls65FyczIeUprVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk YmZhMTBlN2EtMDIyZi00ODRjLTk4NDAtZmFlZWRiMTBhMTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf4QzUIpNgCYCfAvp5oT2XDfHMcWoPhcUUQh T4Cd3uvrYHsVDcqHpxOEhAr3tM9Pf5T+EgXdfSoTmM/hj5xt1rstHIrN3rtIQpQE 9pi2orTHvYqF/dDRrVMz3T2jVxkgFPBpQ8iVyt4dP2x7B4tN4i+kKp6s1sffxyWR YEVFN2zhtsGsi5DhqfO7smsc7V1lc/moALmn0ouBRQl5aNRTJ9fbTNkz2KrasBcO uyJliz5cAJA2Kw+ZA4cot+DCErOr4qhxA01lKCIJG63VcfkwQpPe/LiMajbfs4Ao YS/mSg9a7hcbdqDnzErVLFfOzqWUEtrvLazihXfF/5dsDOaiiQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOZO7KJRU2/iEVjh7moHDMCHL80xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvOGRmNzllODAtN2RmNC0z MjYyLWEwNTMtNWFhODllYzVjYjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDJgEgCDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDNY1o8hOWED5uggMwrKxkf5WrGLNoe/5M7ivNGm9CrGfkjvJt1qaMW Nl3Xg5hh1YsGz6zP+uNJ9ZtAVAJCdGDdqUkl2szW6Tst1qFaE21YxqjECdGXxHVy 1AUamBeTxmkNVKnj5vzCkGx8hOYNEUZXKy/BnK+tkVvmJSBAObyE/OPpaKOgnaAH VAzi882q3mZdHP795tOVIuk6QjmvgJalIN3027CG6C/N3JFxqBiy4XjOIkX/Ps4W rchPm+kvClveMieqH5AaS0vEDAhJFU7cT3QD4lOfAkjg4NUo6E7mZyacv4KpmkWv gymfmV6xXTWmrXwAaHCa0JbpgUF7LA83 -----END CERTIFICATE-----Generated at Sun Apr 6 11:05:39 2025 by rpki-client