$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/ae413136-97ad-3224-a22c-ce71845ef7ec.roa File: ae413136-97ad-3224-a22c-ce71845ef7ec.roa (raw, json) Hash identifier: HQtCBfeZpEZtM9iSJyIGDr/6OV3IFRQ5HZ4xCNepre4= Subject key identifier: FC:AE:46:5E:06:7C:8D:12:08:61:AA:DD:05:CB:0D:56:2A:4A:F3:15 Certificate issuer: /CN=c1428d99-ad23-4d58-b5f4-17da4a50d59a Certificate serial: 010D0C9F43285849D85F8363B5E24F21E80E72C0 Authority key identifier: 3D:27:AE:90:5A:81:00:51:55:1E:44:B7:E5:3D:AD:8B:B5:6D:7E:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/ae413136-97ad-3224-a22c-ce71845ef7ec.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 5723 IP address blocks: 2606:2b00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:83:63:b5:e2:4f:21:e8:0e:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1428d99-ad23-4d58-b5f4-17da4a50d59a Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=d98f79a8-5a07-4010-a37e-2800f8ddb1ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:91:5a:1e:d2:49:87:91:63:63:25:f7:3d:4d: a1:b0:68:d9:94:c0:9b:df:f3:88:d6:9d:35:b8:b8: d7:4e:9a:c7:b1:d9:0d:99:81:98:ce:0e:bd:4f:16: fa:18:81:4a:e2:b1:00:35:b9:f8:df:97:79:f9:37: 01:7e:f1:5b:2d:8c:04:e7:e8:e7:e0:59:4c:d2:1b: 3b:9d:92:07:80:67:ce:11:84:81:ca:21:d6:e8:04: 04:0c:d6:d3:5f:9b:6d:41:db:27:49:1e:47:99:14: ce:74:3c:16:1c:61:f9:ce:42:64:59:28:53:d9:e6: 5d:dc:3c:d6:55:4c:23:84:94:b5:5b:b9:1c:78:c6: f4:0d:34:d8:f2:e0:96:84:f1:56:54:b8:52:9e:56: 4b:7c:ea:24:8c:76:ef:69:5f:8a:81:f3:71:d0:db: 4c:d5:df:94:00:79:2c:3f:62:27:17:a2:43:86:b4: d3:36:89:b0:23:f4:af:31:cd:44:ae:66:28:5a:7a: ee:5c:d7:b1:05:15:c5:6a:3a:d8:63:d1:af:b5:dc: 69:92:db:28:4e:d6:5d:a7:53:c2:5e:28:a5:81:59: ab:62:31:d8:2f:62:0e:24:d2:1d:3e:c3:97:35:a4: 8e:6c:2c:f7:c7:b0:e3:6f:5a:5c:84:64:4a:e3:8d: 45:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:AE:46:5E:06:7C:8D:12:08:61:AA:DD:05:CB:0D:56:2A:4A:F3:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/ae413136-97ad-3224-a22c-ce71845ef7ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a/c1428d99-ad23-4d58-b5f4-17da4a50d59a.crl X509v3 Authority Key Identifier: keyid:3D:27:AE:90:5A:81:00:51:55:1E:44:B7:E5:3D:AD:8B:B5:6D:7E:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c1428d99-ad23-4d58-b5f4-17da4a50d59a.cer sbgp-ipAddrBlock: critical IPv6: 2606:2b00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:98:df:4d:ce:c2:66:af:3e:ed:72:38:1d:ba:83:66:e3:e7: e9:62:d1:96:70:09:15:8c:63:d7:08:9a:b3:88:a2:e1:30:b1: 3a:fc:96:ce:d8:95:3b:17:e7:7f:cf:cb:e2:82:af:9f:a0:6e: 4d:5c:d6:3d:3b:5f:99:6f:27:cd:2e:36:01:68:9e:cd:8a:e6: 16:fe:58:90:e6:1b:b7:0a:34:fa:3e:b7:3e:17:b8:59:f7:0a: c9:9a:0a:d3:de:30:3f:ac:7e:ee:d1:12:83:4c:3b:a9:c3:b8: 01:36:59:81:7d:9a:cd:3a:6b:9b:a8:32:84:a5:3e:34:ca:ca: 46:fe:22:24:d3:9c:18:cb:ce:7e:fa:b2:b1:f0:c7:b6:c2:5c: 66:54:2a:aa:24:db:c4:8e:b4:42:fe:a9:da:5b:df:d8:1e:2b: 17:30:40:d0:eb:2f:f6:38:ba:71:c4:e9:14:c9:0d:3e:1e:d1: 16:4f:4f:b0:bd:2e:2b:58:a8:bd:6c:98:de:9d:c1:e9:f3:ad: 85:e2:ab:2a:7b:31:5d:8c:1a:5c:1e:04:34:65:f0:ce:20:00: a9:6c:0d:c9:02:89:bf:d1:4c:b9:29:4e:b5:bd:3f:70:87:bb: 6b:60:4a:5f:39:5b:5d:7a:d7:2e:5f:2a:c7:c8:86:5a:35:bd: 47:74:bf:af -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEnYX4NjteJPIegOcsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzE0MjhkOTktYWQyMy00ZDU4LWI1ZjQtMTdkYTRhNTBk NTlhMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZDk4Zjc5YTgtNWEwNy00MDEwLWEzN2UtMjgwMGY4ZGRiMWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZFaHtJJh5FjYyX3PU2hsGjZlMCb3/OI1p01 uLjXTprHsdkNmYGYzg69Txb6GIFK4rEANbn435d5+TcBfvFbLYwE5+jn4FlM0hs7 nZIHgGfOEYSByiHW6AQEDNbTX5ttQdsnSR5HmRTOdDwWHGH5zkJkWShT2eZd3DzW VUwjhJS1W7kceMb0DTTY8uCWhPFWVLhSnlZLfOokjHbvaV+KgfNx0NtM1d+UAHks P2InF6JDhrTTNomwI/SvMc1ErmYoWnruXNexBRXFajrYY9GvtdxpktsoTtZdp1PC XiilgVmrYjHYL2IOJNIdPsOXNaSObCz3x7Djb1pchGRK441F3QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPyuRl4GfI0SCGGq3QXLDVYqSvMVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jMTQy OGQ5OS1hZDIzLTRkNTgtYjVmNC0xN2RhNGE1MGQ1OWEvYWU0MTMxMzYtOTdhZC0z MjI0LWEyMmMtY2U3MTg0NWVmN2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzE0MjhkOTktYWQyMy00ZDU4LWI1 ZjQtMTdkYTRhNTBkNTlhL2MxNDI4ZDk5LWFkMjMtNGQ1OC1iNWY0LTE3ZGE0YTUw ZDU5YS5jcmwwHwYDVR0jBBgwFoAUPSeukFqBAFFVHkS35T2ti7Vtfo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jMTQyOGQ5OS1hZDIzLTRkNTgtYjVmNC0xN2Rh NGE1MGQ1OWEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgYrADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA2mN9NzsJmrz7tcjgduoNm4+fpYtGWcAkVjGPXCJqziKLhMLE6/JbO 2JU7F+d/z8vigq+foG5NXNY9O1+ZbyfNLjYBaJ7NiuYW/liQ5hu3CjT6Prc+F7hZ 9wrJmgrT3jA/rH7u0RKDTDupw7gBNlmBfZrNOmubqDKEpT40yspG/iIk05wYy85+ +rKx8Me2wlxmVCqqJNvEjrRC/qnaW9/YHisXMEDQ6y/2OLpxxOkUyQ0+HtEWT0+w vS4rWKi9bJjencHp862F4qsqezFdjBpcHgQ0ZfDOIACpbA3JAom/0Uy5KU61vT9w h7trYEpfOVtdetcuXyrHyIZaNb1HdL+v -----END CERTIFICATE-----Generated at Sat Jun 7 14:06:44 2025 by rpki-client