$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/df3cb1ae-b27d-30f9-a9dc-85d3b5b9f72d.roa File: df3cb1ae-b27d-30f9-a9dc-85d3b5b9f72d.roa (raw, json) Hash identifier: EvYZRBvpLXuxNnVPmDF/jREaAGM+9Ew+ilx3Oiz9wfo= Subject key identifier: FB:7F:CD:4D:43:AA:38:3D:16:EC:4A:74:23:C3:89:7E:9B:DA:CE:48 Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Certificate serial: 010D0C9F43285849088162CC8853CB0881EC7B00 Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/df3cb1ae-b27d-30f9-a9dc-85d3b5b9f72d.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 26211 IP address blocks: 2620:100:9000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:62:cc:88:53:cb:08:81:ec:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=3421aa38-829f-401f-9f50-1a803ccb915f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:be:ac:04:00:b4:1d:6f:58:d5:83:bf:98:84: 9d:25:62:71:01:9e:23:b9:4f:14:f1:68:2e:73:8c: b1:90:23:18:76:c7:1c:9e:25:b8:9a:4d:8b:4e:79: 3a:88:b3:0e:83:45:67:4d:6f:ee:0a:61:33:96:32: 31:d0:b0:20:fb:93:a9:5f:79:22:5e:cc:64:82:05: f5:4b:55:15:13:fa:88:9f:e2:6e:48:00:ff:23:0b: af:35:7c:86:5a:02:f6:0c:2c:4c:c1:67:9c:84:da: 3a:18:f0:d5:71:b6:25:06:8f:36:5d:a9:e5:f0:7d: 0b:89:68:71:1f:f5:a4:9d:24:db:34:b0:ee:6f:d8: ab:5e:29:c8:77:28:40:5c:1d:eb:94:36:10:46:c5: 70:fc:dd:2a:cf:4b:f0:1e:d7:3e:08:5b:d0:83:8d: f9:c8:ff:fd:15:7f:22:82:b5:7e:d3:29:41:24:da: ea:fa:60:67:1b:35:09:eb:0c:30:4f:25:31:a9:34: 00:22:af:7a:8f:27:f6:a2:c9:35:e3:92:a2:3e:12: 56:53:93:77:2e:2f:c5:db:1d:fa:a9:a0:d4:94:35: 48:3c:87:42:3f:f1:c1:3f:79:0e:b9:b8:0b:7a:95: f5:63:7d:e1:b7:91:80:e0:14:e6:c9:93:9f:b2:48: c7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:7F:CD:4D:43:AA:38:3D:16:EC:4A:74:23:C3:89:7E:9B:DA:CE:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/df3cb1ae-b27d-30f9-a9dc-85d3b5b9f72d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl X509v3 Authority Key Identifier: keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer sbgp-ipAddrBlock: critical IPv6: 2620:100:9000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:6a:0e:74:6d:77:91:84:8a:38:bf:42:85:45:7d:40:2a:5a: 98:ee:8f:1d:36:24:d1:a1:2a:4d:57:1f:9c:05:be:71:e2:38: 70:2b:85:4a:09:0a:d3:5a:43:1c:96:c8:7b:f2:29:70:76:0f: 31:dc:4c:f2:72:8a:9c:85:ab:39:e3:07:76:08:72:e2:d0:4c: 14:9a:96:3a:43:14:94:c2:1d:16:da:ae:fa:36:ca:64:81:82: 97:23:fa:55:41:78:e7:0c:b0:a8:af:8f:14:bb:08:70:2c:aa: 3e:6b:63:ba:5c:ed:a5:2d:61:a2:20:81:be:d1:26:94:7d:40: dc:d6:48:88:d0:a3:9b:b4:57:c5:e5:5e:14:af:46:ca:1d:7d: 62:9e:a2:2a:67:53:c6:ea:f5:74:22:11:ac:90:31:b9:e6:1b: 84:4a:37:5f:d3:0c:5c:64:a0:70:90:0f:31:64:8b:89:22:72: a0:55:fb:cc:bb:bc:a1:cd:59:da:39:9c:55:e2:1a:b6:47:61: da:c6:0f:d7:43:c4:bc:b1:1d:3f:df:c1:5c:7b:21:74:af:16: 88:1f:9b:5a:b9:d3:fa:40:b6:ee:6e:03:41:88:32:ea:07:4d: 98:86:eb:b9:f0:58:b3:47:72:7b:95:05:e8:db:41:26:88:c5: ba:b0:e7:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkIgWLMiFPLCIHsewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk N2M2MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk MzQyMWFhMzgtODI5Zi00MDFmLTlmNTAtMWE4MDNjY2I5MTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr6sBAC0HW9Y1YO/mISdJWJxAZ4juU8U8Wgu c4yxkCMYdsccniW4mk2LTnk6iLMOg0VnTW/uCmEzljIx0LAg+5OpX3kiXsxkggX1 S1UVE/qIn+JuSAD/IwuvNXyGWgL2DCxMwWechNo6GPDVcbYlBo82Xanl8H0LiWhx H/WknSTbNLDub9irXinIdyhAXB3rlDYQRsVw/N0qz0vwHtc+CFvQg435yP/9FX8i grV+0ylBJNrq+mBnGzUJ6wwwTyUxqTQAIq96jyf2osk145KiPhJWU5N3Li/F2x36 qaDUlDVIPIdCP/HBP3kOubgLepX1Y33ht5GA4BTmyZOfskjHbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPt/zU1Dqjg9FuxKdCPDiX6b2s5IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvZGYzY2IxYWUtYjI3ZC0z MGY5LWE5ZGMtODVkM2I1YjlmNzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz MjM2M2Q3YzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABAJAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB1qDnRtd5GEiji/QoVFfUAqWpjujx02JNGhKk1XH5wFvnHiOHAr hUoJCtNaQxyWyHvyKXB2DzHcTPJyipyFqznjB3YIcuLQTBSaljpDFJTCHRbarvo2 ymSBgpcj+lVBeOcMsKivjxS7CHAsqj5rY7pc7aUtYaIggb7RJpR9QNzWSIjQo5u0 V8XlXhSvRsodfWKeoipnU8bq9XQiEayQMbnmG4RKN1/TDFxkoHCQDzFki4kicqBV +8y7vKHNWdo5nFXiGrZHYdrGD9dDxLyxHT/fwVx7IXSvFogfm1q50/pAtu5uA0GI MuoHTZiG67nwWLNHcnuVBejbQSaIxbqw58E= -----END CERTIFICATE-----Generated at Sat Apr 5 12:17:48 2025 by rpki-client