$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/8c63a25d-10b7-37dd-ac58-7130ee7f8d36.roa File: 8c63a25d-10b7-37dd-ac58-7130ee7f8d36.roa (raw, json) Hash identifier: pf2GAdakeb6Px+zsw8izyUeZfeq2q7Pdj8bB1C3ju+g= Subject key identifier: 97:E6:5E:B2:1A:D0:7C:5C:11:4F:CF:A4:F6:B8:EA:92:91:F9:D7:4B Certificate issuer: /CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b Certificate serial: 010D0C9F4328584905B6B8DA7D7BE94E72EAE700 Authority key identifier: 56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/8c63a25d-10b7-37dd-ac58-7130ee7f8d36.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 14618 IP address blocks: 2606:7740:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:b8:da:7d:7b:e9:4e:72:ea:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=048f0d9d-169d-4b65-a889-437bc44fc53b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c5:96:dc:bf:82:b5:85:83:62:0f:e7:e4:88: 7d:2b:95:52:ec:e7:42:9d:d4:5a:9c:71:da:35:f8: 1a:54:bb:e2:18:9d:15:66:ef:0f:7b:8e:d8:b1:e9: e1:44:3a:f6:98:0d:f0:d6:5a:27:54:ef:66:8a:3e: c4:bb:39:d6:a7:29:75:2d:8e:b5:62:ac:1b:e2:be: 10:50:e0:76:6d:44:e4:e7:94:2f:af:bc:a5:db:85: dd:01:a7:bb:41:13:6a:dd:7b:2b:fb:34:f2:c9:25: 98:d2:e0:ab:1e:22:32:79:90:4f:46:7f:3b:2b:d7: 28:a7:ed:c3:58:bd:8e:48:dc:d9:a5:4d:44:4c:e3: e3:c6:d7:31:dd:17:04:5b:49:b1:83:82:6d:1e:13: a3:08:0e:2b:ec:6a:be:81:12:ee:09:cc:7d:cd:32: 7f:6c:78:12:8b:6c:90:49:d8:a3:d9:5a:60:ba:be: 85:b6:20:3c:bd:42:2f:48:af:0f:bd:59:45:bf:33: ce:58:16:c1:f2:d2:54:08:a0:08:49:bd:43:2a:48: 35:da:43:e8:e9:0a:30:9f:69:49:20:8d:4d:5b:56: 82:a2:cd:fc:09:ce:f1:63:5f:7c:05:93:8f:6f:86: 39:8a:31:d0:31:6f:b8:67:7d:c6:6c:49:07:3f:ce: 1b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E6:5E:B2:1A:D0:7C:5C:11:4F:CF:A4:F6:B8:EA:92:91:F9:D7:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/8c63a25d-10b7-37dd-ac58-7130ee7f8d36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.crl X509v3 Authority Key Identifier: keyid:56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer sbgp-ipAddrBlock: critical IPv6: 2606:7740:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:53:da:dd:08:06:8c:32:19:1e:d6:7a:f8:e1:35:55:20:32: 4b:f6:14:5f:3e:d4:14:cd:a6:9a:4b:74:3e:15:f7:f9:ac:06: bf:22:08:35:1c:f4:ec:26:57:42:f0:91:44:e4:fe:a8:cd:27: e9:56:64:d5:d1:be:69:92:9b:06:05:ce:24:ea:89:7c:3e:6d: 57:1e:ac:12:81:3e:b4:89:e0:10:74:0e:13:f1:b8:26:1f:92: 33:5c:8f:f2:00:bd:14:35:d9:db:c5:08:11:88:a3:2a:fc:4c: 87:6e:3b:91:28:0c:02:ca:ff:54:ac:2c:4c:6b:05:c7:c0:39: bd:4c:fd:93:ab:59:ae:b8:36:18:33:27:2c:36:1d:52:85:ad: 92:50:e8:e9:d0:d4:4c:fe:a0:01:8f:cc:9b:d0:e3:62:65:e6: 74:bc:0b:40:2c:ef:6f:1a:92:85:2d:2a:76:2d:84:75:a7:5e: a1:ab:8b:46:bb:51:ba:0d:08:fa:d0:b8:ef:12:e2:94:6f:d0: 23:66:50:94:c3:1d:15:d1:ca:aa:b2:a5:13:b3:34:d4:d2:8e: de:e9:50:84:d7:dc:9a:f6:95:d0:49:e3:af:34:f8:0e:5d:9b: 87:e1:88:f7:06:dd:7e:57:5e:6b:7e:e9:93:ff:7a:fc:15:9a: 45:12:d6:34 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkFtrjafXvpTnLq5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjEzYzI5OGUtMzE3OS00ZjM1LTllN2QtODg2ZWUzZjli ZTBiMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk MDQ4ZjBkOWQtMTY5ZC00YjY1LWE4ODktNDM3YmM0NGZjNTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcWW3L+CtYWDYg/n5Ih9K5VS7OdCndRanHHa NfgaVLviGJ0VZu8Pe47YsenhRDr2mA3w1lonVO9mij7EuznWpyl1LY61Yqwb4r4Q UOB2bUTk55Qvr7yl24XdAae7QRNq3Xsr+zTyySWY0uCrHiIyeZBPRn87K9cop+3D WL2OSNzZpU1ETOPjxtcx3RcEW0mxg4JtHhOjCA4r7Gq+gRLuCcx9zTJ/bHgSi2yQ Sdij2Vpgur6FtiA8vUIvSK8PvVlFvzPOWBbB8tJUCKAISb1DKkg12kPo6Qown2lJ II1NW1aCos38Cc7xY198BZOPb4Y5ijHQMW+4Z33GbEkHP84bZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJfmXrIa0HxcEU/PpPa46pKR+ddLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMTNj Mjk4ZS0zMTc5LTRmMzUtOWU3ZC04ODZlZTNmOWJlMGIvOGM2M2EyNWQtMTBiNy0z N2RkLWFjNTgtNzEzMGVlN2Y4ZDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjEzYzI5OGUtMzE3OS00ZjM1LTll N2QtODg2ZWUzZjliZTBiL2YxM2MyOThlLTMxNzktNGYzNS05ZTdkLTg4NmVlM2Y5 YmUwYi5jcmwwHwYDVR0jBBgwFoAUVlbPxbTjRRY3+Rn6Z5c9Lkgn50IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mMTNjMjk4ZS0zMTc5LTRmMzUtOWU3ZC04ODZl ZTNmOWJlMGIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ3QAAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACpT2t0IBowyGR7WevjhNVUgMkv2FF8+1BTNpppLdD4V9/msBr8i CDUc9OwmV0LwkUTk/qjNJ+lWZNXRvmmSmwYFziTqiXw+bVcerBKBPrSJ4BB0DhPx uCYfkjNcj/IAvRQ12dvFCBGIoyr8TIduO5EoDALK/1SsLExrBcfAOb1M/ZOrWa64 NhgzJyw2HVKFrZJQ6OnQ1Ez+oAGPzJvQ42Jl5nS8C0As728akoUtKnYthHWnXqGr i0a7UboNCPrQuO8S4pRv0CNmUJTDHRXRyqqypROzNNTSjt7pUITX3Jr2ldBJ4680 +A5dm4fhiPcG3X5XXmt+6ZP/evwVmkUS1jQ= -----END CERTIFICATE-----Generated at Fri Mar 14 11:04:25 2025 by rpki-client