$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2/170f4f6b-e785-3c28-8d0e-a4f739d30084.roa File: 170f4f6b-e785-3c28-8d0e-a4f739d30084.roa (raw, json) Hash identifier: 6mtYCqNINNnwEAUsdE1ie7GBpuLqzp9jcVhovWF+nI8= Subject key identifier: 87:4B:37:DE:C5:81:B6:4D:F1:94:9A:79:AC:08:0E:24:A0:91:F1:C9 Certificate issuer: /CN=778754ac-5240-4fc0-85b4-8e68334c69e2 Certificate serial: 010D0C9F43285848B28DA74852D81220C4FA3940 Authority key identifier: 92:27:67:71:6F:20:AC:78:18:51:BD:00:75:85:C4:A4:B0:D3:02:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2/170f4f6b-e785-3c28-8d0e-a4f739d30084.roa Signing time: Tue 28 Jan 2025 19:06:11 +0000 ROA not before: Tue 28 Jan 2025 19:06:11 +0000 ROA not after: Mon 28 Apr 2025 18:06:11 +0000 asID: 377 IP address blocks: 2620:106:6000::/44 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2/778754ac-5240-4fc0-85b4-8e68334c69e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2/778754ac-5240-4fc0-85b4-8e68334c69e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b2:8d:a7:48:52:d8:12:20:c4:fa:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=778754ac-5240-4fc0-85b4-8e68334c69e2 Validity Not Before: Jan 28 19:06:11 2025 GMT Not After : Apr 28 18:06:11 2025 GMT Subject: CN=29879e05-16b2-4717-893f-2d927d12d55e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fa:04:01:e0:34:9c:ef:d7:f2:ab:a5:ee:ba: 9e:16:8d:5a:7c:dd:f1:0a:91:42:47:52:82:30:f2: fb:b0:e3:99:0c:23:94:2e:ed:e9:26:70:02:db:e9: 03:2e:50:1a:1f:b8:22:92:a3:b5:1d:8c:59:d8:9d: 39:c0:fe:5d:a8:2c:ad:bb:ac:fe:ab:ab:27:98:20: f7:15:df:54:ba:ba:b7:84:aa:d9:66:42:0c:19:7f: e4:fb:6c:fd:93:2d:2d:df:f4:84:ad:98:86:70:ca: 73:df:61:e0:2b:88:3b:c4:56:64:46:32:f5:4c:4a: d1:20:6a:ee:9f:6e:93:d2:93:8f:7f:7a:9b:de:34: 78:94:2f:1c:36:5a:ac:ef:0f:4d:f8:14:da:e7:45: dd:9a:41:10:a1:ae:89:78:55:73:06:73:c0:b2:fd: d3:f0:1b:d8:7d:d7:ff:5a:bc:75:a4:cb:d6:cd:86: 4a:90:c5:a4:41:b8:41:93:a2:15:98:3b:8e:9e:f2: 98:77:4d:d5:80:dd:ac:28:fd:e9:99:5d:7e:9c:18: 76:ef:7f:7f:67:7d:0b:a2:1c:6d:b6:a8:79:7e:96: 6e:ea:0e:ad:42:08:7d:41:6d:34:86:c8:25:f7:dc: 50:0f:cb:a3:27:ca:f7:f2:e4:2a:75:af:a8:56:af: 2d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4B:37:DE:C5:81:B6:4D:F1:94:9A:79:AC:08:0E:24:A0:91:F1:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2/170f4f6b-e785-3c28-8d0e-a4f739d30084.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2/778754ac-5240-4fc0-85b4-8e68334c69e2.crl X509v3 Authority Key Identifier: keyid:92:27:67:71:6F:20:AC:78:18:51:BD:00:75:85:C4:A4:B0:D3:02:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2.cer sbgp-ipAddrBlock: critical IPv6: 2620:106:6000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:c5:77:4c:d0:ca:9c:36:93:af:31:09:5b:af:35:bc:50:0d: a4:02:0d:82:e6:5b:fb:40:d7:05:79:03:7c:4f:db:ec:90:16: fd:08:86:43:d7:81:13:e8:59:2f:40:af:c5:11:0a:70:9a:08: bc:c5:eb:56:68:f6:24:2b:d8:cd:54:b1:01:53:ff:c1:5b:1d: e3:3e:28:b4:6c:4a:32:9a:3f:d8:84:0b:ec:5a:22:74:0e:08: 25:ae:14:b1:e6:cc:22:55:a2:5e:b1:76:ee:4b:7e:79:4f:39: 99:d1:be:ba:87:ed:93:3c:13:aa:64:ec:7b:15:ed:75:c8:75: 2a:e1:93:7d:c5:53:1c:35:70:d7:b5:b4:94:27:77:6d:ba:64: 9c:4e:20:be:dd:6b:30:0c:86:b9:cb:04:8e:d2:26:2d:9c:4b: 08:ef:f4:b9:33:9d:76:5c:2f:95:28:83:44:72:6b:66:32:31: 7f:f8:38:25:b5:46:04:d5:22:a4:e0:02:e0:94:a0:76:85:12: 0a:31:eb:8e:08:7b:ea:a2:db:ff:45:b9:67:a8:e7:5c:59:27: bd:7d:8a:5f:67:ff:ea:d1:12:e7:75:69:0c:0a:f4:48:08:d4: 7a:6e:56:43:60:6d:2c:fd:b4:0d:d1:b2:d4:41:82:32:98:6a: 8e:50:97:85 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiyjadIUtgSIMT6OUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc4NzU0YWMtNTI0MC00ZmMwLTg1YjQtOGU2ODMzNGM2 OWUyMB4XDTI1MDEyODE5MDYxMVoXDTI1MDQyODE4MDYxMVowLzEtMCsGA1UEAxMk Mjk4NzllMDUtMTZiMi00NzE3LTg5M2YtMmQ5MjdkMTJkNTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPoEAeA0nO/X8qul7rqeFo1afN3xCpFCR1KC MPL7sOOZDCOULu3pJnAC2+kDLlAaH7gikqO1HYxZ2J05wP5dqCytu6z+q6snmCD3 Fd9Uurq3hKrZZkIMGX/k+2z9ky0t3/SErZiGcMpz32HgK4g7xFZkRjL1TErRIGru n26T0pOPf3qb3jR4lC8cNlqs7w9N+BTa50XdmkEQoa6JeFVzBnPAsv3T8BvYfdf/ Wrx1pMvWzYZKkMWkQbhBk6IVmDuOnvKYd03VgN2sKP3pmV1+nBh2739/Z30Lohxt tqh5fpZu6g6tQgh9QW00hsgl99xQD8ujJ8r38uQqda+oVq8tnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIdLN97FgbZN8ZSaeawIDiSgkfHJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83Nzg3 NTRhYy01MjQwLTRmYzAtODViNC04ZTY4MzM0YzY5ZTIvMTcwZjRmNmItZTc4NS0z YzI4LThkMGUtYTRmNzM5ZDMwMDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzc4NzU0YWMtNTI0MC00ZmMwLTg1 YjQtOGU2ODMzNGM2OWUyLzc3ODc1NGFjLTUyNDAtNGZjMC04NWI0LThlNjgzMzRj NjllMi5jcmwwHwYDVR0jBBgwFoAUkidncW8grHgYUb0AdYXEpLDTAuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83Nzg3NTRhYy01MjQwLTRmYzAtODViNC04ZTY4 MzM0YzY5ZTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABBmAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFjFd0zQypw2k68xCVuvNbxQDaQCDYLmW/tA1wV5A3xP2+yQFv0I hkPXgRPoWS9Ar8URCnCaCLzF61Zo9iQr2M1UsQFT/8FbHeM+KLRsSjKaP9iEC+xa InQOCCWuFLHmzCJVol6xdu5LfnlPOZnRvrqH7ZM8E6pk7HsV7XXIdSrhk33FUxw1 cNe1tJQnd226ZJxOIL7dazAMhrnLBI7SJi2cSwjv9LkznXZcL5Uog0Rya2YyMX/4 OCW1RgTVIqTgAuCUoHaFEgox644Ie+qi2/9FuWeo51xZJ719il9n/+rREud1aQwK 9EgI1HpuVkNgbSz9tA3RstRBgjKYao5Ql4U= -----END CERTIFICATE-----Generated at Fri Apr 11 21:40:55 2025 by rpki-client