$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/6df6c3fc-8bb6-3646-ae2b-3597c65054d4.roa File: 6df6c3fc-8bb6-3646-ae2b-3597c65054d4.roa (raw, json) Hash identifier: mEPM76I8T6sb0bgGVCL+ld0OYZtLsKqi95EA7G0a9KA= Subject key identifier: B2:09:45:99:35:71:C5:E7:33:51:B0:DA:03:FC:8D:E8:71:47:68:7E Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Certificate serial: 010D0C9F432858492CAE77DD0CCF56388FC8CB80 Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/6df6c3fc-8bb6-3646-ae2b-3597c65054d4.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 394354 IP address blocks: 2620:10a:801c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:77:dd:0c:cf:56:38:8f:c8:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=b8cc8a9a-9a90-4dcd-ac07-338674cb3825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1d:b5:a7:cc:36:39:06:02:1f:26:6c:84:ff: 5b:6d:d3:58:ca:0c:fd:11:7b:43:a6:ed:f5:06:55: 50:40:b0:58:a1:91:40:11:6a:6d:40:ca:99:b4:71: cc:80:18:16:e1:78:78:34:4b:74:17:00:fc:b1:dc: e7:64:8c:80:d2:86:2e:49:1a:15:0a:8b:56:69:84: 85:f1:e3:26:72:13:e9:a1:61:3a:50:68:ab:cb:db: 13:26:dd:48:02:b8:45:b3:20:5d:6a:48:25:43:04: 50:74:ab:5f:e2:46:5f:a9:81:0d:44:68:6c:e2:07: 68:cb:c6:7b:67:eb:97:e2:e1:b9:8e:b3:d9:ce:f2: b2:8f:54:da:cf:ec:e1:6a:3f:80:1e:10:86:51:11: c9:38:27:f4:38:e8:44:d7:0c:15:41:81:c8:42:66: 20:4b:31:8b:57:df:95:9e:ba:59:8d:b6:61:0d:a0: 97:c8:0d:9b:aa:0d:8e:17:19:2d:b9:ed:16:ea:5b: 66:74:05:16:9e:01:37:0d:5f:b7:58:d3:bb:89:66: 37:b9:1a:73:2d:d8:33:da:55:cb:5f:37:03:a8:47: 9c:7d:cb:46:a4:2a:70:d4:e9:d7:da:9e:15:a7:9b: 24:8a:7d:83:d1:88:5a:b2:bb:59:51:63:56:b5:bf: b7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:09:45:99:35:71:C5:E7:33:51:B0:DA:03:FC:8D:E8:71:47:68:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/6df6c3fc-8bb6-3646-ae2b-3597c65054d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl X509v3 Authority Key Identifier: keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer sbgp-ipAddrBlock: critical IPv6: 2620:10a:801c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:8e:62:fe:3c:c2:cf:60:96:b2:34:39:92:89:e6:15:9b:4c: 7c:a8:6f:2f:67:29:45:29:df:db:d8:72:23:c0:46:be:36:43: e7:0e:d3:00:d6:62:1c:15:54:9d:03:90:2a:d2:78:f6:59:43: 45:8b:67:38:3e:9d:04:2f:45:6d:aa:de:b0:79:f5:68:dc:c6: a5:a6:23:d0:6d:36:6c:40:69:97:b0:5f:05:fd:31:bd:8a:88: c1:86:eb:41:77:99:3e:68:f6:34:c6:2b:19:00:73:4b:6c:12: e1:77:dc:7b:37:89:3e:fa:03:67:36:0a:57:f7:e4:73:14:7d: 46:fd:a5:4d:e0:e4:1d:0d:81:5f:c6:f3:78:f5:cd:d1:98:0e: 3d:13:50:ee:98:68:04:bf:8d:1f:99:c4:13:71:69:b4:db:b8: 23:87:89:7e:68:63:23:27:ec:70:1f:dd:8d:6b:13:87:a7:48: 2b:02:22:94:f6:85:0f:3c:c8:5c:d2:54:a5:f6:60:2e:b5:19: 56:15:fd:bd:f7:ae:63:12:14:4c:3f:3f:bc:52:e1:08:6a:74: 6d:c4:8c:63:64:e5:f4:8c:b1:c5:be:87:4e:cd:4e:9a:85:3a: 7f:52:73:70:e3:7c:0d:5c:5e:8f:79:97:cc:c1:c6:c1:97:fd: 80:4b:4e:1c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEksrnfdDM9WOI/Iy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJjNjA0ZGUtYWMyYi00OTIxLWI2MDEtYTJjOTc2YWIx OGU4MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YjhjYzhhOWEtOWE5MC00ZGNkLWFjMDctMzM4Njc0Y2IzODI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR21p8w2OQYCHyZshP9bbdNYygz9EXtDpu31 BlVQQLBYoZFAEWptQMqZtHHMgBgW4Xh4NEt0FwD8sdznZIyA0oYuSRoVCotWaYSF 8eMmchPpoWE6UGiry9sTJt1IArhFsyBdakglQwRQdKtf4kZfqYENRGhs4gdoy8Z7 Z+uX4uG5jrPZzvKyj1Taz+zhaj+AHhCGURHJOCf0OOhE1wwVQYHIQmYgSzGLV9+V nrpZjbZhDaCXyA2bqg2OFxktue0W6ltmdAUWngE3DV+3WNO7iWY3uRpzLdgz2lXL XzcDqEecfctGpCpw1OnX2p4Vp5skin2D0YhasrtZUWNWtb+3GQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLIJRZk1ccXnM1Gw2gP8jehxR2h+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2 MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5NzZhYjE4ZTgvNmRmNmMzZmMtOGJiNi0z NjQ2LWFlMmItMzU5N2M2NTA1NGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGJjNjA0ZGUtYWMyYi00OTIxLWI2 MDEtYTJjOTc2YWIxOGU4LzRiYzYwNGRlLWFjMmItNDkyMS1iNjAxLWEyYzk3NmFi MThlOC5jcmwwHwYDVR0jBBgwFoAUXezCHp0HnbEJciCnXQk9+uP8rEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YmM2MDRkZS1hYzJiLTQ5MjEtYjYwMS1hMmM5 NzZhYjE4ZTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABCoAc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGCOYv48ws9glrI0OZKJ5hWbTHyoby9nKUUp39vYciPARr42Q+cO 0wDWYhwVVJ0DkCrSePZZQ0WLZzg+nQQvRW2q3rB59WjcxqWmI9BtNmxAaZewXwX9 Mb2KiMGG60F3mT5o9jTGKxkAc0tsEuF33Hs3iT76A2c2Clf35HMUfUb9pU3g5B0N gV/G83j1zdGYDj0TUO6YaAS/jR+ZxBNxabTbuCOHiX5oYyMn7HAf3Y1rE4enSCsC IpT2hQ88yFzSVKX2YC61GVYV/b33rmMSFEw/P7xS4QhqdG3EjGNk5fSMscW+h07N TpqFOn9Sc3DjfA1cXo95l8zBxsGX/YBLThw= -----END CERTIFICATE-----Generated at Fri Apr 11 21:27:51 2025 by rpki-client