$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa File: b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa (raw, json) Hash identifier: euFVV07f4PVUXxKydiSIZBZBOPvdPam3WXl9HxIqWkQ= Subject key identifier: 93:C6:36:0D:04:12:15:D5:77:DD:60:77:98:A6:46:DC:5B:C0:2C:A4 Certificate issuer: /CN=a1ef3634-7b49-4b97-8787-680d6196e6e4 Certificate serial: 010D0C9F4328584913AC20E55213B1EC254F99A0 Authority key identifier: EB:86:31:11:A8:0E:0A:AD:F7:41:A5:FC:82:68:DA:14:80:97:BE:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 53507 IP address blocks: 2604:56c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:20:e5:52:13:b1:ec:25:4f:99:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ef3634-7b49-4b97-8787-680d6196e6e4 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=bb5c31cb-bf64-4725-ae54-4002ce0bc29a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:52:7c:7c:9f:57:b8:1d:f8:6c:84:a1:c9:86: 53:4b:76:d3:f4:49:dc:a3:1e:35:7a:fc:14:09:1e: 7f:6f:70:31:f0:68:fd:4e:58:a5:91:78:63:0e:e7: ed:ad:63:2c:ae:9d:19:0d:e0:14:2a:db:da:74:b8: 43:5f:2e:d4:74:c1:c9:fc:74:6b:7d:3d:78:42:c5: ca:9b:9d:78:c5:56:92:88:8b:ed:23:8a:51:6a:d0: b4:e1:9c:54:c1:f3:72:5b:50:d1:8a:87:10:a5:36: fc:0a:7a:23:c6:d9:8d:96:67:81:02:4f:27:61:1e: b2:45:4d:c7:28:b9:0c:ce:15:d1:b0:5b:31:8e:70: 5f:94:f8:70:9c:6b:3e:6a:ce:ff:dc:03:de:5c:a8: 57:15:1f:ca:64:fc:8e:a6:06:29:35:46:54:6b:87: 37:c6:48:10:ae:58:d5:be:9a:2e:d4:7c:81:c4:21: bd:92:ca:e7:a2:7f:50:0e:75:64:24:85:ef:6a:6b: 2c:f9:f2:0f:17:08:ac:ab:c5:8f:45:0b:b2:0c:35: d7:f7:71:34:f5:14:bc:08:2c:9d:b2:57:2a:3e:5b: 50:cd:49:8b:e7:23:11:85:ff:c1:7d:2c:d1:54:8d: 7e:ad:4f:7d:aa:8d:66:5f:c1:d8:56:17:b0:f2:b6: e9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C6:36:0D:04:12:15:D5:77:DD:60:77:98:A6:46:DC:5B:C0:2C:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/b9a26cf1-e2a7-305d-8ab8-71e04b4440c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4/a1ef3634-7b49-4b97-8787-680d6196e6e4.crl X509v3 Authority Key Identifier: keyid:EB:86:31:11:A8:0E:0A:AD:F7:41:A5:FC:82:68:DA:14:80:97:BE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a1ef3634-7b49-4b97-8787-680d6196e6e4.cer sbgp-ipAddrBlock: critical IPv6: 2604:56c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:94:f5:40:e8:7d:9e:f3:5e:11:5a:da:3d:63:a5:3f:0c:b8: 74:1c:50:a9:0f:b0:06:ca:8d:89:d7:eb:98:54:91:7f:d3:2f: 4b:04:a7:20:41:9a:5e:ac:9e:cb:1d:0c:1b:34:ec:4c:20:63: 95:03:f0:ba:2c:16:50:da:f3:a7:9a:44:44:ac:eb:98:fd:44: 58:73:4a:c1:d9:01:3b:aa:2c:04:99:41:4c:8b:fd:32:31:b1: e6:14:73:90:14:f0:82:f0:14:03:72:8b:e8:71:41:ce:2f:48: d2:a7:04:0e:ad:39:49:43:be:22:5b:66:db:fb:23:71:50:18: 6d:2e:50:dc:22:32:d0:13:56:95:23:7b:e1:5c:84:a2:cf:78: af:3a:a9:e0:87:f4:ce:e6:35:4a:c2:ad:3a:dc:30:24:7e:7f: fd:35:44:17:a5:91:6d:56:f7:a8:89:8b:50:28:62:1f:b3:5b: 20:5d:3c:23:70:d3:fd:61:88:b3:f7:97:b8:a8:33:2b:97:28: c1:a0:09:a1:20:37:3f:04:b0:49:e0:a1:91:2e:a3:3d:ad:f2: 0a:a5:e6:ab:5a:64:24:72:54:af:d9:02:fa:39:f2:e8:2c:40: 2f:7f:52:aa:93:d5:f1:ba:fc:c4:e4:8c:46:64:85:53:e3:b6: 66:94:89:44 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkTrCDlUhOx7CVPmaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFlZjM2MzQtN2I0OS00Yjk3LTg3ODctNjgwZDYxOTZl NmU0MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk YmI1YzMxY2ItYmY2NC00NzI1LWFlNTQtNDAwMmNlMGJjMjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlJ8fJ9XuB34bIShyYZTS3bT9Encox41evwU CR5/b3Ax8Gj9TlilkXhjDuftrWMsrp0ZDeAUKtvadLhDXy7UdMHJ/HRrfT14QsXK m514xVaSiIvtI4pRatC04ZxUwfNyW1DRiocQpTb8CnojxtmNlmeBAk8nYR6yRU3H KLkMzhXRsFsxjnBflPhwnGs+as7/3APeXKhXFR/KZPyOpgYpNUZUa4c3xkgQrljV vpou1HyBxCG9ksrnon9QDnVkJIXvamss+fIPFwisq8WPRQuyDDXX93E09RS8CCyd slcqPltQzUmL5yMRhf/BfSzRVI1+rU99qo1mX8HYVhew8rbpaQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJPGNg0EEhXVd91gd5imRtxbwCykMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMWVm MzYzNC03YjQ5LTRiOTctODc4Ny02ODBkNjE5NmU2ZTQvYjlhMjZjZjEtZTJhNy0z MDVkLThhYjgtNzFlMDRiNDQ0MGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTFlZjM2MzQtN2I0OS00Yjk3LTg3 ODctNjgwZDYxOTZlNmU0L2ExZWYzNjM0LTdiNDktNGI5Ny04Nzg3LTY4MGQ2MTk2 ZTZlNC5jcmwwHwYDVR0jBBgwFoAU64YxEagOCq33QaX8gmjaFICXvrwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMWVmMzYzNC03YjQ5LTRiOTctODc4Ny02ODBk NjE5NmU2ZTQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgRWwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBRlPVA6H2e814RWto9Y6U/DLh0HFCpD7AGyo2J1+uYVJF/0y9LBKcg QZperJ7LHQwbNOxMIGOVA/C6LBZQ2vOnmkRErOuY/URYc0rB2QE7qiwEmUFMi/0y MbHmFHOQFPCC8BQDcovocUHOL0jSpwQOrTlJQ74iW2bb+yNxUBhtLlDcIjLQE1aV I3vhXISiz3ivOqngh/TO5jVKwq063DAkfn/9NUQXpZFtVveoiYtQKGIfs1sgXTwj cNP9YYiz95e4qDMrlyjBoAmhIDc/BLBJ4KGRLqM9rfIKpearWmQkclSv2QL6OfLo LEAvf1Kqk9XxuvzE5IxGZIVT47ZmlIlE -----END CERTIFICATE-----Generated at Fri Mar 14 08:39:07 2025 by rpki-client