$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efc7da91-8a5a-31d8-ab43-50e157d8885e.roa File: efc7da91-8a5a-31d8-ab43-50e157d8885e.roa (raw, json) Hash identifier: DUB6aZzQMXGvFT7/7nRo+OWNQplCZ85+lOOTypfXhI0= Subject key identifier: BF:83:9B:46:42:60:20:64:AD:53:82:DC:03:51:24:24:98:15:2A:F9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584908817DA05D47DA1F69CF707B Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efc7da91-8a5a-31d8-ab43-50e157d8885e.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 2606:54c1:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:7d:a0:5d:47:da:1f:69:cf:70:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=25a39e4c-cd44-439e-be15-6d8b911bdcfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ef:e2:af:eb:95:49:16:aa:57:68:6a:1d:b1: 56:95:ca:4c:26:f5:1d:cb:34:23:9f:55:a6:a1:99: f1:0b:84:a0:a2:01:ef:5e:26:8a:ab:93:85:66:17: 29:cc:5f:7a:c7:73:fd:4e:ae:d8:67:84:d0:56:5a: d7:a5:4d:7a:83:ef:48:f1:0b:b7:c8:6e:0a:04:0c: f9:27:5f:f5:44:6d:fc:ca:39:f8:9a:46:f3:fb:5a: dc:b3:eb:94:f7:cc:e9:36:d7:4d:37:af:d4:75:6c: 1e:28:72:90:d3:0b:02:1b:d9:ae:75:07:41:7e:f7: 77:ac:46:86:6f:0a:ab:28:c6:37:19:8f:e8:fc:fe: ba:d1:6e:ce:30:93:70:dc:ca:ab:65:03:6f:8e:2b: a2:63:fe:dc:17:8a:b6:b7:2a:0e:4b:d9:27:31:47: 8c:67:5c:a0:4a:d4:23:48:70:3e:e9:24:61:e1:93: a7:ec:31:fd:62:a3:15:65:08:51:8f:a0:d6:ec:65: 37:0a:29:7c:18:f0:38:78:61:56:cd:4b:cb:20:bb: 08:c8:70:4d:94:7a:78:26:be:30:ca:8f:2d:2f:c1: 64:21:93:2c:04:74:9e:da:91:ec:8e:b5:2f:1b:b7: da:15:b5:00:14:13:97:97:69:13:a7:3d:d1:18:e4: b3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:83:9B:46:42:60:20:64:AD:53:82:DC:03:51:24:24:98:15:2A:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efc7da91-8a5a-31d8-ab43-50e157d8885e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv6: 2606:54c1:6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:4d:e8:2d:4d:82:fa:63:74:01:ac:ae:22:60:48:b9:e8:bc: 82:20:31:05:bd:da:34:c7:7c:7a:ae:50:66:ea:45:aa:e4:fd: d8:95:53:9b:97:1d:39:53:97:9c:4e:21:e4:2c:7b:14:ea:c6: d2:73:44:82:fb:83:2c:9a:c9:19:92:c4:02:70:46:de:e7:59: 54:98:eb:67:f6:63:56:62:14:a7:b8:0a:b0:a4:cf:c9:3e:b0: c6:83:47:67:0c:65:11:c7:43:70:05:5d:91:9a:ad:70:9f:73: b4:58:6e:0a:5c:bf:e3:b8:74:29:a0:af:20:1c:f3:b4:bf:af: 49:38:b2:53:e7:6e:3c:ad:a6:35:68:3a:16:21:36:c1:ad:5e: 80:2a:aa:71:64:f5:73:b7:71:51:ce:24:dc:7c:b8:ff:7d:51: f3:ee:0b:eb:a3:58:6b:fd:f2:ea:36:f5:29:67:b2:08:e4:fe: 53:c2:4b:35:24:58:a3:02:57:0e:b7:b7:bf:1e:45:e4:da:66: 9f:61:83:1e:e7:a9:67:3a:76:5e:7d:97:4d:65:6d:40:f1:43: bd:47:a1:c3:2d:19:5f:91:78:d1:24:29:8b:a6:2b:09:09:b0: f7:6f:0c:af:7d:e6:6f:dc:d1:c3:eb:06:73:5c:9e:0f:45:e4: 1f:bc:4a:76 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkIgX2gXUfaH2nPcHswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk MjVhMzllNGMtY2Q0NC00MzllLWJlMTUtNmQ4YjkxMWJkY2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO/ir+uVSRaqV2hqHbFWlcpMJvUdyzQjn1Wm oZnxC4SgogHvXiaKq5OFZhcpzF96x3P9Tq7YZ4TQVlrXpU16g+9I8Qu3yG4KBAz5 J1/1RG38yjn4mkbz+1rcs+uU98zpNtdNN6/UdWweKHKQ0wsCG9mudQdBfvd3rEaG bwqrKMY3GY/o/P660W7OMJNw3MqrZQNvjiuiY/7cF4q2tyoOS9knMUeMZ1ygStQj SHA+6SRh4ZOn7DH9YqMVZQhRj6DW7GU3Cil8GPA4eGFWzUvLILsIyHBNlHp4Jr4w yo8tL8FkIZMsBHSe2pHsjrUvG7faFbUAFBOXl2kTpz3RGOSzlwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL+Dm0ZCYCBkrVOC3ANRJCSYFSr5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWZjN2RhOTEtOGE1YS0z MWQ4LWFiNDMtNTBlMTU3ZDg4ODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZUwQAG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIJN6C1NgvpjdAGsriJgSLnovIIgMQW92jTHfHquUGbqRark/diV U5uXHTlTl5xOIeQsexTqxtJzRIL7gyyayRmSxAJwRt7nWVSY62f2Y1ZiFKe4CrCk z8k+sMaDR2cMZRHHQ3AFXZGarXCfc7RYbgpcv+O4dCmgryAc87S/r0k4slPnbjyt pjVoOhYhNsGtXoAqqnFk9XO3cVHOJNx8uP99UfPuC+ujWGv98uo29Slnsgjk/lPC SzUkWKMCVw63t78eReTaZp9hgx7nqWc6dl59l01lbUDxQ71HocMtGV+ReNEkKYum KwkJsPdvDK995m/c0cPrBnNcng9F5B+8SnY= -----END CERTIFICATE-----Generated at Fri Mar 14 13:42:20 2025 by rpki-client