$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/cd94796a-a7f0-3ab2-8e6c-343a913f3e63.roa File: cd94796a-a7f0-3ab2-8e6c-343a913f3e63.roa (raw, json) Hash identifier: od48MQO6WUnrank0vzdCn0sppE3o8KNC6kooydD5cvs= Subject key identifier: A9:35:3F:F3:78:D7:C9:BD:91:52:5E:5D:49:1B:E3:50:4E:51:48:25 Certificate issuer: /CN=06758d63-ebc2-49b2-b82c-063e47fb7a0f Certificate serial: 010D0C9F432858490B4C1C711FCE39F4548A0C28 Authority key identifier: 11:FE:D6:68:34:3C:F9:A3:DE:8F:AD:F3:20:09:E6:2A:66:47:4E:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/cd94796a-a7f0-3ab2-8e6c-343a913f3e63.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 203 IP address blocks: 2606:5cc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/06758d63-ebc2-49b2-b82c-063e47fb7a0f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/06758d63-ebc2-49b2-b82c-063e47fb7a0f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:1c:71:1f:ce:39:f4:54:8a:0c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06758d63-ebc2-49b2-b82c-063e47fb7a0f Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=ded111e5-76a4-4909-bb48-84584e55a36e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:62:c6:aa:a5:fd:0d:b0:5e:39:a4:9f:98:0b: ca:83:dc:de:cf:9a:e0:2f:07:ed:a9:ef:03:3e:5c: c4:dd:ce:64:9d:64:8f:6d:3d:17:96:f4:63:17:af: c9:76:a0:63:d5:73:a5:03:48:78:b4:75:97:2a:c0: eb:0f:6e:7d:53:73:30:9b:46:de:67:14:20:08:80: 0b:b6:e6:65:db:ea:85:5f:2d:ea:0d:84:7f:45:b3: 82:ef:cc:06:a5:70:71:1c:fc:89:10:3f:c1:03:b2: a1:bb:7a:bf:ce:d8:d9:a7:ba:17:d0:a2:f6:12:33: 0f:4e:85:f0:c1:b1:5b:32:b6:2d:3c:a0:d1:b9:bf: e6:fa:f4:65:a3:95:30:8b:aa:20:33:d6:ad:80:37: 1d:f3:c6:bf:f5:cb:0a:66:5f:03:4a:b7:14:92:17: c8:4e:e0:9e:95:dc:e6:9d:80:0d:d1:32:98:22:0c: f3:05:a2:58:87:e4:71:b8:3b:cd:aa:76:72:47:43: a1:70:91:aa:0c:e3:15:3d:15:f3:07:f7:fd:67:e3: 37:c3:e4:33:02:b5:42:e1:d5:dc:0a:80:03:ff:5c: ea:d4:02:87:8c:7f:75:fe:4c:ae:aa:62:d2:ec:bf: d2:5e:2f:53:16:01:65:bc:ba:bb:af:21:e2:a5:52: bb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:35:3F:F3:78:D7:C9:BD:91:52:5E:5D:49:1B:E3:50:4E:51:48:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/cd94796a-a7f0-3ab2-8e6c-343a913f3e63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/06758d63-ebc2-49b2-b82c-063e47fb7a0f.crl X509v3 Authority Key Identifier: keyid:11:FE:D6:68:34:3C:F9:A3:DE:8F:AD:F3:20:09:E6:2A:66:47:4E:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f.cer sbgp-ipAddrBlock: critical IPv6: 2606:5cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:f6:90:58:9f:fb:31:86:c9:cd:c3:e2:da:43:14:88:38:e1: 50:79:1b:a0:4b:6e:bd:39:14:99:c1:a9:a0:d1:fc:fe:15:59: aa:ed:33:db:74:48:5f:a0:73:1d:da:1d:24:c7:e5:3d:9b:6e: 0e:72:86:42:0d:65:9e:ff:7a:75:a2:02:a0:2d:ee:0a:08:9b: 0b:09:11:b9:65:5a:47:52:47:b9:10:c1:1e:ee:68:e0:38:54: b7:bb:4e:c8:58:38:0e:69:35:61:b3:37:58:c8:fa:68:c5:40: 90:9d:e4:23:34:c6:0c:79:53:f1:e3:a5:c1:02:f7:bd:c6:9e: 7b:41:37:e4:07:e2:0b:7e:1c:df:3d:21:5e:0c:d9:bd:9f:e1: a9:bc:aa:77:f1:8e:26:fa:35:0f:ab:4e:05:f0:a3:de:d3:07: 97:58:b3:c5:51:d5:6a:9a:f2:d8:d7:be:b4:60:7a:50:ee:44: 20:09:c7:a9:64:60:e5:6d:98:aa:f9:69:3c:6b:45:58:77:3c: 4f:21:ed:55:d2:2a:09:db:03:1e:69:37:7a:fb:3f:a6:34:5f: c3:da:f1:49:23:7b:9b:7c:41:1e:64:5e:22:d9:c8:6b:48:80: f6:d6:db:21:35:d8:55:d2:e5:46:e3:de:82:68:39:b4:98:fd: 26:fc:8c:4f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkLTBxxH8459FSKDCgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY3NThkNjMtZWJjMi00OWIyLWI4MmMtMDYzZTQ3ZmI3 YTBmMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk ZGVkMTExZTUtNzZhNC00OTA5LWJiNDgtODQ1ODRlNTVhMzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mLGqqX9DbBeOaSfmAvKg9zez5rgLwftqe8D PlzE3c5knWSPbT0XlvRjF6/JdqBj1XOlA0h4tHWXKsDrD259U3Mwm0beZxQgCIAL tuZl2+qFXy3qDYR/RbOC78wGpXBxHPyJED/BA7Khu3q/ztjZp7oX0KL2EjMPToXw wbFbMrYtPKDRub/m+vRlo5Uwi6ogM9atgDcd88a/9csKZl8DSrcUkhfITuCeldzm nYAN0TKYIgzzBaJYh+RxuDvNqnZyR0OhcJGqDOMVPRXzB/f9Z+M3w+QzArVC4dXc CoAD/1zq1AKHjH91/kyuqmLS7L/SXi9TFgFlvLq7ryHipVK7mwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKk1P/N418m9kVJeXUkb41BOUUglMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjc1 OGQ2My1lYmMyLTQ5YjItYjgyYy0wNjNlNDdmYjdhMGYvY2Q5NDc5NmEtYTdmMC0z YWIyLThlNmMtMzQzYTkxM2YzZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDY3NThkNjMtZWJjMi00OWIyLWI4 MmMtMDYzZTQ3ZmI3YTBmLzA2NzU4ZDYzLWViYzItNDliMi1iODJjLTA2M2U0N2Zi N2EwZi5jcmwwHwYDVR0jBBgwFoAUEf7WaDQ8+aPej63zIAnmKmZHTpIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjc1OGQ2My1lYmMyLTQ5YjItYjgyYy0wNjNl NDdmYjdhMGYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZcwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCA9pBYn/sxhsnNw+LaQxSIOOFQeRugS269ORSZwamg0fz+FVmq7TPb dEhfoHMd2h0kx+U9m24OcoZCDWWe/3p1ogKgLe4KCJsLCRG5ZVpHUke5EMEe7mjg OFS3u07IWDgOaTVhszdYyPpoxUCQneQjNMYMeVPx46XBAve9xp57QTfkB+ILfhzf PSFeDNm9n+GpvKp38Y4m+jUPq04F8KPe0weXWLPFUdVqmvLY1760YHpQ7kQgCcep ZGDlbZiq+Wk8a0VYdzxPIe1V0ioJ2wMeaTd6+z+mNF/D2vFJI3ubfEEeZF4i2chr SID21tshNdhV0uVG496CaDm0mP0m/IxP -----END CERTIFICATE-----Generated at Sat Apr 12 15:00:58 2025 by rpki-client