$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/6e1bfdd4-6910-383a-a378-bf872efdea0e.roa File: 6e1bfdd4-6910-383a-a378-bf872efdea0e.roa (raw, json) Hash identifier: gIIIJDV4NRsPv8YwcpULiZfOcBghIlj6hfr5dtizDQI= Subject key identifier: F8:7F:BC:73:77:42:B5:7B:9A:7C:4C:1C:A8:82:FF:21:96:A8:F9:02 Certificate issuer: /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Certificate serial: 010D0C9F432858491D717792E04E6A10FD25F5E0 Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/6e1bfdd4-6910-383a-a378-bf872efdea0e.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 174 IP address blocks: 2604:ebc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:77:92:e0:4e:6a:10:fd:25:f5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=59f27f3b-49b3-4c9f-aa9a-299d1fdc448c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ee:e0:06:17:14:8e:ae:02:05:47:66:55:88: 86:13:2e:4c:4a:04:75:dd:fa:3f:1b:4f:93:f8:c2: 1e:d5:2b:b1:43:54:c1:9b:cc:dc:52:2c:f7:7a:da: 6a:66:d9:48:f9:02:b1:ac:d0:59:2f:04:64:ff:51: 1a:57:75:ca:37:c2:3c:e3:99:fe:af:9a:82:19:21: 1d:8d:86:e8:47:36:0f:ce:e0:57:18:d5:7a:3f:a3: 9c:65:1e:f2:0c:3e:95:93:a2:1c:1a:5d:70:1a:c8: 88:b6:84:c8:5b:78:14:ac:3b:8b:31:3e:c8:67:9f: 8d:3d:f0:99:a5:4a:df:f8:fb:d2:a6:4a:cb:b3:ef: 83:32:a5:e6:fb:0c:20:b1:5c:c4:f4:dd:02:48:59: 6c:52:ee:71:85:0c:0c:91:3d:10:c4:6e:a0:e2:32: 7a:5d:ac:0a:46:db:ad:f3:89:17:de:47:b2:6b:28: ab:0f:3d:f6:63:ba:0b:69:26:e1:02:ad:ec:70:1f: c3:f2:6f:95:df:fc:66:cf:30:ee:73:c4:ca:5b:16: 3d:d8:73:6f:c8:08:89:f7:c7:60:03:b5:c6:50:04: 37:88:d1:e6:b7:e4:36:21:c9:96:6a:dc:99:54:67: 76:15:f9:25:a3:bd:ff:d5:2f:6e:13:ac:66:07:10: 9b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7F:BC:73:77:42:B5:7B:9A:7C:4C:1C:A8:82:FF:21:96:A8:F9:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/6e1bfdd4-6910-383a-a378-bf872efdea0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl X509v3 Authority Key Identifier: keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer sbgp-ipAddrBlock: critical IPv6: 2604:ebc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:53:1b:a1:6a:03:09:a3:16:e0:27:07:83:fc:0c:b3:23:d7: bb:63:db:75:0a:2d:c8:e0:09:95:be:50:e0:4a:66:b2:68:aa: 04:81:c8:f3:20:a8:c1:c2:a2:8d:ce:ef:8f:2a:ba:95:66:e8: 43:89:84:5b:14:da:2a:14:71:ab:8e:91:2b:e3:97:a8:0e:a0: 7a:a5:22:7f:a6:f2:00:48:fa:57:81:fe:cd:a5:90:f2:45:0e: 59:3c:1a:fb:24:4b:be:23:f6:dd:2f:dc:25:e8:c0:33:03:76: 58:d8:7f:27:dd:96:c9:3c:e5:f5:82:77:f7:f8:f8:47:19:c2: 1e:47:7f:90:b0:56:cb:2d:a2:de:8a:c6:c6:a1:ed:4d:90:44: 78:67:80:fc:78:d1:ca:a5:49:3f:0b:12:e8:70:b7:4d:07:04: 3b:08:62:38:94:fe:84:2c:7f:94:22:a7:41:9b:e0:11:85:86: 12:35:4c:7a:4c:7e:04:57:b5:3a:9d:d0:80:ec:81:51:70:62: f8:cd:d9:b9:5c:54:7c:ef:bc:cc:2d:c0:fb:f6:0d:9f:2f:c1: 49:0c:6d:22:14:21:3c:35:60:b5:a7:1b:ce:29:0f:fd:4c:00: fb:45:83:b1:5d:4b:d2:fe:72:c4:0d:5d:54:ac:50:7c:c8:d1: aa:53:98:4a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkdcXeS4E5qEP0l9eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzExZjE5Y2MtMzQ0ZS00OGM1LWExZjEtNDc1OTNhYTU2 YjBkMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk NTlmMjdmM2ItNDliMy00YzlmLWFhOWEtMjk5ZDFmZGM0NDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAku7gBhcUjq4CBUdmVYiGEy5MSgR13fo/G0+T +MIe1SuxQ1TBm8zcUiz3etpqZtlI+QKxrNBZLwRk/1EaV3XKN8I845n+r5qCGSEd jYboRzYPzuBXGNV6P6OcZR7yDD6Vk6IcGl1wGsiItoTIW3gUrDuLMT7IZ5+NPfCZ pUrf+PvSpkrLs++DMqXm+wwgsVzE9N0CSFlsUu5xhQwMkT0QxG6g4jJ6XawKRtut 84kX3keyayirDz32Y7oLaSbhAq3scB/D8m+V3/xmzzDuc8TKWxY92HNvyAiJ98dg A7XGUAQ3iNHmt+Q2IcmWatyZVGd2Ffklo73/1S9uE6xmBxCbsQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPh/vHN3QrV7mnxMHKiC/yGWqPkCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFm MTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5M2FhNTZiMGQvNmUxYmZkZDQtNjkxMC0z ODNhLWEzNzgtYmY4NzJlZmRlYTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzExZjE5Y2MtMzQ0ZS00OGM1LWEx ZjEtNDc1OTNhYTU2YjBkLzMxMWYxOWNjLTM0NGUtNDhjNS1hMWYxLTQ3NTkzYWE1 NmIwZC5jcmwwHwYDVR0jBBgwFoAUTdZg5uF1ESmUCvKCwba2rQLZYH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMTFmMTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5 M2FhNTZiMGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgTrwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCRUxuhagMJoxbgJweD/AyzI9e7Y9t1Ci3I4AmVvlDgSmayaKoEgcjz IKjBwqKNzu+PKrqVZuhDiYRbFNoqFHGrjpEr45eoDqB6pSJ/pvIASPpXgf7NpZDy RQ5ZPBr7JEu+I/bdL9wl6MAzA3ZY2H8n3ZbJPOX1gnf3+PhHGcIeR3+QsFbLLaLe isbGoe1NkER4Z4D8eNHKpUk/CxLocLdNBwQ7CGI4lP6ELH+UIqdBm+ARhYYSNUx6 TH4EV7U6ndCA7IFRcGL4zdm5XFR877zMLcD79g2fL8FJDG0iFCE8NWC1pxvOKQ/9 TAD7RYOxXUvS/nLEDV1UrFB8yNGqU5hK -----END CERTIFICATE-----Generated at Tue Apr 8 09:47:09 2025 by rpki-client