$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/611c5848-7847-37af-bcd8-ea93e742fac5.roa File: 611c5848-7847-37af-bcd8-ea93e742fac5.roa (raw, json) Hash identifier: FSVgNBVh+kYOY7zJtK6S62gUpErjmH+z6sHEw/3Vrps= Subject key identifier: 85:7A:6D:33:B3:55:57:C9:7D:C9:E9:06:4F:B1:0D:7F:E8:AA:39:14 Certificate issuer: /CN=7a2be303-4525-4433-b220-b1c6b5052945 Certificate serial: 010D0C9F4328584909E6A3749F3CB29305543C80 Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/611c5848-7847-37af-bcd8-ea93e742fac5.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 136473 IP address blocks: 2604:28c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:a3:74:9f:3c:b2:93:05:54:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945 Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=cd6956e3-9969-434c-9e89-5f6d6875a0a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:57:19:5c:e2:00:cc:ed:58:64:ce:94:30:1b: 0a:34:29:7d:f3:f1:69:5f:36:13:99:f4:55:be:73: 02:98:27:a0:f7:c6:7b:c8:1c:96:c3:92:a3:d3:b0: bd:05:73:f0:8d:8b:c3:86:82:7f:82:c1:67:a5:c7: cc:41:5d:ae:9a:95:65:4b:5e:cf:14:51:73:e5:90: f9:e6:69:36:77:5d:c7:ae:9c:7d:c2:9b:4f:14:29: a8:4e:f4:04:82:27:3c:1c:33:a7:07:48:a4:de:7a: d7:18:f9:4a:40:1d:be:4a:b0:d4:24:04:f8:2e:d8: 16:ca:42:64:57:b0:bc:ce:76:8b:fc:83:9b:ed:a9: 06:f4:d1:6a:d7:35:97:6a:a1:9a:61:be:fc:c1:68: 9b:78:5a:34:0e:e1:75:2f:3b:16:f7:8e:10:ea:99: 70:bc:58:37:70:e3:7a:a8:10:af:08:fa:47:ad:36: 4e:14:ef:fe:c1:4c:3d:8d:bf:ba:1c:2d:34:dd:3f: ae:5d:4c:b4:32:77:41:54:6f:68:b0:2b:3e:80:23: b1:e4:54:84:f3:b1:7b:85:12:97:d8:52:c5:dc:9c: d5:91:57:39:24:b4:42:ba:b9:d4:6f:a4:d7:90:cd: fa:d2:73:71:d7:ae:82:91:fb:59:e4:88:55:26:d5: 3e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:7A:6D:33:B3:55:57:C9:7D:C9:E9:06:4F:B1:0D:7F:E8:AA:39:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/611c5848-7847-37af-bcd8-ea93e742fac5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl X509v3 Authority Key Identifier: keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer sbgp-ipAddrBlock: critical IPv6: 2604:28c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:37:35:f0:0e:23:50:27:31:19:45:0b:93:98:19:79:99:80: d1:26:73:59:52:b6:a9:c6:99:0b:0b:c2:49:2a:43:40:1c:d4: 21:29:54:22:fd:cb:71:c0:90:05:72:42:e0:18:a7:be:ea:6b: e4:6b:f2:df:98:90:e8:30:1b:25:b1:63:10:58:05:7c:96:2a: a6:33:b5:1a:8e:ac:fd:89:85:d6:bd:a7:67:3e:14:f3:b7:cb: 51:83:64:e6:b4:9a:cb:76:0e:b1:4e:54:09:2b:7a:bd:0c:93: 13:f1:b9:e2:e0:7f:4d:bc:91:52:58:18:10:b6:fe:ac:d7:16: 73:38:ca:3a:3e:cd:dc:74:a3:e0:72:e6:10:ce:51:c0:40:9c: 0c:15:99:b7:6e:ce:b8:d0:bd:55:79:99:5e:83:16:64:48:69: 39:57:e0:9a:7d:81:65:18:04:f1:ed:6b:e3:12:38:3f:61:02: 49:9a:04:f3:48:89:88:b3:67:cc:39:99:d9:a0:97:be:a2:80: b7:3a:06:47:1a:0e:4d:6c:38:af:fd:35:37:f7:d9:df:5d:24: 53:4a:85:02:fb:93:63:fc:66:6a:f1:4c:25:14:94:ca:56:76: 3b:cf:75:f8:25:22:48:cd:8b:91:07:67:d0:ea:1c:b7:c5:5c: f6:7b:12:ad -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkJ5qN0nzyykwVUPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EyYmUzMDMtNDUyNS00NDMzLWIyMjAtYjFjNmI1MDUy OTQ1MB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk Y2Q2OTU2ZTMtOTk2OS00MzRjLTllODktNWY2ZDY4NzVhMGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FcZXOIAzO1YZM6UMBsKNCl98/FpXzYTmfRV vnMCmCeg98Z7yByWw5Kj07C9BXPwjYvDhoJ/gsFnpcfMQV2umpVlS17PFFFz5ZD5 5mk2d13Hrpx9wptPFCmoTvQEgic8HDOnB0ik3nrXGPlKQB2+SrDUJAT4LtgWykJk V7C8znaL/IOb7akG9NFq1zWXaqGaYb78wWibeFo0DuF1LzsW944Q6plwvFg3cON6 qBCvCPpHrTZOFO/+wUw9jb+6HC003T+uXUy0MndBVG9osCs+gCOx5FSE87F7hRKX 2FLF3JzVkVc5JLRCurnUb6TXkM360nNx166CkftZ5IhVJtU++QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIV6bTOzVVfJfcnpBk+xDX/oqjkUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJi ZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2YjUwNTI5NDUvNjExYzU4NDgtNzg0Ny0z N2FmLWJjZDgtZWE5M2U3NDJmYWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2EyYmUzMDMtNDUyNS00NDMzLWIy MjAtYjFjNmI1MDUyOTQ1LzdhMmJlMzAzLTQ1MjUtNDQzMy1iMjIwLWIxYzZiNTA1 Mjk0NS5jcmwwHwYDVR0jBBgwFoAUcB/v7q15UMvEYiozrSRlUmV13rIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJiZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2 YjUwNTI5NDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQowDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBoNzXwDiNQJzEZRQuTmBl5mYDRJnNZUrapxpkLC8JJKkNAHNQhKVQi /ctxwJAFckLgGKe+6mvka/LfmJDoMBslsWMQWAV8liqmM7Uajqz9iYXWvadnPhTz t8tRg2TmtJrLdg6xTlQJK3q9DJMT8bni4H9NvJFSWBgQtv6s1xZzOMo6Ps3cdKPg cuYQzlHAQJwMFZm3bs640L1VeZlegxZkSGk5V+CafYFlGATx7WvjEjg/YQJJmgTz SImIs2fMOZnZoJe+ooC3OgZHGg5NbDiv/TU399nfXSRTSoUC+5Nj/GZq8UwlFJTK VnY7z3X4JSJIzYuRB2fQ6hy3xVz2exKt -----END CERTIFICATE-----Generated at Fri Mar 14 09:36:24 2025 by rpki-client