$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cf2b3797-7be9-3b3a-ba2e-23e8cc77131d.roa File: cf2b3797-7be9-3b3a-ba2e-23e8cc77131d.roa (raw, json) Hash identifier: yOYqlDl+ed/MhC8dwofRX98yPMo9sekVEyPP4PYYIuQ= Subject key identifier: F3:93:A8:5C:85:FC:A0:B8:3B:80:37:D7:2E:C8:FC:55:33:DB:00:33 Certificate issuer: /CN=cbdc881f-54ac-40a9-89b3-5383cf243bae Certificate serial: 010D0C9F4328584925B3AD18DFDB15A7FEA1CF18 Authority key identifier: 0B:77:9F:06:0B:42:75:84:12:DE:DC:60:66:74:A4:3B:3B:C5:1C:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cf2b3797-7be9-3b3a-ba2e-23e8cc77131d.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 396982 IP address blocks: 2620:126:f000::/44 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cbdc881f-54ac-40a9-89b3-5383cf243bae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cbdc881f-54ac-40a9-89b3-5383cf243bae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:ad:18:df:db:15:a7:fe:a1:cf:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbdc881f-54ac-40a9-89b3-5383cf243bae Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=3a06f1f3-5177-45ae-8011-08c6e09355e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ae:0d:f6:8e:07:1b:45:50:37:cd:db:e9:53: 66:dd:2f:28:d9:92:d8:09:20:ec:5b:0c:5b:15:ff: ce:02:90:34:9f:f6:43:28:e8:4e:e5:cf:bc:6d:10: 2d:c9:a4:02:a1:78:5f:b5:4a:e8:05:8b:40:25:00: 2c:b1:e3:98:3e:df:f4:60:28:12:b2:e1:23:46:f1: 19:64:16:c7:66:5a:f1:98:09:ab:a9:4b:28:70:18: db:3b:2a:77:d4:46:02:71:32:99:5d:3b:e2:61:f3: 83:c3:0f:d9:83:ac:86:52:ee:29:a1:17:b3:a5:14: 97:1d:22:51:f0:b0:48:0c:a3:a7:ac:09:84:99:40: b1:00:08:12:46:75:43:04:a7:0b:31:ae:03:d4:48: 8d:69:bf:64:2a:9e:89:8e:55:04:c4:30:b9:6a:0b: 14:a2:ec:5b:87:08:a7:3c:71:3f:7b:c1:24:a1:88: bc:ac:97:38:bb:83:f7:8c:57:a9:9e:56:70:30:68: 94:20:c3:89:cf:f7:6b:83:a5:66:87:d6:b0:56:72: 02:01:a7:c7:fa:7d:44:97:67:7f:d6:c1:31:7f:9f: 82:28:19:04:60:64:d6:f8:ba:b3:e8:11:a9:d6:0b: 8e:80:8d:a5:42:e4:a2:c4:34:9e:38:f4:19:96:cc: 2e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:93:A8:5C:85:FC:A0:B8:3B:80:37:D7:2E:C8:FC:55:33:DB:00:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cf2b3797-7be9-3b3a-ba2e-23e8cc77131d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cbdc881f-54ac-40a9-89b3-5383cf243bae.crl X509v3 Authority Key Identifier: keyid:0B:77:9F:06:0B:42:75:84:12:DE:DC:60:66:74:A4:3B:3B:C5:1C:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer sbgp-ipAddrBlock: critical IPv6: 2620:126:f000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:9d:3a:0a:33:32:d9:01:c6:bf:59:35:e3:73:79:93:c9:50: e0:db:d1:ab:8f:76:1d:3a:dc:f9:e0:e7:03:32:75:2a:82:9d: c9:56:f4:4e:0c:5d:38:91:ed:5d:16:16:cb:14:41:50:09:e1: 58:38:6c:7a:18:db:31:40:5a:da:b4:6d:a7:d4:bf:55:bc:85: 30:c8:b1:d9:0d:cb:7c:45:79:27:35:1e:16:c2:87:45:f9:6d: f5:68:62:48:f3:39:da:ad:b3:52:e6:25:d2:a1:b0:38:b6:e6: 80:a3:8f:f5:38:f7:5a:a2:6b:10:f3:d4:43:87:de:ec:e8:d8: 95:60:3b:ae:16:44:f2:c5:9d:f3:f7:c1:0f:ba:84:7a:b0:6d: 2a:67:79:82:e6:23:ce:0e:2b:9c:26:a5:85:46:e1:77:8a:6f: 23:21:d8:ce:57:50:fd:8e:c8:31:67:d1:46:57:a2:0d:77:cb: 41:e9:8a:f3:03:f7:c0:0d:1e:f8:74:4a:91:1e:87:ef:c6:d8: 82:c4:c6:1f:9e:67:5f:c7:1a:7a:8b:e8:b7:ed:cd:c5:03:18: 63:6b:7c:e9:0c:59:59:e2:20:8f:b3:a9:cc:11:6f:d1:47:49: 42:9b:09:37:cd:70:bd:1f:a1:a4:4b:0b:4f:28:67:24:4a:ef: 39:ce:e6:66 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkls60Y39sVp/6hzxgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JkYzg4MWYtNTRhYy00MGE5LTg5YjMtNTM4M2NmMjQz YmFlMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk M2EwNmYxZjMtNTE3Ny00NWFlLTgwMTEtMDhjNmUwOTM1NWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK4N9o4HG0VQN83b6VNm3S8o2ZLYCSDsWwxb Ff/OApA0n/ZDKOhO5c+8bRAtyaQCoXhftUroBYtAJQAsseOYPt/0YCgSsuEjRvEZ ZBbHZlrxmAmrqUsocBjbOyp31EYCcTKZXTviYfODww/Zg6yGUu4poRezpRSXHSJR 8LBIDKOnrAmEmUCxAAgSRnVDBKcLMa4D1EiNab9kKp6JjlUExDC5agsUouxbhwin PHE/e8EkoYi8rJc4u4P3jFepnlZwMGiUIMOJz/drg6Vmh9awVnICAafH+n1El2d/ 1sExf5+CKBkEYGTW+Lqz6BGp1guOgI2lQuSixDSeOPQZlswunQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPOTqFyF/KC4O4A31y7I/FUz2wAzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jYmRj ODgxZi01NGFjLTQwYTktODliMy01MzgzY2YyNDNiYWUvY2YyYjM3OTctN2JlOS0z YjNhLWJhMmUtMjNlOGNjNzcxMzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2JkYzg4MWYtNTRhYy00MGE5LTg5 YjMtNTM4M2NmMjQzYmFlL2NiZGM4ODFmLTU0YWMtNDBhOS04OWIzLTUzODNjZjI0 M2JhZS5jcmwwHwYDVR0jBBgwFoAUC3efBgtCdYQS3txgZnSkOzvFHDMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jYmRjODgxZi01NGFjLTQwYTktODliMy01Mzgz Y2YyNDNiYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABJvAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKadOgozMtkBxr9ZNeNzeZPJUODb0auPdh063Png5wMydSqCnclW 9E4MXTiR7V0WFssUQVAJ4Vg4bHoY2zFAWtq0bafUv1W8hTDIsdkNy3xFeSc1HhbC h0X5bfVoYkjzOdqts1LmJdKhsDi25oCjj/U491qiaxDz1EOH3uzo2JVgO64WRPLF nfP3wQ+6hHqwbSpneYLmI84OK5wmpYVG4XeKbyMh2M5XUP2OyDFn0UZXog13y0Hp ivMD98ANHvh0SpEeh+/G2ILExh+eZ1/HGnqL6LftzcUDGGNrfOkMWVniII+zqcwR b9FHSUKbCTfNcL0foaRLC08oZyRK7znO5mY= -----END CERTIFICATE-----Generated at Fri Apr 4 21:43:08 2025 by rpki-client