$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/309f777a-2676-330c-b1ac-45f416a2de90.roa File: 309f777a-2676-330c-b1ac-45f416a2de90.roa (raw, json) Hash identifier: A27CsRFczEdTtVpP4HcmsRRrX0SvZLcloIxhQPwQDO0= Subject key identifier: FD:0F:07:67:07:6A:A2:4E:E6:6B:F7:FB:A8:A7:30:40:FC:81:CD:96 Certificate issuer: /CN=06795d2e-ca43-4b22-8995-31898670bf14 Certificate serial: 010D0C9F4328584917DC302D3C8E25C37BE7EC00 Authority key identifier: C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/309f777a-2676-330c-b1ac-45f416a2de90.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 396982 IP address blocks: 2605:ce40:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:30:2d:3c:8e:25:c3:7b:e7:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06795d2e-ca43-4b22-8995-31898670bf14 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=3f554063-1564-4f35-8f48-93806aef89c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:76:7d:f0:ce:fc:e8:e4:5b:f5:3b:dc:f9:e2: eb:3f:34:74:e4:ce:bc:61:b0:8c:06:45:36:c0:57: 0d:41:f0:e9:a9:47:27:06:4e:cb:64:83:2e:35:a4: 0d:d5:ef:98:30:69:90:aa:9f:1b:ce:e3:dd:fc:6c: 47:73:05:e1:bc:5c:5f:ec:c7:92:4c:25:54:64:3c: f8:3e:f2:c4:a2:05:5d:cb:27:41:6e:d4:f3:6f:8d: e1:01:1d:15:22:5e:6e:de:23:24:33:20:69:8d:b6: 5b:7a:ce:02:f9:63:f2:bc:af:be:f9:c4:0b:6e:29: 49:83:04:55:f3:ac:40:f1:1f:cc:c7:33:94:5d:21: 3e:12:b4:19:8d:50:93:16:59:ad:e3:71:80:47:92: d8:15:e2:8d:ba:d3:dc:90:81:5d:90:60:1b:e2:86: c6:02:c6:c7:10:6b:b3:df:99:f7:5f:50:10:60:87: f5:04:c5:f0:d4:18:d2:83:02:b5:73:3a:d5:1c:a1: 3e:46:21:11:b8:50:4a:75:3e:8a:19:da:8c:27:42: ef:49:6c:96:45:6e:fc:f1:fc:c0:f8:f4:01:3f:2d: 28:91:65:11:05:e8:a9:ef:ba:a9:96:ba:43:85:f6: 99:20:6f:d9:4e:08:35:ba:b3:1d:4a:db:a2:a4:6e: 72:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0F:07:67:07:6A:A2:4E:E6:6B:F7:FB:A8:A7:30:40:FC:81:CD:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/309f777a-2676-330c-b1ac-45f416a2de90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl X509v3 Authority Key Identifier: keyid:C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer sbgp-ipAddrBlock: critical IPv6: 2605:ce40:a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:c3:db:f2:07:5c:21:10:31:61:dd:6b:3f:cd:88:9e:7a:0a: fd:34:3f:6f:da:9e:b1:12:14:c8:93:5d:2d:21:1f:cd:49:11: 17:11:6c:fe:f4:3c:96:b1:a2:eb:91:c6:f0:56:58:80:12:46: 39:75:3d:81:bc:34:37:8a:5d:c6:79:00:29:8e:be:54:8f:0e: 5c:31:6a:c8:d2:9c:96:54:73:46:6b:37:17:e5:ca:09:3b:5f: 0c:6c:bd:d6:d3:02:83:45:3a:eb:c8:71:48:e7:61:08:38:16: 7d:79:a1:28:cc:0d:bd:40:95:e3:b7:bf:5f:86:2d:1b:e2:de: d1:d5:c3:7f:19:cc:ca:6c:f1:b9:ba:3c:82:c4:17:e2:67:7c: 34:c1:98:2b:7a:77:e2:03:0c:8e:cd:e1:12:9f:8c:f9:14:ba: 64:61:41:30:0e:5b:be:94:55:86:5c:fe:75:96:a2:36:96:90: 96:84:bc:62:d7:96:60:8b:d1:f2:1c:4f:aa:e7:0d:c2:84:1e: 83:95:b8:56:63:eb:34:da:e9:95:55:c3:fc:bd:99:a7:df:75: 7b:cb:8d:41:b8:3d:6c:42:02:42:bf:2e:fa:35:4c:8b:26:ef: 89:f2:59:cc:32:e4:74:32:c0:83:7c:8e:98:31:9e:65:8d:c7: 01:1a:0b:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkX3DAtPI4lw3vn7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY3OTVkMmUtY2E0My00YjIyLTg5OTUtMzE4OTg2NzBi ZjE0MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk M2Y1NTQwNjMtMTU2NC00ZjM1LThmNDgtOTM4MDZhZWY4OWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HZ98M786ORb9Tvc+eLrPzR05M68YbCMBkU2 wFcNQfDpqUcnBk7LZIMuNaQN1e+YMGmQqp8bzuPd/GxHcwXhvFxf7MeSTCVUZDz4 PvLEogVdyydBbtTzb43hAR0VIl5u3iMkMyBpjbZbes4C+WPyvK+++cQLbilJgwRV 86xA8R/MxzOUXSE+ErQZjVCTFlmt43GAR5LYFeKNutPckIFdkGAb4obGAsbHEGuz 35n3X1AQYIf1BMXw1BjSgwK1czrVHKE+RiERuFBKdT6KGdqMJ0LvSWyWRW788fzA +PQBPy0okWURBeip77qplrpDhfaZIG/ZTgg1urMdStuipG5yJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP0PB2cHaqJO5mv3+6inMED8gc2WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNjc5 NWQyZS1jYTQzLTRiMjItODk5NS0zMTg5ODY3MGJmMTQvMzA5Zjc3N2EtMjY3Ni0z MzBjLWIxYWMtNDVmNDE2YTJkZTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDY3OTVkMmUtY2E0My00YjIyLTg5 OTUtMzE4OTg2NzBiZjE0LzA2Nzk1ZDJlLWNhNDMtNGIyMi04OTk1LTMxODk4Njcw YmYxNC5jcmwwHwYDVR0jBBgwFoAUyI/zyCB542XU7+tGAEBbLEdi/iMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNjc5NWQyZS1jYTQzLTRiMjItODk5NS0zMTg5 ODY3MGJmMTQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgXOQAAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGXD2/IHXCEQMWHdaz/NiJ56Cv00P2/anrESFMiTXS0hH81JERcR bP70PJaxouuRxvBWWIASRjl1PYG8NDeKXcZ5ACmOvlSPDlwxasjSnJZUc0ZrNxfl ygk7XwxsvdbTAoNFOuvIcUjnYQg4Fn15oSjMDb1AleO3v1+GLRvi3tHVw38ZzMps 8bm6PILEF+JnfDTBmCt6d+IDDI7N4RKfjPkUumRhQTAOW76UVYZc/nWWojaWkJaE vGLXlmCL0fIcT6rnDcKEHoOVuFZj6zTa6ZVVw/y9maffdXvLjUG4PWxCAkK/Lvo1 TIsm74nyWcwy5HQywIN8jpgxnmWNxwEaC1Q= -----END CERTIFICATE-----Generated at Fri Mar 14 10:37:56 2025 by rpki-client