$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/3d8645fc-35c8-35da-ac88-7a4e41c4bf61.roa File: 3d8645fc-35c8-35da-ac88-7a4e41c4bf61.roa (raw, json) Hash identifier: z79LW9w84fSr1rz/i558zm3Tlefaa4vg/ongf6QMGm4= Subject key identifier: 48:67:C2:BE:38:E1:43:DC:72:B2:85:43:7F:35:22:F7:ED:23:91:C2 Certificate issuer: /CN=1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f Certificate serial: 010D0C9F43285848EC9695BBCDA4F3CEDC4E6380 Authority key identifier: B7:57:F9:6B:5B:30:14:07:9A:7E:C9:8B:1D:DE:34:96:DD:EE:A8:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/3d8645fc-35c8-35da-ac88-7a4e41c4bf61.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 19518 IP address blocks: 2605:1500::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:95:bb:cd:a4:f3:ce:dc:4e:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=dae13e3a-51c3-4d98-887a-6fdb1baa3236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:69:78:05:12:64:99:d7:46:ec:01:59:58:e2: f9:1b:f0:4c:f7:75:ff:05:34:53:e5:8d:41:68:53: fb:2b:33:e8:88:fe:6b:36:0b:d8:03:94:70:90:46: ae:1c:b0:e7:ea:fa:fb:cb:c3:ff:88:e4:f8:14:f7: aa:9f:c3:9c:66:90:c6:7a:7b:8a:eb:91:d3:46:55: 0c:9e:a4:6a:41:e9:f4:4a:e5:30:fe:b4:2e:5c:d1: d1:78:65:59:84:c7:73:a7:65:2c:7d:78:bf:5d:c5: fa:92:e7:10:e4:96:ff:2f:90:fa:e8:88:30:a9:61: 12:37:7d:9d:1f:98:11:19:b9:94:fa:99:49:d5:e8: f4:0c:33:93:c2:76:74:da:32:9e:c6:d5:0a:25:04: fe:91:a0:20:e4:09:04:7e:63:f4:58:7a:db:52:49: 02:d4:45:ee:70:01:d6:87:6b:55:d1:9f:2a:1f:0b: 0a:0f:41:41:c4:66:70:cc:13:16:65:82:18:09:46: 8f:3c:c7:63:0c:78:c9:2f:05:5f:f4:19:d2:0c:e5: 43:aa:72:10:1c:0e:6f:72:14:bb:15:86:a6:27:8d: 6f:08:a5:31:0d:e8:b0:ed:e4:32:ad:3d:c2:4a:99: 59:8f:b0:5b:7e:ab:90:90:76:38:44:c5:45:f5:cd: 0c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:67:C2:BE:38:E1:43:DC:72:B2:85:43:7F:35:22:F7:ED:23:91:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/3d8645fc-35c8-35da-ac88-7a4e41c4bf61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.crl X509v3 Authority Key Identifier: keyid:B7:57:F9:6B:5B:30:14:07:9A:7E:C9:8B:1D:DE:34:96:DD:EE:A8:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer sbgp-ipAddrBlock: critical IPv6: 2605:1500::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:cc:36:68:a3:5f:ca:06:0d:da:b0:d8:7f:a1:64:7d:f5:33: ee:49:ce:0e:30:94:48:e4:16:f5:5c:a5:40:d9:b7:52:78:8e: 71:8b:7a:7a:c0:45:7e:87:24:e7:26:25:9d:c7:f2:1a:a3:2a: 04:9b:89:1c:c4:d8:bd:27:a7:25:83:d2:1d:32:d6:67:b4:f2: de:6b:82:85:54:4b:df:a4:f6:2c:dc:c1:29:25:7b:ce:43:a8: 95:3b:e5:70:77:2e:de:6b:67:25:51:60:ac:71:dd:3c:8d:96: 0f:29:bb:d8:6f:f8:48:e4:3c:f3:62:dd:3a:d0:42:16:74:6e: 5f:cd:1b:ff:2b:f9:6c:20:56:fd:81:d3:59:c0:37:6a:fb:b8: 7e:6e:ba:f2:52:4f:fb:89:c0:28:f5:a6:b6:a7:e7:39:52:bd: e2:07:33:98:14:b6:1a:28:1e:62:fa:23:d6:c6:94:45:a3:06: da:63:2c:25:b9:fc:5b:d1:bc:b9:99:ef:d4:52:86:f5:43:66: b0:39:1c:a0:e8:23:5f:6f:f5:d0:dc:fb:5c:6b:70:72:f1:7c: ea:e6:98:28:d2:6e:37:aa:08:e4:83:79:62:98:d4:01:e2:1e: 67:c3:56:08:69:63:74:77:65:3d:75:52:4f:5e:cb:80:39:aa: 1f:91:67:0a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjslpW7zaTzztxOY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJkOTViYjYtZjhlNi00ZDY2LThkN2ItZDVhMzQyYjM1 ODdmMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk ZGFlMTNlM2EtNTFjMy00ZDk4LTg4N2EtNmZkYjFiYWEzMjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWl4BRJkmddG7AFZWOL5G/BM93X/BTRT5Y1B aFP7KzPoiP5rNgvYA5RwkEauHLDn6vr7y8P/iOT4FPeqn8OcZpDGenuK65HTRlUM nqRqQen0SuUw/rQuXNHReGVZhMdzp2UsfXi/XcX6kucQ5Jb/L5D66IgwqWESN32d H5gRGbmU+plJ1ej0DDOTwnZ02jKextUKJQT+kaAg5AkEfmP0WHrbUkkC1EXucAHW h2tV0Z8qHwsKD0FBxGZwzBMWZYIYCUaPPMdjDHjJLwVf9BnSDOVDqnIQHA5vchS7 FYamJ41vCKUxDeiw7eQyrT3CSplZj7BbfquQkHY4RMVF9c0MZQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEhnwr444UPccrKFQ381IvftI5HCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYmQ5 NWJiNi1mOGU2LTRkNjYtOGQ3Yi1kNWEzNDJiMzU4N2YvM2Q4NjQ1ZmMtMzVjOC0z NWRhLWFjODgtN2E0ZTQxYzRiZjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWJkOTViYjYtZjhlNi00ZDY2LThk N2ItZDVhMzQyYjM1ODdmLzFiZDk1YmI2LWY4ZTYtNGQ2Ni04ZDdiLWQ1YTM0MmIz NTg3Zi5jcmwwHwYDVR0jBBgwFoAUt1f5a1swFAeafsmLHd40lt3uqFAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYmQ5NWJiNi1mOGU2LTRkNjYtOGQ3Yi1kNWEz NDJiMzU4N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUVADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBdzDZoo1/KBg3asNh/oWR99TPuSc4OMJRI5Bb1XKVA2bdSeI5xi3p6 wEV+hyTnJiWdx/IaoyoEm4kcxNi9J6clg9IdMtZntPLea4KFVEvfpPYs3MEpJXvO Q6iVO+Vwdy7ea2clUWCscd08jZYPKbvYb/hI5DzzYt060EIWdG5fzRv/K/lsIFb9 gdNZwDdq+7h+brryUk/7icAo9aa2p+c5Ur3iBzOYFLYaKB5i+iPWxpRFowbaYywl ufxb0by5me/UUob1Q2awORyg6CNfb/XQ3Ptca3By8Xzq5pgo0m43qgjkg3limNQB 4h5nw1YIaWN0d2U9dVJPXsuAOaofkWcK -----END CERTIFICATE-----Generated at Sat Apr 12 00:31:55 2025 by rpki-client