$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/412889ef-4fb1-3cc7-a062-92546b1ab937.roa File: 412889ef-4fb1-3cc7-a062-92546b1ab937.roa (raw, json) Hash identifier: m7Ma3YrjdQ1ouQjxc9wpwmMsl2vHfBTVn3/X0nQMJHk= Subject key identifier: 42:AA:07:B8:52:56:0E:91:5C:B1:5E:8F:AE:AC:30:13:04:C9:CF:24 Certificate issuer: /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Certificate serial: 010D0C9F432858491246B80F63E8E6FFED327FA0 Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/412889ef-4fb1-3cc7-a062-92546b1ab937.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 9009 IP address blocks: 2607:6b80:57::/48 maxlen: 48 2607:6b80:5b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:b8:0f:63:e8:e6:ff:ed:32:7f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=60ebade1-35e2-4344-b767-caaea2d4bd9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:45:7f:a0:60:3d:c1:bd:1e:0a:af:81:3f:c3: c2:f3:58:e9:70:95:42:f3:99:3a:71:9b:7d:ba:9b: fc:90:54:5e:7c:6f:ae:8c:f5:55:e7:30:db:c5:91: 8d:78:f1:e9:54:ce:79:ed:47:bf:fd:93:68:85:55: 16:c8:de:ff:ed:88:3a:cb:6b:87:d4:58:57:35:6b: fa:22:e4:fa:d1:6d:62:44:4a:64:9e:71:51:0e:18: a8:b6:f3:1d:7a:f8:01:9d:ef:d0:b6:8c:9f:57:55: c2:98:47:9e:0e:2e:f4:c8:5a:93:82:84:6a:9c:80: c4:db:90:83:ae:2c:ae:e7:8c:58:66:8b:f8:0a:01: 56:f4:d4:ab:f4:a5:11:58:fd:48:cc:80:95:5b:0c: 90:ef:7b:6c:0f:a8:af:23:b1:aa:e7:fc:e2:01:86: fa:59:9f:3b:f8:a7:83:bc:54:93:f2:51:8b:a4:ba: 90:94:7b:0d:be:0b:b9:cd:c7:d3:37:ab:9b:60:f9: eb:64:a4:b9:a1:03:20:cd:9a:f0:c1:00:10:f2:63: c0:db:0b:df:70:96:c1:ef:0b:c4:25:d4:d3:e1:c2: 89:1f:6d:77:2a:97:31:e0:74:c8:68:b4:25:6f:4d: 34:76:1c:bf:05:54:c1:6d:03:47:06:95:b6:fd:3a: a8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AA:07:B8:52:56:0E:91:5C:B1:5E:8F:AE:AC:30:13:04:C9:CF:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/412889ef-4fb1-3cc7-a062-92546b1ab937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl X509v3 Authority Key Identifier: keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer sbgp-ipAddrBlock: critical IPv6: 2607:6b80:57::/48 2607:6b80:5b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:b2:04:22:74:76:98:14:0e:5a:f8:f4:a7:d3:1a:0a:0f:6e: 74:3f:4a:49:28:ec:dd:a8:ad:75:70:02:6a:32:93:e2:7b:f4: ef:74:b7:25:ea:80:bc:66:f2:37:3a:89:eb:47:14:59:96:8c: f8:79:d5:4b:e3:cc:cf:91:40:5f:a5:e9:42:f5:d5:a2:13:e1: 6a:dd:25:5b:cb:f6:e5:33:32:de:be:3d:cd:ae:ee:36:48:fa: a4:56:82:cd:2b:02:ef:4a:42:0c:27:ad:e0:a9:e0:20:c3:d5: 34:cc:f6:01:d5:8c:4c:88:e7:a5:e2:b3:a7:0c:62:a8:67:56: e4:85:7a:bd:1f:6a:e9:95:ae:4f:5b:9c:e6:f7:3d:26:f3:4d: 05:ba:62:8f:6c:d1:68:72:31:1c:38:f7:41:f3:2f:9b:46:df: b2:83:e3:19:9f:cb:9e:54:d1:54:20:70:be:83:09:0b:e9:89: b6:91:97:de:eb:0e:6a:88:8e:e1:4a:72:f7:fc:3b:a6:84:16: 58:cc:e9:95:b4:4a:01:12:e6:06:54:37:4d:9c:ff:4f:09:cd: 48:57:15:f7:58:64:36:a2:b9:11:02:30:54:6a:69:5f:d0:3b: 54:5d:f5:d8:ee:22:45:5d:ec:27:fe:9b:c0:df:9e:35:56:7d: ee:84:f4:67 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEkSRrgPY+jm/+0yf6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3 ZTFhMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NjBlYmFkZTEtMzVlMi00MzQ0LWI3NjctY2FhZWEyZDRiZDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UV/oGA9wb0eCq+BP8PC81jpcJVC85k6cZt9 upv8kFRefG+ujPVV5zDbxZGNePHpVM557Ue//ZNohVUWyN7/7Yg6y2uH1FhXNWv6 IuT60W1iREpknnFRDhiotvMdevgBne/QtoyfV1XCmEeeDi70yFqTgoRqnIDE25CD riyu54xYZov4CgFW9NSr9KURWP1IzICVWwyQ73tsD6ivI7Gq5/ziAYb6WZ87+KeD vFST8lGLpLqQlHsNvgu5zcfTN6ubYPnrZKS5oQMgzZrwwQAQ8mPA2wvfcJbB7wvE JdTT4cKJH213Kpcx4HTIaLQlb000dhy/BVTBbQNHBpW2/TqomQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFEKqB7hSVg6RXLFej66sMBMEyc8kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvNDEyODg5ZWYtNGZiMS0z Y2M3LWEwNjItOTI1NDZiMWFiOTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi MDYwMDdlMWEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAJgdrgABX AwcAJgdrgABbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAMKyBCJ0dpgUDlr49KfTGgoPbnQ/Skko7N2orXVw Amoyk+J79O90tyXqgLxm8jc6ietHFFmWjPh51UvjzM+RQF+l6UL11aIT4WrdJVvL 9uUzMt6+Pc2u7jZI+qRWgs0rAu9KQgwnreCp4CDD1TTM9gHVjEyI56Xis6cMYqhn VuSFer0faumVrk9bnOb3PSbzTQW6Yo9s0WhyMRw490HzL5tG37KD4xmfy55U0VQg cL6DCQvpibaRl97rDmqIjuFKcvf8O6aEFljM6ZW0SgES5gZUN02c/08JzUhXFfdY ZDaiuRECMFRqaV/QO1Rd9djuIkVd7Cf+m8DfnjVWfe6E9Gc= -----END CERTIFICATE-----Generated at Sat Apr 5 06:24:13 2025 by rpki-client