$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/722d690d-f201-3c0d-af29-be2f8ac6b5f7.roa File: 722d690d-f201-3c0d-af29-be2f8ac6b5f7.roa (raw, json) Hash identifier: LFTDY7t0vNoFur1zPcp+dpvC46cSmktPEmUTvxdlXeI= Subject key identifier: C5:3C:1F:03:BA:47:F1:58:31:5B:CC:EB:75:FD:19:47:01:D1:EE:58 Certificate issuer: /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c Certificate serial: 010D0C9F432858494733E113EC059083C91F3B00 Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/722d690d-f201-3c0d-af29-be2f8ac6b5f7.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 32133 IP address blocks: 2606:8e80:7000::/37 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:e1:13:ec:05:90:83:c9:1f:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=87a91ecf-f285-40e6-bb07-f7f9fa8e4d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:68:03:a0:d4:a9:bb:f0:a0:26:f3:17:b1:86: 1a:d7:0a:bd:bb:8a:89:62:1e:b2:a9:28:01:1b:c1: 18:21:c8:a0:3b:fb:6e:6a:ea:78:66:e9:a9:ee:f4: ef:5a:28:f4:4a:df:b7:ef:31:da:03:17:3b:60:c6: 38:d2:f3:7a:b3:80:ef:92:6f:4a:0a:3f:fc:3f:59: 67:5d:4f:ca:62:31:c2:38:9c:40:19:08:62:d1:86: 2f:47:37:b2:36:e5:48:e4:b7:f8:ad:e4:76:ba:65: 9a:8d:e5:db:eb:87:43:ea:49:e0:0b:cb:2d:f7:0f: 19:d9:b9:f6:e4:21:85:f6:37:99:e7:57:4d:45:26: 03:e4:11:f2:57:cf:71:75:0a:70:56:2b:39:d6:70: d3:1b:b6:c4:55:b0:90:ba:73:7b:e3:f3:d2:1d:c8: 0a:21:03:ae:05:48:32:3a:b5:af:da:68:14:b0:77: 90:24:8e:91:36:1a:75:04:ef:da:58:9c:59:b1:bf: de:6e:0f:bb:31:35:2f:3f:a8:a0:bc:83:c8:2a:94: f7:c8:00:25:f5:7f:41:57:92:a8:37:09:23:6f:e9: ac:6a:10:eb:87:85:1b:f8:ae:be:93:84:9b:c2:77: 11:b3:5f:c9:52:c7:05:5c:63:d9:02:2c:ea:2a:d1: 5e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3C:1F:03:BA:47:F1:58:31:5B:CC:EB:75:FD:19:47:01:D1:EE:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/722d690d-f201-3c0d-af29-be2f8ac6b5f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl X509v3 Authority Key Identifier: keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer sbgp-ipAddrBlock: critical IPv6: 2606:8e80:7000::/37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:de:7a:c6:88:87:13:59:89:12:87:5d:a3:a7:85:48:3f:9f: e1:55:04:72:77:23:00:f6:66:b5:10:5b:69:5c:97:81:06:ca: 54:85:d3:ac:35:00:1b:7a:54:29:eb:ff:4b:52:38:e0:cf:56: 33:af:ac:c4:47:14:17:c5:d4:76:77:d8:e0:eb:44:46:fd:78: 18:9b:d5:20:bb:c2:3e:f8:fa:1a:dd:94:b8:48:f6:ba:1d:9e: d3:d5:5b:f8:b4:9d:c9:90:84:25:14:74:c6:4a:1b:45:d4:c7: f6:d3:cc:a4:11:2c:fc:ae:cf:12:7e:c6:8d:f5:87:4c:b1:8d: 61:3e:53:bb:d2:65:05:e1:82:36:74:81:00:e9:db:62:b2:e8: d8:4c:fc:48:4c:95:6e:b7:c6:95:5d:41:88:80:41:b1:fd:e1: ba:89:00:16:49:c5:ca:25:67:0e:66:35:f4:88:5f:75:59:5c: 31:5f:ad:50:6a:0c:ce:88:8e:c7:d8:a8:d6:1d:cb:9b:09:ab: 34:7b:f5:2e:fb:7a:13:f1:f5:75:38:f2:04:a6:b8:02:67:4d: 0f:b8:ca:bd:80:95:a6:7e:61:1d:8c:f3:11:70:1d:25:e9:32: 78:b1:3f:79:d4:4c:b3:58:c7:f0:02:16:41:f8:55:e5:26:e3: 8e:4b:51:b7 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWElHM+ET7AWQg8kfOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0 NjljMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk ODdhOTFlY2YtZjI4NS00MGU2LWJiMDctZjdmOWZhOGU0ZDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2gDoNSpu/CgJvMXsYYa1wq9u4qJYh6yqSgB G8EYIcigO/tuaup4Zump7vTvWij0St+37zHaAxc7YMY40vN6s4Dvkm9KCj/8P1ln XU/KYjHCOJxAGQhi0YYvRzeyNuVI5Lf4reR2umWajeXb64dD6kngC8st9w8Z2bn2 5CGF9jeZ51dNRSYD5BHyV89xdQpwVis51nDTG7bEVbCQunN74/PSHcgKIQOuBUgy OrWv2mgUsHeQJI6RNhp1BO/aWJxZsb/ebg+7MTUvP6igvIPIKpT3yAAl9X9BV5Ko Nwkjb+msahDrh4Ub+K6+k4SbwncRs1/JUscFXGPZAizqKtFe3wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMU8HwO6R/FYMVvM63X9GUcB0e5YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZj YmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvNzIyZDY5MGQtZjIwMS0z YzBkLWFmMjktYmUyZjhhYzZiNWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA2Y2JjOTEtY2ZlOS00ZDE1LThh MTMtZTNkODI4YzA0NjljLzkwNmNiYzkxLWNmZTktNGQxNS04YTEzLWUzZDgyOGMw NDY5Yy5jcmwwHwYDVR0jBBgwFoAUtM26EqXmV2vBKngoUh64xcKEYhUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4 MjhjMDQ2OWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDJgaOgHAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAnt56xoiHE1mJEoddo6eFSD+f4VUEcncjAPZmtRBbaVyXgQbKVIXT rDUAG3pUKev/S1I44M9WM6+sxEcUF8XUdnfY4OtERv14GJvVILvCPvj6Gt2UuEj2 uh2e09Vb+LSdyZCEJRR0xkobRdTH9tPMpBEs/K7PEn7GjfWHTLGNYT5Tu9JlBeGC NnSBAOnbYrLo2Ez8SEyVbrfGlV1BiIBBsf3huokAFknFyiVnDmY19IhfdVlcMV+t UGoMzoiOx9io1h3LmwmrNHv1Lvt6E/H1dTjyBKa4AmdND7jKvYCVpn5hHYzzEXAd JekyeLE/edRMs1jH8AIWQfhV5SbjjktRtw== -----END CERTIFICATE-----Generated at Mon Apr 7 19:52:42 2025 by rpki-client