$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/820426c1-1ab5-3469-89ec-e147282aa81e.roa File: 820426c1-1ab5-3469-89ec-e147282aa81e.roa (raw, json) Hash identifier: 5wMwx6QIh8NpNwzk+HkFuvYYOGkRsQX4VXn+SKml1Xo= Subject key identifier: D1:8D:73:C8:D1:38:04:E3:CE:0A:83:DC:B8:DC:4F:7E:1A:06:26:E3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584910E17BC4030B7631D8207DA0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/820426c1-1ab5-3469-89ec-e147282aa81e.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 13335 IP address blocks: 2606:4700:5c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:7b:c4:03:0b:76:31:d8:20:7d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=3c4e3540-6be7-41e9-bcd6-594418dbb6cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4f:de:37:30:b5:62:15:0b:6e:09:cb:ef:c0: 97:b3:e8:95:89:4c:89:e8:b5:47:a5:64:da:46:4e: 0b:1a:1a:13:54:b1:26:5f:1a:5c:00:3c:20:85:09: f6:1c:4a:b4:51:c7:d5:b9:4f:9e:52:8d:74:0c:d6: 36:10:03:1b:00:09:db:a8:2d:17:28:03:37:4f:eb: 0e:25:86:2c:61:8a:68:a8:1c:00:34:f9:22:94:d4: d0:70:e0:f5:aa:f2:6a:a5:4d:ff:18:fa:e1:4c:95: 6e:b8:1b:a7:6b:0c:c4:63:05:7f:c5:04:c6:dd:d4: 70:e2:d7:59:7c:7b:86:8f:16:b1:0f:41:42:9e:c9: 9f:d2:61:24:f2:0a:34:79:23:43:a2:e8:c7:c7:4f: f6:98:16:f1:f5:08:6c:26:cd:d1:ab:da:d2:15:85: 61:9b:50:03:ac:fc:68:d1:31:e3:1c:42:6d:ee:8d: 3e:67:8e:5a:7d:e0:df:16:da:78:e7:85:38:5b:2f: 64:f7:18:6e:2a:8f:5a:85:44:69:bc:6f:e6:f5:7a: 4e:63:06:7d:b5:35:0c:32:81:5f:63:a3:a3:bb:9a: 9a:a3:4d:87:12:27:b5:39:e4:4d:1e:49:e0:f8:e1: 26:40:f3:f6:a8:c9:02:ee:ce:e2:e6:e2:4c:b5:6d: 8f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8D:73:C8:D1:38:04:E3:CE:0A:83:DC:B8:DC:4F:7E:1A:06:26:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/820426c1-1ab5-3469-89ec-e147282aa81e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:5c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:7a:a0:67:5b:0b:83:6d:ae:3f:ed:b2:0b:e2:91:1b:d5:15: 5b:af:0c:e6:fd:12:ac:e0:e7:61:ad:e1:8d:f3:e3:95:80:f0: 84:3f:5d:18:0e:84:8f:57:1f:8c:4c:f7:b5:5c:8e:e4:8f:c1: d1:38:b8:23:5c:8c:90:8d:24:fa:b8:d2:c5:b4:18:d2:10:c7: ff:d6:35:42:a5:48:af:53:f4:a0:b0:ee:54:d0:c0:ab:15:6f: db:aa:5d:f6:f1:b1:03:95:f2:30:62:03:87:d9:ac:98:5f:67: cb:9a:fe:64:f1:67:9b:ff:ee:2f:e7:04:fe:ec:55:87:8c:d3: 34:23:1b:57:01:b5:a8:c2:fc:54:05:43:96:37:6d:1a:82:45: 0e:e0:b7:e0:1d:0d:b5:6d:ce:80:5e:03:48:35:0d:fc:68:4c: cd:98:8a:0e:2a:a3:59:f0:00:5b:30:45:86:ed:1d:86:b9:81: 5b:cc:77:ae:6f:35:1a:ef:48:c8:61:d3:8d:e8:09:c7:b6:7f: 00:fa:ff:55:ec:69:57:0c:3c:54:21:b4:a8:61:22:fb:d3:22: 13:12:67:d7:74:b4:4f:c0:99:8d:bb:06:0c:3f:5e:86:11:8a: 59:17:61:b4:5c:1e:67:73:8f:42:52:36:2f:12:73:5f:38:88: 7a:f5:37:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkQ4XvEAwt2MdggfaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk M2M0ZTM1NDAtNmJlNy00MWU5LWJjZDYtNTk0NDE4ZGJiNmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0k/eNzC1YhULbgnL78CXs+iViUyJ6LVHpWTa Rk4LGhoTVLEmXxpcADwghQn2HEq0UcfVuU+eUo10DNY2EAMbAAnbqC0XKAM3T+sO JYYsYYpoqBwANPkilNTQcOD1qvJqpU3/GPrhTJVuuBunawzEYwV/xQTG3dRw4tdZ fHuGjxaxD0FCnsmf0mEk8go0eSNDoujHx0/2mBbx9QhsJs3Rq9rSFYVhm1ADrPxo 0THjHEJt7o0+Z45afeDfFtp454U4Wy9k9xhuKo9ahURpvG/m9XpOYwZ9tTUMMoFf Y6Oju5qao02HEie1OeRNHkng+OEmQPP2qMkC7s7i5uJMtW2PnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNGNc8jROATjzgqD3LjcT34aBibjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODIwNDI2YzEtMWFiNS0z NDY5LTg5ZWMtZTE0NzI4MmFhODFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAABc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABp6oGdbC4Ntrj/tsgvikRvVFVuvDOb9Eqzg52Gt4Y3z45WA8IQ/ XRgOhI9XH4xM97VcjuSPwdE4uCNcjJCNJPq40sW0GNIQx//WNUKlSK9T9KCw7lTQ wKsVb9uqXfbxsQOV8jBiA4fZrJhfZ8ua/mTxZ5v/7i/nBP7sVYeM0zQjG1cBtajC /FQFQ5Y3bRqCRQ7gt+AdDbVtzoBeA0g1DfxoTM2Yig4qo1nwAFswRYbtHYa5gVvM d65vNRrvSMhh043oCce2fwD6/1XsaVcMPFQhtKhhIvvTIhMSZ9d0tE/AmY27Bgw/ XoYRilkXYbRcHmdzj0JSNi8Sc184iHr1N9o= -----END CERTIFICATE-----Generated at Sat Apr 5 10:10:48 2025 by rpki-client