$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bb74e8f0-7c3e-3594-9839-a58337795d0e.roa File: bb74e8f0-7c3e-3594-9839-a58337795d0e.roa (raw, json) Hash identifier: r8PPBaeNWkhsmCvupx/A3p6BahiAQlSpkVxRI4LPxpA= Subject key identifier: C4:D9:93:BD:B2:57:D0:5A:34:20:9B:25:49:81:36:0A:95:A6:57:CD Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584917DC1E9D0C6B56638789BC80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bb74e8f0-7c3e-3594-9839-a58337795d0e.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 13335 IP address blocks: 2606:4700:3032::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:1e:9d:0c:6b:56:63:87:89:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=3aa969eb-f876-433c-afea-d85a74af40e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e5:2b:96:97:d0:1c:8d:41:74:60:5a:28:9d: 45:d1:9c:0c:01:bf:e1:15:ef:f5:34:69:14:4a:2b: 4f:26:8a:bf:31:bf:e2:d3:78:1d:82:22:3f:d2:c9: ab:17:1b:e7:a0:1f:ad:ee:c5:a9:9a:60:e9:1e:64: 04:3a:b2:aa:95:01:aa:0f:66:9f:6b:fc:3c:47:5f: 82:d1:88:cd:e6:b0:fb:9b:e3:87:e7:9d:44:f6:f4: 0e:d1:7a:4e:18:b0:14:cc:91:3d:6b:cd:f7:50:6a: 17:b3:c9:9a:19:ea:e0:1e:be:f6:4b:5c:02:03:b4: c4:b2:ed:fe:4b:12:c6:91:06:c8:af:b8:94:cc:05: 2c:7c:eb:60:88:67:23:ce:dd:a0:5f:1f:15:39:23: ac:7d:90:e7:86:66:a8:b9:2e:b1:24:0f:59:84:0b: 4e:96:03:f6:95:fe:b9:95:51:e1:33:9b:be:45:c7: 9c:e9:94:3b:7d:0c:55:6b:56:be:94:ad:b5:a9:2c: 60:a3:df:97:a2:40:7e:45:52:35:4d:15:7d:b4:ae: 86:a4:31:5b:59:39:dd:f4:08:ef:7e:09:71:93:16: e2:e1:b7:63:5b:ba:10:fe:c3:15:b7:95:2d:89:71: 0f:00:bb:1f:d6:98:51:47:23:55:97:59:8c:9b:b7: 61:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D9:93:BD:B2:57:D0:5A:34:20:9B:25:49:81:36:0A:95:A6:57:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bb74e8f0-7c3e-3594-9839-a58337795d0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:3032::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:76:a2:6a:7b:27:e4:cc:f5:89:52:58:82:6f:3e:df:58:27: cc:cb:52:91:07:2b:16:1d:d4:f7:15:d1:4e:89:f5:b8:1f:58: 20:6b:a8:21:52:f7:54:14:9e:cc:e0:27:b4:12:c1:7e:2a:bc: 79:e4:91:c8:f3:c1:60:dc:0c:a3:5c:25:69:27:43:5b:b3:5a: 4c:34:1b:cf:ec:71:0b:e1:1b:b7:c1:fd:f3:79:d1:da:cd:b1: 8d:d0:ca:97:0e:26:d8:54:54:0e:0f:01:ad:cd:ff:7a:c4:10: 20:35:21:9b:6d:4f:34:25:fa:35:9f:3a:e6:1c:b2:0c:9d:19: d3:17:e3:fd:35:96:01:f9:81:f8:fb:e6:57:2d:6e:86:f9:cf: ad:13:fa:55:ff:13:eb:80:32:3a:e6:5e:b4:37:8b:0d:91:c4: f5:16:5b:64:4c:8d:fb:17:97:67:a3:cd:3c:4f:7d:d3:d9:d7: 8f:1d:87:93:a8:fc:93:c0:ce:b8:8c:a4:fe:e7:43:20:31:d8: 53:fc:8c:98:15:b2:73:1f:fc:3f:b9:ef:6e:73:dc:eb:5e:a6: 32:71:49:dc:77:49:bd:22:32:e0:6b:25:b8:11:6b:c2:58:9d: 42:ed:47:d9:80:75:d9:a1:5b:ee:19:77:14:6c:0b:93:32:e8: 9f:ab:7b:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkX3B6dDGtWY4eJvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk M2FhOTY5ZWItZjg3Ni00MzNjLWFmZWEtZDg1YTc0YWY0MGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquUrlpfQHI1BdGBaKJ1F0ZwMAb/hFe/1NGkU SitPJoq/Mb/i03gdgiI/0smrFxvnoB+t7sWpmmDpHmQEOrKqlQGqD2afa/w8R1+C 0YjN5rD7m+OH551E9vQO0XpOGLAUzJE9a833UGoXs8maGergHr72S1wCA7TEsu3+ SxLGkQbIr7iUzAUsfOtgiGcjzt2gXx8VOSOsfZDnhmaouS6xJA9ZhAtOlgP2lf65 lVHhM5u+Rcec6ZQ7fQxVa1a+lK21qSxgo9+XokB+RVI1TRV9tK6GpDFbWTnd9Ajv fglxkxbi4bdjW7oQ/sMVt5UtiXEPALsf1phRRyNVl1mMm7dhcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMTZk72yV9BaNCCbJUmBNgqVplfNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmI3NGU4ZjAtN2MzZS0z NTk0LTk4MzktYTU4MzM3Nzk1ZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHADAy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEh2omp7J+TM9YlSWIJvPt9YJ8zLUpEHKxYd1PcV0U6J9bgfWCBr qCFS91QUnszgJ7QSwX4qvHnkkcjzwWDcDKNcJWknQ1uzWkw0G8/scQvhG7fB/fN5 0drNsY3QypcOJthUVA4PAa3N/3rEECA1IZttTzQl+jWfOuYcsgydGdMX4/01lgH5 gfj75lctbob5z60T+lX/E+uAMjrmXrQ3iw2RxPUWW2RMjfsXl2ejzTxPfdPZ148d h5Oo/JPAzriMpP7nQyAx2FP8jJgVsnMf/D+5725z3OtepjJxSdx3Sb0iMuBrJbgR a8JYnULtR9mAddmhW+4ZdxRsC5My6J+re5o= -----END CERTIFICATE-----Generated at Sat Apr 5 09:57:17 2025 by rpki-client