$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/d4768484-b745-3f39-a4e8-08939a0ff42d.roa File: d4768484-b745-3f39-a4e8-08939a0ff42d.roa (raw, json) Hash identifier: fLlaio0kkjXQKzTgrqoS/U3m0R3Y/pWUm0rU4QmNHkA= Subject key identifier: DE:99:3D:EC:7A:AA:A7:8E:A6:7F:04:B3:42:B6:A7:26:CA:9A:76:A6 Certificate issuer: /CN=036b2dbb-e7db-4b60-b1d9-949d2edba6fe Certificate serial: 010D0C9F43285848EA435DFDADBB3DC5557DCF60 Authority key identifier: 4F:10:4C:3F:94:5F:DB:EB:A3:61:DB:19:DB:7E:DA:ED:96:69:91:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/d4768484-b745-3f39-a4e8-08939a0ff42d.roa Signing time: Mon 17 Feb 2025 18:01:47 +0000 ROA not before: Mon 17 Feb 2025 18:01:47 +0000 ROA not after: Sun 18 May 2025 17:01:47 +0000 asID: 400387 IP address blocks: 2607:6340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ea:43:5d:fd:ad:bb:3d:c5:55:7d:cf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036b2dbb-e7db-4b60-b1d9-949d2edba6fe Validity Not Before: Feb 17 18:01:47 2025 GMT Not After : May 18 17:01:47 2025 GMT Subject: CN=4ad84293-ff31-4f14-a7c9-f9b71e46ab4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0e:01:b9:5e:52:6a:ca:6a:9a:f7:95:b5:84: 7a:8d:e8:ba:01:df:b3:75:19:d3:04:cd:7a:95:9b: 48:0d:d0:78:da:9b:42:c2:2d:d8:82:05:ab:19:b9: ff:61:91:89:45:59:2c:2f:81:f4:c1:a3:2e:49:db: 59:c5:c7:6a:97:23:03:4a:a7:cd:bc:f4:c3:78:45: 4c:97:39:d2:70:d1:e0:b6:c3:0b:bb:bc:aa:a8:35: 65:e7:b5:2f:48:d4:be:1b:01:c4:68:a5:78:6f:78: 1f:61:21:e0:58:5f:fa:50:e2:68:cc:c3:52:12:1b: f7:ae:ff:89:4e:76:cd:3c:36:8e:2d:76:31:5a:bd: 14:66:0b:12:e3:46:4f:b0:73:1e:14:24:68:15:80: 26:1e:86:1d:ec:02:d7:79:c9:3c:35:de:b6:c7:c4: 14:a4:ad:61:75:df:53:d5:79:3e:fd:78:dc:38:fb: 6e:3b:e5:d2:7b:25:c4:43:38:9b:ee:85:c6:4e:a6: 6f:ed:c5:d4:c1:2f:73:b5:9c:82:23:91:7e:75:07: e3:58:da:e8:11:0b:82:1b:d3:98:c3:ec:01:d5:d9: c5:44:17:ba:05:34:b0:46:1d:16:83:3d:a7:7e:8b: 10:6b:3a:35:55:d5:37:9b:aa:4b:10:75:5d:ed:99: 1f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:99:3D:EC:7A:AA:A7:8E:A6:7F:04:B3:42:B6:A7:26:CA:9A:76:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/d4768484-b745-3f39-a4e8-08939a0ff42d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.crl X509v3 Authority Key Identifier: keyid:4F:10:4C:3F:94:5F:DB:EB:A3:61:DB:19:DB:7E:DA:ED:96:69:91:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/036b2dbb-e7db-4b60-b1d9-949d2edba6fe.cer sbgp-ipAddrBlock: critical IPv6: 2607:6340::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:09:d3:62:e6:ee:b8:12:2d:41:9c:f6:37:47:d1:e7:85:06: 01:9d:2f:a9:f3:60:7d:f2:71:33:a7:eb:52:74:6a:8d:02:f6: ae:d4:6c:e8:29:ed:80:62:49:6a:e5:f8:2d:1e:f0:43:75:6c: 12:60:65:40:59:1c:b0:d6:95:be:85:9f:0c:97:6b:40:c1:14: b7:d0:62:d3:0a:86:d4:7d:dc:4c:7e:6e:67:e1:eb:47:36:ac: 9f:99:ef:2f:c4:ab:65:fb:0c:5a:17:5b:1c:33:0d:a4:b0:db: 80:b7:34:ea:18:1b:60:76:63:c9:8b:b7:ef:79:37:74:3d:de: 91:f0:d1:ee:78:2c:bc:ea:82:1c:46:c2:a7:aa:02:f3:4b:92: ce:7c:cd:f4:d9:df:1e:d1:f7:5a:a4:67:60:36:ce:7f:e0:c8: ec:85:90:b6:a9:3e:28:3c:9c:97:97:da:00:14:e4:0d:fa:2b: 78:ee:01:0c:24:c6:96:4f:8c:ed:c0:4a:9d:d1:15:6b:02:13: 01:43:4f:99:8d:2d:03:a1:b8:b6:e7:f8:3a:e3:5f:ae:a7:a8: 97:d2:2a:49:75:a3:82:52:19:72:67:2d:4f:1c:3d:dc:1b:14: 9b:10:62:21:82:f1:9e:78:3a:3b:95:7f:ba:71:59:86:9f:b3: e4:ab:29:09 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjqQ139rbs9xVV9z2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM2YjJkYmItZTdkYi00YjYwLWIxZDktOTQ5ZDJlZGJh NmZlMB4XDTI1MDIxNzE4MDE0N1oXDTI1MDUxODE3MDE0N1owLzEtMCsGA1UEAxMk NGFkODQyOTMtZmYzMS00ZjE0LWE3YzktZjliNzFlNDZhYjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgA4BuV5SaspqmveVtYR6jei6Ad+zdRnTBM16 lZtIDdB42ptCwi3YggWrGbn/YZGJRVksL4H0waMuSdtZxcdqlyMDSqfNvPTDeEVM lznScNHgtsMLu7yqqDVl57UvSNS+GwHEaKV4b3gfYSHgWF/6UOJozMNSEhv3rv+J TnbNPDaOLXYxWr0UZgsS40ZPsHMeFCRoFYAmHoYd7ALXeck8Nd62x8QUpK1hdd9T 1Xk+/XjcOPtuO+XSeyXEQzib7oXGTqZv7cXUwS9ztZyCI5F+dQfjWNroEQuCG9OY w+wB1dnFRBe6BTSwRh0Wgz2nfosQazo1VdU3m6pLEHVd7Zkf5wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN6ZPex6qqeOpn8Es0K2pybKmnamMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wMzZi MmRiYi1lN2RiLTRiNjAtYjFkOS05NDlkMmVkYmE2ZmUvZDQ3Njg0ODQtYjc0NS0z ZjM5LWE0ZTgtMDg5MzlhMGZmNDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDM2YjJkYmItZTdkYi00YjYwLWIx ZDktOTQ5ZDJlZGJhNmZlLzAzNmIyZGJiLWU3ZGItNGI2MC1iMWQ5LTk0OWQyZWRi YTZmZS5jcmwwHwYDVR0jBBgwFoAUTxBMP5Rf2+ujYdsZ237a7ZZpkekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wMzZiMmRiYi1lN2RiLTRiNjAtYjFkOS05NDlk MmVkYmE2ZmUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdjQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBwCdNi5u64Ei1BnPY3R9HnhQYBnS+p82B98nEzp+tSdGqNAvau1Gzo Ke2AYklq5fgtHvBDdWwSYGVAWRyw1pW+hZ8Ml2tAwRS30GLTCobUfdxMfm5n4etH Nqyfme8vxKtl+wxaF1scMw2ksNuAtzTqGBtgdmPJi7fveTd0Pd6R8NHueCy86oIc RsKnqgLzS5LOfM302d8e0fdapGdgNs5/4MjshZC2qT4oPJyXl9oAFOQN+it47gEM JMaWT4ztwEqd0RVrAhMBQ0+ZjS0Dobi25/g641+up6iX0ipJdaOCUhlyZy1PHD3c GxSbEGIhgvGeeDo7lX+6cVmGn7PkqykJ -----END CERTIFICATE-----Generated at Fri Apr 4 15:58:41 2025 by rpki-client