$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9/a5734608-f60f-3001-9d9d-4f1eaffa2c67.roa File: a5734608-f60f-3001-9d9d-4f1eaffa2c67.roa (raw, json) Hash identifier: impSmxH52qOJmI163jiydbiYvUMmznJQM9dL54uyaUk= Subject key identifier: 5B:54:2B:CE:E3:42:32:49:A1:98:0D:AA:9F:D3:44:4C:D5:3F:96:C2 Certificate issuer: /CN=929275f0-3197-4a70-8b27-8fff75b6e7b9 Certificate serial: 010D0C9F43285848AF2B7D6501B04DA395D04C40 Authority key identifier: BB:02:D1:44:F5:91:AC:6D:DC:A7:01:E4:B5:05:4A:6D:69:25:47:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9/a5734608-f60f-3001-9d9d-4f1eaffa2c67.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 400674 IP address blocks: 2606:ccc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9/929275f0-3197-4a70-8b27-8fff75b6e7b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9/929275f0-3197-4a70-8b27-8fff75b6e7b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:7d:65:01:b0:4d:a3:95:d0:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=929275f0-3197-4a70-8b27-8fff75b6e7b9 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=b9b37268-b9b8-4134-b872-a69da09cf4a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a6:53:d7:80:fa:42:a9:ce:42:17:bd:33:f9: 06:a6:7b:27:59:e5:e3:e5:0e:e5:e0:b8:ef:f3:bb: 5a:66:0c:21:10:dc:ad:bc:b7:08:69:89:2d:e7:07: f5:e1:48:7e:0b:ff:a3:11:6c:f9:e7:c2:00:d4:34: 77:41:96:64:15:21:4f:c1:6e:d7:5b:ee:e1:6d:6d: db:de:d8:fa:6b:9d:5f:1d:76:2f:95:24:f7:55:11: f5:5f:53:b6:ff:75:aa:22:8f:19:f1:c3:09:4c:a3: 47:2e:c3:94:25:c6:5c:22:a6:b5:a7:f2:bb:26:f6: 87:f3:ec:7e:2a:78:64:ed:ad:cd:b4:91:c3:53:a8: b3:20:f1:7f:1f:91:83:7e:48:59:61:05:d4:77:56: 5b:0a:e0:43:e1:5c:80:c2:a0:1a:df:fb:26:50:be: 39:fc:ad:ed:e7:7f:fa:35:b5:c9:b1:a3:10:35:17: f5:05:f2:0f:e7:28:41:71:36:67:bf:05:3d:8b:15: f2:ef:1b:17:d4:b2:42:9e:8b:f4:7b:5f:ca:f1:ac: ee:c4:ac:0c:a8:22:9f:f4:77:06:eb:74:ff:1b:ef: c9:7e:c4:b0:15:df:0a:0d:5b:d7:f9:ac:fa:15:7f: a1:db:9f:35:b1:df:89:5b:07:92:29:35:b7:ee:2e: 19:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:54:2B:CE:E3:42:32:49:A1:98:0D:AA:9F:D3:44:4C:D5:3F:96:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9/a5734608-f60f-3001-9d9d-4f1eaffa2c67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9/929275f0-3197-4a70-8b27-8fff75b6e7b9.crl X509v3 Authority Key Identifier: keyid:BB:02:D1:44:F5:91:AC:6D:DC:A7:01:E4:B5:05:4A:6D:69:25:47:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/929275f0-3197-4a70-8b27-8fff75b6e7b9.cer sbgp-ipAddrBlock: critical IPv6: 2606:ccc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:01:89:8b:9f:7e:66:d2:33:cb:e0:e5:60:21:02:50:49:31: ba:d0:0c:fc:5f:36:e0:56:61:a0:78:da:cb:c5:24:f3:86:23: 3b:e6:f0:8b:93:cd:67:68:cb:a5:39:3d:d0:55:c9:ac:45:ff: d8:4c:5e:dc:8b:d5:a1:e9:0f:ac:84:6f:2a:e8:c8:7e:c9:e2: aa:7c:57:0e:e9:01:d6:15:db:45:00:a3:04:2d:64:fe:c9:df: 33:f9:97:01:d8:83:16:50:9c:7a:83:c7:07:c5:2e:03:f5:96: 81:0b:cb:4b:b8:77:fc:26:c2:ee:53:bb:4e:1c:43:cf:ad:fb: 2a:4c:42:14:87:12:1c:9b:22:58:22:4d:49:f8:0e:55:e1:74: 97:c7:f4:9b:cf:11:66:02:10:b4:68:76:b6:bd:db:f2:db:52: 60:cd:4f:0d:29:26:e7:e0:27:a6:bb:84:8b:dd:97:b5:82:22: d0:52:f0:37:ee:90:dd:8b:b6:d3:e7:cb:f2:94:52:9d:86:65: 5a:2d:5a:96:4f:e1:fc:34:76:00:22:71:1c:e7:82:82:1d:5f: fe:0e:34:85:ce:f8:36:0a:8c:01:11:bd:e3:cd:de:6c:f4:be: f4:ea:49:94:bb:dd:a9:ab:6b:ec:7c:44:bb:28:9f:bf:88:9b: 12:9b:33:af -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEivK31lAbBNo5XQTEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI5Mjc1ZjAtMzE5Ny00YTcwLThiMjctOGZmZjc1YjZl N2I5MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk YjliMzcyNjgtYjliOC00MTM0LWI4NzItYTY5ZGEwOWNmNGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKZT14D6QqnOQhe9M/kGpnsnWeXj5Q7l4Ljv 87taZgwhENytvLcIaYkt5wf14Uh+C/+jEWz558IA1DR3QZZkFSFPwW7XW+7hbW3b 3tj6a51fHXYvlST3VRH1X1O2/3WqIo8Z8cMJTKNHLsOUJcZcIqa1p/K7JvaH8+x+ Knhk7a3NtJHDU6izIPF/H5GDfkhZYQXUd1ZbCuBD4VyAwqAa3/smUL45/K3t53/6 NbXJsaMQNRf1BfIP5yhBcTZnvwU9ixXy7xsX1LJCnov0e1/K8azuxKwMqCKf9HcG 63T/G+/JfsSwFd8KDVvX+az6FX+h2581sd+JWweSKTW37i4ZNQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFtUK87jQjJJoZgNqp/TREzVP5bCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85Mjky NzVmMC0zMTk3LTRhNzAtOGIyNy04ZmZmNzViNmU3YjkvYTU3MzQ2MDgtZjYwZi0z MDAxLTlkOWQtNGYxZWFmZmEyYzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTI5Mjc1ZjAtMzE5Ny00YTcwLThi MjctOGZmZjc1YjZlN2I5LzkyOTI3NWYwLTMxOTctNGE3MC04YjI3LThmZmY3NWI2 ZTdiOS5jcmwwHwYDVR0jBBgwFoAUuwLRRPWRrG3cpwHktQVKbWklR1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MjkyNzVmMC0zMTk3LTRhNzAtOGIyNy04ZmZm NzViNmU3YjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbMwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBoAYmLn35m0jPL4OVgIQJQSTG60Az8XzbgVmGgeNrLxSTzhiM75vCL k81naMulOT3QVcmsRf/YTF7ci9Wh6Q+shG8q6Mh+yeKqfFcO6QHWFdtFAKMELWT+ yd8z+ZcB2IMWUJx6g8cHxS4D9ZaBC8tLuHf8JsLuU7tOHEPPrfsqTEIUhxIcmyJY Ik1J+A5V4XSXx/SbzxFmAhC0aHa2vdvy21JgzU8NKSbn4Cemu4SL3Ze1giLQUvA3 7pDdi7bT58vylFKdhmVaLVqWT+H8NHYAInEc54KCHV/+DjSFzvg2CowBEb3jzd5s 9L706kmUu92pq2vsfES7KJ+/iJsSmzOv -----END CERTIFICATE-----Generated at Sat Apr 12 15:20:11 2025 by rpki-client