$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa File: 2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa (raw, json) Hash identifier: tIKGld3jdYdE+YTKjRXpLw/vG5+PlAXjGIFmHtzODTo= Subject key identifier: 46:DC:9B:E6:68:EB:5D:B2:B2:84:F7:D1:20:E4:8E:7E:E3:FF:E0:69 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F43285848E2D103167B637DAEF0A29580 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 46687 IP address blocks: 2606:e280::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:03:16:7b:63:7d:ae:f0:a2:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=e6c82e72-0e4e-4280-a770-8f23d665cabe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:17:9f:2c:b3:31:f3:2f:2e:52:e4:d5:bb:5d: fa:dc:c8:8b:a4:9f:ba:b9:95:bc:04:54:4d:c6:85: ef:8f:69:86:d7:c0:43:04:30:11:14:2f:09:9f:6e: 68:62:33:10:0e:7a:fa:78:91:23:4c:42:cf:2c:4f: 58:01:6c:eb:97:6e:89:c3:d8:79:4b:e7:41:77:a8: e1:0b:b9:aa:83:12:3a:c5:15:c1:fd:c2:c0:94:ef: 80:1e:2e:0d:80:ea:88:42:f8:22:14:f1:b9:36:f1: 51:f0:e1:ee:0d:27:96:8f:85:0e:36:70:84:eb:4c: 22:12:36:df:e9:87:13:c5:ad:07:b6:37:40:2f:ed: 10:8e:79:53:03:69:31:f7:2b:b8:4c:38:94:37:a8: 9f:77:80:05:82:be:6f:0c:d1:3d:3e:c8:f8:86:a2: 7c:da:1d:4d:16:7d:49:15:9c:83:6f:f0:c3:94:6c: 46:6e:63:7c:0a:77:fc:37:04:40:a0:8f:db:86:98: f7:7b:d0:1e:c6:d8:7e:3c:9a:74:06:b6:76:b1:a9: 71:b7:68:be:fa:a1:43:a1:96:4d:05:7c:5f:d2:d7: 45:75:d8:98:a9:ab:b2:e4:67:94:57:31:e2:9e:be: d4:1b:0b:72:8f:1d:f1:27:18:99:60:0d:8d:89:8c: a4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DC:9B:E6:68:EB:5D:B2:B2:84:F7:D1:20:E4:8E:7E:E3:FF:E0:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv6: 2606:e280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:41:ce:5b:94:e7:12:20:08:5a:5b:f8:97:e6:31:10:43:5b: 5b:f8:91:8b:1d:74:c6:0b:d3:51:c4:77:8f:70:f3:d9:25:6a: 85:ec:cf:02:60:74:e2:cd:0d:1a:4b:d9:01:77:39:19:46:c9: 3f:f0:4a:31:8f:38:2a:98:01:fb:c5:56:c7:bf:1a:1a:60:da: 7d:aa:06:ae:a2:18:48:7b:6f:0a:39:b9:e1:d2:6d:ed:3d:0a: fe:a9:f8:f8:69:13:4a:36:58:17:28:74:87:28:a6:5b:7f:dd: da:e5:8d:1f:33:2f:2b:bf:78:e0:22:ed:27:76:af:69:b7:1e: 5f:a4:c9:6e:2a:10:d6:af:82:bf:11:d3:bd:a3:90:36:75:ed: 68:12:41:ca:19:6f:b9:e0:b9:02:db:24:f8:53:f5:f3:38:c8: 10:05:30:bd:4a:f3:c3:68:c3:7a:96:16:57:3d:c7:bb:4d:53: 88:78:0c:60:f6:48:20:0e:a8:7b:bc:d9:3c:d9:5b:7d:02:c2: 9e:8a:fc:02:35:93:21:80:44:69:fd:15:5d:eb:fb:22:f0:17: 43:f6:24:93:3a:82:81:d8:c7:96:13:e3:6c:20:a6:a9:d5:18: 17:59:3d:d8:7b:77:d6:c9:8f:3a:0e:e2:8e:45:bb:0a:1b:79: 9a:fc:f5:ef -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEji0QMWe2N9rvCilYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk ZTZjODJlNzItMGU0ZS00MjgwLWE3NzAtOGYyM2Q2NjVjYWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BefLLMx8y8uUuTVu1363MiLpJ+6uZW8BFRN xoXvj2mG18BDBDARFC8Jn25oYjMQDnr6eJEjTELPLE9YAWzrl26Jw9h5S+dBd6jh C7mqgxI6xRXB/cLAlO+AHi4NgOqIQvgiFPG5NvFR8OHuDSeWj4UONnCE60wiEjbf 6YcTxa0HtjdAL+0QjnlTA2kx9yu4TDiUN6ifd4AFgr5vDNE9Psj4hqJ82h1NFn1J FZyDb/DDlGxGbmN8Cnf8NwRAoI/bhpj3e9Aexth+PJp0BrZ2salxt2i++qFDoZZN BXxf0tdFddiYqauy5GeUVzHinr7UGwtyjx3xJxiZYA2NiYykgwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEbcm+Zo612ysoT30SDkjn7j/+BpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvMjIxOWE1ZGQtZDY4NS0z ZTVmLWFkYTMtYTNlN2EwNWYyODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbigDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBqQc5blOcSIAhaW/iX5jEQQ1tb+JGLHXTGC9NRxHePcPPZJWqF7M8C YHTizQ0aS9kBdzkZRsk/8EoxjzgqmAH7xVbHvxoaYNp9qgauohhIe28KObnh0m3t PQr+qfj4aRNKNlgXKHSHKKZbf93a5Y0fMy8rv3jgIu0ndq9ptx5fpMluKhDWr4K/ EdO9o5A2de1oEkHKGW+54LkC2yT4U/XzOMgQBTC9SvPDaMN6lhZXPce7TVOIeAxg 9kggDqh7vNk82Vt9AsKeivwCNZMhgERp/RVd6/si8BdD9iSTOoKB2MeWE+NsIKap 1RgXWT3Ye3fWyY86DuKORbsKG3ma/PXv -----END CERTIFICATE-----Generated at Sat Apr 12 15:03:23 2025 by rpki-client