$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c25afcc0-701c-36eb-aa67-a9f474d8b9b3.roa File: c25afcc0-701c-36eb-aa67-a9f474d8b9b3.roa (raw, json) Hash identifier: xtIKsKzRzPpZeEZzh7TwbqvctwAgbeanURVwmuNpeXA= Subject key identifier: 85:0A:12:F6:56:9B:D7:5D:AA:6A:63:53:F3:8E:57:89:EC:7A:71:BF Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F43285848FD2FA7178E5AB196B85D0500 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c25afcc0-701c-36eb-aa67-a9f474d8b9b3.roa Signing time: Mon 24 Feb 2025 12:42:25 +0000 ROA not before: Mon 24 Feb 2025 12:42:25 +0000 ROA not after: Sun 25 May 2025 11:42:25 +0000 asID: 35758 IP address blocks: 2606:f180:d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:2f:a7:17:8e:5a:b1:96:b8:5d:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Feb 24 12:42:25 2025 GMT Not After : May 25 11:42:25 2025 GMT Subject: CN=4653328d-4642-4860-93fd-66caac6b37b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6c:c3:a9:a4:fc:3c:1c:b4:84:7f:a0:44:fd: 88:26:19:96:99:d9:74:3f:44:86:1a:45:da:10:ee: 54:13:77:d8:45:91:72:30:63:29:57:d6:97:a7:a0: 9c:27:d5:bf:27:b6:24:02:ed:ee:41:2c:63:a4:60: 07:f9:48:ce:dc:bf:4f:71:34:e2:1b:8a:e3:e4:0a: f9:f9:ac:f0:53:d1:b4:f7:39:1f:04:6c:9a:09:d1: 29:91:55:1f:67:c2:06:00:51:00:87:59:2d:31:cb: 11:0b:52:46:53:b8:cf:7c:1a:a0:87:1b:1b:48:1d: f9:e1:cb:61:f5:4e:0e:78:e1:d9:2a:7d:e0:73:ad: 84:57:9c:74:32:a8:f7:1f:98:1e:62:e1:9d:ac:cd: b2:62:56:bc:8d:0f:ea:1a:7d:7a:ff:f3:da:3e:3d: 46:26:1c:d6:30:21:21:6c:5e:db:ed:37:73:f8:e2: c9:0c:36:cc:cf:e8:fc:f4:85:1d:f1:f1:28:5f:d3: ac:ef:a2:e4:e9:af:1e:d0:3b:c3:90:ae:3b:dc:39: 3c:72:e7:96:6c:1d:a6:a4:fb:03:a3:3c:7a:33:93: 5c:64:57:3a:63:f4:cb:9d:f7:c9:f7:13:48:00:81: aa:a5:7f:2c:88:c2:d4:74:13:93:e8:a1:fb:f5:11: ec:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0A:12:F6:56:9B:D7:5D:AA:6A:63:53:F3:8E:57:89:EC:7A:71:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/c25afcc0-701c-36eb-aa67-a9f474d8b9b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv6: 2606:f180:d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:6f:90:13:2f:8c:2e:0f:30:c2:0e:3a:e6:ec:0c:42:e1:6d: 4a:5e:2d:55:4a:c5:ef:22:6b:b1:b3:19:d8:d1:8d:c3:7d:71: 42:dd:6b:e3:af:78:5b:c7:63:a5:59:7c:80:81:91:55:f6:07: 3c:63:7d:1d:ef:14:0a:02:9b:62:42:07:c9:b2:42:be:22:89: e0:ab:39:f9:6d:62:07:72:55:a0:41:e9:52:db:8b:c4:e3:d1: e7:c2:4a:63:77:d0:02:50:0e:7d:83:c0:c4:65:a1:eb:42:3b: 86:c2:3e:c5:c3:d3:13:f5:b0:cd:9d:5f:54:94:0a:02:22:47: 14:6d:87:e0:5b:c4:1d:11:48:5a:a5:57:30:66:0f:44:3c:9a: e8:c9:94:1a:34:57:c8:76:b3:13:73:f4:56:11:89:28:50:2e: 57:57:e3:04:bd:23:05:15:37:c9:e1:f4:df:5c:ed:81:75:fa: 18:68:a3:af:75:bf:f9:19:92:b6:b1:04:b2:b3:d7:c3:78:c2: 98:de:b9:30:8f:de:6a:28:ee:d8:4d:d8:a8:4a:7a:c4:d4:95: 57:0a:57:2b:93:99:60:a2:ab:23:e5:ac:77:99:75:a9:ef:55: 98:a5:9e:43:90:76:bc:d9:bd:fb:41:09:50:a6:52:d2:20:7d: 18:6a:8c:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEj9L6cXjlqxlrhdBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MDIyNDEyNDIyNVoXDTI1MDUyNTExNDIyNVowLzEtMCsGA1UEAxMk NDY1MzMyOGQtNDY0Mi00ODYwLTkzZmQtNjZjYWFjNmIzN2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmzDqaT8PBy0hH+gRP2IJhmWmdl0P0SGGkXa EO5UE3fYRZFyMGMpV9aXp6CcJ9W/J7YkAu3uQSxjpGAH+UjO3L9PcTTiG4rj5Ar5 +azwU9G09zkfBGyaCdEpkVUfZ8IGAFEAh1ktMcsRC1JGU7jPfBqghxsbSB354cth 9U4OeOHZKn3gc62EV5x0Mqj3H5geYuGdrM2yYla8jQ/qGn16//PaPj1GJhzWMCEh bF7b7Tdz+OLJDDbMz+j89IUd8fEoX9Os76Lk6a8e0DvDkK473Dk8cueWbB2mpPsD ozx6M5NcZFc6Y/TLnffJ9xNIAIGqpX8siMLUdBOT6KH79RHshwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIUKEvZWm9ddqmpjU/OOV4nsenG/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvYzI1YWZjYzAtNzAxYy0z NmViLWFhNjctYTlmNDc0ZDhiOWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgbxgAAN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI5vkBMvjC4PMMIOOubsDELhbUpeLVVKxe8ia7GzGdjRjcN9cULd a+OveFvHY6VZfICBkVX2BzxjfR3vFAoCm2JCB8myQr4iieCrOfltYgdyVaBB6VLb i8Tj0efCSmN30AJQDn2DwMRloetCO4bCPsXD0xP1sM2dX1SUCgIiRxRth+BbxB0R SFqlVzBmD0Q8mujJlBo0V8h2sxNz9FYRiShQLldX4wS9IwUVN8nh9N9c7YF1+hho o691v/kZkraxBLKz18N4wpjeuTCP3moo7thN2KhKesTUlVcKVyuTmWCiqyPlrHeZ danvVZilnkOQdrzZvftBCVCmUtIgfRhqjMQ= -----END CERTIFICATE-----Generated at Sat Apr 5 12:26:34 2025 by rpki-client