$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/550364f5-a080-3961-a4d4-44ad3f54dcef.roa File: 550364f5-a080-3961-a4d4-44ad3f54dcef.roa (raw, json) Hash identifier: 3bBGisOfupbp9wQwzyKkfahlFngt8gSent8SYDYsdCc= Subject key identifier: B6:40:80:48:D5:F5:C9:65:6C:D2:18:E4:5E:CF:01:1A:8A:77:F8:1A Certificate issuer: /CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Certificate serial: 010D0C9F43285848E59BD1E7152FF980D9AD2A80 Authority key identifier: E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/550364f5-a080-3961-a4d4-44ad3f54dcef.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 397162 IP address blocks: 2604:f581::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:d1:e7:15:2f:f9:80:d9:ad:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f8721d-b6b4-4e88-9328-3a834dc36005 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=256abff5-fdd2-4ea2-9fa8-9bf2789c7a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:47:c3:0f:2a:4f:b8:11:df:7d:8b:8b:bc:01: 86:c0:64:10:99:69:f6:8e:a3:5c:f5:a1:20:4f:d5: 3c:47:ed:a2:0d:c6:40:04:bb:9a:bc:d9:90:2a:9d: 0f:22:88:61:69:70:2f:4e:f3:8b:83:b3:53:20:bf: f0:ce:38:4f:a8:07:34:1e:36:3f:77:a1:2c:ad:f0: 09:d0:ac:3b:c3:6c:c7:d4:64:83:2d:62:12:10:87: bc:0a:70:bd:94:d2:91:b0:51:ab:7e:66:bf:bc:e3: cc:98:09:38:50:6b:37:2e:03:2b:47:4f:95:1a:e5: 28:86:17:32:28:29:98:db:46:54:98:36:b3:31:ea: 6f:9c:95:48:a9:69:73:d6:cf:30:34:2f:8b:66:8c: 65:77:29:97:56:23:11:48:ea:f8:bd:1e:60:ee:3c: ef:f8:50:0e:72:63:4e:7f:9d:3d:0b:53:c7:be:11: 96:e2:35:16:dc:22:54:54:47:8f:cc:4f:b5:b0:94: 89:2e:63:15:cf:94:ed:b7:b0:b2:ce:8b:41:cc:38: 5f:d7:bd:18:7e:a0:7a:64:4d:30:44:ea:35:2d:af: e5:b4:87:7e:64:45:32:f0:1e:e3:61:ae:25:67:bb: 51:4b:9e:cd:6e:5c:dc:a4:a1:60:61:4d:a1:0c:f7: 38:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:40:80:48:D5:F5:C9:65:6C:D2:18:E4:5E:CF:01:1A:8A:77:F8:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/550364f5-a080-3961-a4d4-44ad3f54dcef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl X509v3 Authority Key Identifier: keyid:E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer sbgp-ipAddrBlock: critical IPv6: 2604:f581::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:43:91:18:70:e5:09:7c:8e:05:b7:e5:4d:9f:df:29:3f:c9: 25:4f:9e:2f:5b:57:40:0f:cc:f0:fe:83:dd:91:c4:07:be:41: b1:76:28:4b:5c:22:21:3e:c7:6c:16:2e:d0:f3:94:32:76:e7: 0a:ca:d5:17:e1:de:eb:95:20:4b:bc:34:81:2a:cf:42:db:39: 87:16:e4:23:e8:09:5a:f2:5f:de:cf:b7:2b:36:6a:ec:71:31: 7a:75:38:92:a3:9e:b0:1e:2b:eb:f7:f3:f7:ad:09:7d:d4:a8: 82:6d:11:61:9e:51:e7:bb:e4:7f:ea:7c:fe:5c:f2:2d:86:01: 1d:c9:94:17:24:db:01:2a:52:66:68:f8:31:da:c1:2a:a4:73: ab:36:6f:45:5d:1c:4e:75:73:0f:dc:d8:a9:62:71:a1:86:ce: 5d:2a:b1:0f:25:0b:23:eb:35:f7:5d:f9:5c:db:d3:18:e2:0e: c6:90:84:94:1e:6b:b5:59:82:f6:be:51:2c:9d:6f:3b:fa:4a: 76:9d:87:32:5c:bb:ec:22:9e:e2:d9:a0:ce:8e:cd:ec:6c:7d: e7:91:f8:f3:9e:ef:a4:bb:8a:29:f8:3b:1c:ea:8a:8c:2b:9e: 83:3a:30:a1:7b:56:92:b8:eb:20:b0:6c:b9:bf:19:8d:36:68: 85:8e:f6:13 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjlm9HnFS/5gNmtKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODcyMWQtYjZiNC00ZTg4LTkzMjgtM2E4MzRkYzM2 MDA1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk MjU2YWJmZjUtZmRkMi00ZWEyLTlmYTgtOWJmMjc4OWM3YTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UfDDypPuBHffYuLvAGGwGQQmWn2jqNc9aEg T9U8R+2iDcZABLuavNmQKp0PIohhaXAvTvOLg7NTIL/wzjhPqAc0HjY/d6EsrfAJ 0Kw7w2zH1GSDLWISEIe8CnC9lNKRsFGrfma/vOPMmAk4UGs3LgMrR0+VGuUohhcy KCmY20ZUmDazMepvnJVIqWlz1s8wNC+LZoxldymXViMRSOr4vR5g7jzv+FAOcmNO f509C1PHvhGW4jUW3CJUVEePzE+1sJSJLmMVz5Ttt7CyzotBzDhf170YfqB6ZE0w ROo1La/ltId+ZEUy8B7jYa4lZ7tRS57NblzcpKFgYU2hDPc4LQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLZAgEjV9cllbNIY5F7PARqKd/gaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4 NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgzNGRjMzYwMDUvNTUwMzY0ZjUtYTA4MC0z OTYxLWE0ZDQtNDRhZDNmNTRkY2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjVmODcyMWQtYjZiNC00ZTg4LTkz MjgtM2E4MzRkYzM2MDA1LzY1Zjg3MjFkLWI2YjQtNGU4OC05MzI4LTNhODM0ZGMz NjAwNS5jcmwwHwYDVR0jBBgwFoAU4yy2/QFQ8SHtUmVellx61PtPd/QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgz NGRjMzYwMDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT1gTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBqQ5EYcOUJfI4Ft+VNn98pP8klT54vW1dAD8zw/oPdkcQHvkGxdihL XCIhPsdsFi7Q85QyducKytUX4d7rlSBLvDSBKs9C2zmHFuQj6Ala8l/ez7crNmrs cTF6dTiSo56wHivr9/P3rQl91KiCbRFhnlHnu+R/6nz+XPIthgEdyZQXJNsBKlJm aPgx2sEqpHOrNm9FXRxOdXMP3NipYnGhhs5dKrEPJQsj6zX3Xflc29MY4g7GkISU Hmu1WYL2vlEsnW87+kp2nYcyXLvsIp7i2aDOjs3sbH3nkfjznu+ku4op+Dsc6oqM K56DOjChe1aSuOsgsGy5vxmNNmiFjvYT -----END CERTIFICATE-----Generated at Fri Apr 4 19:20:58 2025 by rpki-client