$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/8d050d66-0e71-325e-a47b-b0b94e6ac58e.roa File: 8d050d66-0e71-325e-a47b-b0b94e6ac58e.roa (raw, json) Hash identifier: 5DssPzercf+pgfElxVyCNn4eDj7eBu5IWXUJRD07BgE= Subject key identifier: 69:7D:6D:97:F0:72:67:E7:7B:AE:67:86:08:76:45:D6:35:B7:12:33 Certificate issuer: /CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Certificate serial: 010D0C9F43285848F4F699F71D655622A443D000 Authority key identifier: C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/8d050d66-0e71-325e-a47b-b0b94e6ac58e.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 64236 IP address blocks: 2604:2d00::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:99:f7:1d:65:56:22:a4:43:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=64c759dc-b068-4032-931a-1d514bdae495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e8:49:22:42:de:88:2e:5b:e8:be:06:06:ab: c9:1b:f2:5c:ec:c7:c8:a0:ef:c2:c6:24:77:b5:3f: 2a:82:9a:d6:c0:40:eb:91:64:92:b5:32:b2:53:a8: 8e:94:85:d9:47:f7:22:1a:62:4a:5b:35:df:24:b8: de:ce:58:10:cd:71:31:89:cd:22:63:b0:93:96:c5: 7c:1e:13:4d:7a:ba:52:60:2a:31:96:3e:32:e4:3b: 4f:b4:85:47:7c:2e:4d:a8:34:c6:7d:a9:c2:ff:27: 1e:20:83:b2:82:85:c8:11:d5:3f:c4:8d:f5:6d:c2: be:ac:ae:98:a4:69:f6:ff:88:4a:20:e2:2e:b6:eb: 29:27:64:c4:dd:dc:cb:75:ee:8f:5d:9c:02:47:d0: 5a:d0:f9:67:20:39:6b:73:b6:63:95:75:7f:aa:77: 4e:7a:96:54:a7:2a:a6:b8:44:8c:5d:cb:c4:e9:19: a8:c2:db:66:c9:12:de:16:e7:4a:7c:f9:b7:21:b4: a9:7c:35:bf:bb:cc:b7:a1:61:f5:98:3b:b0:ae:76: 2f:dc:ca:62:1d:29:e9:cb:71:e4:f8:f8:e9:65:7d: e6:3d:65:c0:0a:e1:7a:e8:44:68:69:09:4f:4a:22: 51:70:96:a8:05:ab:a9:c7:35:51:b0:fc:19:13:0a: 6d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:7D:6D:97:F0:72:67:E7:7B:AE:67:86:08:76:45:D6:35:B7:12:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/8d050d66-0e71-325e-a47b-b0b94e6ac58e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.crl X509v3 Authority Key Identifier: keyid:C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d00::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:59:c0:5f:ff:37:34:3a:82:51:e4:bb:4a:7a:63:82:48:ae: 07:2b:85:8a:35:28:73:a4:09:ed:1d:6a:42:a0:75:b3:d4:75: 10:39:d9:6b:08:28:63:df:1e:f8:d8:13:42:5a:d8:7e:cc:fa: 64:b9:3c:31:77:ff:32:11:d2:5b:18:f8:3d:c2:61:03:a8:52: 45:50:a1:ae:4c:31:b8:b5:c8:fa:c9:70:d3:a2:9e:69:42:70: 26:ed:db:8a:12:00:30:0d:7e:80:87:d8:42:97:02:64:7a:2e: be:53:71:b3:4d:ed:bb:01:b0:cc:3d:33:cf:72:ef:76:3c:53: 2c:23:f6:60:de:41:4d:20:81:05:a3:bc:14:99:ae:6d:23:47: 1d:df:b8:22:3e:68:6a:1b:b5:27:47:b0:49:5c:d0:48:ed:7c: 56:f7:e4:f6:12:d1:a0:ff:03:84:f6:ec:be:4a:0b:bf:1d:1e: d7:c6:e4:a8:47:f7:87:85:65:5c:d7:4e:6c:81:56:65:4c:5b: 8c:35:27:be:bb:0f:3e:ee:83:5b:3d:e6:08:5b:29:b1:91:93: 7d:c4:8c:3f:9e:3f:ff:56:de:5e:da:63:78:d3:2e:e3:0e:94: bc:86:8c:b7:26:ba:72:06:78:82:64:aa:49:3d:d0:d0:10:c9: f0:ac:bd:70 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEj09pn3HWVWIqRD0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzViZTQwNjgtZjdlNS00MDRiLTk2OTMtZGNmZjRiMmU4 Zjk1MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NjRjNzU5ZGMtYjA2OC00MDMyLTkzMWEtMWQ1MTRiZGFlNDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOhJIkLeiC5b6L4GBqvJG/Jc7MfIoO/CxiR3 tT8qgprWwEDrkWSStTKyU6iOlIXZR/ciGmJKWzXfJLjezlgQzXExic0iY7CTlsV8 HhNNerpSYCoxlj4y5DtPtIVHfC5NqDTGfanC/yceIIOygoXIEdU/xI31bcK+rK6Y pGn2/4hKIOIutuspJ2TE3dzLde6PXZwCR9Ba0PlnIDlrc7ZjlXV/qndOepZUpyqm uESMXcvE6RmowttmyRLeFudKfPm3IbSpfDW/u8y3oWH1mDuwrnYv3MpiHSnpy3Hk +PjpZX3mPWXACuF66ERoaQlPSiJRcJaoBaupxzVRsPwZEwptpwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGl9bZfwcmfne65nhgh2RdY1txIzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJl NDA2OC1mN2U1LTQwNGItOTY5My1kY2ZmNGIyZThmOTUvOGQwNTBkNjYtMGU3MS0z MjVlLWE0N2ItYjBiOTRlNmFjNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzViZTQwNjgtZjdlNS00MDRiLTk2 OTMtZGNmZjRiMmU4Zjk1LzM1YmU0MDY4LWY3ZTUtNDA0Yi05NjkzLWRjZmY0YjJl OGY5NS5jcmwwHwYDVR0jBBgwFoAUx5tNJUqL+1JPO26W0tgCYtGpB88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zNWJlNDA2OC1mN2U1LTQwNGItOTY5My1kY2Zm NGIyZThmOTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgQtAAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAwlnAX/83NDqCUeS7SnpjgkiuByuFijUoc6QJ7R1qQqB1s9R1EDnZ awgoY98e+NgTQlrYfsz6ZLk8MXf/MhHSWxj4PcJhA6hSRVChrkwxuLXI+slw06Ke aUJwJu3bihIAMA1+gIfYQpcCZHouvlNxs03tuwGwzD0zz3LvdjxTLCP2YN5BTSCB BaO8FJmubSNHHd+4Ij5oahu1J0ewSVzQSO18Vvfk9hLRoP8DhPbsvkoLvx0e18bk qEf3h4VlXNdObIFWZUxbjDUnvrsPPu6DWz3mCFspsZGTfcSMP54//1beXtpjeNMu 4w6UvIaMtya6cgZ4gmSqST3Q0BDJ8Ky9cA== -----END CERTIFICATE-----Generated at Fri Mar 14 11:27:54 2025 by rpki-client