$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e44f254e-92b8-36de-a3cb-2504b5f74802.roa File: e44f254e-92b8-36de-a3cb-2504b5f74802.roa (raw, json) Hash identifier: gr85W4GNr3N7aSjKKwiVzGcvYbNCUvPZklBNnIOEyc0= Subject key identifier: BB:B7:29:BF:4F:9F:1C:8B:21:3E:85:D2:C4:97:34:4E:8F:5A:D2:63 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584917DC1CAAD8E172D0CE45CA80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e44f254e-92b8-36de-a3cb-2504b5f74802.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 13335 IP address blocks: 2606:4700:3009::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:1c:aa:d8:e1:72:d0:ce:45:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=3ffb00d6-0c71-48d3-b81a-11da5fb39c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:86:b8:f6:12:d1:80:2d:dd:30:e6:c9:60:31: fe:23:22:dd:15:c7:a6:ba:b2:1b:b8:d4:41:bd:04: e5:15:e0:49:38:20:0d:43:cd:c1:db:66:f9:75:78: de:8e:1a:20:8c:f2:20:0a:61:4c:97:e5:c7:55:f7: 36:b0:f8:30:ea:b5:70:4a:01:12:b1:e9:e2:3b:f2: aa:e4:53:01:f7:c3:45:e7:bc:c5:22:b3:06:94:c7: 5f:85:76:ff:04:9f:79:b5:83:ef:c3:eb:c5:2f:0a: c3:f7:26:63:10:a2:fb:66:ea:00:2c:aa:8c:a9:5e: 7f:7b:da:53:30:7d:71:85:d9:78:d7:f1:9b:96:e2: 2a:c9:11:5e:82:c3:44:8b:ed:f2:f0:e0:03:7e:21: 63:39:ac:36:14:f8:f0:c0:1c:ad:00:18:41:89:a2: af:c3:6e:7a:b0:11:c1:82:21:14:2c:95:fc:df:21: 08:4e:63:8b:e2:2a:cc:14:ce:ef:a8:68:d1:6f:8c: a6:29:4d:f4:5f:cf:e1:f3:c2:41:44:bb:cc:a9:f6: d0:88:39:18:c6:ab:8f:ef:82:5d:3c:5d:b3:68:83: ac:d0:b6:f3:74:59:7e:76:f5:34:98:79:ba:7d:56: ba:0e:bc:7b:52:34:e7:41:3e:6b:28:f3:4b:d0:c6: bc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B7:29:BF:4F:9F:1C:8B:21:3E:85:D2:C4:97:34:4E:8F:5A:D2:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e44f254e-92b8-36de-a3cb-2504b5f74802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:4700:3009::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:9e:f2:23:82:1b:d3:58:ba:f2:29:aa:b5:3a:27:2a:6c:ca: 91:d0:5c:ed:5e:02:4b:b7:aa:54:56:7a:e4:b4:ec:99:7b:45: 66:f3:f3:ae:ce:17:20:cd:43:46:07:a1:49:3a:f6:9e:c0:fd: af:07:d6:dc:86:19:b0:c2:16:1a:7b:3f:21:db:9c:ad:1f:cb: 22:35:a6:11:f5:79:e5:51:83:a9:a2:cc:86:f9:96:89:d0:a8: 70:e8:e5:9a:80:91:36:85:5d:e4:a1:93:4c:c9:68:46:29:29: 08:20:65:3b:04:bd:c5:bf:4d:32:6c:cc:9e:40:07:4e:96:1b: 00:3e:4a:bf:e7:65:db:e8:38:94:8c:db:e5:d8:24:9d:36:c2: 85:12:44:93:98:6c:ca:a0:eb:1f:61:36:11:1b:ca:c5:15:8d: 42:34:18:0c:27:2b:fe:0c:7e:60:5a:ca:fa:1c:28:3c:5a:f1: 36:73:fd:d9:b3:56:07:2e:8b:d7:07:33:99:fa:c9:01:cf:b1: ff:55:5a:b0:8b:2d:b8:c7:80:3f:35:81:bb:59:dd:d9:74:61: 41:b9:26:4a:2c:c1:e5:0a:15:30:15:d1:41:59:29:96:ed:ef: 17:24:a4:19:d1:74:63:d0:a3:7e:4a:c7:ee:b7:1a:ee:cb:c3: bd:76:bd:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkX3Byq2OFy0M5FyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk M2ZmYjAwZDYtMGM3MS00OGQzLWI4MWEtMTFkYTVmYjM5YzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oa49hLRgC3dMObJYDH+IyLdFcemurIbuNRB vQTlFeBJOCANQ83B22b5dXjejhogjPIgCmFMl+XHVfc2sPgw6rVwSgESseniO/Kq 5FMB98NF57zFIrMGlMdfhXb/BJ95tYPvw+vFLwrD9yZjEKL7ZuoALKqMqV5/e9pT MH1xhdl41/GbluIqyRFegsNEi+3y8OADfiFjOaw2FPjwwBytABhBiaKvw256sBHB giEULJX83yEITmOL4irMFM7vqGjRb4ymKU30X8/h88JBRLvMqfbQiDkYxquP74Jd PF2zaIOs0LbzdFl+dvU0mHm6fVa6Drx7UjTnQT5rKPNL0Ma8ywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLu3Kb9PnxyLIT6F0sSXNE6PWtJjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTQ0ZjI1NGUtOTJiOC0z NmRlLWEzY2ItMjUwNGI1Zjc0ODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHADAJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABSe8iOCG9NYuvIpqrU6JypsypHQXO1eAku3qlRWeuS07Jl7RWbz 867OFyDNQ0YHoUk69p7A/a8H1tyGGbDCFhp7PyHbnK0fyyI1phH1eeVRg6mizIb5 lonQqHDo5ZqAkTaFXeShk0zJaEYpKQggZTsEvcW/TTJszJ5AB06WGwA+Sr/nZdvo OJSM2+XYJJ02woUSRJOYbMqg6x9hNhEbysUVjUI0GAwnK/4MfmBayvocKDxa8TZz /dmzVgcui9cHM5n6yQHPsf9VWrCLLbjHgD81gbtZ3dl0YUG5JkosweUKFTAV0UFZ KZbt7xckpBnRdGPQo35Kx+63Gu7Lw712vfA= -----END CERTIFICATE-----Generated at Wed Apr 9 23:31:15 2025 by rpki-client