$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7f0655ca-03c0-3be4-bc8c-1caeafc8a7ca.roa File: 7f0655ca-03c0-3be4-bc8c-1caeafc8a7ca.roa (raw, json) Hash identifier: PCGRzk8k8tm2Vt/qI4qyAo14ZKqmEz/Epnm5tPPQfTg= Subject key identifier: 98:77:A2:71:53:80:9E:6D:04:5E:BE:3D:CD:49:84:9B:FC:7B:FF:65 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584917DC1C67A3FEE065FB980900 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7f0655ca-03c0-3be4-bc8c-1caeafc8a7ca.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 13335 IP address blocks: 2606:4700:3005::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:1c:67:a3:fe:e0:65:fb:98:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=9ce80944-e7e0-438e-9857-8484d60bea4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3c:30:98:91:91:6f:a4:41:30:3d:b8:0c:3c: c2:3a:8d:e7:60:5a:d3:c8:d2:69:01:d3:e7:67:1a: ca:c9:98:83:3b:79:76:ab:bd:f6:66:1d:18:c1:32: 46:d7:01:b4:f9:b3:56:d4:42:9c:2b:3c:ac:06:11: eb:d3:5d:67:08:cf:93:17:24:13:4f:78:84:b9:0f: 50:f8:7f:a5:e4:06:04:3b:37:1b:00:4c:ae:72:db: f3:14:1a:e2:20:3c:77:ea:f9:5d:5c:23:34:15:9c: 11:d3:89:d8:b6:3f:ad:58:6e:59:cd:96:6a:be:d6: 7d:c5:2e:87:0c:24:94:20:be:27:f4:1b:ea:40:43: b9:d6:85:87:dd:b6:0e:13:cd:fd:25:ce:bd:82:fb: 4a:10:66:92:1a:72:16:36:40:9c:71:7d:b8:3c:1d: b2:a2:b8:b6:15:a0:9f:b9:16:09:99:08:15:e3:a5: 83:ea:4f:8b:21:3a:11:93:6a:b0:5c:bf:70:14:06: 3b:bc:bb:ef:de:ab:e7:a7:5e:d4:43:57:d6:70:95: 60:27:51:50:a8:f1:62:a0:4b:8a:24:4b:55:f9:ac: 53:81:7e:34:ac:f3:32:53:06:51:1c:db:c2:32:84: e8:80:80:12:3b:d2:30:ec:e9:a3:32:1d:0f:98:d6: 33:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:77:A2:71:53:80:9E:6D:04:5E:BE:3D:CD:49:84:9B:FC:7B:FF:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7f0655ca-03c0-3be4-bc8c-1caeafc8a7ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:3005::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:db:7e:26:a8:e8:f5:66:ee:37:17:02:b1:2d:c6:1b:ea:a2: 0f:2a:ef:8e:fb:61:81:35:3a:d3:80:a0:a2:fa:7c:9b:77:d6: 40:a3:36:39:05:cb:f6:f4:02:97:3c:a8:7d:e6:75:ad:60:b7: b2:02:c3:d7:53:44:88:43:88:9c:fa:47:14:2e:fd:68:83:7e: 4c:f0:08:08:ae:6e:13:9e:f4:06:c5:92:0f:00:0c:9b:24:56: 97:d0:0f:ad:c9:5a:13:af:18:96:4f:9d:a6:71:c2:37:84:27: bf:42:27:11:1a:b9:be:1e:b9:c5:cd:87:76:71:ec:34:f9:3b: ec:61:17:42:87:3d:ab:64:25:12:77:19:bc:8b:2b:68:98:1b: 6c:68:03:eb:e5:d9:48:a7:28:c3:ee:5e:69:f7:44:b4:5f:a3: 66:ee:a1:e0:f2:ba:47:0b:d6:37:6a:9c:24:02:ab:88:98:2f: 03:d4:bb:fb:3e:59:5c:8b:3b:cb:87:79:37:ae:8a:40:e7:c2: 8d:b6:35:6d:e0:6d:df:88:4f:a8:e5:7b:2c:93:70:8a:8d:d2: f1:21:e8:1b:f3:36:da:1c:93:de:7c:a1:2f:72:43:b6:c8:26: 03:55:36:5d:16:19:6f:81:63:10:90:9b:83:0b:5f:ca:a5:18: 91:22:95:db -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkX3Bxno/7gZfuYCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk OWNlODA5NDQtZTdlMC00MzhlLTk4NTctODQ4NGQ2MGJlYTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TwwmJGRb6RBMD24DDzCOo3nYFrTyNJpAdPn ZxrKyZiDO3l2q732Zh0YwTJG1wG0+bNW1EKcKzysBhHr011nCM+TFyQTT3iEuQ9Q +H+l5AYEOzcbAEyuctvzFBriIDx36vldXCM0FZwR04nYtj+tWG5ZzZZqvtZ9xS6H DCSUIL4n9BvqQEO51oWH3bYOE839Jc69gvtKEGaSGnIWNkCccX24PB2yori2FaCf uRYJmQgV46WD6k+LIToRk2qwXL9wFAY7vLvv3qvnp17UQ1fWcJVgJ1FQqPFioEuK JEtV+axTgX40rPMyUwZRHNvCMoTogIASO9Iw7OmjMh0PmNYz8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJh3onFTgJ5tBF6+Pc1JhJv8e/9lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2YwNjU1Y2EtMDNjMC0z YmU0LWJjOGMtMWNhZWFmYzhhN2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHADAF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGfbfiao6PVm7jcXArEtxhvqog8q7477YYE1OtOAoKL6fJt31kCj NjkFy/b0Apc8qH3mda1gt7ICw9dTRIhDiJz6RxQu/WiDfkzwCAiubhOe9AbFkg8A DJskVpfQD63JWhOvGJZPnaZxwjeEJ79CJxEaub4eucXNh3Zx7DT5O+xhF0KHPatk JRJ3GbyLK2iYG2xoA+vl2UinKMPuXmn3RLRfo2buoeDyukcL1jdqnCQCq4iYLwPU u/s+WVyLO8uHeTeuikDnwo22NW3gbd+IT6jleyyTcIqN0vEh6BvzNtock958oS9y Q7bIJgNVNl0WGW+BYxCQm4MLX8qlGJEilds= -----END CERTIFICATE-----Generated at Sat Apr 5 04:43:50 2025 by rpki-client