$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa File: 9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa (raw, json) Hash identifier: xBqGKMq4i2Bdcy/adIgf5LsNcSgEta+MusLLNc6yl90= Subject key identifier: 2E:30:05:DC:0B:95:72:6F:F9:C9:8A:F4:0D:3A:4C:27:E0:E1:DC:B6 Certificate issuer: /CN=823e9778-e6e3-4d85-a2e2-7e92cbc99f39 Certificate serial: 010D0C9F432858491246AEE5C13272C9D2055800 Authority key identifier: 0D:38:03:4E:C1:C3:CE:A7:F1:ED:C0:C2:D6:BE:CF:44:BD:DA:E3:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 984 IP address blocks: 2606:fb40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ae:e5:c1:32:72:c9:d2:05:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=823e9778-e6e3-4d85-a2e2-7e92cbc99f39 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=5c34525c-dfaa-431a-b2bf-dfaa34a24050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:78:e1:5f:79:9c:9b:85:64:d3:44:f6:62:89: 7a:c8:90:1e:8c:3d:7a:cf:b4:80:ba:e6:9d:b3:94: 17:5a:3b:85:18:b7:fa:52:58:27:4d:a5:41:25:4c: 7b:2b:c5:ff:33:6d:39:6d:50:d9:1f:fd:f3:85:cf: c4:7a:9c:2d:e0:f1:c2:e5:eb:46:4d:a1:55:af:e2: ab:6c:6e:b8:7f:2a:91:07:2c:a4:a0:28:44:8e:ef: 11:c4:75:4a:29:95:bb:3c:3c:dd:16:f3:1d:7b:20: 78:eb:f1:34:72:c6:81:80:0c:33:29:24:1e:54:4c: f6:25:e5:7f:32:16:3c:5d:8b:ec:e6:6a:a1:56:89: 5f:72:22:cf:12:b6:62:92:c1:2a:b8:e8:9a:e0:20: 48:37:50:43:78:5c:f2:91:e3:d6:ed:20:6c:50:44: 0e:5c:ce:3e:b9:2f:09:9c:49:00:93:82:3b:55:da: 7a:3e:24:03:48:6d:32:47:da:8b:bd:12:0b:ea:71: 84:98:b8:76:71:b8:7d:0f:01:7b:2c:f5:fe:84:77: 01:38:56:08:a3:98:38:a6:ac:b7:6d:3b:85:d3:e4: 1a:7f:00:f6:df:e1:89:9e:0e:8a:9e:6d:3c:9b:88: 74:fe:95:a4:a6:c9:5d:be:65:12:cd:bb:28:56:90: 89:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:30:05:DC:0B:95:72:6F:F9:C9:8A:F4:0D:3A:4C:27:E0:E1:DC:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.crl X509v3 Authority Key Identifier: keyid:0D:38:03:4E:C1:C3:CE:A7:F1:ED:C0:C2:D6:BE:CF:44:BD:DA:E3:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer sbgp-ipAddrBlock: critical IPv6: 2606:fb40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:90:a7:24:24:bd:9d:10:72:64:b1:91:5a:a1:8f:77:c5:e6: 96:1e:35:42:ab:a0:c6:81:9d:d1:c7:c8:c6:0f:75:7f:64:8a: 13:0d:00:5c:1a:40:2a:a0:9b:b0:ca:e8:a1:55:17:90:07:09: 15:80:c0:54:10:8b:61:db:31:b1:8d:0d:40:9b:3b:57:78:32: ec:51:d1:05:b6:61:de:d8:fd:33:62:64:33:e2:82:f8:e9:e6: d2:44:36:10:5f:c8:71:9f:49:22:fa:7e:6d:6e:e0:bb:df:cc: cc:48:35:8b:05:9c:f5:0d:30:e1:df:3d:91:63:b6:11:0e:35: fd:0b:0f:5a:96:85:9e:17:e4:0f:83:bd:1b:e0:65:8b:74:86: 71:09:a8:76:5e:de:ac:cc:87:74:1f:89:38:3e:9f:28:fb:63: b0:d1:87:da:45:1e:64:85:2a:d1:32:11:cc:9d:76:3b:a4:3b: 3d:fa:5c:6a:c4:56:a0:d2:f2:53:d2:c4:00:02:90:40:cf:b8: 4b:65:cc:10:21:02:54:33:08:44:72:e8:6e:61:b3:c9:55:4a: cc:2b:99:06:82:91:0a:c9:be:9c:20:e7:2a:15:f5:cd:5f:d1: 7f:76:c0:2e:30:5f:7b:2c:7d:6a:48:ec:11:96:8d:85:64:fd: b9:89:d0:e5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkSRq7lwTJyydIFWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIzZTk3NzgtZTZlMy00ZDg1LWEyZTItN2U5MmNiYzk5 ZjM5MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NWMzNDUyNWMtZGZhYS00MzFhLWIyYmYtZGZhYTM0YTI0MDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHjhX3mcm4Vk00T2Yol6yJAejD16z7SAuuad s5QXWjuFGLf6UlgnTaVBJUx7K8X/M205bVDZH/3zhc/Eepwt4PHC5etGTaFVr+Kr bG64fyqRByykoChEju8RxHVKKZW7PDzdFvMdeyB46/E0csaBgAwzKSQeVEz2JeV/ MhY8XYvs5mqhVolfciLPErZiksEquOia4CBIN1BDeFzykePW7SBsUEQOXM4+uS8J nEkAk4I7Vdp6PiQDSG0yR9qLvRIL6nGEmLh2cbh9DwF7LPX+hHcBOFYIo5g4pqy3 bTuF0+QafwD23+GJng6Knm08m4h0/pWkpsldvmUSzbsoVpCJ7QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC4wBdwLlXJv+cmK9A06TCfg4dy2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84MjNl OTc3OC1lNmUzLTRkODUtYTJlMi03ZTkyY2JjOTlmMzkvOWJlYTc0NTItNjNlMC0z NWY0LTg1NTItM2QyZmIxOWQwZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODIzZTk3NzgtZTZlMy00ZDg1LWEy ZTItN2U5MmNiYzk5ZjM5LzgyM2U5Nzc4LWU2ZTMtNGQ4NS1hMmUyLTdlOTJjYmM5 OWYzOS5jcmwwHwYDVR0jBBgwFoAUDTgDTsHDzqfx7cDC1r7PRL3a43wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84MjNlOTc3OC1lNmUzLTRkODUtYTJlMi03ZTky Y2JjOTlmMzkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgb7QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBgkKckJL2dEHJksZFaoY93xeaWHjVCq6DGgZ3Rx8jGD3V/ZIoTDQBc GkAqoJuwyuihVReQBwkVgMBUEIth2zGxjQ1AmztXeDLsUdEFtmHe2P0zYmQz4oL4 6ebSRDYQX8hxn0ki+n5tbuC738zMSDWLBZz1DTDh3z2RY7YRDjX9Cw9aloWeF+QP g70b4GWLdIZxCah2Xt6szId0H4k4Pp8o+2Ow0YfaRR5khSrRMhHMnXY7pDs9+lxq xFag0vJT0sQAApBAz7hLZcwQIQJUMwhEcuhuYbPJVUrMK5kGgpEKyb6cIOcqFfXN X9F/dsAuMF97LH1qSOwRlo2FZP25idDl -----END CERTIFICATE-----Generated at Sat Apr 5 10:53:43 2025 by rpki-client