$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3/c941777b-4f01-3cf0-b2b2-6392b9825a72.roa File: c941777b-4f01-3cf0-b2b2-6392b9825a72.roa (raw, json) Hash identifier: nub1AwMKb/LUQvQMF65O+F/0M+3m/pz2raueDhXlBfE= Subject key identifier: 79:79:21:EA:26:13:F8:35:34:62:8F:A1:C9:44:21:A8:80:83:63:E1 Certificate issuer: /CN=4e5cccc9-30d7-416f-83cb-af13d1079fb3 Certificate serial: 010D0C9F43285848A29B50275D41BB696DFE0F80 Authority key identifier: A7:7D:99:20:83:4D:A0:3A:06:B7:F7:9A:D6:D7:9C:D5:69:9E:E0:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3/c941777b-4f01-3cf0-b2b2-6392b9825a72.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 397735 IP address blocks: 2606:3740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3/4e5cccc9-30d7-416f-83cb-af13d1079fb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3/4e5cccc9-30d7-416f-83cb-af13d1079fb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:50:27:5d:41:bb:69:6d:fe:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e5cccc9-30d7-416f-83cb-af13d1079fb3 Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=70b1482f-1a39-4205-a95c-f356fa396e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:87:29:79:5e:7d:90:bc:6e:5c:06:7a:fa:18: fa:ae:7b:72:45:cc:25:d2:20:bd:f2:b5:df:47:4d: ab:01:16:6f:1a:ba:69:da:c2:4a:c6:ce:bf:76:5b: a5:2b:34:09:14:65:d0:e7:63:c1:7b:f2:67:fe:4c: cb:4c:47:d7:ae:00:cc:f7:c7:6d:1b:bd:bf:e3:58: 48:1a:f4:38:5b:f7:2d:4a:e2:96:11:9e:c6:9b:52: b0:1b:cc:7b:5a:97:2e:2f:33:8f:64:9a:f8:ad:ba: 51:ed:6b:ee:9b:e9:a3:0d:cd:41:ba:63:c5:6d:78: 4e:7c:cc:27:07:84:31:10:c3:c0:0b:26:14:5f:c0: 58:cb:c3:1b:6e:33:17:6f:81:68:a5:46:d1:39:e8: 49:c0:39:92:de:90:41:b5:3b:d2:5c:9b:e0:7d:c6: 66:57:ba:df:f0:74:e1:6d:9c:63:7b:3e:eb:eb:c1: b7:2f:24:c7:ba:09:65:0a:a4:6c:1c:a3:b1:3b:be: d9:98:5b:a5:2e:ba:c6:31:12:cb:d9:a6:ed:af:e3: e4:22:f2:7f:a3:25:34:64:17:57:a4:82:ea:46:81: ad:78:ba:19:a3:33:53:bc:9e:cb:46:34:ef:8d:49: f7:5d:1e:53:07:ed:3f:8b:86:c8:d2:9f:48:82:8b: 5f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:79:21:EA:26:13:F8:35:34:62:8F:A1:C9:44:21:A8:80:83:63:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3/c941777b-4f01-3cf0-b2b2-6392b9825a72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3/4e5cccc9-30d7-416f-83cb-af13d1079fb3.crl X509v3 Authority Key Identifier: keyid:A7:7D:99:20:83:4D:A0:3A:06:B7:F7:9A:D6:D7:9C:D5:69:9E:E0:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3.cer sbgp-ipAddrBlock: critical IPv6: 2606:3740::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:a7:d1:90:a7:a9:b2:db:34:a8:ac:a3:ea:17:31:e0:5b:9f: 0f:61:0c:fe:5c:c8:6e:18:6d:89:e3:ad:42:42:62:72:63:a2: 7e:cc:c0:c7:e2:e1:89:32:21:02:fa:d1:1d:63:d1:f1:5e:0e: 5e:7d:a7:d4:94:e8:67:d5:90:df:d7:b3:4b:3a:02:e8:e0:7e: 4f:8d:dc:cf:6d:de:36:c1:63:fd:ac:88:61:10:50:9b:6a:ce: ef:59:b7:49:1c:e7:20:42:03:8e:88:2c:d6:8d:9a:32:8d:a7: 0d:ff:99:cb:98:ec:be:b5:a9:f5:9e:d4:db:59:5a:3f:cb:57: 15:27:2f:9b:03:77:32:42:4e:3b:86:e6:37:6c:5a:b7:c0:31: 4d:c9:78:1c:75:49:2c:05:67:bb:83:7e:e7:b3:67:3f:7d:46: 43:83:05:9c:f0:31:a1:98:1f:be:e6:31:ce:cc:1a:40:88:69: 36:5a:82:68:39:d1:73:bb:6f:67:b7:7a:c0:49:27:59:4c:a1: de:ae:cc:36:7d:b5:54:83:4e:50:cd:07:d3:08:70:84:c5:81: 4b:eb:9a:e8:4a:bc:33:ce:a4:18:aa:0b:22:41:d2:61:3b:45: a8:0c:2b:c8:7f:37:cb:e7:53:d1:57:07:be:fe:83:d2:28:05: 7d:a4:aa:d7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiim1AnXUG7aW3+D4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU1Y2NjYzktMzBkNy00MTZmLTgzY2ItYWYxM2QxMDc5 ZmIzMB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk NzBiMTQ4MmYtMWEzOS00MjA1LWE5NWMtZjM1NmZhMzk2ZTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIcpeV59kLxuXAZ6+hj6rntyRcwl0iC98rXf R02rARZvGrpp2sJKxs6/dlulKzQJFGXQ52PBe/Jn/kzLTEfXrgDM98dtG72/41hI GvQ4W/ctSuKWEZ7Gm1KwG8x7WpcuLzOPZJr4rbpR7Wvum+mjDc1BumPFbXhOfMwn B4QxEMPACyYUX8BYy8MbbjMXb4FopUbROehJwDmS3pBBtTvSXJvgfcZmV7rf8HTh bZxjez7r68G3LyTHugllCqRsHKOxO77ZmFulLrrGMRLL2abtr+PkIvJ/oyU0ZBdX pILqRoGteLoZozNTvJ7LRjTvjUn3XR5TB+0/i4bI0p9IgotftQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHl5IeomE/g1NGKPoclEIaiAg2PhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZTVj Y2NjOS0zMGQ3LTQxNmYtODNjYi1hZjEzZDEwNzlmYjMvYzk0MTc3N2ItNGYwMS0z Y2YwLWIyYjItNjM5MmI5ODI1YTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGU1Y2NjYzktMzBkNy00MTZmLTgz Y2ItYWYxM2QxMDc5ZmIzLzRlNWNjY2M5LTMwZDctNDE2Zi04M2NiLWFmMTNkMTA3 OWZiMy5jcmwwHwYDVR0jBBgwFoAUp32ZIINNoDoGt/ea1tec1Wme4A8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80ZTVjY2NjOS0zMGQ3LTQxNmYtODNjYi1hZjEz ZDEwNzlmYjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgY3QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQATp9GQp6my2zSorKPqFzHgW58PYQz+XMhuGG2J461CQmJyY6J+zMDH 4uGJMiEC+tEdY9HxXg5efafUlOhn1ZDf17NLOgLo4H5PjdzPbd42wWP9rIhhEFCb as7vWbdJHOcgQgOOiCzWjZoyjacN/5nLmOy+tan1ntTbWVo/y1cVJy+bA3cyQk47 huY3bFq3wDFNyXgcdUksBWe7g37ns2c/fUZDgwWc8DGhmB++5jHOzBpAiGk2WoJo OdFzu29nt3rASSdZTKHersw2fbVUg05QzQfTCHCExYFL65roSrwzzqQYqgsiQdJh O0WoDCvIfzfL51PRVwe+/oPSKAV9pKrX -----END CERTIFICATE-----Generated at Sat Apr 12 02:09:11 2025 by rpki-client