$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d28ae3a1-b2e8-38ce-9a01-d2fb0de3ef95.roa File: d28ae3a1-b2e8-38ce-9a01-d2fb0de3ef95.roa (raw, json) Hash identifier: M9i9phV39Y3nYcOuNZxaWFjLKhQ/34t/gkfT8cuS4HQ= Subject key identifier: 23:23:C1:62:9A:F6:EC:18:76:57:5C:3C:E0:4C:B1:9A:FB:38:A5:FE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584917DC1D8F9589FB8191DDEC20 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d28ae3a1-b2e8-38ce-9a01-d2fb0de3ef95.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 13335 IP address blocks: 2606:4700:3017::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:1d:8f:95:89:fb:81:91:dd:ec:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=72b2912a-8799-49e4-a6fa-fa5125382662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1c:28:a9:00:29:95:f2:8d:20:c5:71:02:f8: 5a:1c:f0:5b:ec:dc:32:53:cd:14:b4:84:00:bd:25: 37:d8:ec:69:cc:9e:9d:01:63:c4:60:27:29:9f:9a: 75:9a:9d:82:e2:e9:7e:e7:1f:06:22:e9:34:db:fe: d9:25:21:22:3b:0e:26:27:41:f8:7b:3c:3e:7b:58: d3:b7:c2:55:f2:11:48:7f:bd:d6:fa:b5:c8:e9:6a: f6:28:af:00:85:9a:73:26:e9:f9:02:f4:25:b2:f5: f3:31:b0:a7:ef:82:d1:44:89:81:5f:a5:08:7e:77: b1:6d:ed:2d:3b:d9:d9:20:c0:47:44:25:fe:79:2f: 53:18:7f:34:24:2c:c3:b7:ae:a3:14:f4:fc:9d:30: 12:cb:a1:07:5b:21:16:72:1c:dd:bc:2f:1c:d4:a2: 83:2c:36:3f:9d:49:36:f3:fc:ff:73:91:2a:6c:f5: 7e:7e:7c:ab:26:54:b9:73:29:1a:d6:bd:8e:4f:07: c4:c2:95:8d:5d:08:e9:1a:a9:d3:05:ae:b4:4c:29: b1:dc:02:7d:b3:b9:24:47:3a:40:01:d9:7a:22:45: 6a:f6:55:21:d6:1b:bf:9f:0e:ae:1e:99:a6:52:13: 7f:21:de:5f:c1:f0:cf:74:4c:d7:5f:c9:c9:0e:30: 62:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:23:C1:62:9A:F6:EC:18:76:57:5C:3C:E0:4C:B1:9A:FB:38:A5:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d28ae3a1-b2e8-38ce-9a01-d2fb0de3ef95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:3017::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:d5:7c:cb:e3:88:30:e1:b2:d9:d4:65:76:2c:d5:5f:03:86: 90:72:f2:3f:c3:f0:db:0a:21:4c:9a:53:f0:43:ba:18:e3:6e: de:27:c4:c1:70:a0:43:ec:51:d5:2b:b9:0d:b7:10:ce:a5:6e: 65:8e:5b:d8:b8:88:0d:da:b0:e5:9a:17:34:5b:df:07:45:f0: 05:bd:fb:c9:8a:2d:c9:dd:13:02:04:47:cc:e4:fd:e4:79:ab: 6e:4e:6d:dc:87:d7:34:2b:41:30:1a:00:5c:19:1d:25:c4:ee: bf:c7:80:5e:f2:74:b4:84:66:f2:1f:02:be:1c:e6:93:88:bd: 68:5f:e8:21:47:5b:ed:9c:45:43:ca:58:e9:30:8e:aa:93:8b: 7b:6b:92:03:51:72:10:0b:75:a2:e8:ef:53:6a:35:bb:3f:e3: 22:e3:e3:6c:69:aa:61:72:d8:83:d6:fe:53:53:73:f5:32:c3: 89:4e:45:0d:10:98:21:00:7d:bf:cf:3b:68:1e:95:84:ef:b2: e6:88:bf:df:e2:67:ed:b2:ff:44:fe:78:9d:40:6a:31:c9:7e: 9c:de:c5:fc:56:dc:fe:4a:8d:43:16:46:15:fd:fc:e5:62:db: 46:f3:ad:40:36:f9:d4:92:23:29:06:a3:a1:93:ec:0f:b3:d7: 6c:32:51:3b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkX3B2PlYn7gZHd7CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk NzJiMjkxMmEtODc5OS00OWU0LWE2ZmEtZmE1MTI1MzgyNjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixwoqQAplfKNIMVxAvhaHPBb7NwyU80UtIQA vSU32OxpzJ6dAWPEYCcpn5p1mp2C4ul+5x8GIuk02/7ZJSEiOw4mJ0H4ezw+e1jT t8JV8hFIf73W+rXI6Wr2KK8AhZpzJun5AvQlsvXzMbCn74LRRImBX6UIfnexbe0t O9nZIMBHRCX+eS9TGH80JCzDt66jFPT8nTASy6EHWyEWchzdvC8c1KKDLDY/nUk2 8/z/c5EqbPV+fnyrJlS5cyka1r2OTwfEwpWNXQjpGqnTBa60TCmx3AJ9s7kkRzpA Adl6IkVq9lUh1hu/nw6uHpmmUhN/Id5fwfDPdEzXX8nJDjBiNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCMjwWKa9uwYdldcPOBMsZr7OKX+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDI4YWUzYTEtYjJlOC0z OGNlLTlhMDEtZDJmYjBkZTNlZjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHADAX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHXVfMvjiDDhstnUZXYs1V8DhpBy8j/D8NsKIUyaU/BDuhjjbt4n xMFwoEPsUdUruQ23EM6lbmWOW9i4iA3asOWaFzRb3wdF8AW9+8mKLcndEwIER8zk /eR5q25ObdyH1zQrQTAaAFwZHSXE7r/HgF7ydLSEZvIfAr4c5pOIvWhf6CFHW+2c RUPKWOkwjqqTi3trkgNRchALdaLo71NqNbs/4yLj42xpqmFy2IPW/lNTc/Uyw4lO RQ0QmCEAfb/PO2gelYTvsuaIv9/iZ+2y/0T+eJ1AajHJfpzexfxW3P5KjUMWRhX9 /OVi20bzrUA2+dSSIykGo6GT7A+z12wyUTs= -----END CERTIFICATE-----Generated at Sat Apr 5 06:37:17 2025 by rpki-client