$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/5a68ccb3-a625-3c55-a020-f3b83c1fc0b7.roa File: 5a68ccb3-a625-3c55-a020-f3b83c1fc0b7.roa (raw, json) Hash identifier: j6sdb1wCaLGcx715PqSAm9btQIaAZ+qAhzLg3EOa5Fk= Subject key identifier: CD:03:CC:BD:E8:0C:CA:B1:21:BC:2C:3C:0B:14:B4:A8:49:59:77:46 Certificate issuer: /CN=d6fb0d47-7125-4b91-9b01-2e308dad0d25 Certificate serial: 010D0C9F43285849287E6AF3BF40B0EF202D26E6 Authority key identifier: F1:51:5C:12:74:E1:80:0B:3C:F8:ED:38:A6:09:04:6B:0C:6B:8E:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/5a68ccb3-a625-3c55-a020-f3b83c1fc0b7.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 2601:1700:e100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/d6fb0d47-7125-4b91-9b01-2e308dad0d25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/d6fb0d47-7125-4b91-9b01-2e308dad0d25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:6a:f3:bf:40:b0:ef:20:2d:26:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6fb0d47-7125-4b91-9b01-2e308dad0d25 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=509a90a8-0920-48d1-8cd4-c1affcd59c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b4:23:4d:70:35:23:1a:8f:e8:ee:cb:6b:39: f0:6b:5e:67:29:6a:55:6e:4a:89:21:97:0b:9a:2d: 03:33:d9:2d:61:39:bf:92:85:41:ea:70:11:70:ad: dd:8d:c0:8a:85:42:14:bd:92:d7:bb:9f:fd:45:62: 5a:1f:31:44:bf:fb:ec:84:03:f4:fb:a4:60:a7:5d: 14:ad:61:d8:3a:7d:a6:b9:19:3a:0e:ce:5f:a4:c3: 64:e3:a4:b0:b5:6f:75:41:42:c4:8a:29:d5:ff:ef: a3:42:0d:3f:16:f8:14:6f:c1:16:79:1c:5e:0a:e3: dc:00:9b:92:c6:ba:9f:c8:67:57:21:fa:3e:54:09: 76:3f:e5:13:60:ff:ce:63:09:bf:c5:c8:2b:94:7d: 04:a9:d3:71:83:43:c7:46:f8:36:97:43:c2:99:d0: 00:98:d7:05:b4:73:e2:26:e1:19:a4:5e:f3:24:f1: 1c:4b:c0:a8:8f:62:a3:12:10:82:03:20:4f:97:aa: 38:9d:a3:3a:67:3a:76:68:d4:97:f3:13:c3:0c:3e: c2:94:81:b2:b9:1a:4a:fb:1b:d9:54:6c:c8:07:d0: be:4c:47:ce:2e:db:eb:76:8a:ad:78:c7:c8:fc:77: b1:64:14:f6:92:78:80:76:ca:97:2f:68:b0:2f:76: b0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:03:CC:BD:E8:0C:CA:B1:21:BC:2C:3C:0B:14:B4:A8:49:59:77:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/5a68ccb3-a625-3c55-a020-f3b83c1fc0b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/d6fb0d47-7125-4b91-9b01-2e308dad0d25.crl X509v3 Authority Key Identifier: keyid:F1:51:5C:12:74:E1:80:0B:3C:F8:ED:38:A6:09:04:6B:0C:6B:8E:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25.cer sbgp-ipAddrBlock: critical IPv6: 2601:1700:e100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:40:a9:d6:8a:c1:c6:74:45:f3:be:74:ec:b4:b6:84:d3:ea: 9b:9c:5c:a9:ac:60:0c:52:8a:0b:03:23:3e:ff:a2:94:48:ad: aa:9b:e1:6c:03:69:0c:cd:9f:2d:69:bf:d3:d2:07:c5:b7:40: bd:93:86:5d:79:73:58:fd:f7:b4:a2:a0:24:aa:50:78:ff:1d: 0a:20:d6:fb:86:6e:41:a8:85:33:2d:e9:16:bf:4b:18:cc:88: df:a3:79:2c:68:17:8e:85:b8:07:ac:f1:08:f4:95:57:cd:e6: 63:92:c0:df:c3:55:a3:09:e1:1b:11:0a:8b:73:a1:ce:56:73: 84:54:c5:5a:ab:8f:78:82:6b:ca:c6:5b:f2:25:f2:dc:94:2c: 4a:96:4a:03:91:cd:0e:a4:5a:a9:bd:78:57:e5:25:cb:48:5e: 5e:38:c6:f2:cb:8d:fb:be:a0:b9:11:07:3e:c1:b1:ba:11:5c: 7c:ff:69:d6:50:b1:d1:be:fd:06:ef:c8:c7:82:7f:1f:b5:02: 0f:53:58:56:20:71:7b:ae:6d:e1:df:54:3d:ff:a5:c2:cd:a4: 4c:bd:02:1a:81:92:3f:5b:07:02:75:d7:ac:7a:f7:9d:de:80: 74:ee:4c:3e:06:c1:f1:ab:23:7a:51:6b:9e:de:24:2d:37:30: d8:b2:47:e9 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkofmrzv0Cw7yAtJuYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZmYjBkNDctNzEyNS00YjkxLTliMDEtMmUzMDhkYWQw ZDI1MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk NTA5YTkwYTgtMDkyMC00OGQxLThjZDQtYzFhZmZjZDU5YzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7QjTXA1IxqP6O7Laznwa15nKWpVbkqJIZcL mi0DM9ktYTm/koVB6nARcK3djcCKhUIUvZLXu5/9RWJaHzFEv/vshAP0+6Rgp10U rWHYOn2muRk6Ds5fpMNk46SwtW91QULEiinV/++jQg0/FvgUb8EWeRxeCuPcAJuS xrqfyGdXIfo+VAl2P+UTYP/OYwm/xcgrlH0EqdNxg0PHRvg2l0PCmdAAmNcFtHPi JuEZpF7zJPEcS8Coj2KjEhCCAyBPl6o4naM6Zzp2aNSX8xPDDD7ClIGyuRpK+xvZ VGzIB9C+TEfOLtvrdoqteMfI/HexZBT2kniAdsqXL2iwL3awiQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFM0DzL3oDMqxIbwsPAsUtKhJWXdGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNmZi MGQ0Ny03MTI1LTRiOTEtOWIwMS0yZTMwOGRhZDBkMjUvNWE2OGNjYjMtYTYyNS0z YzU1LWEwMjAtZjNiODNjMWZjMGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDZmYjBkNDctNzEyNS00YjkxLTli MDEtMmUzMDhkYWQwZDI1L2Q2ZmIwZDQ3LTcxMjUtNGI5MS05YjAxLTJlMzA4ZGFk MGQyNS5jcmwwHwYDVR0jBBgwFoAU8VFcEnThgAs8+O04pgkEawxrjv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNmZiMGQ0Ny03MTI1LTRiOTEtOWIwMS0yZTMw OGRhZDBkMjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgEXAOEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAHECp1orBxnRF87507LS2hNPqm5xcqaxgDFKKCwMjPv+ilEitqpvh bANpDM2fLWm/09IHxbdAvZOGXXlzWP33tKKgJKpQeP8dCiDW+4ZuQaiFMy3pFr9L GMyI36N5LGgXjoW4B6zxCPSVV83mY5LA38NVownhGxEKi3OhzlZzhFTFWquPeIJr ysZb8iXy3JQsSpZKA5HNDqRaqb14V+Uly0heXjjG8suN+76guREHPsGxuhFcfP9p 1lCx0b79Bu/Ix4J/H7UCD1NYViBxe65t4d9UPf+lws2kTL0CGoGSP1sHAnXXrHr3 nd6AdO5MPgbB8asjelFrnt4kLTcw2LJH6Q== -----END CERTIFICATE-----Generated at Fri Mar 14 11:04:08 2025 by rpki-client