$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/caf6984a-6241-341c-a03c-38c380834003.roa File: caf6984a-6241-341c-a03c-38c380834003.roa (raw, json) Hash identifier: kXWn6OY/WAMoA1ArO7eUwJvkEGu/OLf4OeOHux3BkaQ= Subject key identifier: BA:D7:D3:D9:21:E9:FD:D3:FF:5E:A1:BF:D4:02:34:83:83:89:E7:8F Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F43285849552954046A3626157CE21A80 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/caf6984a-6241-341c-a03c-38c380834003.roa Signing time: Fri 28 Mar 2025 01:00:41 +0000 ROA not before: Fri 28 Mar 2025 01:00:41 +0000 ROA not after: Thu 26 Jun 2025 01:00:41 +0000 asID: 395831 IP address blocks: 2606:7bc0:1065::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:55:29:54:04:6a:36:26:15:7c:e2:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Mar 28 01:00:41 2025 GMT Not After : Jun 26 01:00:41 2025 GMT Subject: CN=1da6bb03-aa20-40a4-ac64-fbbcc9a86b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:26:5d:91:95:4a:88:da:cb:98:50:c0:f8:ad: f7:cd:d0:9a:6b:b5:e6:40:40:50:7a:5a:d5:89:14: 38:39:ad:db:42:65:01:2f:17:91:da:fd:ad:1e:2a: 96:c0:67:f8:8c:e0:c9:55:dc:b2:d8:aa:2d:43:5d: 56:7f:18:27:bd:a6:ea:87:e2:3a:02:0b:0f:8f:47: 18:34:41:28:fc:a3:ed:d7:1b:97:07:fe:2c:a7:62: e3:62:e4:77:17:5d:50:8d:67:c2:aa:0f:53:2d:7a: 46:a0:29:78:02:13:9b:fd:77:b6:b5:9b:07:21:8b: 98:80:f5:9c:70:6d:5a:ff:b7:7b:2e:72:15:4d:f5: e1:f0:9f:e9:6e:fa:8c:9f:40:72:15:45:04:8f:b9: 93:23:88:6d:d1:3f:ef:14:33:a2:7b:d6:5e:8c:e2: 22:71:b4:41:9b:1d:34:dd:ab:2b:29:f6:06:e9:ce: 2f:e7:09:56:fa:30:16:e1:76:d6:28:e2:d0:7a:51: 7e:0a:8d:fa:85:59:a7:c4:23:1b:9d:7f:cf:9d:98: 01:aa:3e:6a:f8:b1:7d:49:fa:f5:f5:27:82:10:03: a0:87:54:1a:be:02:82:8b:83:ff:ef:51:19:63:ec: a9:39:81:1e:96:18:c7:57:05:53:f9:68:c2:af:5e: 4c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D7:D3:D9:21:E9:FD:D3:FF:5E:A1:BF:D4:02:34:83:83:89:E7:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/caf6984a-6241-341c-a03c-38c380834003.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv6: 2606:7bc0:1065::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:ea:0e:2c:19:b0:08:fd:07:fa:b5:34:32:76:be:e7:a1:4f: db:b7:ff:d5:d8:00:36:13:e8:18:e2:24:6c:fb:18:e8:02:4b: 30:b9:47:d6:ab:14:c1:77:7e:34:41:03:e6:b7:d0:9a:80:76: e6:cf:e7:57:72:f0:d5:af:85:f6:90:aa:b1:a9:30:8b:90:8b: 44:e6:f9:f2:ef:5d:b2:da:db:b4:61:9e:19:20:97:5b:e6:05: b1:ca:7b:8e:74:41:f6:2c:bd:b8:70:53:03:b6:6b:78:82:4a: ab:d9:e9:bc:dd:d3:93:12:2b:cb:5c:40:14:d3:9c:bb:22:b9: e3:ed:ef:ad:4e:eb:2d:74:0e:c1:b5:ff:a1:63:97:a9:22:c0: 38:c5:6b:be:38:25:5f:54:1b:32:89:d0:3c:3e:7d:59:0a:15: 57:05:d0:c1:43:30:ac:85:55:f4:8f:77:9b:a0:38:39:4e:37: 4d:0e:ae:bd:32:9a:72:8e:81:08:fb:74:45:c1:77:0c:96:8d: 51:a7:61:3f:f6:39:ef:01:08:6d:7f:27:67:af:f1:41:5b:53: 3b:28:a3:d3:3a:87:8f:0c:d1:62:d3:19:e9:b0:37:bf:1c:72: 06:35:fb:37:5c:9e:e2:4e:d8:c9:e0:ec:c2:0c:58:4d:99:bd: 16:0d:c6:03 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElVKVQEajYmFXziGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk MWRhNmJiMDMtYWEyMC00MGE0LWFjNjQtZmJiY2M5YTg2YjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyZdkZVKiNrLmFDA+K33zdCaa7XmQEBQelrV iRQ4Oa3bQmUBLxeR2v2tHiqWwGf4jODJVdyy2KotQ11Wfxgnvabqh+I6AgsPj0cY NEEo/KPt1xuXB/4sp2LjYuR3F11QjWfCqg9TLXpGoCl4AhOb/Xe2tZsHIYuYgPWc cG1a/7d7LnIVTfXh8J/pbvqMn0ByFUUEj7mTI4ht0T/vFDOie9ZejOIicbRBmx00 3asrKfYG6c4v5wlW+jAW4XbWKOLQelF+Co36hVmnxCMbnX/PnZgBqj5q+LF9Sfr1 9SeCEAOgh1QavgKCi4P/71EZY+ypOYEelhjHVwVT+WjCr15MsQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLrX09kh6f3T/16hv9QCNIODieePMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvY2FmNjk4NGEtNjI0MS0z NDFjLWEwM2MtMzhjMzgwODM0MDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ7wBBl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFDqDiwZsAj9B/q1NDJ2vuehT9u3/9XYADYT6BjiJGz7GOgCSzC5 R9arFMF3fjRBA+a30JqAdubP51dy8NWvhfaQqrGpMIuQi0Tm+fLvXbLa27Rhnhkg l1vmBbHKe450QfYsvbhwUwO2a3iCSqvZ6bzd05MSK8tcQBTTnLsiuePt761O6y10 DsG1/6Fjl6kiwDjFa744JV9UGzKJ0Dw+fVkKFVcF0MFDMKyFVfSPd5ugODlON00O rr0ymnKOgQj7dEXBdwyWjVGnYT/2Oe8BCG1/J2ev8UFbUzsoo9M6h48M0WLTGemw N78ccgY1+zdcnuJO2Mng7MIMWE2ZvRYNxgM= -----END CERTIFICATE-----Generated at Wed Apr 9 17:17:22 2025 by rpki-client