$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa File: bc669675-4f09-3100-852b-f89b8e4fa0ee.roa (raw, json) Hash identifier: zFEOHCjO2LzHL9jTYD1YibQUrrC3iWz/tEhrT1VtqDs= Subject key identifier: 3D:24:FB:BB:77:0E:63:8D:02:E9:7A:1B:3E:26:70:95:B5:B3:2D:E1 Certificate issuer: /CN=da61f786-99c2-4468-90f7-0b35abd168e5 Certificate serial: 010D0C9F4328584953C40A8E49FBCEDD6AF71380 Authority key identifier: 9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 54650 IP address blocks: 2604:bb40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:0a:8e:49:fb:ce:dd:6a:f7:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da61f786-99c2-4468-90f7-0b35abd168e5 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=ff4211c6-0aea-419c-87bf-1da28ee9f197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f6:6b:a3:30:df:8e:5b:81:7d:75:07:8b:05: b6:fd:bc:27:ba:e0:ba:e6:29:09:1b:94:1e:30:f6: 55:3f:11:cd:61:85:38:00:98:c6:69:57:ef:7d:be: a0:8f:62:12:93:9a:72:61:01:9a:38:9c:98:3a:1c: 27:b6:21:1d:cb:1d:f0:41:a7:f1:21:d3:59:1c:8a: a6:8d:9c:a5:e6:93:0e:5a:36:60:5b:52:cc:83:ea: 36:6d:2d:e0:8f:6f:79:2c:7e:13:bd:dd:f3:68:1c: 9a:f2:01:49:d8:7e:17:cf:cd:56:b4:3b:d1:1b:bd: 24:3b:77:b1:aa:c0:a7:d5:4e:58:f0:99:df:73:f0: eb:5c:63:86:71:97:61:dd:32:62:17:97:67:fd:26: 95:70:32:6b:c4:aa:87:d1:bc:65:fe:32:d1:52:47: b6:cd:02:59:98:6b:a0:a4:bb:af:0c:2b:a8:80:cc: 2b:28:d5:4e:8d:5b:ef:63:ea:ea:92:eb:4b:82:12: 02:c9:ee:c8:70:b7:19:8e:0d:96:7f:8d:85:6e:fa: 4f:37:8c:85:2b:47:1b:62:44:1b:7d:33:42:eb:6e: 1b:8c:f8:05:83:5b:ae:4a:30:e5:61:f8:11:35:5d: 25:05:46:5c:d0:b2:29:06:08:df:6f:7b:83:d8:ad: b2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:24:FB:BB:77:0E:63:8D:02:E9:7A:1B:3E:26:70:95:B5:B3:2D:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl X509v3 Authority Key Identifier: keyid:9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer sbgp-ipAddrBlock: critical IPv6: 2604:bb40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:bd:cb:1a:57:34:4f:90:8e:52:46:38:85:02:35:d3:96:b3: c7:e6:37:93:7b:27:6e:f0:0c:60:89:10:02:da:d4:b6:4c:6d: 39:4d:79:70:12:3d:d7:2a:7b:6b:d8:de:8c:8a:7e:30:50:01: 49:9c:35:70:92:fe:19:80:61:27:48:32:75:a6:97:67:ca:c9: 71:68:f6:d5:75:66:30:a4:51:8c:bc:bd:8f:54:92:81:8c:7f: f4:eb:61:7e:48:25:71:2a:3b:e5:a5:ef:fa:2c:3a:2a:ac:97: 9f:82:74:de:cd:c0:f2:6d:4f:83:7f:53:39:7c:a5:c9:55:ac: 5e:e7:b4:fb:07:4d:30:a4:bc:bf:c8:53:da:e2:53:8b:f3:73: 74:93:24:b8:a3:32:b8:98:78:86:8f:b9:2a:d8:f8:13:41:60: 83:4f:a7:b5:2b:0d:c0:58:d4:1b:9e:25:10:2f:7b:63:c1:86: 82:39:b6:f9:9b:94:a7:98:7f:0c:87:7b:fd:b6:fa:22:c0:af: 6e:78:93:93:04:cb:a2:3b:08:d0:58:53:10:f7:6a:0a:1a:d3: d2:a4:70:4d:10:4e:8d:51:12:c5:61:8f:97:57:fb:86:8e:93: 42:24:36:e9:27:26:53:34:a2:92:a2:e7:0e:63:d9:51:ca:cc: cb:bc:34:04 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElTxAqOSfvO3Wr3E4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2MWY3ODYtOTljMi00NDY4LTkwZjctMGIzNWFiZDE2 OGU1MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZmY0MjExYzYtMGFlYS00MTljLTg3YmYtMWRhMjhlZTlmMTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfZrozDfjluBfXUHiwW2/bwnuuC65ikJG5Qe MPZVPxHNYYU4AJjGaVfvfb6gj2ISk5pyYQGaOJyYOhwntiEdyx3wQafxIdNZHIqm jZyl5pMOWjZgW1LMg+o2bS3gj295LH4Tvd3zaBya8gFJ2H4Xz81WtDvRG70kO3ex qsCn1U5Y8Jnfc/DrXGOGcZdh3TJiF5dn/SaVcDJrxKqH0bxl/jLRUke2zQJZmGug pLuvDCuogMwrKNVOjVvvY+rqkutLghICye7IcLcZjg2Wf42FbvpPN4yFK0cbYkQb fTNC624bjPgFg1uuSjDlYfgRNV0lBUZc0LIpBgjfb3uD2K2yKQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFD0k+7t3DmONAul6Gz4mcJW1sy3hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYTYx Zjc4Ni05OWMyLTQ0NjgtOTBmNy0wYjM1YWJkMTY4ZTUvYmM2Njk2NzUtNGYwOS0z MTAwLTg1MmItZjg5YjhlNGZhMGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGE2MWY3ODYtOTljMi00NDY4LTkw ZjctMGIzNWFiZDE2OGU1L2RhNjFmNzg2LTk5YzItNDQ2OC05MGY3LTBiMzVhYmQx NjhlNS5jcmwwHwYDVR0jBBgwFoAUm7JW3Y6M5BMCH6y6TevAUqLlBVkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYTYxZjc4Ni05OWMyLTQ0NjgtOTBmNy0wYjM1 YWJkMTY4ZTUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgS7QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAvvcsaVzRPkI5SRjiFAjXTlrPH5jeTeydu8AxgiRAC2tS2TG05TXlw Ej3XKntr2N6Min4wUAFJnDVwkv4ZgGEnSDJ1ppdnyslxaPbVdWYwpFGMvL2PVJKB jH/062F+SCVxKjvlpe/6LDoqrJefgnTezcDybU+Df1M5fKXJVaxe57T7B00wpLy/ yFPa4lOL83N0kyS4ozK4mHiGj7kq2PgTQWCDT6e1Kw3AWNQbniUQL3tjwYaCObb5 m5SnmH8Mh3v9tvoiwK9ueJOTBMuiOwjQWFMQ92oKGtPSpHBNEE6NURLFYY+XV/uG jpNCJDbpJyZTNKKSoucOY9lRyszLvDQE -----END CERTIFICATE-----Generated at Thu May 1 01:31:33 2025 by rpki-client