$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/59a5be5e-265d-3a86-995d-2d74371e9b02.roa File: 59a5be5e-265d-3a86-995d-2d74371e9b02.roa (raw, json) Hash identifier: olsDRa1JKQ6asD2KYH0bvQfhLLrm853vorpcASUIyTE= Subject key identifier: 35:68:73:81:3B:5E:91:8F:20:CE:74:A6:A2:E7:E9:B8:23:D3:98:7F Certificate issuer: /CN=206b65c6-b880-42a7-b728-a37b15fc236d Certificate serial: 010D0C9F43285848EF61586F93476A5C27381B00 Authority key identifier: 29:55:7C:0C:EE:8D:18:B1:3F:85:BC:85:D7:23:36:87:E3:1F:33:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/59a5be5e-265d-3a86-995d-2d74371e9b02.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 6360 IP address blocks: 2607:f278::/32 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/206b65c6-b880-42a7-b728-a37b15fc236d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/206b65c6-b880-42a7-b728-a37b15fc236d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:58:6f:93:47:6a:5c:27:38:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206b65c6-b880-42a7-b728-a37b15fc236d Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=3bf11640-f081-467c-9ba9-8774a3c12864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:73:fd:b9:fc:e7:79:1d:8c:61:da:e6:43:83: 82:5f:63:f0:aa:51:c5:52:c2:ef:de:bf:a5:73:bd: 4a:95:a1:7e:2b:0a:33:77:d4:a3:a4:82:94:04:dd: 6f:92:a8:81:66:97:d9:5d:c9:4d:8e:c3:29:b8:be: 30:c2:d4:4c:cc:a6:8d:1b:95:a3:8c:63:8b:05:a2: 1a:69:27:d5:48:48:7f:f7:14:b8:ef:66:d2:23:61: 47:73:b5:67:bd:03:4c:82:36:59:25:6c:89:db:70: b2:70:de:1a:ec:8b:6d:2d:a7:53:11:a3:67:70:b4: 58:4b:d0:c7:c4:26:85:9b:68:26:ad:52:29:f3:b6: 10:8c:89:ef:b6:00:e1:2a:91:94:90:63:e7:04:52: e4:85:77:40:c8:7d:14:af:ef:c8:24:c6:15:23:7a: ab:1b:e0:e6:c4:55:1c:18:f5:12:71:4a:2d:30:e1: 04:11:eb:ba:88:ed:b7:6e:98:49:3a:5c:1f:41:4b: 16:25:e9:43:f2:b8:62:99:06:88:ec:60:53:7c:bf: 19:21:36:d0:02:4a:9d:89:a1:60:3d:61:bd:d3:5f: 94:75:94:61:f8:1a:ce:50:52:4e:52:11:ab:b0:c2: 77:87:6c:01:63:dc:85:ee:ab:7b:ce:33:2d:55:8f: 77:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:68:73:81:3B:5E:91:8F:20:CE:74:A6:A2:E7:E9:B8:23:D3:98:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/59a5be5e-265d-3a86-995d-2d74371e9b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d/206b65c6-b880-42a7-b728-a37b15fc236d.crl X509v3 Authority Key Identifier: keyid:29:55:7C:0C:EE:8D:18:B1:3F:85:BC:85:D7:23:36:87:E3:1F:33:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/206b65c6-b880-42a7-b728-a37b15fc236d.cer sbgp-ipAddrBlock: critical IPv6: 2607:f278::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:86:eb:3a:82:f9:e1:5a:b0:84:09:f0:83:cb:73:ce:1e:c0: c3:2e:c2:ac:f6:0c:07:bf:6f:0b:b3:67:43:c2:30:56:6f:73: 61:de:01:7b:4b:a2:b6:50:94:31:74:be:e4:cd:ff:d9:e5:31: 59:85:ec:0c:2d:2a:30:b6:e1:f2:d9:98:8b:aa:54:59:16:23: 45:c0:2c:a3:a6:9f:41:da:87:14:dc:6f:4e:2e:df:fa:e4:1d: 1f:43:27:87:a9:c5:27:16:e2:10:cc:38:74:d3:9c:da:3a:85: e1:dc:8e:4b:be:d3:b0:39:d2:99:1f:21:ce:51:8b:7a:02:3d: bb:cc:9c:a4:4b:02:ae:37:73:b6:ad:3f:06:ed:66:5a:b1:de: d3:5c:ec:78:54:6d:e9:d4:ce:40:be:19:88:a6:c2:17:e8:24: 36:35:b0:ad:9a:7a:a5:6c:2a:6f:e4:aa:36:0f:3e:02:4a:ee: 48:36:97:f2:cf:10:e1:5f:95:1a:68:0a:60:9c:8c:d9:87:53: 52:b9:65:17:a5:0e:92:8d:29:2e:35:39:69:a5:92:7a:cc:79: 90:86:85:7d:f4:13:04:f7:4c:9e:2d:ef:1a:ed:07:3b:5f:67: 14:a2:39:88:49:6e:0d:19:de:4c:4a:25:9e:fa:41:b0:4a:b2: 30:5a:38:4d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjvYVhvk0dqXCc4GwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA2YjY1YzYtYjg4MC00MmE3LWI3MjgtYTM3YjE1ZmMy MzZkMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk M2JmMTE2NDAtZjA4MS00NjdjLTliYTktODc3NGEzYzEyODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXP9ufzneR2MYdrmQ4OCX2PwqlHFUsLv3r+l c71KlaF+Kwozd9SjpIKUBN1vkqiBZpfZXclNjsMpuL4wwtRMzKaNG5WjjGOLBaIa aSfVSEh/9xS472bSI2FHc7VnvQNMgjZZJWyJ23CycN4a7IttLadTEaNncLRYS9DH xCaFm2gmrVIp87YQjInvtgDhKpGUkGPnBFLkhXdAyH0Ur+/IJMYVI3qrG+DmxFUc GPUScUotMOEEEeu6iO23bphJOlwfQUsWJelD8rhimQaI7GBTfL8ZITbQAkqdiaFg PWG901+UdZRh+BrOUFJOUhGrsMJ3h2wBY9yF7qt7zjMtVY935wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDVoc4E7XpGPIM50pqLn6bgj05h/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDZi NjVjNi1iODgwLTQyYTctYjcyOC1hMzdiMTVmYzIzNmQvNTlhNWJlNWUtMjY1ZC0z YTg2LTk5NWQtMmQ3NDM3MWU5YjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA2YjY1YzYtYjg4MC00MmE3LWI3 MjgtYTM3YjE1ZmMyMzZkLzIwNmI2NWM2LWI4ODAtNDJhNy1iNzI4LWEzN2IxNWZj MjM2ZC5jcmwwHwYDVR0jBBgwFoAUKVV8DO6NGLE/hbyF1yM2h+MfMwQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDZiNjVjNi1iODgwLTQyYTctYjcyOC1hMzdi MTVmYzIzNmQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfyeDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCthus6gvnhWrCECfCDy3POHsDDLsKs9gwHv28Ls2dDwjBWb3Nh3gF7 S6K2UJQxdL7kzf/Z5TFZhewMLSowtuHy2ZiLqlRZFiNFwCyjpp9B2ocU3G9OLt/6 5B0fQyeHqcUnFuIQzDh005zaOoXh3I5LvtOwOdKZHyHOUYt6Aj27zJykSwKuN3O2 rT8G7WZasd7TXOx4VG3p1M5AvhmIpsIX6CQ2NbCtmnqlbCpv5Ko2Dz4CSu5INpfy zxDhX5UaaApgnIzZh1NSuWUXpQ6SjSkuNTlppZJ6zHmQhoV99BME90yeLe8a7Qc7 X2cUojmISW4NGd5MSiWe+kGwSrIwWjhN -----END CERTIFICATE-----Generated at Sun Apr 6 13:31:53 2025 by rpki-client