$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/aaa241b2-0e20-3965-af75-6d9f126290e3.roa File: aaa241b2-0e20-3965-af75-6d9f126290e3.roa (raw, json) Hash identifier: TQaYiqB4wOSXwwQIuOJX2nxHLf1Alxic6AcgzgQ9BEM= Subject key identifier: E0:40:55:7E:76:E1:9E:37:D9:BF:E7:64:A6:3D:13:FD:F6:8C:F0:52 Certificate issuer: /CN=01586a37-c709-480e-ac0d-b07d855c615b Certificate serial: 010D0C9F43285848F4F6A11B919AF4552D0E19EC Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/aaa241b2-0e20-3965-af75-6d9f126290e3.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 207990 IP address blocks: 2600:2900::/30 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:a1:1b:91:9a:f4:55:2d:0e:19:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=fcb36e44-ff41-436a-b397-22f018c589de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fc:75:1c:99:5b:04:e8:32:c0:c2:de:34:2f: ef:70:19:92:55:cc:ce:bd:89:eb:39:df:ad:e2:6f: b7:e5:24:eb:d5:18:a5:58:3a:00:57:ba:64:ba:94: 6a:e0:2d:fb:43:e1:32:f8:d3:09:eb:ab:08:58:39: 50:e0:a3:ab:b6:da:2e:2b:b3:aa:e0:ff:9e:fe:f0: 94:58:2b:1d:ae:50:7e:07:7c:78:c9:2e:0b:27:51: 36:f3:05:e1:ed:ae:67:b8:79:fe:3f:1b:79:cf:24: f9:7e:b6:c9:e3:98:5e:16:af:1e:fc:42:43:84:fc: c2:0c:f3:e7:31:ca:a9:5e:92:9e:bc:c3:ee:f8:6b: 37:d7:c2:71:ba:78:89:2b:dd:da:e2:54:17:b7:22: 78:26:02:c0:f2:93:2a:b1:f3:11:eb:ae:cf:02:63: dc:d2:63:10:21:15:35:be:c9:95:cd:53:bb:04:3f: e5:6a:71:d3:44:9c:94:37:bf:fe:d8:5c:1c:92:4b: d1:df:a3:55:58:3a:c8:37:3d:4b:2c:0b:e1:56:f4: 2e:1b:32:aa:6b:1e:d7:1f:5f:1b:cc:da:92:31:31: 0e:0c:62:2f:b4:23:60:f9:f6:89:66:61:a0:07:5e: 6d:b8:83:f7:ff:8e:e6:59:ee:9e:60:1e:23:62:52: b0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:40:55:7E:76:E1:9E:37:D9:BF:E7:64:A6:3D:13:FD:F6:8C:F0:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/aaa241b2-0e20-3965-af75-6d9f126290e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl X509v3 Authority Key Identifier: keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer sbgp-ipAddrBlock: critical IPv6: 2600:2900::/30 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:93:2c:b8:7d:db:24:87:bb:86:cb:bd:d1:22:41:69:0e:7a: 47:63:c2:b7:93:4d:bb:90:50:fa:22:00:ea:89:65:23:0a:00: ab:47:f1:d0:bb:0f:a9:9b:3e:ad:ba:2f:49:a5:41:58:d4:cd: 0d:e8:c2:a8:34:26:f4:08:ea:57:63:ef:02:c7:ec:1a:9b:3c: 1a:7c:cd:ab:7e:45:28:cc:70:e4:18:2b:fb:46:24:91:d9:7a: 5e:0f:96:09:c9:b1:80:b7:42:36:5c:8b:10:2d:fe:ac:ba:ee: 88:dd:3e:7b:9f:f4:99:79:7d:39:47:25:9c:96:62:de:46:59: bd:32:f6:58:75:a8:b2:8d:13:5d:d6:21:b3:94:b6:df:6a:98: 1b:9e:8e:95:08:95:bd:00:fa:3f:d4:30:e8:cd:f5:c7:7a:7a: 69:f8:2b:33:39:40:ed:b9:5c:45:74:cd:2e:92:9a:90:0f:9d: 68:ad:08:bd:f5:6f:bb:8e:96:cd:c0:a3:6f:71:fb:50:40:c3: 09:3e:0e:e9:48:ab:6a:03:2e:67:92:61:e1:c8:6a:8c:75:44: d3:5f:fb:d7:7e:ad:61:da:fc:c8:68:b7:07:f0:c0:3f:b4:c8: fa:0e:b0:b5:a2:96:c3:ff:46:11:88:13:1d:79:a9:d6:fc:32: 60:ae:64:f2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEj09qEbkZr0VS0OGewwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2 MTViMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZmNiMzZlNDQtZmY0MS00MzZhLWIzOTctMjJmMDE4YzU4OWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Px1HJlbBOgywMLeNC/vcBmSVczOvYnrOd+t 4m+35STr1RilWDoAV7pkupRq4C37Q+Ey+NMJ66sIWDlQ4KOrttouK7Oq4P+e/vCU WCsdrlB+B3x4yS4LJ1E28wXh7a5nuHn+Pxt5zyT5frbJ45heFq8e/EJDhPzCDPPn McqpXpKevMPu+Gs318JxuniJK93a4lQXtyJ4JgLA8pMqsfMR667PAmPc0mMQIRU1 vsmVzVO7BD/lanHTRJyUN7/+2FwckkvR36NVWDrINz1LLAvhVvQuGzKqax7XH18b zNqSMTEODGIvtCNg+faJZmGgB15tuIP3/47mWe6eYB4jYlKw0wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOBAVX524Z432b/nZKY9E/32jPBSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4 NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvYWFhMjQxYjItMGUyMC0z OTY1LWFmNzUtNmQ5ZjEyNjI5MGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDE1ODZhMzctYzcwOS00ODBlLWFj MGQtYjA3ZDg1NWM2MTViLzAxNTg2YTM3LWM3MDktNDgwZS1hYzBkLWIwN2Q4NTVj NjE1Yi5jcmwwHwYDVR0jBBgwFoAUQLhpP8kUn1wre/qIuMf/YjLrm6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdk ODU1YzYxNWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCJgApADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCrkyy4fdskh7uGy73RIkFpDnpHY8K3k027kFD6IgDqiWUjCgCrR/HQ uw+pmz6tui9JpUFY1M0N6MKoNCb0COpXY+8Cx+wamzwafM2rfkUozHDkGCv7RiSR 2XpeD5YJybGAt0I2XIsQLf6suu6I3T57n/SZeX05RyWclmLeRlm9MvZYdaiyjRNd 1iGzlLbfapgbno6VCJW9APo/1DDozfXHenpp+CszOUDtuVxFdM0ukpqQD51orQi9 9W+7jpbNwKNvcftQQMMJPg7pSKtqAy5nkmHhyGqMdUTTX/vXfq1h2vzIaLcH8MA/ tMj6DrC1opbD/0YRiBMdeanW/DJgrmTy -----END CERTIFICATE-----Generated at Fri Apr 11 22:49:54 2025 by rpki-client