$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ba99bc9b-3a0b-3626-a279-87f8661a774c.roa File: ba99bc9b-3a0b-3626-a279-87f8661a774c.roa (raw, json) Hash identifier: e5T2gotL8x33DqPLA5CgSYLuVXNBqK3PNJLakK0sGNo= Subject key identifier: D7:86:B8:BA:49:E7:06:FE:F5:FC:6D:16:A5:35:73:60:50:90:64:11 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F432858490161F10FB375F3ACA6E21280 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ba99bc9b-3a0b-3626-a279-87f8661a774c.roa Signing time: Wed 26 Feb 2025 00:46:58 +0000 ROA not before: Wed 26 Feb 2025 00:46:58 +0000 ROA not after: Mon 26 May 2025 23:46:58 +0000 asID: 64286 IP address blocks: 2606:f18d::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:01:61:f1:0f:b3:75:f3:ac:a6:e2:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Feb 26 00:46:58 2025 GMT Not After : May 26 23:46:58 2025 GMT Subject: CN=7d3217f2-8c71-468c-b419-09de9a25c14a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3e:69:e6:3b:12:f5:16:79:8e:93:7f:3c:40: 3e:84:3b:d7:c5:8c:bb:aa:4d:69:5b:a5:07:51:d3: aa:d9:a5:95:ba:51:d6:73:49:3f:4c:06:f0:a5:93: 83:58:15:eb:87:a9:30:b2:a4:26:c0:46:10:14:00: 06:32:9e:24:a6:f7:bd:0b:86:bf:e6:49:1c:99:76: db:cf:cd:a5:85:b7:61:fe:4e:3a:a6:3f:50:2c:e7: 3f:7b:0c:3b:58:63:bf:35:87:3b:a8:fc:ba:59:af: 6d:d2:60:1c:44:c2:41:a3:e2:a4:79:15:2f:58:53: ba:d6:5e:85:98:13:26:23:23:20:67:6f:83:b6:1c: b9:09:86:81:76:00:3d:4d:6a:e1:bf:b6:e6:87:6c: ca:06:88:e3:a4:12:1f:80:d5:df:63:0b:08:a6:22: 64:b0:02:f7:8e:85:75:63:47:3c:a1:4b:6e:bc:88: de:16:c7:b1:1e:55:ef:6a:67:5d:53:f9:b4:70:ef: 48:60:7a:3a:d2:23:a3:1d:5d:bc:f3:e4:93:ef:39: dd:db:02:66:eb:58:1b:32:b8:b1:81:39:ef:c8:3f: 3d:07:40:c3:37:4e:76:aa:3c:9f:73:77:e1:89:79: ce:49:a3:64:78:77:4e:f3:c4:9f:a3:17:6a:b3:c9: 0a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:86:B8:BA:49:E7:06:FE:F5:FC:6D:16:A5:35:73:60:50:90:64:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ba99bc9b-3a0b-3626-a279-87f8661a774c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv6: 2606:f18d::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:54:cd:75:97:2e:46:d6:e2:e0:71:04:66:69:cf:7d:e4:f3: a9:a9:f6:03:93:9e:45:fa:bb:40:4b:9b:bd:ad:cf:c7:05:4f: c1:9b:40:88:d3:0e:95:01:95:8a:c5:a5:5e:c4:67:9f:c8:97: dc:92:bb:7f:1c:54:d0:65:fe:6d:01:fa:74:1e:ea:6f:db:55: 33:da:5c:ee:e5:f8:c5:e2:58:e0:ac:7c:71:4d:c2:af:a0:06: cd:74:ce:e7:02:43:ac:8a:50:59:04:88:61:94:da:2b:c3:d9: 81:e3:a2:c9:2e:4d:dc:ec:38:35:7e:08:b2:99:82:94:f1:2d: e9:21:e8:3c:2f:41:49:76:ef:fa:74:07:b7:eb:e4:90:ea:88: dd:6f:45:88:d2:cf:8b:10:86:bf:8a:34:8a:ed:94:e0:43:43: cf:22:4e:1b:a5:c2:dc:44:a0:e5:3f:77:39:28:50:de:fb:cc: 99:32:ce:5d:b5:92:27:1d:d3:0f:dd:4a:69:0d:3a:b0:18:b4: c2:2e:78:00:5c:9c:5d:77:18:10:ff:9a:67:08:3d:23:e1:55: cf:6f:46:c7:c2:6c:02:89:50:1d:65:18:aa:75:14:3f:4b:f7: 9c:f0:d4:34:5e:3f:e0:52:06:0e:cb:e8:cc:1c:b9:b8:af:cb: 4c:30:fd:d2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkBYfEPs3XzrKbiEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDIyNjAwNDY1OFoXDTI1MDUyNjIzNDY1OFowLzEtMCsGA1UEAxMk N2QzMjE3ZjItOGM3MS00NjhjLWI0MTktMDlkZTlhMjVjMTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD5p5jsS9RZ5jpN/PEA+hDvXxYy7qk1pW6UH UdOq2aWVulHWc0k/TAbwpZODWBXrh6kwsqQmwEYQFAAGMp4kpve9C4a/5kkcmXbb z82lhbdh/k46pj9QLOc/eww7WGO/NYc7qPy6Wa9t0mAcRMJBo+KkeRUvWFO61l6F mBMmIyMgZ2+Dthy5CYaBdgA9TWrhv7bmh2zKBojjpBIfgNXfYwsIpiJksAL3joV1 Y0c8oUtuvIjeFsexHlXvamddU/m0cO9IYHo60iOjHV288+ST7znd2wJm61gbMrix gTnvyD89B0DDN052qjyfc3fhiXnOSaNkeHdO88Sfoxdqs8kKvQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNeGuLpJ5wb+9fxtFqU1c2BQkGQRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvYmE5OWJjOWItM2EwYi0z NjI2LWEyNzktODdmODY2MWE3NzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbxjTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDPVM11ly5G1uLgcQRmac995POpqfYDk55F+rtAS5u9rc/HBU/Bm0CI 0w6VAZWKxaVexGefyJfckrt/HFTQZf5tAfp0Hupv21Uz2lzu5fjF4ljgrHxxTcKv oAbNdM7nAkOsilBZBIhhlNorw9mB46LJLk3c7Dg1fgiymYKU8S3pIeg8L0FJdu/6 dAe36+SQ6ojdb0WI0s+LEIa/ijSK7ZTgQ0PPIk4bpcLcRKDlP3c5KFDe+8yZMs5d tZInHdMP3UppDTqwGLTCLngAXJxddxgQ/5pnCD0j4VXPb0bHwmwCiVAdZRiqdRQ/ S/ec8NQ0Xj/gUgYOy+jMHLm4r8tMMP3S -----END CERTIFICATE-----Generated at Sat Apr 5 12:42:01 2025 by rpki-client