$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/a06d614f-16f7-331e-8592-956602a28aba.roa File: a06d614f-16f7-331e-8592-956602a28aba.roa (raw, json) Hash identifier: e8Q7eLYHrwefopfHCU3ZqpGbQHHr+zMz/TqBJnH1fg4= Subject key identifier: 72:76:8A:25:ED:42:E9:C1:DF:11:CF:AA:83:F6:21:A0:64:F3:5E:EE Certificate issuer: /CN=ec23d019-d079-49df-94b6-ad79d138e90f Certificate serial: 010D0C9F432858494CC940AE58D3CE266705C700 Authority key identifier: 7B:45:19:0A:67:71:07:CE:9A:BC:4B:A6:4F:63:DD:81:75:A4:BA:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/a06d614f-16f7-331e-8592-956602a28aba.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 399196 IP address blocks: 2606:7540:f000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:40:ae:58:d3:ce:26:67:05:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec23d019-d079-49df-94b6-ad79d138e90f Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=331dae8e-7c62-4ccc-842a-075652b1991c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:48:5c:4e:bf:4d:39:8b:65:cd:e0:35:9e:21: 7e:c3:21:00:4d:e2:f4:9b:08:50:c0:80:0a:ee:25: 33:e1:b3:88:d2:8d:73:30:7b:94:a1:61:19:96:59: 3c:9c:c0:a3:ae:12:24:c8:ef:54:60:3e:2b:43:50: 7f:70:51:56:bc:88:7e:b5:47:f6:72:0c:b8:04:90: 8a:65:e7:0b:ea:0a:86:7d:a8:04:b9:4e:39:06:3c: c4:be:fe:9d:a0:b6:2e:d4:13:17:df:da:a2:05:3c: 84:85:a1:25:e2:d5:e7:63:b1:e8:df:8a:6f:46:f4: c0:11:8f:87:00:bc:05:7b:60:d0:a1:58:c4:a7:46: f9:13:36:17:42:16:94:7f:0e:f4:8c:0f:ca:0a:49: c1:89:cc:b5:69:50:fc:76:a5:7d:fa:04:37:66:ae: f3:b0:32:d5:e9:05:01:15:27:31:6f:e0:64:3a:fc: 17:ab:10:f0:28:9a:8b:f5:6f:ae:5f:22:1b:65:bb: b1:c1:81:db:99:4f:ab:3d:48:d6:6c:06:d4:d2:f9: cc:f5:6b:65:3d:8f:76:3b:a7:66:f5:ea:fd:d6:ba: 5d:93:19:83:97:92:49:d1:30:b3:56:e3:de:5e:75: 91:12:3f:0c:db:59:db:46:39:6a:eb:fa:b5:66:df: 08:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:76:8A:25:ED:42:E9:C1:DF:11:CF:AA:83:F6:21:A0:64:F3:5E:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/a06d614f-16f7-331e-8592-956602a28aba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.crl X509v3 Authority Key Identifier: keyid:7B:45:19:0A:67:71:07:CE:9A:BC:4B:A6:4F:63:DD:81:75:A4:BA:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer sbgp-ipAddrBlock: critical IPv6: 2606:7540:f000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:3c:c4:df:a2:59:c7:29:86:79:cc:b2:c5:55:48:8e:09:2c: 54:bd:1e:3f:2d:e1:49:9c:b1:f2:6b:d1:25:42:5f:21:8c:8b: 5d:73:0e:59:ff:30:09:0a:33:86:6f:31:3d:d7:5a:18:83:31: 62:be:4c:79:03:dd:84:6e:28:9c:22:11:4d:3c:e1:b4:38:b8: 8d:e8:5e:ff:f1:79:30:bd:f2:1c:1b:9a:d3:6e:63:69:df:df: 2f:2c:3e:61:7b:21:9f:65:7c:0d:c9:f2:ae:dd:bb:b2:dd:94: c4:fb:9b:21:e1:74:ee:11:2c:72:43:6f:18:9f:01:e5:ed:e0: 79:a9:01:5e:0b:f6:1a:2c:38:2a:65:58:22:f3:d8:15:57:51: d9:70:ce:5d:57:97:f9:e4:bf:d7:a6:10:a2:0e:89:67:f9:0c: a6:07:8f:9d:b8:8f:b5:52:c6:1d:b5:e2:1f:77:99:a9:27:e5: cb:81:b2:12:81:94:7e:52:e5:66:bb:aa:aa:0f:a4:86:99:ca: 13:85:46:fb:65:31:dd:49:ec:c6:c2:b4:fa:56:20:0b:5c:fe: 15:d2:d7:73:26:43:7f:00:7c:91:c0:bb:49:35:ce:c3:83:4d: 20:45:d4:fa:59:49:73:e1:15:c3:a1:21:90:09:f1:b5:f4:86: 71:30:62:62 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWElMyUCuWNPOJmcFxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWMyM2QwMTktZDA3OS00OWRmLTk0YjYtYWQ3OWQxMzhl OTBmMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk MzMxZGFlOGUtN2M2Mi00Y2NjLTg0MmEtMDc1NjUyYjE5OTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUhcTr9NOYtlzeA1niF+wyEATeL0mwhQwIAK 7iUz4bOI0o1zMHuUoWEZllk8nMCjrhIkyO9UYD4rQ1B/cFFWvIh+tUf2cgy4BJCK ZecL6gqGfagEuU45BjzEvv6doLYu1BMX39qiBTyEhaEl4tXnY7Ho34pvRvTAEY+H ALwFe2DQoVjEp0b5EzYXQhaUfw70jA/KCknBicy1aVD8dqV9+gQ3Zq7zsDLV6QUB FScxb+BkOvwXqxDwKJqL9W+uXyIbZbuxwYHbmU+rPUjWbAbU0vnM9WtlPY92O6dm 9er91rpdkxmDl5JJ0TCzVuPeXnWREj8M21nbRjlq6/q1Zt8I1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHJ2iiXtQunB3xHPqoP2IaBk817uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYzIz ZDAxOS1kMDc5LTQ5ZGYtOTRiNi1hZDc5ZDEzOGU5MGYvYTA2ZDYxNGYtMTZmNy0z MzFlLTg1OTItOTU2NjAyYTI4YWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWMyM2QwMTktZDA3OS00OWRmLTk0 YjYtYWQ3OWQxMzhlOTBmL2VjMjNkMDE5LWQwNzktNDlkZi05NGI2LWFkNzlkMTM4 ZTkwZi5jcmwwHwYDVR0jBBgwFoAUe0UZCmdxB86avEumT2PdgXWkusAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYzIzZDAxOS1kMDc5LTQ5ZGYtOTRiNi1hZDc5 ZDEzOGU5MGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgZ1QPAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIk8xN+iWccphnnMssVVSI4JLFS9Hj8t4UmcsfJr0SVCXyGMi11z Dln/MAkKM4ZvMT3XWhiDMWK+THkD3YRuKJwiEU084bQ4uI3oXv/xeTC98hwbmtNu Y2nf3y8sPmF7IZ9lfA3J8q7du7LdlMT7myHhdO4RLHJDbxifAeXt4HmpAV4L9hos OCplWCLz2BVXUdlwzl1Xl/nkv9emEKIOiWf5DKYHj524j7VSxh214h93makn5cuB shKBlH5S5Wa7qqoPpIaZyhOFRvtlMd1J7MbCtPpWIAtc/hXS13MmQ38AfJHAu0k1 zsODTSBF1PpZSXPhFcOhIZAJ8bX0hnEwYmI= -----END CERTIFICATE-----Generated at Sat Apr 12 12:03:21 2025 by rpki-client