$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/d00a21f2-bc70-3cdd-94de-6e0d60a056a3.roa File: d00a21f2-bc70-3cdd-94de-6e0d60a056a3.roa (raw, json) Hash identifier: f1oAQ/Du/Ew/+KprE6jAVaUK/epTvl25MZEBa8+jnks= Subject key identifier: EF:CC:A6:C5:E2:7A:13:AF:51:B4:1C:98:AF:FB:E6:C9:95:3D:7F:0C Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F43285848ECF6478BE8345C4B9FC04C00 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/d00a21f2-bc70-3cdd-94de-6e0d60a056a3.roa Signing time: Tue 18 Feb 2025 17:13:53 +0000 ROA not before: Tue 18 Feb 2025 17:13:53 +0000 ROA not after: Mon 19 May 2025 16:13:53 +0000 asID: 5769 IP address blocks: 2606:3c00::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:f6:47:8b:e8:34:5c:4b:9f:c0:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Feb 18 17:13:53 2025 GMT Not After : May 19 16:13:53 2025 GMT Subject: CN=f9bc34f6-beb5-4258-a0d5-88328fb68757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:90:47:12:ec:2b:9e:62:04:c8:77:b9:1c:98: d0:19:e2:60:e7:29:0c:43:f0:cc:21:5c:1f:c2:ff: c2:b9:f0:29:ab:47:bc:bd:7e:e2:17:12:2e:3a:72: 7d:54:40:fa:20:18:ea:f6:9a:e0:12:da:ab:22:0f: 10:3d:90:a0:a3:90:e9:ba:1e:99:e3:8b:63:c1:2b: cc:a1:47:ed:81:f6:5d:26:db:29:9a:90:7b:78:31: 18:50:54:0f:b1:81:27:82:3c:9b:50:24:92:a2:57: 1d:fb:0f:62:d7:5a:d4:68:e6:93:61:d8:cb:16:3b: b3:c4:77:be:1f:f1:63:ee:d9:94:fa:c4:4a:3b:ba: 75:ec:76:65:e6:ba:8b:4e:42:31:18:76:60:a6:c7: 85:bb:0f:c3:08:03:13:b9:72:f2:b6:2b:33:6d:1d: 96:e3:e1:ba:bf:53:b8:fc:a4:54:94:56:78:7d:4b: 65:0e:7b:a1:6c:2b:02:6b:07:30:21:20:27:15:41: 88:e7:bc:3d:a4:54:6b:e9:6a:a8:7f:e7:0c:3d:94: 59:60:61:78:7a:08:d6:7f:7d:f9:9b:54:3f:26:e2: 0c:86:2d:b8:45:67:26:5d:1f:fa:fb:04:07:5c:67: a2:e6:da:59:39:03:43:9a:12:8a:58:f5:e1:93:8d: 90:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CC:A6:C5:E2:7A:13:AF:51:B4:1C:98:AF:FB:E6:C9:95:3D:7F:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/d00a21f2-bc70-3cdd-94de-6e0d60a056a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3c00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:c8:a4:b8:65:34:21:72:3e:7f:92:d7:0c:c8:a3:d9:f0:8b: 7e:56:d8:e5:19:85:c2:2f:33:81:e4:bb:a2:a6:86:96:1c:56: 8b:28:02:bc:79:44:0e:7c:cf:be:58:0c:2b:39:58:08:60:15: e9:a6:7c:88:cc:bd:cb:13:4a:de:56:f7:9c:d5:d8:b1:9a:25: ce:ef:ba:fb:b0:5b:b0:cc:7b:25:39:d2:b9:db:da:6d:96:b2: ce:b9:8c:5a:ab:80:a3:d4:19:75:e7:2e:24:6c:31:68:ae:f1: ec:d4:30:96:24:a3:fd:b6:51:56:e0:5d:97:62:d6:86:2f:b7: 28:e8:ce:2e:f3:b7:10:81:0e:7e:33:00:90:11:a1:0b:0c:d4: 36:86:26:5a:dc:9e:a9:fc:7b:42:95:cd:2e:31:e0:2b:aa:53: c5:a9:25:af:aa:a3:a7:8c:3d:d0:79:24:1b:b5:02:8e:8c:1a: 98:92:5a:92:66:2c:b5:46:a2:0d:5e:fa:b0:c0:f9:dc:cc:21: 0e:71:85:44:02:d1:a9:a3:4f:6e:12:93:62:85:23:9a:30:b6: 1c:da:3c:b7:a5:96:56:ff:2a:60:42:3e:00:b6:1c:1b:38:1e: 81:5a:ec:c0:60:4e:06:35:27:bd:e3:eb:69:20:9c:0b:9b:4e: 75:25:cf:1a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjs9keL6DRcS5/ATAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI1MDIxODE3MTM1M1oXDTI1MDUxOTE2MTM1M1owLzEtMCsGA1UEAxMk ZjliYzM0ZjYtYmViNS00MjU4LWEwZDUtODgzMjhmYjY4NzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJBHEuwrnmIEyHe5HJjQGeJg5ykMQ/DMIVwf wv/CufApq0e8vX7iFxIuOnJ9VED6IBjq9prgEtqrIg8QPZCgo5Dpuh6Z44tjwSvM oUftgfZdJtspmpB7eDEYUFQPsYEngjybUCSSolcd+w9i11rUaOaTYdjLFjuzxHe+ H/Fj7tmU+sRKO7p17HZl5rqLTkIxGHZgpseFuw/DCAMTuXLytiszbR2W4+G6v1O4 /KRUlFZ4fUtlDnuhbCsCawcwISAnFUGI57w9pFRr6Wqof+cMPZRZYGF4egjWf335 m1Q/JuIMhi24RWcmXR/6+wQHXGei5tpZOQNDmhKKWPXhk42QBQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFO/MpsXiehOvUbQcmK/75smVPX8MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvZDAwYTIxZjItYmM3MC0z Y2RkLTk0ZGUtNmUwZDYwYTA1NmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgY8ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQASyKS4ZTQhcj5/ktcMyKPZ8It+VtjlGYXCLzOB5LuipoaWHFaLKAK8 eUQOfM++WAwrOVgIYBXppnyIzL3LE0reVvec1dixmiXO77r7sFuwzHslOdK529pt lrLOuYxaq4Cj1Bl15y4kbDForvHs1DCWJKP9tlFW4F2XYtaGL7co6M4u87cQgQ5+ MwCQEaELDNQ2hiZa3J6p/HtClc0uMeArqlPFqSWvqqOnjD3QeSQbtQKOjBqYklqS Ziy1RqINXvqwwPnczCEOcYVEAtGpo09uEpNihSOaMLYc2jy3pZZW/ypgQj4Athwb OB6BWuzAYE4GNSe94+tpIJwLm051Jc8a -----END CERTIFICATE-----Generated at Tue Apr 29 13:22:26 2025 by rpki-client