$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6cd470ee-547b-3cf8-a0c2-bc0585a02450.roa File: 6cd470ee-547b-3cf8-a0c2-bc0585a02450.roa (raw, json) Hash identifier: zg0PQkLp5HWsvp/8h4X3GltO6rkTq6GdiFQrjJpR9Pc= Subject key identifier: 32:EB:0B:B5:FB:26:F0:7D:30:DA:14:B0:02:E8:1F:21:8A:4A:75:07 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584908818A8BBD947CE4A39AAB40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6cd470ee-547b-3cf8-a0c2-bc0585a02450.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 2606:4700:52::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:8a:8b:bd:94:7c:e4:a3:9a:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=4e312757-e510-4408-862d-2518ef6d960c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b3:fc:cf:71:41:2d:f7:80:c7:98:ee:ca:2a: 47:10:18:64:0d:d6:d4:bb:9c:ad:df:78:1b:dc:0f: cf:fe:79:18:7f:5f:3c:21:c7:99:25:c5:8a:45:ae: 9e:50:4b:be:ae:44:6c:55:04:1d:83:96:1c:d1:2b: 0a:62:54:1e:65:e4:08:09:9b:d5:74:c6:fa:52:bb: b6:57:22:d1:d0:db:66:c2:5b:35:43:b7:3e:e0:2f: 87:bd:d9:ba:ab:08:6f:d3:b5:3c:9a:0d:06:b3:2e: 92:60:df:60:2a:91:51:75:fd:6f:99:f9:6a:94:3d: fe:f9:66:da:e3:bf:35:77:54:1b:6d:57:d8:fd:91: f1:59:73:1c:14:63:9d:12:3c:c4:27:9a:0c:5d:69: 18:46:af:ca:fa:58:8c:2a:9c:5c:da:8b:bc:92:f6: 92:3a:ae:ec:53:af:b7:74:f9:68:b3:a7:b3:94:32: 5a:1a:40:ab:93:41:3a:30:ea:b6:6c:22:2f:58:a4: 9a:ab:31:4f:3f:de:86:0e:da:de:69:e6:65:31:72: bc:c5:6a:a9:75:04:68:72:20:4c:b8:1e:23:ec:3f: f1:ac:df:5c:01:e0:26:c1:f4:d5:0c:4c:03:6a:0e: 57:38:da:7a:5d:61:d9:f9:f9:5e:d3:8f:97:61:58: cc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:EB:0B:B5:FB:26:F0:7D:30:DA:14:B0:02:E8:1F:21:8A:4A:75:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6cd470ee-547b-3cf8-a0c2-bc0585a02450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:52::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:a8:2a:f3:9e:41:f8:99:13:69:eb:37:01:f8:0a:13:27:09: fb:03:e9:a2:43:91:b6:d7:4d:93:4d:44:af:f1:18:1f:3c:0c: 0b:93:c0:c7:c6:63:0b:09:8b:56:f5:8e:fe:3f:51:cc:39:70: bf:7e:c9:aa:e7:72:11:9f:14:7d:dd:40:3d:17:1c:c3:2e:02: 3c:27:ef:b9:43:97:57:c4:3f:9b:9c:b6:bd:11:88:6a:24:b9: e9:ae:91:a9:5d:cb:2e:6e:2c:73:ee:ff:9e:1a:b7:a7:f7:d7: ec:be:f2:56:8e:53:99:bf:e7:4b:c5:ca:6f:33:f1:1b:3b:e3: 1e:1d:9b:5e:f4:52:e1:b8:5a:24:c8:8c:0c:f8:29:d2:ef:b8: 85:1a:9c:4d:fb:87:f4:3c:e8:9b:0b:bd:05:cc:52:4c:f4:47: 85:15:a9:7d:73:57:0b:b9:4d:ba:7f:0c:9f:8b:f6:70:ef:7d: c1:54:96:be:ec:7e:e3:c7:2e:67:dc:c7:5a:8f:e2:72:2c:8a: 9c:ad:b9:99:cd:b8:1e:ec:6d:1f:03:01:9b:a9:27:f5:b2:5e: 3e:88:d7:fd:29:1d:c4:ec:9a:3f:97:85:e7:d4:5b:c1:02:cc: bc:1f:90:15:a6:55:0f:76:5a:b4:2b:c5:b2:22:34:0a:1c:64: 10:bc:49:ae -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkIgYqLvZR85KOaq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NGUzMTI3NTctZTUxMC00NDA4LTg2MmQtMjUxOGVmNmQ5NjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrP8z3FBLfeAx5juyipHEBhkDdbUu5yt33gb 3A/P/nkYf188IceZJcWKRa6eUEu+rkRsVQQdg5Yc0SsKYlQeZeQICZvVdMb6Uru2 VyLR0Ntmwls1Q7c+4C+Hvdm6qwhv07U8mg0Gsy6SYN9gKpFRdf1vmflqlD3++Wba 4781d1QbbVfY/ZHxWXMcFGOdEjzEJ5oMXWkYRq/K+liMKpxc2ou8kvaSOq7sU6+3 dPlos6ezlDJaGkCrk0E6MOq2bCIvWKSaqzFPP96GDtreaeZlMXK8xWqpdQRociBM uB4j7D/xrN9cAeAmwfTVDEwDag5XONp6XWHZ+fle04+XYVjMSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDLrC7X7JvB9MNoUsALoHyGKSnUHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmNkNDcwZWUtNTQ3Yi0z Y2Y4LWEwYzItYmMwNTg1YTAyNDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAABS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKioKvOeQfiZE2nrNwH4ChMnCfsD6aJDkbbXTZNNRK/xGB88DAuT wMfGYwsJi1b1jv4/Ucw5cL9+yarnchGfFH3dQD0XHMMuAjwn77lDl1fEP5uctr0R iGokuemukaldyy5uLHPu/54at6f31+y+8laOU5m/50vFym8z8Rs74x4dm170UuG4 WiTIjAz4KdLvuIUanE37h/Q86JsLvQXMUkz0R4UVqX1zVwu5Tbp/DJ+L9nDvfcFU lr7sfuPHLmfcx1qP4nIsipytuZnNuB7sbR8DAZupJ/WyXj6I1/0pHcTsmj+XhefU W8ECzLwfkBWmVQ92WrQrxbIiNAocZBC8Sa4= -----END CERTIFICATE-----Generated at Sat Apr 5 06:34:12 2025 by rpki-client