$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a7b3c84a-fa39-34b0-8984-f20212f89532.roa File: a7b3c84a-fa39-34b0-8984-f20212f89532.roa (raw, json) Hash identifier: CMWkMohC4hJFqqiAVCCB7PB7HzHkXtlsbtexR7ldBPc= Subject key identifier: 60:45:C8:0F:E1:AB:E9:C3:6D:8A:F9:BC:69:AE:A8:B3:0F:56:8D:37 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584917DC1ACCB1A0A84E3EF82A40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a7b3c84a-fa39-34b0-8984-f20212f89532.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 13335 IP address blocks: 2606:4700:e0::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:1a:cc:b1:a0:a8:4e:3e:f8:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=46db92fe-76e4-4860-b54a-4d3ec94abe7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:19:68:ea:bc:0f:1a:49:96:e9:5d:76:96:83: 27:9e:77:d2:21:c6:a1:65:1d:0c:1a:45:4b:5b:98: 61:2e:aa:13:61:62:bb:03:43:a1:d9:70:74:0f:8c: 40:3e:93:1f:81:88:55:15:e1:45:eb:6c:e4:04:4c: 95:3f:73:0d:41:df:cb:40:42:70:e3:de:77:28:b5: d2:d8:b1:6a:da:8f:55:be:40:49:73:11:f4:aa:23: ae:4b:f4:18:d0:34:d3:bd:23:4c:8b:e2:1d:ed:a1: 8a:cb:ef:0d:b4:dd:32:8d:0a:8d:92:0c:2f:5b:e0: 24:d6:47:a9:32:63:0e:ea:d4:04:02:a6:e8:b5:f3: 67:01:08:a4:94:1e:89:ea:5c:fd:ef:0e:06:fe:0b: 01:84:45:d4:00:43:24:6c:4a:31:1a:e2:9a:58:06: f3:b4:7b:37:68:c2:dd:e5:c1:1c:4d:b6:6e:eb:f5: 8f:66:26:11:d2:f4:02:42:2f:75:f2:c0:5e:12:ba: 16:88:aa:93:58:41:9d:b8:8e:33:1d:ee:3d:17:32: 69:9b:53:b8:94:fb:c2:ee:0b:0b:9e:be:28:42:f2: 08:53:8d:92:3f:32:c4:82:04:7a:ba:5b:76:52:03: 72:81:56:d3:06:78:4a:76:e1:5c:b5:3c:b7:64:8d: 98:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:45:C8:0F:E1:AB:E9:C3:6D:8A:F9:BC:69:AE:A8:B3:0F:56:8D:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a7b3c84a-fa39-34b0-8984-f20212f89532.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:e0::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:62:fe:87:5e:00:ea:44:0d:13:d7:bb:d3:68:50:03:c2:da: 20:c8:81:4c:d4:93:30:a6:6c:17:c7:24:8a:1d:d9:6c:27:ab: 57:5a:c9:1c:e5:97:b4:07:33:e7:4a:7f:f3:11:79:10:7d:ec: 3c:68:a3:4f:5d:b4:0d:e6:cb:40:3f:e0:ad:44:81:7f:5e:ba: bf:54:10:da:7d:92:aa:2d:93:5a:d5:ec:15:0d:12:a2:0c:92: a8:df:4a:55:13:88:ba:ed:8c:db:d4:b9:da:51:b9:2f:f3:f9: bc:1e:b5:df:49:cb:c4:9f:3c:ca:4b:68:ef:cc:19:b2:b9:f3: d4:c2:c4:56:cf:ab:4b:c8:90:51:ee:60:9f:71:65:e6:b3:12: 14:72:7c:ab:94:a5:55:3a:5b:d5:8e:a8:37:d4:c7:55:8f:e5: b9:6a:d4:24:04:95:52:65:71:98:71:69:8e:7d:c8:55:f4:be: f3:9a:46:0e:9c:bf:57:25:95:9f:cc:42:77:92:62:dc:49:91: b7:d4:7e:82:1a:3c:09:db:82:52:47:04:8c:35:01:0a:5f:48: e4:43:37:7c:5a:b2:9c:37:bc:19:81:ce:32:68:59:a1:9c:6b: 6a:8e:85:ff:d3:2f:d0:ca:d1:25:d1:c6:00:94:d2:92:5c:5f: 91:94:31:22 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkX3BrMsaCoTj74KkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk NDZkYjkyZmUtNzZlNC00ODYwLWI1NGEtNGQzZWM5NGFiZTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhlo6rwPGkmW6V12loMnnnfSIcahZR0MGkVL W5hhLqoTYWK7A0Oh2XB0D4xAPpMfgYhVFeFF62zkBEyVP3MNQd/LQEJw4953KLXS 2LFq2o9VvkBJcxH0qiOuS/QY0DTTvSNMi+Id7aGKy+8NtN0yjQqNkgwvW+Ak1kep MmMO6tQEAqbotfNnAQiklB6J6lz97w4G/gsBhEXUAEMkbEoxGuKaWAbztHs3aMLd 5cEcTbZu6/WPZiYR0vQCQi918sBeEroWiKqTWEGduI4zHe49FzJpm1O4lPvC7gsL nr4oQvIIU42SPzLEggR6ult2UgNygVbTBnhKduFctTy3ZI2YOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGBFyA/hq+nDbYr5vGmuqLMPVo03MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTdiM2M4NGEtZmEzOS0z NGIwLTg5ODQtZjIwMjEyZjg5NTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgZHAADg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGpi/odeAOpEDRPXu9NoUAPC2iDIgUzUkzCmbBfHJIod2Wwnq1da yRzll7QHM+dKf/MReRB97Dxoo09dtA3my0A/4K1EgX9eur9UENp9kqotk1rV7BUN EqIMkqjfSlUTiLrtjNvUudpRuS/z+bwetd9Jy8SfPMpLaO/MGbK589TCxFbPq0vI kFHuYJ9xZeazEhRyfKuUpVU6W9WOqDfUx1WP5blq1CQElVJlcZhxaY59yFX0vvOa Rg6cv1cllZ/MQneSYtxJkbfUfoIaPAnbglJHBIw1AQpfSORDN3xaspw3vBmBzjJo WaGca2qOhf/TL9DK0SXRxgCU0pJcX5GUMSI= -----END CERTIFICATE-----Generated at Sat Apr 5 09:52:26 2025 by rpki-client