$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/3c215373-ba4c-387d-b2fe-0739ac64f909.roa File: 3c215373-ba4c-387d-b2fe-0739ac64f909.roa (raw, json) Hash identifier: ryWLxy3VhWrYHrGEb6/9zDP/qIMlEJ/7g0y3xkEQHOE= Subject key identifier: 5D:76:34:C2:6F:F6:70:5A:59:88:43:87:4B:22:B3:83:1B:A0:08:D3 Certificate issuer: /CN=ad6e5ddb-03ff-4139-8a51-b918bc84f732 Certificate serial: 010D0C9F4328584944693F1ADABA1240D96F8CE8 Authority key identifier: 7F:6C:84:47:49:A7:3C:4E:55:73:9F:5A:46:17:24:28:F8:2B:77:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/3c215373-ba4c-387d-b2fe-0739ac64f909.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 53823 IP address blocks: 2606:48c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ad6e5ddb-03ff-4139-8a51-b918bc84f732.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ad6e5ddb-03ff-4139-8a51-b918bc84f732.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:3f:1a:da:ba:12:40:d9:6f:8c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad6e5ddb-03ff-4139-8a51-b918bc84f732 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=83bef723-4e21-451d-a6be-c9f507522950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f9:ab:c2:0e:b6:4d:b4:24:11:97:a7:c3:51: c9:7e:bd:8b:a8:e2:87:76:7b:7b:f6:d0:5a:d0:e8: 62:b4:f0:28:97:1a:28:33:90:c9:41:ae:f6:5d:32: e5:cc:c4:56:e0:9e:23:c9:fc:ae:45:b9:04:01:3d: d1:c6:8a:ce:b2:84:e1:61:5f:02:00:e5:3f:3c:42: fb:ca:0e:ed:1e:1a:94:c1:93:e3:46:54:c6:6f:8f: 20:45:17:ad:1f:58:3d:54:58:b3:bf:0c:0e:bd:04: 1d:c6:31:d8:fb:63:b7:a7:8a:7c:62:4a:ff:66:75: b3:51:37:8e:4f:5f:b4:0a:be:ef:f7:35:82:22:64: db:50:6a:06:bc:e9:c3:2e:42:69:6a:27:39:59:3a: e4:dc:42:7a:39:75:bd:43:32:94:a2:38:70:0b:bf: 01:b0:3b:62:0e:15:59:08:39:f6:e4:96:fa:5c:ea: af:d5:12:68:e8:c4:a6:05:0d:6a:35:85:24:dd:71: 02:07:e6:2f:d5:9e:f2:4d:38:a2:f9:20:f8:1a:92: 28:8b:41:47:54:ed:23:15:8b:e3:25:a4:08:15:07: 4f:78:69:b9:2d:0a:9b:f2:1e:b1:91:80:a4:31:82: 13:f1:86:0b:f2:4f:01:98:eb:28:a8:fc:26:0f:58: aa:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:76:34:C2:6F:F6:70:5A:59:88:43:87:4B:22:B3:83:1B:A0:08:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/3c215373-ba4c-387d-b2fe-0739ac64f909.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ad6e5ddb-03ff-4139-8a51-b918bc84f732.crl X509v3 Authority Key Identifier: keyid:7F:6C:84:47:49:A7:3C:4E:55:73:9F:5A:46:17:24:28:F8:2B:77:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732.cer sbgp-ipAddrBlock: critical IPv6: 2606:48c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:30:a2:f0:d9:ca:85:a3:38:b1:31:dc:64:b4:8b:de:2f:ed: 82:c5:52:22:32:c6:52:b3:81:50:11:15:8f:1d:a4:0c:cc:39: 5f:ce:66:3f:35:8c:4a:8f:02:e7:8d:89:a0:91:71:b4:43:87: 65:e6:ad:f7:3d:6d:b7:c7:d2:56:5a:b3:3c:7f:fc:10:17:c9: 65:bd:db:5d:1f:67:e8:af:67:40:de:a7:50:e1:95:c5:9d:5a: 16:9b:5f:c2:72:46:5d:3c:d0:12:c7:c5:ab:06:c0:18:bc:d6: 97:76:09:37:b9:9c:9b:85:68:b5:13:1a:bc:e7:63:49:8c:af: 96:86:e5:63:99:ba:1e:60:ba:93:44:95:1b:b9:a6:e7:36:58: 7c:6e:7d:6b:5d:af:17:21:bf:c9:3e:c8:88:e4:e5:1d:e7:54: e0:12:dd:12:0c:47:57:fd:74:a1:f8:ac:c9:53:00:07:4b:fd: 65:25:ce:83:8a:0c:96:89:f2:70:0c:f8:8c:fb:46:bb:28:62: 2b:2b:d7:25:59:2d:b1:1a:a2:9d:c3:78:0e:7d:41:09:8b:ab: 7c:15:33:1b:56:71:a7:89:ce:e4:7a:b6:1d:ae:df:3a:ef:ec: 91:1a:b2:55:da:97:82:93:00:79:01:0e:2d:7f:08:82:d1:7e: 5f:12:71:13 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElEaT8a2roSQNlvjOgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQ2ZTVkZGItMDNmZi00MTM5LThhNTEtYjkxOGJjODRm NzMyMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk ODNiZWY3MjMtNGUyMS00NTFkLWE2YmUtYzlmNTA3NTIyOTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfmrwg62TbQkEZenw1HJfr2LqOKHdnt79tBa 0OhitPAolxooM5DJQa72XTLlzMRW4J4jyfyuRbkEAT3RxorOsoThYV8CAOU/PEL7 yg7tHhqUwZPjRlTGb48gRRetH1g9VFizvwwOvQQdxjHY+2O3p4p8Ykr/ZnWzUTeO T1+0Cr7v9zWCImTbUGoGvOnDLkJpaic5WTrk3EJ6OXW9QzKUojhwC78BsDtiDhVZ CDn25Jb6XOqv1RJo6MSmBQ1qNYUk3XECB+Yv1Z7yTTii+SD4GpIoi0FHVO0jFYvj JaQIFQdPeGm5LQqb8h6xkYCkMYIT8YYL8k8BmOsoqPwmD1iq7QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFF12NMJv9nBaWYhDh0sis4MboAjTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZDZl NWRkYi0wM2ZmLTQxMzktOGE1MS1iOTE4YmM4NGY3MzIvM2MyMTUzNzMtYmE0Yy0z ODdkLWIyZmUtMDczOWFjNjRmOTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWQ2ZTVkZGItMDNmZi00MTM5LThh NTEtYjkxOGJjODRmNzMyL2FkNmU1ZGRiLTAzZmYtNDEzOS04YTUxLWI5MThiYzg0 ZjczMi5jcmwwHwYDVR0jBBgwFoAUf2yER0mnPE5Vc59aRhckKPgrd6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZDZlNWRkYi0wM2ZmLTQxMzktOGE1MS1iOTE4 YmM4NGY3MzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZIwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCqMKLw2cqFozixMdxktIveL+2CxVIiMsZSs4FQERWPHaQMzDlfzmY/ NYxKjwLnjYmgkXG0Q4dl5q33PW23x9JWWrM8f/wQF8llvdtdH2for2dA3qdQ4ZXF nVoWm1/CckZdPNASx8WrBsAYvNaXdgk3uZybhWi1Exq852NJjK+WhuVjmboeYLqT RJUbuabnNlh8bn1rXa8XIb/JPsiI5OUd51TgEt0SDEdX/XSh+KzJUwAHS/1lJc6D igyWifJwDPiM+0a7KGIrK9clWS2xGqKdw3gOfUEJi6t8FTMbVnGnic7kerYdrt86 7+yRGrJV2peCkwB5AQ4tfwiC0X5fEnET -----END CERTIFICATE-----Generated at Sun Apr 6 06:01:17 2025 by rpki-client