$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/707934f0-2be6-3cdf-a514-9b44c5ca443b.roa File: 707934f0-2be6-3cdf-a514-9b44c5ca443b.roa (raw, json) Hash identifier: kklgwBlqqHxwOhG+mVj0n2U/eIrzVIYuTbH2Bfzk/fM= Subject key identifier: 4F:85:E0:13:27:D1:9C:CB:BF:FC:B4:EF:DD:9D:8D:E3:FE:23:93:20 Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F43285848FD56B460531311C4B67391C0 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/707934f0-2be6-3cdf-a514-9b44c5ca443b.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 21766 IP address blocks: 2605:6600::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:b4:60:53:13:11:c4:b6:73:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=542c07d5-4aae-4bd7-b766-19891f707349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c5:fe:6b:6b:9b:b8:65:47:35:ac:63:80:ed: bb:3a:a9:a0:cc:d7:f5:67:bf:c8:a6:7e:b8:36:95: 1d:df:c8:c1:5c:fc:bd:93:75:79:84:f6:ec:03:9e: 20:28:de:5e:86:98:c9:72:f1:29:20:a6:7f:b2:a5: c6:a9:c4:b6:e0:cd:1d:bd:75:d6:ac:44:0c:83:31: 74:59:25:a7:d6:25:c8:f4:70:38:09:fc:9e:df:28: 67:5d:ba:11:fa:c5:4b:0e:51:8c:71:11:f6:1f:a2: 02:f1:90:d6:0c:45:b1:2d:d1:7b:a8:c9:14:9a:2f: b7:93:3a:e8:4e:6a:b9:4e:91:a5:96:35:64:3a:7b: 11:f1:4e:10:d6:c6:d0:82:96:ea:59:d4:8d:e7:03: d2:db:70:7b:d2:09:8a:cf:61:a1:59:32:24:ee:97: 46:2a:b4:ed:31:d6:df:09:37:cd:71:b7:08:98:7e: 28:7b:79:12:eb:bd:00:49:a4:d0:24:2e:00:69:4a: e1:2c:df:4b:27:87:1e:fb:ec:48:ef:9e:56:7e:bf: 99:34:5f:6b:a5:37:3c:6c:49:5d:3b:85:60:c3:aa: 97:04:67:3c:96:01:38:95:50:6e:31:0a:d2:51:68: 72:8e:af:ce:2e:ea:17:fa:da:80:a7:81:4d:4d:e5: 5c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:85:E0:13:27:D1:9C:CB:BF:FC:B4:EF:DD:9D:8D:E3:FE:23:93:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/707934f0-2be6-3cdf-a514-9b44c5ca443b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv6: 2605:6600::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:c2:5d:60:cd:59:be:f5:69:b2:91:5a:2a:6e:73:ad:07:e6: 01:bb:96:1b:2c:f4:b5:fa:1e:44:66:ca:2c:d0:d9:75:b4:65: 82:43:b8:26:a2:1e:e3:67:54:ea:f9:c8:10:8e:ab:97:44:87: 38:15:58:ee:51:e9:a8:c2:83:df:d5:7e:8a:8c:e3:fe:b4:8e: 40:b4:c5:49:6c:b8:87:f2:31:2a:42:3b:27:69:08:1d:b4:0d: c0:b0:a6:a0:46:8d:9d:9d:71:1e:b2:48:7e:3d:49:f8:92:48: 99:7a:1f:f5:dc:a7:c3:5f:6a:28:25:e9:7d:c5:3a:c1:97:ef: 0f:58:43:c2:67:01:6e:1b:62:9a:8b:b6:5b:df:59:3b:3b:61: 54:bc:36:bd:ef:f4:cc:2d:9e:cc:22:ae:73:f2:89:84:6d:75: 34:68:93:20:40:27:f0:9b:f8:07:8c:b5:f5:01:c3:14:d5:ff: f3:15:09:27:2e:f7:96:f8:b3:a1:91:0c:4d:b5:2f:ff:56:3a: eb:4f:bc:19:fb:f3:57:92:ba:cf:91:56:e0:10:c7:c0:fa:41: 0c:2a:29:d0:a2:77:c7:13:93:27:83:ee:0f:77:07:84:0e:42: 5b:d7:b2:96:7c:fe:c0:58:f5:d7:a9:ec:ec:2b:6a:8e:82:ff: 46:69:72:d6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEj9VrRgUxMRxLZzkcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk NTQyYzA3ZDUtNGFhZS00YmQ3LWI3NjYtMTk4OTFmNzA3MzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMX+a2ubuGVHNaxjgO27OqmgzNf1Z7/Ipn64 NpUd38jBXPy9k3V5hPbsA54gKN5ehpjJcvEpIKZ/sqXGqcS24M0dvXXWrEQMgzF0 WSWn1iXI9HA4Cfye3yhnXboR+sVLDlGMcRH2H6IC8ZDWDEWxLdF7qMkUmi+3kzro Tmq5TpGlljVkOnsR8U4Q1sbQgpbqWdSN5wPS23B70gmKz2GhWTIk7pdGKrTtMdbf CTfNcbcImH4oe3kS670ASaTQJC4AaUrhLN9LJ4ce++xI755Wfr+ZNF9rpTc8bEld O4Vgw6qXBGc8lgE4lVBuMQrSUWhyjq/OLuoX+tqAp4FNTeVcNQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE+F4BMn0ZzLv/y0792djeP+I5MgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvNzA3OTM0ZjAtMmJlNi0z Y2RmLWE1MTQtOWI0NGM1Y2E0NDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgVmADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC1wl1gzVm+9WmykVoqbnOtB+YBu5YbLPS1+h5EZsos0Nl1tGWCQ7gm oh7jZ1Tq+cgQjquXRIc4FVjuUemowoPf1X6KjOP+tI5AtMVJbLiH8jEqQjsnaQgd tA3AsKagRo2dnXEeskh+PUn4kkiZeh/13KfDX2ooJel9xTrBl+8PWEPCZwFuG2Ka i7Zb31k7O2FUvDa97/TMLZ7MIq5z8omEbXU0aJMgQCfwm/gHjLX1AcMU1f/zFQkn LveW+LOhkQxNtS//VjrrT7wZ+/NXkrrPkVbgEMfA+kEMKinQonfHE5Mng+4PdweE DkJb17KWfP7AWPXXqezsK2qOgv9GaXLW -----END CERTIFICATE-----Generated at Sat Apr 12 01:35:37 2025 by rpki-client