$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/0bf04764-2962-3255-8d25-c1b1ce1a86ba.roa File: 0bf04764-2962-3255-8d25-c1b1ce1a86ba.roa (raw, json) Hash identifier: gFGDwBfIXbq03nBrI/nUP/iRLiy/ZYHjfLuMmqekaHY= Subject key identifier: 2A:FA:74:1D:82:74:69:97:6E:F4:FA:DA:F4:E7:12:B1:88:E6:F3:BE Certificate issuer: /CN=6a30b207-de04-425f-94e9-ee12d4529f56 Certificate serial: 010D0C9F432858499AF48A1E0FDE0DD876559F00 Authority key identifier: 4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/0bf04764-2962-3255-8d25-c1b1ce1a86ba.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 26810 IP address blocks: 2601:9000::/20 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:8a:1e:0f:de:0d:d8:76:55:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a30b207-de04-425f-94e9-ee12d4529f56 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=b6405983-17ae-45ef-8686-3eb047ed5cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ca:b9:47:75:f9:67:42:35:14:ae:29:28:d3: 83:cc:34:40:b3:b6:6f:09:aa:f8:d8:43:f7:54:ab: b2:0e:59:d6:57:8f:c1:df:88:9b:50:2d:2d:96:e3: 68:db:71:79:19:2a:28:12:ab:b4:d9:f1:1c:df:c9: 4c:8b:5c:51:5f:c3:64:b8:8f:82:c6:fd:6d:f2:ad: 35:1e:c9:2c:31:04:41:6e:9a:83:c6:27:86:fd:c0: 3e:dc:ae:e3:e2:74:73:ca:99:32:a9:8f:63:43:8e: 00:9c:5c:97:22:b6:55:d8:56:68:a7:f3:11:30:af: ae:0b:9b:6e:32:47:92:51:71:f4:5b:1d:ef:46:79: f3:af:13:a4:22:72:05:bb:cf:3d:98:d6:4b:65:ea: a4:e7:e8:37:2d:65:16:bc:60:06:a8:c6:b8:45:2f: 8e:51:d2:87:e2:7b:2a:91:57:79:bf:1d:55:ab:df: 7d:70:d4:3c:11:04:a9:87:d2:9c:7d:e7:4d:02:69: 38:ed:43:66:4a:cc:a0:f4:68:ea:5d:79:a6:25:e1: 80:4e:67:02:a9:a8:04:81:41:bf:0b:82:62:8b:f2: 9a:3f:ff:40:b5:99:f0:cc:1e:49:b3:a3:f7:f2:e7: 5a:f0:d2:34:46:3e:ad:be:fe:a1:65:66:93:d7:d3: ef:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FA:74:1D:82:74:69:97:6E:F4:FA:DA:F4:E7:12:B1:88:E6:F3:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/0bf04764-2962-3255-8d25-c1b1ce1a86ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56/6a30b207-de04-425f-94e9-ee12d4529f56.crl X509v3 Authority Key Identifier: keyid:4F:F2:3E:B1:27:37:0C:2A:E1:E4:CE:A1:85:CE:AC:EC:21:4B:75:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a30b207-de04-425f-94e9-ee12d4529f56.cer sbgp-ipAddrBlock: critical IPv6: 2601:9000::/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:3a:f8:bc:35:28:73:cd:30:81:97:df:3d:9d:2b:35:8e:58: 81:4e:92:d4:5f:e5:6c:cd:dc:1d:f0:d3:ce:cc:f8:e6:c9:62: f9:55:86:a0:9b:c0:b4:b9:7e:97:71:c0:05:ec:0c:e1:06:e4: db:6e:85:b8:28:84:dc:d3:ff:8b:34:ac:5c:79:4f:97:f1:53: 02:96:18:d4:ff:ab:6e:39:4f:4a:f0:0c:55:bb:c5:d2:9d:dc: 04:f6:21:b1:52:37:6c:54:20:b7:5e:c9:ae:99:21:b0:7e:b1: c8:f4:cf:a7:4e:3d:db:ae:34:40:57:cb:7c:eb:32:4f:81:fd: a2:38:50:eb:0e:6d:28:b6:a9:bd:8b:37:ed:98:d0:a7:2f:d6: eb:b7:37:01:56:74:e0:36:aa:7d:bb:27:8f:9c:41:ab:2f:68: 5d:19:39:34:16:42:c3:de:d0:72:a6:d7:36:f2:38:61:26:66: 5a:1c:87:af:f3:e5:d8:85:35:03:5f:f1:35:bc:15:d4:22:7c: 21:69:56:81:e7:fa:e8:e7:8d:24:76:ec:d3:f1:a6:b8:b5:a2: ab:56:4f:67:a5:25:37:bc:de:80:72:eb:33:31:49:fb:03:e7: 39:89:19:86:ea:8b:2e:54:ff:e2:02:d4:2b:50:a4:24:80:a7: 71:7b:57:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9IoeD94N2HZVnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmEzMGIyMDctZGUwNC00MjVmLTk0ZTktZWUxMmQ0NTI5 ZjU2MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk YjY0MDU5ODMtMTdhZS00NWVmLTg2ODYtM2ViMDQ3ZWQ1Y2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Mq5R3X5Z0I1FK4pKNODzDRAs7ZvCar42EP3 VKuyDlnWV4/B34ibUC0tluNo23F5GSooEqu02fEc38lMi1xRX8NkuI+Cxv1t8q01 HsksMQRBbpqDxieG/cA+3K7j4nRzypkyqY9jQ44AnFyXIrZV2FZop/MRMK+uC5tu MkeSUXH0Wx3vRnnzrxOkInIFu889mNZLZeqk5+g3LWUWvGAGqMa4RS+OUdKH4nsq kVd5vx1Vq999cNQ8EQSph9KcfedNAmk47UNmSsyg9GjqXXmmJeGATmcCqagEgUG/ C4Jii/KaP/9AtZnwzB5Js6P38uda8NI0Rj6tvv6hZWaT19PvWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCr6dB2CdGmXbvT62vTnErGI5vO+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82YTMw YjIwNy1kZTA0LTQyNWYtOTRlOS1lZTEyZDQ1MjlmNTYvMGJmMDQ3NjQtMjk2Mi0z MjU1LThkMjUtYzFiMWNlMWE4NmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmEzMGIyMDctZGUwNC00MjVmLTk0 ZTktZWUxMmQ0NTI5ZjU2LzZhMzBiMjA3LWRlMDQtNDI1Zi05NGU5LWVlMTJkNDUy OWY1Ni5jcmwwHwYDVR0jBBgwFoAUT/I+sSc3DCrh5M6hhc6s7CFLddYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82YTMwYjIwNy1kZTA0LTQyNWYtOTRlOS1lZTEy ZDQ1MjlmNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAAjAGAwQEJgGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEw6+Lw1KHPNMIGX3z2dKzWOWIFOktRf5WzN3B3w087M+ObJYvlVhqCb wLS5fpdxwAXsDOEG5NtuhbgohNzT/4s0rFx5T5fxUwKWGNT/q245T0rwDFW7xdKd 3AT2IbFSN2xUILdeya6ZIbB+scj0z6dOPduuNEBXy3zrMk+B/aI4UOsObSi2qb2L N+2Y0Kcv1uu3NwFWdOA2qn27J4+cQasvaF0ZOTQWQsPe0HKm1zbyOGEmZloch6/z 5diFNQNf8TW8FdQifCFpVoHn+ujnjSR27NPxpri1oqtWT2elJTe83oBy6zMxSfsD 5zmJGYbqiy5U/+IC1CtQpCSAp3F7V7o= -----END CERTIFICATE-----Generated at Sun Apr 27 13:12:48 2025 by rpki-client