$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553/6a1c5aa6-c138-31e0-a992-1c7146da48c3.roa File: 6a1c5aa6-c138-31e0-a992-1c7146da48c3.roa (raw, json) Hash identifier: PFAKUX+Q5sVRPgGPIqYB7BVaEcdcWM/9mGi8aREodHg= Subject key identifier: 81:35:F8:75:23:71:EC:83:26:58:09:F0:BF:31:EE:8E:EF:00:91:0C Certificate issuer: /CN=0f9fa158-6175-4fe8-be8e-bcfccfc26553 Certificate serial: 010D0C9F4328584909E69FB6B92A31EBC1441B00 Authority key identifier: 19:36:54:0C:48:D0:41:BD:2D:39:05:04:5B:DC:5A:9E:05:85:10:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553/6a1c5aa6-c138-31e0-a992-1c7146da48c3.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 398565 IP address blocks: 2602:806:a000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553/0f9fa158-6175-4fe8-be8e-bcfccfc26553.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553/0f9fa158-6175-4fe8-be8e-bcfccfc26553.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:9f:b6:b9:2a:31:eb:c1:44:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9fa158-6175-4fe8-be8e-bcfccfc26553 Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=e71da7ce-ba42-47fe-8ad4-e7c6ce84c3f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fa:cd:6a:6d:fd:05:81:5f:bf:2a:61:96:e5: b4:9b:91:37:4e:59:73:20:63:ce:0d:5f:e6:75:67: e3:6f:5d:ed:36:77:d5:5e:6d:ce:ed:d8:58:43:8b: 5d:91:98:27:84:1f:bc:9d:59:30:34:c0:07:71:a7: 49:67:6c:9f:98:e5:36:10:bc:be:c9:d0:68:43:27: 79:9e:05:fb:8c:0a:09:7c:fc:22:31:58:cb:69:12: 1a:2e:59:f8:79:97:01:09:01:ed:12:5a:00:30:8c: a3:a2:d7:34:a7:16:a3:ae:fb:bf:cf:71:ce:3c:58: a1:ab:00:ef:40:67:0e:5d:36:5e:e9:e9:c6:02:06: 0a:a3:64:e4:91:ea:eb:18:dd:e5:6d:3e:ee:b5:d3: 6f:db:30:df:c5:62:70:8d:11:f2:95:88:67:26:c0: bb:31:05:ef:48:18:66:5f:51:1d:e6:4e:f4:08:23: ce:44:a9:d3:d5:ed:17:0e:9a:a6:f1:a8:3d:93:da: 1c:05:5c:73:73:09:3d:f0:59:5c:18:b8:86:79:ef: ae:0e:d3:f6:a6:3b:ff:ac:55:a3:d8:24:0e:21:70: 69:aa:66:90:07:f0:d4:0d:f1:a9:d1:09:61:fa:a4: f1:a3:0a:80:de:b6:d2:4d:f0:e7:96:e4:db:e5:d6: 42:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:35:F8:75:23:71:EC:83:26:58:09:F0:BF:31:EE:8E:EF:00:91:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553/6a1c5aa6-c138-31e0-a992-1c7146da48c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553/0f9fa158-6175-4fe8-be8e-bcfccfc26553.crl X509v3 Authority Key Identifier: keyid:19:36:54:0C:48:D0:41:BD:2D:39:05:04:5B:DC:5A:9E:05:85:10:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553.cer sbgp-ipAddrBlock: critical IPv6: 2602:806:a000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:ea:ee:56:cc:09:88:91:fc:c3:93:36:83:d7:e5:fb:42:13: 7d:8b:d6:91:df:00:2f:6c:bb:88:7e:7c:2b:d5:8f:59:15:7e: f9:55:53:49:dc:64:be:83:4d:41:d6:62:fb:22:70:bc:8b:c0: 28:f9:64:f6:d4:11:81:d5:35:33:a2:14:6d:78:2e:f8:15:ef: 86:a7:c3:ca:27:0c:c7:48:f2:ef:83:be:58:27:60:e9:bc:84: dc:cb:d9:19:06:f9:1c:83:59:01:da:5a:ab:a1:5c:6e:72:9f: 28:1b:7f:5f:f3:b5:7b:3f:cf:a9:c0:bb:06:53:dc:2d:5b:4d: 6c:36:48:97:fd:e9:4e:83:a9:d2:be:64:99:c1:e1:84:1a:52: 52:fc:85:64:bf:c6:89:f2:7c:89:02:0d:6d:25:04:d6:fa:56: be:0e:a8:ea:cd:51:7f:8e:03:0d:ec:39:9f:42:73:1f:ff:56: ae:bf:2b:f7:4e:a5:0e:a8:d4:1c:fd:78:cf:29:31:3d:9b:d5: af:0d:e2:63:99:b0:5e:9f:5a:db:be:79:d7:d7:0f:f6:96:91: 74:54:a4:ad:90:bd:64:05:7e:df:39:af:42:5b:67:6b:c4:7d: 87:bd:45:04:d7:4d:45:d5:39:2f:b2:96:36:53:bb:da:92:cf: dd:4d:70:14 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkJ5p+2uSox68FEGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY5ZmExNTgtNjE3NS00ZmU4LWJlOGUtYmNmY2NmYzI2 NTUzMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk ZTcxZGE3Y2UtYmE0Mi00N2ZlLThhZDQtZTdjNmNlODRjM2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofrNam39BYFfvyphluW0m5E3TllzIGPODV/m dWfjb13tNnfVXm3O7dhYQ4tdkZgnhB+8nVkwNMAHcadJZ2yfmOU2ELy+ydBoQyd5 ngX7jAoJfPwiMVjLaRIaLln4eZcBCQHtEloAMIyjotc0pxajrvu/z3HOPFihqwDv QGcOXTZe6enGAgYKo2TkkerrGN3lbT7utdNv2zDfxWJwjRHylYhnJsC7MQXvSBhm X1Ed5k70CCPORKnT1e0XDpqm8ag9k9ocBVxzcwk98FlcGLiGee+uDtP2pjv/rFWj 2CQOIXBpqmaQB/DUDfGp0Qlh+qTxowqA3rbSTfDnluTb5dZCNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIE1+HUjceyDJlgJ8L8x7o7vAJEMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZjlm YTE1OC02MTc1LTRmZTgtYmU4ZS1iY2ZjY2ZjMjY1NTMvNmExYzVhYTYtYzEzOC0z MWUwLWE5OTItMWM3MTQ2ZGE0OGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGY5ZmExNTgtNjE3NS00ZmU4LWJl OGUtYmNmY2NmYzI2NTUzLzBmOWZhMTU4LTYxNzUtNGZlOC1iZThlLWJjZmNjZmMy NjU1My5jcmwwHwYDVR0jBBgwFoAUGTZUDEjQQb0tOQUEW9xangWFEJUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZjlmYTE1OC02MTc1LTRmZTgtYmU4ZS1iY2Zj Y2ZjMjY1NTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIBqAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIzq7lbMCYiR/MOTNoPX5ftCE32L1pHfAC9su4h+fCvVj1kVfvlV U0ncZL6DTUHWYvsicLyLwCj5ZPbUEYHVNTOiFG14LvgV74anw8onDMdI8u+Dvlgn YOm8hNzL2RkG+RyDWQHaWquhXG5ynygbf1/ztXs/z6nAuwZT3C1bTWw2SJf96U6D qdK+ZJnB4YQaUlL8hWS/xonyfIkCDW0lBNb6Vr4OqOrNUX+OAw3sOZ9Ccx//Vq6/ K/dOpQ6o1Bz9eM8pMT2b1a8N4mOZsF6fWtu+edfXD/aWkXRUpK2QvWQFft85r0Jb Z2vEfYe9RQTXTUXVOS+yljZTu9qSz91NcBQ= -----END CERTIFICATE-----Generated at Fri Mar 14 09:17:51 2025 by rpki-client