$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b43c65f6-a314-3a32-95ce-efb7c9e4dea1.roa File: b43c65f6-a314-3a32-95ce-efb7c9e4dea1.roa (raw, json) Hash identifier: 3Fw1ofawcQjg07u5PuANojVO0JgkAJX35Zg0+eAhunQ= Subject key identifier: A3:4A:9D:7E:B8:BA:E8:A0:E1:D5:E4:A2:24:68:75:D3:ED:48:87:37 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6BDE98DF3781BB51E64C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b43c65f6-a314-3a32-95ce-efb7c9e4dea1.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 2606:4700:4407::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:bd:e9:8d:f3:78:1b:b5:1e:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=8b76d477-7a61-4f73-b2b2-07ee6f92993d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:63:00:db:e3:ae:58:a0:43:fd:67:43:b2:56: 26:ec:60:3d:48:bc:05:b6:aa:7d:2c:e5:80:99:b4: 11:61:17:b6:b0:2a:a5:7a:a8:79:dc:aa:9b:95:68: 8b:4d:10:2f:27:ca:7f:59:b8:f7:a8:a7:b9:65:96: 52:11:10:90:81:09:b9:d8:7d:16:66:3a:e7:d7:e2: 67:b1:4c:c3:bc:00:2f:eb:2a:ee:a8:5b:37:6f:ef: ca:3d:1e:10:6e:ab:2d:3d:b3:e3:43:a3:5e:3d:a1: 56:6e:62:5f:c1:9f:30:c6:97:16:aa:2d:70:cc:77: 0c:7e:d5:7f:2e:87:63:46:b0:ca:e3:b5:8f:e2:0a: 97:ca:2f:2d:30:9b:71:01:60:cd:cf:1d:d9:ec:57: 76:f6:10:e1:a6:df:da:38:ce:63:62:4d:22:2e:e0: f3:08:85:74:e5:e0:8b:f0:4b:04:44:72:fb:b3:8e: 20:a1:ac:95:fc:c3:11:a5:d1:3b:6c:b7:c5:b5:60: fa:fc:4a:74:c2:dc:f5:d9:67:16:33:53:b7:1c:89: 11:00:0b:e6:92:77:85:f4:47:ab:94:c3:1a:b0:a2: 90:8c:84:cf:50:00:7e:d9:09:7f:28:f0:ad:91:d3: 4c:a7:02:0e:63:0f:98:eb:d4:2f:f9:ce:ee:9b:88: f8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4A:9D:7E:B8:BA:E8:A0:E1:D5:E4:A2:24:68:75:D3:ED:48:87:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b43c65f6-a314-3a32-95ce-efb7c9e4dea1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:4407::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:fd:34:7f:3c:34:6d:bb:33:04:a2:78:b2:26:f0:6b:6a:88: e5:ff:72:61:d3:c3:0f:9a:36:c2:f4:21:ad:54:a1:a5:a2:99: f2:d9:8d:ef:9f:97:00:4c:e9:2f:e9:67:cc:f8:b6:6c:4d:4b: 61:55:d9:60:f0:a1:59:82:e4:ba:df:9b:b7:4b:20:1f:b6:88: 5c:02:96:0e:db:52:dd:35:96:26:90:7f:fd:d2:fc:22:17:fa: d0:f4:1c:b7:2f:33:59:e7:03:7d:ec:a7:7e:b6:35:93:3a:1f: 80:0f:ca:77:c7:db:4c:f9:bc:4c:1d:c4:47:95:b0:04:9f:ca: d6:a4:1d:99:82:7a:bd:85:7e:41:3a:a6:e7:01:57:ea:a2:43: b3:4b:54:fb:c3:e0:68:fb:b6:67:45:09:ea:66:27:f8:86:0c: f9:f8:98:b9:7b:49:f8:4d:77:05:30:b3:50:4f:d1:2d:0a:78: 61:a0:29:f0:0f:8f:76:03:2e:ff:8d:a2:03:fc:f7:ab:5a:62: ed:82:51:d6:ce:c5:78:f5:10:36:1f:3e:68:fe:41:a7:a8:af: b5:c1:f8:48:e7:50:78:88:31:18:eb:93:f7:ec:cb:69:07:56: 53:c8:58:3f:1b:18:c3:97:40:b4:d7:2d:ed:58:f2:7b:24:4a: d3:91:48:14 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkFtr3pjfN4G7UeZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk OGI3NmQ0NzctN2E2MS00ZjczLWIyYjItMDdlZTZmOTI5OTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWMA2+OuWKBD/WdDslYm7GA9SLwFtqp9LOWA mbQRYRe2sCqleqh53KqblWiLTRAvJ8p/Wbj3qKe5ZZZSERCQgQm52H0WZjrn1+Jn sUzDvAAv6yruqFs3b+/KPR4QbqstPbPjQ6NePaFWbmJfwZ8wxpcWqi1wzHcMftV/ LodjRrDK47WP4gqXyi8tMJtxAWDNzx3Z7Fd29hDhpt/aOM5jYk0iLuDzCIV05eCL 8EsERHL7s44goayV/MMRpdE7bLfFtWD6/Ep0wtz12WcWM1O3HIkRAAvmkneF9Eer lMMasKKQjITPUAB+2Ql/KPCtkdNMpwIOYw+Y69Qv+c7um4j4YQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKNKnX64uuig4dXkoiRoddPtSIc3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjQzYzY1ZjYtYTMxNC0z YTMyLTk1Y2UtZWZiN2M5ZTRkZWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAEQH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA39NH88NG27MwSieLIm8GtqiOX/cmHTww+aNsL0Ia1UoaWimfLZ je+flwBM6S/pZ8z4tmxNS2FV2WDwoVmC5Lrfm7dLIB+2iFwClg7bUt01liaQf/3S /CIX+tD0HLcvM1nnA33sp362NZM6H4APynfH20z5vEwdxEeVsASfytakHZmCer2F fkE6pucBV+qiQ7NLVPvD4Gj7tmdFCepmJ/iGDPn4mLl7SfhNdwUws1BP0S0KeGGg KfAPj3YDLv+NogP896taYu2CUdbOxXj1EDYfPmj+Qaeor7XB+EjnUHiIMRjrk/fs y2kHVlPIWD8bGMOXQLTXLe1Y8nskStORSBQ= -----END CERTIFICATE-----Generated at Sat Apr 5 06:46:09 2025 by rpki-client