$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/825148ae-8ee9-3b53-9fda-ff6eb4912a52.roa File: 825148ae-8ee9-3b53-9fda-ff6eb4912a52.roa (raw, json) Hash identifier: GKValCn+9jWFGLp9EsEaJfMgAhU8W+OQYBzGzD/sSik= Subject key identifier: BD:CD:85:C5:BE:AE:A9:7B:F5:9F:80:24:0F:A5:FE:32:AE:D1:40:0E Certificate issuer: /CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Certificate serial: 010D0C9F43285848CC7B9333065C8823D9B28100 Authority key identifier: D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/825148ae-8ee9-3b53-9fda-ff6eb4912a52.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 22987 IP address blocks: 2604:f6c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:93:33:06:5c:88:23:d9:b2:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=bca51815-3b18-404f-ad1b-107d87f8dc1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:47:ae:fb:c3:2e:1b:30:69:be:ed:c6:a3:3c: 27:43:ef:15:28:a3:c5:29:db:49:4c:2f:3b:df:e4: df:41:22:16:76:7e:2c:c2:c2:3e:54:7f:a9:93:f1: 39:37:66:28:21:d5:24:da:79:fa:56:6b:0b:41:be: 26:e8:0f:29:49:b3:2a:c0:86:41:e7:31:08:33:c1: b7:10:9c:73:2a:d1:be:e0:28:ad:fa:c5:38:ef:31: 34:d5:5a:6d:9a:32:2a:81:89:64:88:b2:1c:da:84: b5:a7:6a:76:12:c8:db:f6:cb:7f:a0:9a:a5:8e:17: 47:53:af:1c:1b:ea:ca:3a:ca:64:65:f8:fd:cd:2f: f5:94:d2:37:81:e5:90:be:c1:37:31:12:51:7e:ca: 71:75:0d:03:61:e7:16:d3:ca:a7:1c:eb:08:58:9f: 37:42:95:72:11:88:c2:64:1e:7d:51:e6:c7:c0:91: 7d:bd:15:60:20:c3:ed:0b:5e:6d:00:ae:15:58:74: 2a:57:04:7e:d8:6e:d1:2e:4a:51:18:43:00:2d:65: 1d:02:f5:ad:94:d4:70:72:f6:a1:95:69:c8:98:4f: e9:69:ad:ad:aa:45:58:58:b2:cd:ab:1e:d7:3b:57: e6:f0:31:f9:b2:f1:ef:44:c6:e1:f4:17:bd:94:17: a3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:CD:85:C5:BE:AE:A9:7B:F5:9F:80:24:0F:A5:FE:32:AE:D1:40:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/825148ae-8ee9-3b53-9fda-ff6eb4912a52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl X509v3 Authority Key Identifier: keyid:D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer sbgp-ipAddrBlock: critical IPv6: 2604:f6c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:16:8e:d9:53:35:52:c2:a4:2b:38:72:64:cb:ca:0b:bd:04: 0a:4a:f1:3a:d3:94:06:a1:61:09:28:1d:91:87:0f:64:15:ae: 17:ad:4e:4f:b9:c2:2c:76:75:78:40:b3:c8:76:df:2e:97:27: 39:3e:b3:08:05:f8:0f:df:c6:2f:07:e0:2e:bc:9f:ab:1a:19: 7a:03:9e:0a:75:d1:3c:88:ee:89:27:0a:b8:61:51:e7:b1:cf: 74:3c:98:c8:77:a3:bd:18:30:e6:0b:d2:82:fd:09:b5:ca:67: 6d:71:a3:a3:38:05:e1:5d:ee:77:75:15:f3:2c:33:97:c1:33: 82:39:d6:5f:7c:fe:a7:cb:a9:5c:68:44:0e:c4:85:72:5e:fb: df:fb:a2:8d:ac:13:ff:2f:a4:a6:4b:69:06:0b:fe:e7:1d:1f: 33:c0:a7:4e:90:48:d3:62:28:78:ba:79:96:24:27:44:90:e1: 81:94:50:cf:76:09:48:26:f3:78:9a:50:25:09:2f:63:aa:38: 43:82:0c:e3:8a:67:98:ab:f1:7d:60:c7:6b:87:77:5f:82:db: 71:af:a5:75:e8:4e:a6:be:27:09:90:99:d7:ff:6f:ea:77:40: 3d:33:4c:15:58:33:88:12:1e:00:c4:d9:91:bf:40:fe:dc:e6: a9:47:de:e0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjMe5MzBlyII9mygQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmFjZjhhZmEtNmNiMS00YzlkLTg0YzctNWVlODg0NTAw M2QxMB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk YmNhNTE4MTUtM2IxOC00MDRmLWFkMWItMTA3ZDg3ZjhkYzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUeu+8MuGzBpvu3GozwnQ+8VKKPFKdtJTC87 3+TfQSIWdn4swsI+VH+pk/E5N2YoIdUk2nn6VmsLQb4m6A8pSbMqwIZB5zEIM8G3 EJxzKtG+4Cit+sU47zE01VptmjIqgYlkiLIc2oS1p2p2Esjb9st/oJqljhdHU68c G+rKOspkZfj9zS/1lNI3geWQvsE3MRJRfspxdQ0DYecW08qnHOsIWJ83QpVyEYjC ZB59UebHwJF9vRVgIMPtC15tAK4VWHQqVwR+2G7RLkpRGEMALWUdAvWtlNRwcvah lWnImE/paa2tqkVYWLLNqx7XO1fm8DH5svHvRMbh9Be9lBejOQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL3NhcW+rql79Z+AJA+l/jKu0UAOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YWNm OGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4ODQ1MDAzZDEvODI1MTQ4YWUtOGVlOS0z YjUzLTlmZGEtZmY2ZWI0OTEyYTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmFjZjhhZmEtNmNiMS00YzlkLTg0 YzctNWVlODg0NTAwM2QxLzZhY2Y4YWZhLTZjYjEtNGM5ZC04NGM3LTVlZTg4NDUw MDNkMS5jcmwwHwYDVR0jBBgwFoAU2CwXVNgQjCQxXtrqMr1JHFRelVYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YWNmOGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4 ODQ1MDAzZDEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT2wDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCAFo7ZUzVSwqQrOHJky8oLvQQKSvE605QGoWEJKB2Rhw9kFa4XrU5P ucIsdnV4QLPIdt8ulyc5PrMIBfgP38YvB+AuvJ+rGhl6A54KddE8iO6JJwq4YVHn sc90PJjId6O9GDDmC9KC/Qm1ymdtcaOjOAXhXe53dRXzLDOXwTOCOdZffP6ny6lc aEQOxIVyXvvf+6KNrBP/L6SmS2kGC/7nHR8zwKdOkEjTYih4unmWJCdEkOGBlFDP dglIJvN4mlAlCS9jqjhDggzjimeYq/F9YMdrh3dfgttxr6V16E6mvicJkJnX/2/q d0A9M0wVWDOIEh4AxNmRv0D+3OapR97g -----END CERTIFICATE-----Generated at Fri Apr 11 21:24:14 2025 by rpki-client