$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85f0328b-5b68-3fad-bcc4-4cb65651e00d.roa File: 85f0328b-5b68-3fad-bcc4-4cb65651e00d.roa (raw, json) Hash identifier: wLwAcn8rZ8zRgUPhlAMv+9tIXoh21jfCIrj+N/yid3c= Subject key identifier: 5D:AB:71:79:D1:92:DC:EE:AE:E1:62:E1:32:54:95:B7:85:48:CA:A0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584910E17C06B718B0928FEF22C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85f0328b-5b68-3fad-bcc4-4cb65651e00d.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 13335 IP address blocks: 2606:4700:70::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:7c:06:b7:18:b0:92:8f:ef:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=366bf1cc-71f4-4c92-baaa-67c83191ec7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:06:0f:ca:2d:ab:80:3f:45:f1:24:cb:bd:5b: 6a:b6:15:a9:99:43:9c:7d:2f:1c:52:74:97:36:8a: 8a:43:d0:fe:99:c8:99:98:b5:f4:89:ec:1d:6b:23: af:bc:99:2d:bc:a6:eb:ff:20:af:cb:34:9f:97:05: 5e:96:cd:33:28:13:bb:cf:68:3a:96:99:f8:c7:2d: 03:a3:f0:71:93:7c:6f:94:3e:c0:a9:bb:41:3c:07: 2e:39:45:e0:2a:51:0e:c9:c2:d4:d0:c9:0d:55:ff: 58:27:12:d6:46:0a:76:2c:fd:d5:28:9a:0f:3d:7d: c6:8c:10:9e:f7:2d:e1:3e:46:e1:36:f4:7a:8f:06: 24:d5:7b:13:24:59:b5:1e:20:ea:9f:8c:2d:03:02: be:86:f3:8f:ea:aa:24:d7:46:52:50:b1:fd:24:b0: 92:34:dc:8c:b4:17:18:89:a8:c0:52:46:1f:c9:ed: 22:26:34:1b:12:c9:a9:a8:4b:57:a5:e3:5d:1e:8f: 5d:f8:e2:be:02:59:59:ea:a1:9d:0f:9d:cb:07:38: 38:29:83:15:27:0d:20:9f:9d:b3:16:35:15:16:b7: 56:f0:1e:47:b1:f8:36:28:10:3a:69:81:ef:52:f3: 9f:c3:0c:39:7c:4b:c8:11:5a:2c:b9:23:ee:9a:80: fd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:AB:71:79:D1:92:DC:EE:AE:E1:62:E1:32:54:95:B7:85:48:CA:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85f0328b-5b68-3fad-bcc4-4cb65651e00d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:70::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:36:22:79:9a:85:0e:61:88:2d:7d:ee:f4:5c:e8:d1:57:61: 13:d3:93:55:93:6f:ed:d9:af:1f:7b:09:8b:d7:97:ad:c6:db: ce:37:22:93:c7:92:90:d4:83:dc:de:a0:c7:35:0e:f4:a4:e4: 51:f2:c0:eb:33:ed:81:46:23:a3:1f:44:71:89:b1:10:53:f5: ea:48:f5:ce:ce:1a:65:97:e1:1b:96:7e:83:43:a7:89:52:76: c1:a9:c2:75:6d:46:9c:64:9a:06:ca:88:c3:0f:90:f9:eb:61: 81:30:ca:12:98:f5:b0:37:85:5b:b9:78:84:03:d8:96:ce:61: 93:cf:c2:68:76:88:4d:c9:f0:4f:f1:e5:c0:90:9d:11:5a:53: 01:ff:f3:e4:00:af:05:a2:c9:59:6c:af:92:67:f4:fd:2a:3f: ac:5b:05:b8:97:4b:4d:e8:44:7f:1f:ab:08:ed:18:61:00:c4: 0e:83:f4:dd:b6:e4:b9:08:ca:b6:a3:5d:a4:d5:63:15:93:af: 4b:8e:2b:fc:51:4f:97:4c:df:74:f0:70:8d:2c:3a:34:65:ce: 96:f4:be:22:70:6a:3f:f1:57:a1:86:59:b5:a3:42:9c:e8:84: b1:df:ea:a2:9e:1b:79:f8:46:8b:94:7a:6f:0d:b3:35:91:ca: c8:d3:d5:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkQ4XwGtxiwko/vIsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk MzY2YmYxY2MtNzFmNC00YzkyLWJhYWEtNjdjODMxOTFlYzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAYPyi2rgD9F8STLvVtqthWpmUOcfS8cUnSX NoqKQ9D+mciZmLX0iewdayOvvJktvKbr/yCvyzSflwVels0zKBO7z2g6lpn4xy0D o/Bxk3xvlD7AqbtBPAcuOUXgKlEOycLU0MkNVf9YJxLWRgp2LP3VKJoPPX3GjBCe 9y3hPkbhNvR6jwYk1XsTJFm1HiDqn4wtAwK+hvOP6qok10ZSULH9JLCSNNyMtBcY iajAUkYfye0iJjQbEsmpqEtXpeNdHo9d+OK+AllZ6qGdD53LBzg4KYMVJw0gn52z FjUVFrdW8B5Hsfg2KBA6aYHvUvOfwww5fEvIEVosuSPumoD9WwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF2rcXnRktzuruFi4TJUlbeFSMqgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODVmMDMyOGItNWI2OC0z ZmFkLWJjYzQtNGNiNjU2NTFlMDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgZHAABw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJE2InmahQ5hiC197vRc6NFXYRPTk1WTb+3Zrx97CYvXl63G2843 IpPHkpDUg9zeoMc1DvSk5FHywOsz7YFGI6MfRHGJsRBT9epI9c7OGmWX4RuWfoND p4lSdsGpwnVtRpxkmgbKiMMPkPnrYYEwyhKY9bA3hVu5eIQD2JbOYZPPwmh2iE3J 8E/x5cCQnRFaUwH/8+QArwWiyVlsr5Jn9P0qP6xbBbiXS03oRH8fqwjtGGEAxA6D 9N225LkIyrajXaTVYxWTr0uOK/xRT5dM33TwcI0sOjRlzpb0viJwaj/xV6GGWbWj QpzohLHf6qKeG3n4RouUem8NszWRysjT1WQ= -----END CERTIFICATE-----Generated at Sat Apr 5 06:38:06 2025 by rpki-client