$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/3bdf900d-17b8-3fef-a0bf-1ee4e3c07a4c.roa File: 3bdf900d-17b8-3fef-a0bf-1ee4e3c07a4c.roa (raw, json) Hash identifier: jDQpPQbzcJ6ioTry0uXbCtOiZzsa0BAEYL5SIrYvzFo= Subject key identifier: 66:83:6F:9A:24:15:6E:98:EF:C3:F2:A3:2E:52:6E:A7:EA:5E:21:89 Certificate issuer: /CN=8ce84fb2-c539-46e7-8212-12b9730afeba Certificate serial: 010D0C9F4328584900FECA1841F95611636626C0 Authority key identifier: D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/3bdf900d-17b8-3fef-a0bf-1ee4e3c07a4c.roa Signing time: Tue 25 Feb 2025 21:27:12 +0000 ROA not before: Tue 25 Feb 2025 21:27:12 +0000 ROA not after: Mon 26 May 2025 20:27:12 +0000 asID: 5650 IP address blocks: 2606:8940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:fe:ca:18:41:f9:56:11:63:66:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ce84fb2-c539-46e7-8212-12b9730afeba Validity Not Before: Feb 25 21:27:12 2025 GMT Not After : May 26 20:27:12 2025 GMT Subject: CN=ebab92ef-afc5-4622-9ba2-4c8372e09eb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:df:9c:7c:43:03:b3:31:26:0e:ff:ed:2e:8f: 3b:0f:21:3c:9d:63:f5:30:66:ef:dd:3c:d4:54:ba: 4c:f4:94:39:b0:d3:c6:19:35:ac:64:3b:1a:de:19: 4d:26:9f:8a:d2:fd:76:2d:e9:9f:6b:e5:8c:76:fa: 03:5e:57:6a:2e:20:20:68:b8:e3:f4:c2:d7:2a:48: 63:a2:fb:26:4c:38:62:d4:c1:4a:0f:1e:df:dd:b9: 56:ce:8a:38:6c:3c:64:71:ad:dc:da:c0:1d:d3:43: d5:bf:16:a9:43:6b:a5:45:3e:39:6f:3b:b6:d0:ff: 6a:10:35:f1:2d:af:6c:a9:47:5b:04:67:33:8d:8c: 15:50:42:1a:a8:85:5c:90:4a:83:6c:e8:6f:df:e4: 90:40:67:de:7b:f1:2f:c9:46:ca:31:a0:b0:d7:51: 6b:a1:c8:96:a1:b0:58:7d:b9:7a:96:2c:43:60:4e: 3c:81:53:32:3f:d6:21:1c:8a:76:cf:58:2a:a8:48: 7f:31:83:d0:d6:82:e7:48:c5:a3:98:20:fc:11:79: a1:fe:9f:5a:4f:0b:9e:53:fa:ac:6e:58:66:6d:3f: 90:db:da:b3:98:43:64:5a:86:e0:c4:0c:f4:1f:90: 25:5d:0b:cd:97:6d:03:76:6a:94:b3:82:80:5c:2b: 4c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:83:6F:9A:24:15:6E:98:EF:C3:F2:A3:2E:52:6E:A7:EA:5E:21:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/3bdf900d-17b8-3fef-a0bf-1ee4e3c07a4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.crl X509v3 Authority Key Identifier: keyid:D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer sbgp-ipAddrBlock: critical IPv6: 2606:8940::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:f6:7a:11:c4:45:3b:40:26:8d:3b:12:d4:0b:b7:98:cb:6a: 31:db:81:21:b2:cc:8f:40:48:8a:74:36:09:c5:f6:62:88:c7: e3:9e:ea:a4:26:2b:fe:3c:e9:14:cb:c5:41:6c:4f:9a:0a:8e: fd:a5:72:10:3e:fd:f6:f1:7c:1d:22:22:a1:3a:9d:c4:99:8d: 95:a7:5e:28:38:05:24:95:47:bf:bf:59:bf:dd:92:06:76:0e: 92:7e:1d:f7:56:00:85:21:ef:3a:c9:b0:06:c8:a8:d9:e8:dd: de:dc:28:75:62:21:30:a7:30:8a:7d:4a:28:1b:e7:35:af:69: c2:50:b1:12:a8:a8:4f:25:b4:f4:9a:d4:66:38:8d:3f:85:a8: 2e:f6:a8:e5:fe:5e:41:7f:d7:1e:0c:75:a0:21:bf:1f:cf:b1: d8:7b:d8:4a:ba:44:55:8f:67:af:d7:b8:de:06:b1:e4:5b:c8: d7:9b:89:1d:ae:9c:13:21:46:9e:fb:ae:0e:bd:2b:25:9f:f8: ad:42:3f:d1:7e:bd:18:1c:d8:71:dc:1b:8a:7b:6f:4e:24:28: a2:8d:d7:1b:89:31:73:f9:f3:50:64:17:e7:20:aa:7f:31:2f: c7:36:95:ab:06:04:49:19:b8:f1:9f:d6:79:0c:fc:83:4f:aa: e4:a2:c4:df -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkA/soYQflWEWNmJsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNlODRmYjItYzUzOS00NmU3LTgyMTItMTJiOTczMGFm ZWJhMB4XDTI1MDIyNTIxMjcxMloXDTI1MDUyNjIwMjcxMlowLzEtMCsGA1UEAxMk ZWJhYjkyZWYtYWZjNS00NjIyLTliYTItNGM4MzcyZTA5ZWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3d+cfEMDszEmDv/tLo87DyE8nWP1MGbv3TzU VLpM9JQ5sNPGGTWsZDsa3hlNJp+K0v12Lemfa+WMdvoDXldqLiAgaLjj9MLXKkhj ovsmTDhi1MFKDx7f3blWzoo4bDxkca3c2sAd00PVvxapQ2ulRT45bzu20P9qEDXx La9sqUdbBGczjYwVUEIaqIVckEqDbOhv3+SQQGfee/EvyUbKMaCw11FrociWobBY fbl6lixDYE48gVMyP9YhHIp2z1gqqEh/MYPQ1oLnSMWjmCD8EXmh/p9aTwueU/qs blhmbT+Q29qzmENkWobgxAz0H5AlXQvNl20DdmqUs4KAXCtM5wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGaDb5okFW6Y78Pyoy5SbqfqXiGJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84Y2U4 NGZiMi1jNTM5LTQ2ZTctODIxMi0xMmI5NzMwYWZlYmEvM2JkZjkwMGQtMTdiOC0z ZmVmLWEwYmYtMWVlNGUzYzA3YTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGNlODRmYjItYzUzOS00NmU3LTgy MTItMTJiOTczMGFmZWJhLzhjZTg0ZmIyLWM1MzktNDZlNy04MjEyLTEyYjk3MzBh ZmViYS5jcmwwHwYDVR0jBBgwFoAU04o5ZeFTwwNkwVYPyUWDtvqxONswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84Y2U4NGZiMi1jNTM5LTQ2ZTctODIxMi0xMmI5 NzMwYWZlYmEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgaJQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBJ9noRxEU7QCaNOxLUC7eYy2ox24EhssyPQEiKdDYJxfZiiMfjnuqk Jiv+POkUy8VBbE+aCo79pXIQPv328XwdIiKhOp3EmY2Vp14oOAUklUe/v1m/3ZIG dg6Sfh33VgCFIe86ybAGyKjZ6N3e3Ch1YiEwpzCKfUooG+c1r2nCULESqKhPJbT0 mtRmOI0/hagu9qjl/l5Bf9ceDHWgIb8fz7HYe9hKukRVj2ev17jeBrHkW8jXm4kd rpwTIUae+64OvSsln/itQj/Rfr0YHNhx3BuKe29OJCiijdcbiTFz+fNQZBfnIKp/ MS/HNpWrBgRJGbjxn9Z5DPyDT6rkosTf -----END CERTIFICATE-----Generated at Sat Apr 5 11:11:24 2025 by rpki-client