$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/f51b59c2-dbdd-3e38-9a36-408bdbdd9594.roa File: f51b59c2-dbdd-3e38-9a36-408bdbdd9594.roa (raw, json) Hash identifier: Vs4SUNO6kcAKyuyIzfVGAYVOmKZOhMvOWNEjUjb8ByU= Subject key identifier: 89:63:38:4D:F5:BB:FA:2C:14:2E:68:A8:59:C4:70:0D:D9:20:25:93 Certificate issuer: /CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Certificate serial: 010D0C9F4328584913AC35C8A49F48F719D3D180 Authority key identifier: 23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/f51b59c2-dbdd-3e38-9a36-408bdbdd9594.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 8070 IP address blocks: 2606:e540:c03::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:35:c8:a4:9f:48:f7:19:d3:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8322c61d-99cf-48fc-b867-b2c2cce4d324 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=ea8e5499-d3b1-448a-a706-d6f912f69f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:72:51:a2:bc:54:d2:2c:00:f1:fd:a6:7e:16: 99:95:0a:3c:fe:3d:95:e6:79:18:fd:08:38:fa:ad: 75:7d:bc:07:f9:f7:82:9b:92:31:9c:c0:1d:58:5b: 40:8f:fd:3d:73:22:35:0e:75:a5:bd:f4:c7:c0:c0: 33:5e:c3:97:ca:ba:84:23:bf:39:8f:eb:c7:40:e7: d8:93:3a:f2:46:81:a8:f1:37:c1:1a:92:ea:b4:24: b0:e8:cd:f7:1d:19:47:d6:8d:6d:e1:77:9f:f8:79: f2:1d:95:89:7d:db:24:3e:78:21:bc:cf:90:bc:0a: 88:1f:3e:09:f3:43:8e:53:ec:9c:21:ec:38:63:29: 8c:bd:c9:cc:ba:0f:8b:d3:b9:53:4e:68:15:76:64: cd:3b:4f:67:7a:71:df:58:1e:f2:1f:a3:95:2e:2b: 24:0a:4b:0c:63:a5:7c:b7:4b:41:54:76:b0:dd:2f: 00:79:94:41:7b:6b:7a:7c:0b:1f:bb:97:30:8b:97: 48:0b:14:da:68:df:2c:cb:01:d0:65:5d:15:3c:ee: 1d:70:6c:f7:ea:ba:e3:c6:19:c3:45:c2:41:9d:e6: 25:b2:b0:a5:8a:37:ac:43:d4:21:c1:07:97:58:5e: fe:6a:34:4d:8a:0f:93:5a:83:32:d7:3c:f5:6e:e3: 51:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:63:38:4D:F5:BB:FA:2C:14:2E:68:A8:59:C4:70:0D:D9:20:25:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/f51b59c2-dbdd-3e38-9a36-408bdbdd9594.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324/8322c61d-99cf-48fc-b867-b2c2cce4d324.crl X509v3 Authority Key Identifier: keyid:23:EC:CD:25:07:2E:B6:D8:45:A9:F0:04:86:BA:91:6D:90:8F:B8:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8322c61d-99cf-48fc-b867-b2c2cce4d324.cer sbgp-ipAddrBlock: critical IPv6: 2606:e540:c03::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:37:45:50:e1:bf:74:98:eb:e4:fa:4a:d8:f4:9b:2f:9f:22: d7:1e:94:d8:6e:05:a9:b8:19:9a:fd:71:d6:7b:19:dc:45:37: 93:d5:61:33:2e:c5:5e:a1:4e:f2:05:18:3b:20:5c:63:47:76: ab:6a:d0:fa:e6:40:bb:2d:79:bc:20:10:3d:a8:63:d6:f8:6b: 8b:c0:b1:75:65:d9:c1:dc:d4:63:58:c6:5d:1d:1b:88:f3:d1: ca:56:01:82:75:41:6b:08:0d:5c:38:96:4d:d6:14:b6:f3:72: 91:79:3e:1f:57:46:ca:ad:dd:b2:05:2d:22:b8:a2:dc:df:90: bb:5d:03:a7:e6:ea:d0:55:fe:76:b0:79:ea:31:12:4f:0e:2c: e6:64:f7:6d:d3:20:6c:41:96:cd:ff:09:36:08:6c:40:b3:ed: 43:ef:40:a2:a6:c5:05:c1:e0:e1:76:33:56:1d:60:fd:b8:41: b9:c6:ee:ca:a0:27:2d:e5:38:78:0d:68:56:77:3b:96:c1:ae: be:95:fb:96:ef:ff:d5:c7:c4:c3:bb:52:c0:c1:3b:45:03:c8: 2d:4c:6b:a0:9b:01:67:4a:d9:b2:53:d1:0c:c8:4a:9b:c1:0c: 4d:ef:82:fc:b0:44:84:e2:5a:a2:04:d2:ad:f2:b1:80:77:f2: 64:df:ae:73 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkTrDXIpJ9I9xnT0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMyMmM2MWQtOTljZi00OGZjLWI4NjctYjJjMmNjZTRk MzI0MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk ZWE4ZTU0OTktZDNiMS00NDhhLWE3MDYtZDZmOTEyZjY5ZjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3JRorxU0iwA8f2mfhaZlQo8/j2V5nkY/Qg4 +q11fbwH+feCm5IxnMAdWFtAj/09cyI1DnWlvfTHwMAzXsOXyrqEI785j+vHQOfY kzryRoGo8TfBGpLqtCSw6M33HRlH1o1t4Xef+HnyHZWJfdskPnghvM+QvAqIHz4J 80OOU+ycIew4YymMvcnMug+L07lTTmgVdmTNO09nenHfWB7yH6OVLiskCksMY6V8 t0tBVHaw3S8AeZRBe2t6fAsfu5cwi5dICxTaaN8sywHQZV0VPO4dcGz36rrjxhnD RcJBneYlsrClijesQ9QhwQeXWF7+ajRNig+TWoMy1zz1buNRIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIljOE31u/osFC5oqFnEcA3ZICWTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MzIy YzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMyY2NlNGQzMjQvZjUxYjU5YzItZGJkZC0z ZTM4LTlhMzYtNDA4YmRiZGQ5NTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODMyMmM2MWQtOTljZi00OGZjLWI4 NjctYjJjMmNjZTRkMzI0LzgzMjJjNjFkLTk5Y2YtNDhmYy1iODY3LWIyYzJjY2U0 ZDMyNC5jcmwwHwYDVR0jBBgwFoAUI+zNJQcutthFqfAEhrqRbZCPuPowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MzIyYzYxZC05OWNmLTQ4ZmMtYjg2Ny1iMmMy Y2NlNGQzMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgblQAwD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIM3RVDhv3SY6+T6Stj0my+fItcelNhuBam4GZr9cdZ7GdxFN5PV YTMuxV6hTvIFGDsgXGNHdqtq0PrmQLstebwgED2oY9b4a4vAsXVl2cHc1GNYxl0d G4jz0cpWAYJ1QWsIDVw4lk3WFLbzcpF5Ph9XRsqt3bIFLSK4otzfkLtdA6fm6tBV /naweeoxEk8OLOZk923TIGxBls3/CTYIbECz7UPvQKKmxQXB4OF2M1YdYP24QbnG 7sqgJy3lOHgNaFZ3O5bBrr6V+5bv/9XHxMO7UsDBO0UDyC1Ma6CbAWdK2bJT0QzI SpvBDE3vgvywRITiWqIE0q3ysYB38mTfrnM= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:11 2025 by rpki-client