$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/6c989a56-e5a9-3746-80a9-ac480cc89704.roa File: 6c989a56-e5a9-3746-80a9-ac480cc89704.roa (raw, json) Hash identifier: 0Hv4m/d2rmkCBtXc98dn0J2NJVj0cGFxcybDYqMfZpg= Subject key identifier: 1E:57:8D:6B:70:6E:48:13:25:34:D7:DC:D4:7E:52:CC:C3:17:0E:E6 Certificate issuer: /CN=2e4e9332-b3fa-4993-b1e0-b3204976405f Certificate serial: 010D0C9F4328584908816826F228DCA592D3F600 Authority key identifier: 41:A4:3C:BD:61:0C:4B:19:7C:37:1C:1F:E4:82:A3:DE:78:0E:18:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/6c989a56-e5a9-3746-80a9-ac480cc89704.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 397388 IP address blocks: 2606:63c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/2e4e9332-b3fa-4993-b1e0-b3204976405f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/2e4e9332-b3fa-4993-b1e0-b3204976405f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:68:26:f2:28:dc:a5:92:d3:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e4e9332-b3fa-4993-b1e0-b3204976405f Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=7e4c057f-e229-40f6-8d67-859aad5a11b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:65:e0:61:1b:03:9d:ed:be:71:0e:7d:d0:84: fb:6d:0e:a4:b9:c7:ea:07:40:6c:90:c0:ba:ca:60: 5f:bb:de:77:b0:43:23:c4:a5:07:db:b3:0b:e1:46: a3:28:63:3f:8f:4b:c2:58:7c:ad:fb:8c:47:1a:da: 6e:16:f3:bb:be:10:76:d2:dc:dd:74:65:6c:0b:97: 0a:19:64:23:25:9a:b2:70:0c:8f:b7:f3:20:86:9b: e8:94:74:bf:5c:7c:27:7f:de:76:eb:a7:f1:51:3d: 47:0c:d8:e8:be:bb:04:ac:68:c4:1a:8c:7a:e1:e9: 3e:51:2d:b5:23:95:26:ba:0c:96:20:74:72:2c:28: 97:9b:36:64:17:69:62:11:6b:98:ec:fb:5e:06:d8: bd:88:9f:14:cf:08:c6:e3:1e:4c:b0:2d:62:33:99: 95:2c:85:ee:fb:1c:72:e8:42:57:bb:1e:dd:c3:80: 86:97:5c:cb:8a:f6:c0:49:81:a0:f9:21:e9:9d:97: 21:f4:d9:99:ac:20:96:06:ed:e6:e8:00:f4:35:d1: c5:72:0d:d1:fe:5f:85:a1:95:c2:4f:b2:fe:f3:7f: 43:42:6a:0f:db:47:c8:6f:e9:90:c2:e4:9f:e8:24: fd:ad:47:08:12:b7:bc:8b:d2:3e:af:10:29:22:09: 10:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:57:8D:6B:70:6E:48:13:25:34:D7:DC:D4:7E:52:CC:C3:17:0E:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/6c989a56-e5a9-3746-80a9-ac480cc89704.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/2e4e9332-b3fa-4993-b1e0-b3204976405f.crl X509v3 Authority Key Identifier: keyid:41:A4:3C:BD:61:0C:4B:19:7C:37:1C:1F:E4:82:A3:DE:78:0E:18:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f.cer sbgp-ipAddrBlock: critical IPv6: 2606:63c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:18:88:31:f1:16:92:3b:a6:fe:67:6e:ef:01:be:bd:8c:96: 72:a5:49:14:86:fb:38:4a:9a:b5:18:f9:e6:e9:c0:d2:42:b7: 21:24:5d:a9:d1:e3:36:c0:b0:b1:60:c3:08:a7:30:e8:5e:6f: 4e:6e:42:32:03:7d:20:6c:5d:c8:7c:81:86:70:d1:6b:cc:87: 46:d9:2a:9e:31:fe:ad:0c:de:ce:d4:e0:d5:f4:72:c0:92:86: 69:09:56:5b:a0:94:3d:46:4b:e0:22:34:65:f8:ea:c8:a1:17: bc:cf:05:20:96:9a:43:9b:9c:19:a7:22:51:4a:47:4f:43:23: 5d:a1:10:61:57:d2:da:3c:48:ba:0f:00:c7:78:79:b6:fe:0f: 10:a6:22:c3:d9:a7:29:1c:69:8e:06:a0:28:7f:2a:8f:85:b3: d5:6b:a1:1e:2d:94:40:31:95:5e:43:20:73:45:1a:cf:05:80: 3d:d5:48:2a:fd:c8:af:f8:5e:1f:96:82:e8:02:e4:53:1a:f6: 64:0b:b0:26:38:78:9e:04:7c:96:ae:4e:b7:f1:8e:43:41:d1: 76:f4:cd:97:5d:7b:13:58:62:dc:49:6b:d1:a7:7f:78:82:6d: c2:44:b0:8a:60:29:6c:e3:ec:7e:a7:a5:34:b0:a8:6f:5e:5d: b3:7c:fb:08 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkIgWgm8ijcpZLT9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU0ZTkzMzItYjNmYS00OTkzLWIxZTAtYjMyMDQ5NzY0 MDVmMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk N2U0YzA1N2YtZTIyOS00MGY2LThkNjctODU5YWFkNWExMWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumXgYRsDne2+cQ590IT7bQ6kucfqB0BskMC6 ymBfu953sEMjxKUH27ML4UajKGM/j0vCWHyt+4xHGtpuFvO7vhB20tzddGVsC5cK GWQjJZqycAyPt/MghpvolHS/XHwnf95266fxUT1HDNjovrsErGjEGox64ek+US21 I5UmugyWIHRyLCiXmzZkF2liEWuY7PteBti9iJ8UzwjG4x5MsC1iM5mVLIXu+xxy 6EJXux7dw4CGl1zLivbASYGg+SHpnZch9NmZrCCWBu3m6AD0NdHFcg3R/l+FoZXC T7L+839DQmoP20fIb+mQwuSf6CT9rUcIEre8i9I+rxApIgkQnQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB5XjWtwbkgTJTTX3NR+UszDFw7mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZTRl OTMzMi1iM2ZhLTQ5OTMtYjFlMC1iMzIwNDk3NjQwNWYvNmM5ODlhNTYtZTVhOS0z NzQ2LTgwYTktYWM0ODBjYzg5NzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmU0ZTkzMzItYjNmYS00OTkzLWIx ZTAtYjMyMDQ5NzY0MDVmLzJlNGU5MzMyLWIzZmEtNDk5My1iMWUwLWIzMjA0OTc2 NDA1Zi5jcmwwHwYDVR0jBBgwFoAUQaQ8vWEMSxl8Nxwf5IKj3ngOGKwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yZTRlOTMzMi1iM2ZhLTQ5OTMtYjFlMC1iMzIw NDk3NjQwNWYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZjwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC6GIgx8RaSO6b+Z27vAb69jJZypUkUhvs4Spq1GPnm6cDSQrchJF2p 0eM2wLCxYMMIpzDoXm9ObkIyA30gbF3IfIGGcNFrzIdG2SqeMf6tDN7O1ODV9HLA koZpCVZboJQ9RkvgIjRl+OrIoRe8zwUglppDm5wZpyJRSkdPQyNdoRBhV9LaPEi6 DwDHeHm2/g8QpiLD2acpHGmOBqAofyqPhbPVa6EeLZRAMZVeQyBzRRrPBYA91Ugq /civ+F4floLoAuRTGvZkC7AmOHieBHyWrk638Y5DQdF29M2XXXsTWGLcSWvRp394 gm3CRLCKYCls4+x+p6U0sKhvXl2zfPsI -----END CERTIFICATE-----Generated at Fri Mar 14 13:13:47 2025 by rpki-client