$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/987e77f7-2387-3132-b3e4-091864915016.roa File: 987e77f7-2387-3132-b3e4-091864915016.roa (raw, json) Hash identifier: m8PaYErjLTgMe5rvM7hNGcERuGraFAcFNUMWBW7eShA= Subject key identifier: 60:49:18:7E:9C:1E:17:A0:80:8D:BC:AA:A3:6E:23:08:5B:7C:90:01 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584910E17C2854ECCDA7E4B7BB80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/987e77f7-2387-3132-b3e4-091864915016.roa Signing time: Mon 03 Mar 2025 14:00:53 +0000 ROA not before: Mon 03 Mar 2025 14:00:53 +0000 ROA not after: Sun 01 Jun 2025 13:00:53 +0000 asID: 13335 IP address blocks: 2606:4700:90::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:10:e1:7c:28:54:ec:cd:a7:e4:b7:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 3 14:00:53 2025 GMT Not After : Jun 1 13:00:53 2025 GMT Subject: CN=53faf1a9-041f-48a3-ac1a-b095248bd786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9d:b2:72:f1:32:0a:a2:ee:c0:b0:c2:87:e2: 41:d8:9e:b9:49:86:67:58:95:2b:7b:e5:fa:e6:4b: 19:7d:8c:65:c1:a8:d4:09:c9:61:29:c3:a7:54:27: bf:af:61:60:61:8b:63:23:25:9c:79:39:e3:45:1d: 82:b8:53:10:fd:7f:ce:35:a8:8a:e7:5b:5b:77:89: 2c:1b:9f:bb:d3:c9:e2:9b:66:73:60:95:fd:f5:c0: f2:3b:56:c0:d1:a7:db:c5:0a:65:48:f2:53:56:5a: 85:fd:bd:58:16:4d:39:1e:e0:a0:a3:14:c6:e6:33: 49:d4:19:7c:94:f6:ab:22:5d:c6:d9:06:a3:d7:3a: 4b:93:40:43:2a:0d:7b:ba:ad:7b:1b:42:15:44:23: 35:be:c8:53:93:7b:36:78:e0:65:7c:bf:0c:e8:c9: 29:2f:3c:9e:bb:ca:78:92:b1:34:e2:58:95:a4:2c: 11:b7:3e:8a:72:69:dc:08:85:ad:38:ea:b0:6f:8e: 38:b3:9b:69:ea:f9:33:4e:b7:1e:65:7e:97:e4:65: 73:2f:37:c8:2f:b3:e1:06:e4:50:1f:aa:a5:00:28: 27:a7:73:29:4b:24:d2:2e:0e:f0:f8:de:1c:22:43: a0:a3:fc:51:bd:32:9a:9d:d3:81:95:50:ec:21:07: 84:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:49:18:7E:9C:1E:17:A0:80:8D:BC:AA:A3:6E:23:08:5B:7C:90:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/987e77f7-2387-3132-b3e4-091864915016.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:90::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:d3:9d:5f:c9:12:7b:7f:e7:93:cc:23:7b:d5:b2:dc:7d:6e: 58:60:cb:1c:ad:43:b3:4a:ae:7e:cc:e8:2c:f6:5e:28:73:f2: 0c:4d:13:85:16:2b:8f:d2:f2:ad:43:60:fe:b3:dc:c8:3d:c6: 57:e2:08:0e:50:ab:bb:8c:72:e0:57:76:06:6a:43:8e:e0:7c: b2:e0:79:66:37:44:61:fc:70:fb:89:1f:5c:b6:2f:85:9b:7d: 0b:75:19:26:ec:40:00:b6:8f:49:d1:94:e0:5e:2a:98:df:d2: 83:d1:61:df:e0:cc:3c:04:91:00:e6:10:f2:e5:2d:82:81:0a: f7:6b:a9:6e:d6:6e:72:1d:39:81:7c:e3:5a:a1:cb:f5:e9:4a: 45:28:2e:af:97:09:0c:7f:94:ac:35:a7:e8:cc:73:ad:82:5a: 1b:37:a5:a8:c2:b8:6d:88:47:4a:92:02:c3:9b:14:76:e3:03: 83:45:ff:c1:a1:82:91:f5:8e:1b:1e:7f:dd:c1:55:68:3c:d7: 1e:1e:a4:b0:bf:6a:9b:eb:72:64:5e:c2:17:43:c3:a6:79:20: 57:fd:e5:c4:77:9c:5f:ff:7b:44:b4:c8:87:54:62:f6:66:19: 56:e8:e1:80:f7:da:e2:4d:7e:c8:ec:ee:ac:41:1a:de:43:b5: df:f1:32:c2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkQ4XwoVOzNp+S3u4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwMzE0MDA1M1oXDTI1MDYwMTEzMDA1M1owLzEtMCsGA1UEAxMk NTNmYWYxYTktMDQxZi00OGEzLWFjMWEtYjA5NTI0OGJkNzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk52ycvEyCqLuwLDCh+JB2J65SYZnWJUre+X6 5ksZfYxlwajUCclhKcOnVCe/r2FgYYtjIyWceTnjRR2CuFMQ/X/ONaiK51tbd4ks G5+708nim2ZzYJX99cDyO1bA0afbxQplSPJTVlqF/b1YFk05HuCgoxTG5jNJ1Bl8 lParIl3G2Qaj1zpLk0BDKg17uq17G0IVRCM1vshTk3s2eOBlfL8M6MkpLzyeu8p4 krE04liVpCwRtz6KcmncCIWtOOqwb444s5tp6vkzTrceZX6X5GVzLzfIL7PhBuRQ H6qlACgnp3MpSyTSLg7w+N4cIkOgo/xRvTKandOBlVDsIQeEOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGBJGH6cHheggI28qqNuIwhbfJABMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTg3ZTc3ZjctMjM4Ny0z MTMyLWIzZTQtMDkxODY0OTE1MDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgZHAACQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALXTnV/JEnt/55PMI3vVstx9blhgyxytQ7NKrn7M6Cz2Xihz8gxN E4UWK4/S8q1DYP6z3Mg9xlfiCA5Qq7uMcuBXdgZqQ47gfLLgeWY3RGH8cPuJH1y2 L4WbfQt1GSbsQAC2j0nRlOBeKpjf0oPRYd/gzDwEkQDmEPLlLYKBCvdrqW7WbnId OYF841qhy/XpSkUoLq+XCQx/lKw1p+jMc62CWhs3pajCuG2IR0qSAsObFHbjA4NF /8GhgpH1jhsef93BVWg81x4epLC/apvrcmRewhdDw6Z5IFf95cR3nF//e0S0yIdU YvZmGVbo4YD32uJNfsjs7qxBGt5Dtd/xMsI= -----END CERTIFICATE-----Generated at Sat Apr 5 10:23:05 2025 by rpki-client