$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3bdaf9a5-bf7d-3564-aa19-bdbad0d631fd.roa File: 3bdaf9a5-bf7d-3564-aa19-bdbad0d631fd.roa (raw, json) Hash identifier: 5e5ZulIGExoEUCpdV6A10PHYjlnKMRUUjaUv/jrOiZA= Subject key identifier: 49:E9:D3:37:2D:E6:49:50:BA:6F:D7:A5:48:5E:6F:FE:3D:07:9F:A1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584910E17BB33DBC528E5D80EA80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3bdaf9a5-bf7d-3564-aa19-bdbad0d631fd.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 13335 IP address blocks: 2606:4700:54::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:7b:b3:3d:bc:52:8e:5d:80:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=75cd311e-4b96-4a8a-b9e1-58a7187c63d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:04:9e:79:b9:31:68:d1:37:21:8c:7a:6b:e8: 77:c3:59:5a:d2:75:8f:74:cf:a9:50:df:7e:f6:90: 71:d1:46:8f:85:68:71:3c:cc:7c:88:ff:67:55:e2: 3c:c4:7d:6e:fb:e0:b1:8b:02:8d:a1:28:5b:90:a0: ba:88:fb:06:ae:4f:7e:8a:49:2c:b3:c2:0b:5e:3b: 36:da:4b:2e:3b:cf:5b:41:ec:a1:8a:de:38:bb:4f: eb:0f:0e:84:75:d3:ba:ba:68:49:ae:9f:2d:da:14: fd:4b:9a:90:ed:5f:66:6e:73:88:84:79:af:13:26: 28:82:67:99:55:bd:f1:f1:da:79:3e:1d:08:58:f6: be:6e:99:12:dd:24:d2:ae:b0:7e:24:dd:b2:cf:75: 40:e8:d2:49:6b:2f:e7:c1:5c:9c:5e:44:ea:18:0e: 8a:85:c4:52:ce:e4:92:38:ae:63:1b:68:5f:8d:c1: 7c:2e:5d:c3:0e:3f:ee:01:d2:4b:56:25:c1:b6:4d: d9:b9:4a:21:0c:e8:bb:9a:ea:f7:c5:59:71:41:75: d4:79:de:40:e8:bb:d7:f5:7d:6c:07:f0:b1:c6:0b: 77:70:b5:0a:03:22:d3:d2:71:c2:44:90:62:5b:44: ec:00:73:13:58:41:f2:24:cd:e1:74:47:6e:c4:85: bd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E9:D3:37:2D:E6:49:50:BA:6F:D7:A5:48:5E:6F:FE:3D:07:9F:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3bdaf9a5-bf7d-3564-aa19-bdbad0d631fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:54::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:b5:9e:07:a9:59:b0:50:a6:4f:08:5a:34:9b:3d:2f:91:c9: de:aa:85:0e:1d:eb:e9:cb:24:08:ad:58:51:18:4c:0f:63:c1: d0:3b:14:39:a4:b4:75:95:23:4c:69:2b:7f:22:44:ed:a8:c8: 90:3a:a3:47:25:de:e2:93:9d:3b:ef:a1:c8:d9:40:e3:07:a3: 3f:65:3a:b5:14:f1:ec:ab:02:a7:bd:6a:e1:de:a7:05:9e:2b: 13:42:c2:58:1b:bb:00:00:b9:0e:a0:0d:ce:d7:d6:11:fe:22: 96:82:fe:9c:25:50:fe:31:49:2d:f9:7f:ce:fe:14:42:e6:82: e1:fe:5d:28:20:a6:ca:8c:62:9b:11:be:36:a0:de:01:c3:0e: 19:3b:9d:19:ce:9a:f8:bb:9d:1b:2a:ce:a2:d1:ed:f5:30:7d: 9d:52:57:b1:09:b6:d8:13:00:61:f8:93:eb:64:7b:b6:d3:3f: 74:fb:8a:83:02:d3:52:09:5a:35:b3:80:be:f9:ca:34:35:3b: 5d:eb:59:e0:8d:d5:94:91:da:75:eb:d7:ca:ee:57:a9:77:41: 26:00:fb:80:e3:f3:44:f0:0a:ca:a0:95:47:11:b7:6a:b0:21: d1:c9:dd:70:2e:4f:3a:24:27:4a:00:b6:dd:40:d6:5f:b3:4f: c2:a8:34:65 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkQ4XuzPbxSjl2A6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk NzVjZDMxMWUtNGI5Ni00YThhLWI5ZTEtNThhNzE4N2M2M2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwSeebkxaNE3IYx6a+h3w1la0nWPdM+pUN9+ 9pBx0UaPhWhxPMx8iP9nVeI8xH1u++CxiwKNoShbkKC6iPsGrk9+ikkss8ILXjs2 2ksuO89bQeyhit44u0/rDw6EddO6umhJrp8t2hT9S5qQ7V9mbnOIhHmvEyYogmeZ Vb3x8dp5Ph0IWPa+bpkS3STSrrB+JN2yz3VA6NJJay/nwVycXkTqGA6KhcRSzuSS OK5jG2hfjcF8Ll3DDj/uAdJLViXBtk3ZuUohDOi7mur3xVlxQXXUed5A6LvX9X1s B/Cxxgt3cLUKAyLT0nHCRJBiW0TsAHMTWEHyJM3hdEduxIW9HQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEnp0zct5klQum/XpUheb/49B5+hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2JkYWY5YTUtYmY3ZC0z NTY0LWFhMTktYmRiYWQwZDYzMWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAABU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALi1ngepWbBQpk8IWjSbPS+Ryd6qhQ4d6+nLJAitWFEYTA9jwdA7 FDmktHWVI0xpK38iRO2oyJA6o0cl3uKTnTvvocjZQOMHoz9lOrUU8eyrAqe9auHe pwWeKxNCwlgbuwAAuQ6gDc7X1hH+IpaC/pwlUP4xSS35f87+FELmguH+XSggpsqM YpsRvjag3gHDDhk7nRnOmvi7nRsqzqLR7fUwfZ1SV7EJttgTAGH4k+tke7bTP3T7 ioMC01IJWjWzgL75yjQ1O13rWeCN1ZSR2nXr18ruV6l3QSYA+4Dj80TwCsqglUcR t2qwIdHJ3XAuTzokJ0oAtt1A1l+zT8KoNGU= -----END CERTIFICATE-----Generated at Sat Apr 5 07:49:08 2025 by rpki-client